
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
File: g6pYiXoVH0rLc4TwtV8R7Z164X8.mft (raw, json)
Hash identifier: OuiG30ScU54ACIDWSOoy1vLqq4xdeQNmK0n7VGUOeI0=
Subject key identifier: 21:A1:C8:67:CE:7C:80:82:3B:D9:95:A9:C3:4C:F9:F0:9D:50:1B:46
Authority key identifier: 83:AA:58:89:7A:15:1F:4A:CB:73:84:F0:B5:5F:11:ED:9D:7A:E1:7F
Certificate issuer: /CN=A915B3AE/serialNumber=83AA58897A151F4ACB7384F0B55F11ED9D7AE17F
Certificate serial: 0148
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
Manifest number: 0145
Signing time: Wed 05 Nov 2025 04:31:34 +0000
Manifest this update: Wed 05 Nov 2025 04:31:34 +0000
Manifest next update: Wed 12 Nov 2025 04:31:34 +0000
Files and hashes: 1: g6pYiXoVH0rLc4TwtV8R7Z164X8.crl (hash: QxBF21cJ5RaUYR/CZHUDl3PTMdTWsfmBoaiu3slWASY=)
2: 1AD9E28ECA9411EE9062590AC4F9AE02.roa (hash: ReL28hF+/x2h0RKcTZEQ3GcIbkXQcDw6s6esZ8caJwY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.crl
rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B3AE, serialNumber=83AA58897A151F4ACB7384F0B55F11ED9D7AE17F
Validity
Not Before: Nov 5 04:31:34 2025 GMT
Not After : Nov 12 04:31:34 2025 GMT
Subject: CN=690ad326-77f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e0:55:cf:cf:62:86:ee:44:81:e6:63:f5:26:
64:1c:45:fa:88:e3:a9:37:6c:f2:69:d5:99:10:2e:
59:99:63:95:70:20:c7:bd:b7:67:ee:89:5a:cb:71:
bd:d7:8b:63:75:15:3a:79:59:11:76:79:cc:7c:3d:
cb:95:5b:43:3c:a9:39:b4:26:bb:9f:98:12:92:42:
cf:58:9f:ce:9d:91:f5:e4:7c:cd:af:67:e7:67:a1:
b6:65:d4:ed:70:f9:bb:c3:d2:f4:90:43:f6:17:82:
fc:ae:03:11:36:9e:53:54:24:fb:52:93:94:37:0f:
6d:db:02:16:2d:67:f2:1c:af:3f:21:9d:af:03:d3:
e6:b7:8e:21:65:b2:52:bf:25:5f:16:bd:6e:54:7c:
7e:70:8b:95:32:32:43:cb:0c:39:47:b1:e1:7b:22:
e1:b3:73:6c:77:d2:fa:d9:c8:e0:d7:ea:1c:9f:6c:
31:14:9d:69:6c:84:b7:2f:40:7c:a5:50:39:f9:a7:
5c:f6:f7:d7:fb:e5:ee:57:f1:26:2d:5e:b0:5e:5d:
4e:b9:28:e9:27:85:4d:0d:05:39:db:e0:96:d0:57:
4a:66:b9:ee:b7:fe:cf:44:3b:32:67:9c:01:ae:ea:
0c:2e:93:fd:d3:7d:0d:0d:d0:58:bb:4e:d4:78:ac:
65:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A1:C8:67:CE:7C:80:82:3B:D9:95:A9:C3:4C:F9:F0:9D:50:1B:46
X509v3 Authority Key Identifier:
keyid:83:AA:58:89:7A:15:1F:4A:CB:73:84:F0:B5:5F:11:ED:9D:7A:E1:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:e7:7a:eb:fd:a8:d4:74:a5:08:02:39:fe:97:62:28:29:4c:
