
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft
File: 6YYS7upK5w0ftbZSS5adR0Lc6BA.mft (raw, json)
Hash identifier: uPVkAs7sFF/MsePbIpkVDFyypPvLPbSkomnZmiTcYDg=
Subject key identifier: 0F:DC:B9:43:C8:CF:5A:16:8B:25:F8:77:47:04:45:E7:CE:BA:08:B3
Authority key identifier: E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10
Certificate issuer: /CN=A912DB99/serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810
Certificate serial: 01B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft
Manifest number: 01AE
Signing time: Wed 05 Nov 2025 03:21:48 +0000
Manifest this update: Wed 05 Nov 2025 03:21:47 +0000
Manifest next update: Wed 12 Nov 2025 03:21:47 +0000
Files and hashes: 1: 6YYS7upK5w0ftbZSS5adR0Lc6BA.crl (hash: 2usKkycDu49dXfmjITwD3F79aIjBNN7fJRPLseInwko=)
2: E58351049F2011EE8D92FF5EC4F9AE02.roa (hash: pE9Ctw9QKRS8QgMh/STn9x6A8pM1YmpBJFnciqO1iE4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl
rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:21:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DB99, serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810
Validity
Not Before: Nov 5 03:21:47 2025 GMT
Not After : Nov 12 03:21:47 2025 GMT
Subject: CN=690ac2cb-ef15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d7:d4:a2:6a:42:13:c6:04:c0:2a:8a:77:d9:
9f:bb:55:b2:87:6b:7c:a6:ae:90:4d:1d:c4:18:88:
cd:b8:cb:c5:cc:f1:ff:e9:6d:ce:33:5a:7c:b9:f8:
8a:b7:d1:37:4d:ad:02:d4:34:6b:71:25:9d:81:71:
c0:a6:24:36:a9:fe:ee:f0:3a:9a:0f:a2:91:fb:e1:
c6:16:f3:36:5c:4c:16:22:bd:d0:cf:40:1b:61:49:
3f:26:09:f7:66:86:0d:0c:a4:db:6c:db:21:0c:8d:
0c:e4:4b:8d:56:af:09:25:15:f1:11:a6:cd:6f:d7:
27:93:d5:bb:8b:45:87:00:a3:ed:c5:0b:90:b4:7f:
f3:db:88:d5:a1:9a:be:1f:54:75:20:76:82:37:37:
97:02:fa:11:0f:9e:8a:f4:e6:f5:05:a2:03:a7:e9:
cb:71:de:4e:30:46:65:67:ec:12:4b:cc:d8:b3:e8:
fc:b2:84:8f:ec:e5:dc:7f:bf:f2:6c:a2:9a:cc:cb:
01:76:81:b8:6b:62:77:97:1a:6b:8e:58:60:66:75:
0a:1c:73:dd:c5:0e:6d:f8:02:24:b8:a9:0d:63:b6:
51:fb:cb:e1:4b:5d:80:1b:68:60:5d:1e:81:d4:e8:
64:51:c0:e2:16:05:bf:b3:da:ad:9f:fb:38:27:6b:
24:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DC:B9:43:C8:CF:5A:16:8B:25:F8:77:47:04:45:E7:CE:BA:08:B3
X509v3 Authority Key Identifier:
keyid:E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:84:42:65:d0:3b:51:72:94:7c:2f:12:8f:42:ad:3a:61:67:
