
$ rpki-client -vvf rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.mft
File: 6u5Zump8cEkFjFZZfMdFxh7FoKk.mft (raw, json)
Hash identifier: oa1y2kxT64SikApfLzcDtkeEuloWFsRyn9WhB2Rv7+k=
Subject key identifier: F2:95:53:6C:94:F2:6A:19:28:E2:0C:C8:16:A9:36:CF:B6:C5:F7:32
Authority key identifier: EA:EE:59:BA:6A:7C:70:49:05:8C:56:59:7C:C7:45:C6:1E:C5:A0:A9
Certificate issuer: /CN=A914AD92/serialNumber=EAEE59BA6A7C7049058C56597CC745C61EC5A0A9
Certificate serial: 01AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6u5Zump8cEkFjFZZfMdFxh7FoKk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.mft
Manifest number: 0561
Signing time: Wed 05 Nov 2025 00:45:56 +0000
Manifest this update: Wed 05 Nov 2025 00:45:55 +0000
Manifest next update: Wed 12 Nov 2025 00:45:55 +0000
Files and hashes: 1: 6u5Zump8cEkFjFZZfMdFxh7FoKk.crl (hash: ili0d5ZO7+fdhh93QjTPSAWbCN8vco7GWC8KMIJOxg4=)
2: F19BD82C46A011EE85BCFA3FC4F9AE02.roa (hash: wKLo017zboTn3X0bykWjpCuyqUjp9oJY923Pgbk9gE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.crl
rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6u5Zump8cEkFjFZZfMdFxh7FoKk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:45:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914AD92, serialNumber=EAEE59BA6A7C7049058C56597CC745C61EC5A0A9
Validity
Not Before: Nov 5 00:45:55 2025 GMT
Not After : Nov 12 00:45:55 2025 GMT
Subject: CN=690a9e43-4783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:81:f7:3d:99:6d:de:25:a2:2e:57:f5:67:
be:9f:1a:81:7e:a2:18:96:df:9b:a1:bb:a4:a9:d5:
2b:f3:32:4f:20:7d:35:1f:81:77:3a:fb:8e:58:97:
21:89:79:b9:2d:d1:87:2b:6e:5e:dc:22:b5:94:04:
df:9c:a7:22:db:28:7c:0a:ca:a0:a4:07:3c:c8:a6:
76:db:3b:6d:33:83:29:c0:80:cd:d6:fd:bf:2b:59:
f0:e6:93:3d:cd:49:a3:d5:81:b3:ff:39:cf:1d:5b:
4c:fd:51:3d:f3:56:90:d5:40:78:5b:39:51:67:57:
ca:11:c3:48:f6:c5:0d:c5:d7:2c:c8:bd:88:10:df:
df:1d:4a:cb:58:4b:99:c1:70:11:66:ec:9b:2e:7e:
28:2b:8b:3b:fe:b7:39:cd:52:7c:59:d2:38:a9:bf:
2e:f3:d8:e3:83:57:89:87:12:47:f0:b8:62:83:8c:
7d:cc:24:6a:a6:04:a6:ee:bd:73:1a:63:1b:27:fd:
56:c4:9e:19:05:f9:0d:89:6e:ea:77:16:a3:fc:4b:
92:ea:4e:b8:22:5b:c6:cd:a8:b2:cf:c1:d5:e2:9e:
60:e6:3c:37:51:48:05:b8:14:db:42:e6:2f:f0:40:
8e:bd:ac:ec:9c:76:ac:69:b4:0d:6b:f3:5f:99:23:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:95:53:6C:94:F2:6A:19:28:E2:0C:C8:16:A9:36:CF:B6:C5:F7:32
X509v3 Authority Key Identifier:
keyid:EA:EE:59:BA:6A:7C:70:49:05:8C:56:59:7C:C7:45:C6:1E:C5:A0:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6u5Zump8cEkFjFZZfMdFxh7FoKk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3b:49:7d:ed:21:0e:b9:bb:e1:73:6a:02:da:24:46:56:52:
e5:27:d0:a6:3e:2f:bf:35:ba:19:b3:8e:3c:8b:f8:b0:5c:49:
18:3b:a8:29:37:e3:b4:8c:5b:6b:48:fe:42:5d:14:53:c0:ec:
68:ad:31:c2:21:b2:91:1e:1b:81:d2:66:b4:29:a5:0b:66:fd:
82:1e:f2:c0:61:a0:e7:e7:72:99:5a:6b:2a:5a:b7:4b:bf:30:
3a:fe:b7:84:3b:20:13:67:41:8f:bc:31:76:b6:8e:38:c0:b5:
89:8f:26:d5:48:87:3b:51:4f:4d:d1:62:59:b0:14:8a:b9:d3:
2f:35:f5:45:5b:36:82:22:35:59:13:26:47:9e:49:fd:f7:ae:
4d:c1:dc:41:9d:bf:64:c4:ec:33:a6:62:14:ef:60:d5:96:1e:
a1:bd:bd:9f:2e:57:77:8e:5d:5b:6b:6f:cd:4f:97:46:95:5e:
9a:27:01:4b:71:47:02:6e:a2:e4:87:eb:41:7d:9f:67:4d:4d:
5f:91:b9:1c:9d:be:0e:63:ea:db:67:6a:3a:13:3e:25:7d:eb:
de:b0:de:75:b2:97:0b:a3:65:e6:f7:4e:f3:9b:5d:e4:76:5d:
eb:c4:64:69:3b:8c:a3:8b:0f:7a:7a:fa:3b:8d:3f:02:41:38:
2c:7f:c0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:01:50 2025 by rpki-client