be:ce:9b:ca:79:be:55:7d:50:5a:66:fe:db:41:d3:25:b3:84:
bb:22:96:9f:2d:19:57:f6:41:4d:79:72:aa:08:d6:1e:66:86:
27:cb:87:d3:7b:11:22:98:b3:bb:2d:63:39:9c:4a:1d:92:dc:
d5:e5:35:7b:f5:85:1e:be:c7:00:b6:51:6a:a5:11:82:71:ad:
b2:1c:53:cb:2f:38:91:8a:4f:ff:5a:e8:0b:f5:c5:e6:03:24:
86:23:7b:83:ac:ca:87:6d:40:35:3a:12:be:ff:c7:6a:4c:cb:
5b:70:8e:f7:c0:cd:75:9f:28:37:0d:16:4e:95:c9:5c:45:fa:
cf:dd:d5:02:9a:37:79:6a:a0:a1:22:4c:b6:7f:e1:ac:2c:f6:
27:31:93:86:e0:e4:67:38:02:78:d2:71:ef:9e:08:9a:c0:64:
b6:1e:24:a7:29:04:8f:60:78:c9:a0:38:59:94:c6:ef:7e:6f:
f3:6a:56:79:e2:96:d2:be:56:b1:be:c9:25:af:83:a7:c6:1e:
d3:c4:31:a4:56:1b:43:16:08:88:cb:20:3f:e3:ad:05:5c:2f:
41:6b:62:bf:1f:7d:3b:e0:87:c7:ab:47:55:48:67:7e:a4:78:
1d:3e:c9:e8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUIzQUUxMTAvBgNVBAUTKDgzQUE1ODg5N0ExNTFGNEFDQjczODRGMEI1NUYxMUVE
OUQ3QUUxN0YwHhcNMjUxMTA1MDQzMTM0WhcNMjUxMTEyMDQzMTM0WjAYMRYwFAYD
VQQDEw02OTBhZDMyNi03N2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2uBVz89ihu5EgeZj9SZkHEX6iOOpN2zyadWZEC5ZmWOVcCDHvbdn7olay3G9
14tjdRU6eVkRdnnMfD3LlVtDPKk5tCa7n5gSkkLPWJ/OnZH15HzNr2fnZ6G2ZdTt
cPm7w9L0kEP2F4L8rgMRNp5TVCT7UpOUNw9t2wIWLWfyHK8/IZ2vA9Pmt44hZbJS
vyVfFr1uVHx+cIuVMjJDyww5R7HheyLhs3Nsd9L62cjg1+ocn2wxFJ1pbIS3L0B8
pVA5+adc9vfX++XuV/EmLV6wXl1OuSjpJ4VNDQU52+CW0FdKZrnut/7PRDsyZ5wB
ruoMLpP9030NDdBYu07UeKxlgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGhyGfO
fICCO9mVqcNM+fCdUBtGMB8GA1UdIwQYMBaAFIOqWIl6FR9Ky3OE8LVfEe2deuF/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjNBRS9DMkQwNTRGNkNB
OTMxMUVFQTcyNkNDMDlDNEY5QUUwMi9nNnBZaVhvVkgwckxjNFR3dFY4UjdaMTY0
WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2c2cFlpWG9WSDByTGM0VHd0VjhSN1oxNjRYOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjNBRS9DMkQwNTRGNkNBOTMxMUVFQTcyNkNDMDlDNEY5QUUwMi9nNnBZaVhvVkgw
ckxjNFR3dFY4UjdaMTY0WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA453rr/ajUdKUIAjn+l2IoKUy+zpvKeb5VfVBaZv7bQdMls4S7Ipaf
LRlX9kFNeXKqCNYeZoYny4fTexEimLO7LWM5nEodktzV5TV79YUevscAtlFqpRGC
ca2yHFPLLziRik//WugL9cXmAySGI3uDrMqHbUA1OhK+/8dqTMtbcI73wM11nyg3
DRZOlclcRfrP3dUCmjd5aqChIky2f+GsLPYnMZOG4ORnOAJ40nHvngiawGS2HiSn
KQSPYHjJoDhZlMbvfm/zalZ54pbSvlaxvsklr4Onxh7TxDGkVhtDFgiIyyA/460F
XC9Ba2K/H3074IfHq0dVSGd+pHgdPsno
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:16:52 2025 by rpki-client