
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft
File: 6PktayopMPClvq9TBEyF2OreHro.mft (raw, json)
Hash identifier: NCZwTfZLAJ+B9lnr5mrrCfcck2azB/zA+tSX0wUxndE=
Subject key identifier: 0B:46:30:48:4A:10:A2:34:39:6E:F8:8F:E6:07:81:4A:ED:18:B7:92
Authority key identifier: E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA
Certificate issuer: /CN=A9129C87/serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA
Certificate serial: 048A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft
Manifest number: 0485
Signing time: Wed 05 Nov 2025 00:10:17 +0000
Manifest this update: Wed 05 Nov 2025 00:10:16 +0000
Manifest next update: Wed 12 Nov 2025 00:10:16 +0000
Files and hashes: 1: 6PktayopMPClvq9TBEyF2OreHro.crl (hash: 1rPBnsdS4Zz47AmPG3QPiM/iuXCqM6LApSB9f0fIaVQ=)
2: 80A9DE56614C11EC9175DE54C4F9AE02.roa (hash: Che2Xh8HWptWRumVbwwzTZfqZqThy/R9Uspty/4PSaA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.crl
rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1162 (0x48a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129C87, serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA
Validity
Not Before: Nov 5 00:10:16 2025 GMT
Not After : Nov 12 00:10:16 2025 GMT
Subject: CN=690a95e9-dbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2e:71:3d:55:91:38:33:5d:d9:97:9c:b8:34:
e4:01:60:4c:d8:30:42:d5:13:f1:f8:39:9b:ea:37:
9f:37:7f:fe:81:0d:d4:f2:6c:02:af:fa:a0:a0:c6:
fb:6f:76:39:2e:50:c8:1e:5c:29:9d:ac:58:70:e2:
8c:95:67:5f:ff:3b:74:a2:a8:0f:82:ad:69:1f:65:
1c:d4:c5:4c:ba:89:80:23:a5:94:04:7f:c8:77:3d:
c4:8c:0c:52:be:75:9d:e0:b5:4a:86:4b:51:fc:90:
53:a9:47:e5:93:f9:ac:82:f3:c7:30:9a:1f:99:1c:
0c:5b:da:c8:b7:77:16:a3:89:72:04:3e:a0:a9:2d:
e7:c8:a6:e6:1b:f1:ff:52:04:16:c5:51:52:1b:47:
94:34:cb:a9:d6:5f:a9:00:2f:c6:8a:e3:9d:bd:78:
06:eb:9c:31:dd:59:b5:f3:f7:ae:c6:a5:60:87:d6:
ad:bb:d9:7b:66:2c:2e:62:b4:22:57:c5:45:22:0d:
42:00:26:7f:91:aa:7a:9b:5d:15:9c:4a:6a:24:91:
a6:fb:f3:5a:19:8c:aa:b2:76:1f:26:70:03:29:d5:
88:33:05:b3:37:8d:05:10:5a:86:9c:86:43:38:9b:
2f:6b:34:22:e7:09:63:fd:cc:60:af:93:62:89:e6:
5d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:46:30:48:4A:10:A2:34:39:6E:F8:8F:E6:07:81:4A:ED:18:B7:92
X509v3 Authority Key Identifier:
keyid:E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:d6:a2:28:46:9b:39:52:3e:6e:3b:e2:74:a0:ed:02:67:93:
37:ce:d2:c6:32:bf:c2:1b:cb:48:9c:41:bf:02:4b:34:f9:e6:
7b:07:e7:3d:9f:8f:d9:f5:4c:88:ad:65:ee:8e:2b:65:df:f5:
72:af:eb:16:57:c6:b4:1a:f4:2a:f4:46:48:ee:e9:84:5e:2e:
b1:06:c1:ba:8c:b2:5d:fc:a9:e3:30:7e:af:41:67:4a:84:71:
e1:26:33:75:7d:88:a8:be:b0:4b:d2:4f:06:22:61:cf:fa:5d:
56:6a:23:f6:b5:fe:62:44:27:7b:dd:e0:22:3d:6e:2c:4b:22:
65:e8:de:92:d3:26:10:03:83:90:a8:89:46:6d:cf:60:fe:9b:
92:61:02:05:4f:f7:da:57:41:02:7f:94:cd:56:dd:e9:f0:46:
fb:fa:44:7f:27:fa:18:02:ea:11:62:a8:d7:42:e5:15:60:4f:
16:9a:2f:fa:36:7e:74:56:d3:fd:14:ad:c8:20:cc:d1:cb:a0:
43:a3:ac:a2:34:cb:12:bb:95:c7:fd:5e:d2:0c:02:a4:94:91:
35:2c:9a:64:cd:12:98:fc:72:4c:fe:28:f6:32:84:bb:17:fa:
1b:5f:1e:fa:1a:98:e8:8f:61:c8:ce:b1:9d:1f:57:ac:1e:4e:
31:85:9b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:49:35 2025 by rpki-client