cb:9c:a8:18:0b:c8:c0:aa:db:65:06:1b:42:fd:1d:9b:e6:71:
dc:4b:0a:cd:ab:fd:50:d9:2a:e7:35:9b:b1:9e:8b:72:bc:c5:
e9:ff:37:a2:b5:fd:f2:82:13:e6:b5:36:eb:96:f4:18:82:1f:
01:69:1e:a9:ba:25:56:ab:f7:53:ea:a4:32:4a:a8:bc:43:16:
b0:b5:df:98:60:82:32:f0:93:4c:4a:43:29:72:71:0e:2b:1c:
fd:4c:44:cf:67:72:06:10:00:43:b8:ae:d0:b0:68:77:32:22:
d8:06:c2:ba:8f:a6:ef:b3:af:c9:e6:6b:6f:5c:e7:a2:1c:43:
fd:99:92:9f:d9:a4:95:58:45:8a:39:d5:cd:0d:b9:0f:8c:4d:
d5:44:05:90:bd:0e:38:70:1f:0a:e5:37:6c:0c:24:4c:ca:25:
c4:da:d1:12:d9:15:dc:60:6f:7c:ae:55:d9:e3:86:48:92:93:
63:c4:18:ec:ce:e8:47:4b:76:9f:22:31:7c:72:39:9a:c6:e8:
83:7b:b2:be:29:35:42:a2:9b:41:2a:a9:47:de:c8:b2:38:04:
9e:c8:6c:5e:66:a3:8b:f5:ee:bc:74:dd:33:34:2c:7a:31:0e:
de:e1:0b:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkRCOTkxMTAvBgNVBAUTKEU5ODYxMkVFRUE0QUU3MEQxRkI1QjY1MjRCOTY5RDQ3
NDJEQ0U4MTAwHhcNMjUxMTA1MDMyMTQ3WhcNMjUxMTEyMDMyMTQ3WjAYMRYwFAYD
VQQDEw02OTBhYzJjYi1lZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkNfUompCE8YEwCqKd9mfu1Wyh2t8pq6QTR3EGIjNuMvFzPH/6W3OM1p8ufiK
t9E3Ta0C1DRrcSWdgXHApiQ2qf7u8DqaD6KR++HGFvM2XEwWIr3Qz0AbYUk/Jgn3
ZoYNDKTbbNshDI0M5EuNVq8JJRXxEabNb9cnk9W7i0WHAKPtxQuQtH/z24jVoZq+
H1R1IHaCNzeXAvoRD56K9Ob1BaIDp+nLcd5OMEZlZ+wSS8zYs+j8soSP7OXcf7/y
bKKazMsBdoG4a2J3lxprjlhgZnUKHHPdxQ5t+AIkuKkNY7ZR+8vhS12AG2hgXR6B
1OhkUcDiFgW/s9qtn/s4J2skYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/cuUPI
z1oWiyX4d0cERefOugizMB8GA1UdIwQYMBaAFOmGEu7qSucNH7W2UkuWnUdC3OgQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI5OS9CQzY1OUJDNjMx
QjQxMUVFQjU1MUYyMTFDNEY5QUUwMi82WVlTN3VwSzV3MGZ0YlpTUzVhZFIwTGM2
QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZZWVM3dXBLNXcwZnRiWlNTNWFkUjBMYzZCQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
REI5OS9CQzY1OUJDNjMxQjQxMUVFQjU1MUYyMTFDNEY5QUUwMi82WVlTN3VwSzV3
MGZ0YlpTUzVhZFIwTGM2QkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBthEJl0DtRcpR8LxKPQq06YWfLnKgYC8jAqttlBhtC/R2b5nHcSwrN
q/1Q2SrnNZuxnotyvMXp/zeitf3yghPmtTbrlvQYgh8BaR6puiVWq/dT6qQySqi8
Qxawtd+YYIIy8JNMSkMpcnEOKxz9TETPZ3IGEABDuK7QsGh3MiLYBsK6j6bvs6/J
5mtvXOeiHEP9mZKf2aSVWEWKOdXNDbkPjE3VRAWQvQ44cB8K5TdsDCRMyiXE2tES
2RXcYG98rlXZ44ZIkpNjxBjszuhHS3afIjF8cjmaxuiDe7K+KTVCoptBKqlH3siy
OASeyGxeZqOL9e68dN0zNCx6MQ7e4Qsd
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:05:51 2025 by rpki-client