
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft
File: 6uK86DXkKxFfGLP-Do8n-EpHSZY.mft (raw, json)
Hash identifier: PbyQumc/CuTnMq6ZTbbI5uwg+QGYtrDb2uzyrYOLYAs=
Subject key identifier: A5:2D:89:68:6A:6B:0E:74:0E:27:3E:44:C0:CD:F6:D1:4E:95:90:9E
Authority key identifier: EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96
Certificate issuer: /CN=A912C0DE/serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996
Certificate serial: 0175
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft
Manifest number: 016F
Signing time: Mon 03 Nov 2025 03:55:58 +0000
Manifest this update: Mon 03 Nov 2025 03:55:58 +0000
Manifest next update: Mon 10 Nov 2025 03:55:58 +0000
Files and hashes: 1: 6uK86DXkKxFfGLP-Do8n-EpHSZY.crl (hash: /NZj+cLJduvJ+Ogs0EuK50fJH8FuhxVLez0O9cpcL/s=)
2: 5F57D01A5EA511EFB0E1B468C4F9AE02.roa (hash: gUWx0NFdXc+5m0GyQOzPhC8d8WUCa2XrObn3BWMcy0w=)
3: A2348A2E8EBD11F0848C250FC4F9AE02.roa (hash: P4t1JoBwMAtSUSse6Vs6XIMlYjrk416jR4wspRulBCw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl
rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:55:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C0DE, serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996
Validity
Not Before: Nov 3 03:55:58 2025 GMT
Not After : Nov 10 03:55:58 2025 GMT
Subject: CN=690827ce-ba43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:dd:d4:92:87:1d:5e:a6:bc:b3:73:bb:ce:
53:aa:c7:e9:46:eb:56:fe:03:8b:70:e1:ba:0a:2d:
32:84:c8:06:54:38:51:7e:de:9f:fc:42:ff:11:8b:
e3:9d:d1:f3:f4:07:bd:0c:48:8f:e0:6d:95:3a:39:
33:98:1a:1c:85:b1:3f:ec:aa:0f:02:e8:47:8b:c8:
42:31:dd:5c:21:ce:bd:27:a7:cf:a2:e5:f8:0d:9c:
fd:e4:20:71:6e:c4:cc:1e:5a:d8:69:40:a3:dc:6b:
a2:4d:20:30:b0:46:03:53:d8:fc:97:d4:79:24:76:
55:55:3a:16:ed:21:37:53:f4:96:38:28:0d:8a:4c:
81:10:ee:84:65:3f:37:6f:ac:89:cf:b2:41:e6:49:
1c:97:e2:fa:b1:1a:a6:b0:44:c6:50:b2:f4:d7:14:
e6:61:9f:35:f8:77:72:34:13:11:15:f6:ae:82:ac:
d3:25:1d:51:8b:19:c4:43:55:c3:bd:56:f6:57:6f:
85:58:0b:ba:36:7c:72:b2:fd:7f:6c:e4:73:99:0c:
74:f9:5e:af:fb:f0:c1:71:81:53:41:c4:3e:21:53:
7d:9e:f3:34:89:98:ce:aa:0a:84:e0:ea:7f:36:44:
ca:db:54:7b:2f:fc:56:71:2a:01:93:e4:7f:bc:84:
41:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2D:89:68:6A:6B:0E:74:0E:27:3E:44:C0:CD:F6:D1:4E:95:90:9E
X509v3 Authority Key Identifier:
keyid:EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:a7:4c:a6:0a:f3:de:c1:bf:be:75:84:72:88:69:81:d4:50:
eb:d6:79:92:cf:56:b7:37:f0:35:71:d5:ae:f3:08:8d:c3:f7:
dc:f7:fb:8a:e7:06:17:64:fb:25:0c:7b:b4:66:4d:dc:72:d4:
54:83:ce:b1:26:50:e5:c7:88:82:50:73:e0:cd:76:8e:c3:fc:
bb:ce:af:87:b4:b3:39:42:9d:3e:60:87:e5:1c:1b:a2:51:d6:
be:6e:28:1c:e7:75:6e:65:b2:79:1d:fa:d3:f4:37:d1:1b:f5:
59:44:f0:42:e3:9b:6d:c2:87:69:18:81:50:0e:11:6c:80:d2:
42:f3:da:34:3d:27:e8:25:e3:7a:92:ed:ca:16:72:d1:fc:99:
38:f9:b1:41:0d:ac:e5:c7:fb:a0:e5:23:7c:21:31:50:9c:25:
55:3c:07:5a:03:9c:87:4e:fe:ea:d9:3b:58:72:3d:b8:1d:3d:
f5:a6:bb:26:99:5f:b9:f3:8b:14:b9:75:70:68:d9:6e:a6:93:
e4:be:25:5f:24:00:45:bf:3c:39:22:98:ab:4a:b2:75:0e:8c:
f3:1e:ef:2b:c3:62:90:97:a9:da:d5:4a:7d:a6:aa:24:3b:d3:
54:ad:69:35:4d:c6:68:a0:6e:51:5a:60:4b:02:be:ce:0a:d1:
b3:ad:4d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:19 2025 by rpki-client