
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft
File: M6eur6VSbc3FbPCHa71BEz49JHk.mft (raw, json)
Hash identifier: H9IGV2i13dVQToBkkX2qEEop9v1D6r0ccSlg7TRFFxk=
Subject key identifier: 1B:00:A9:84:36:5D:38:1B:95:43:2E:56:6F:0C:D0:DE:A9:EA:6D:73
Authority key identifier: 33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79
Certificate issuer: /CN=A917B9CB/serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479
Certificate serial: 34FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft
Manifest number: 34ED
Signing time: Tue 04 Nov 2025 14:42:51 +0000
Manifest this update: Tue 04 Nov 2025 14:42:51 +0000
Manifest next update: Tue 11 Nov 2025 14:42:51 +0000
Files and hashes: 1: M6eur6VSbc3FbPCHa71BEz49JHk.crl (hash: ENfisjrEesNPpXIbhboNP/dIl3P2da4etAeZp08aInI=)
2: A2A2D1B6573411F09F6B9016C4F9AE02.roa (hash: e1fS+JUr5OLbZbCvOqxxDH4+vhnq0CCS/TLIlGYLHhA=)
3: 6F58AA34687C11F08C69EA64C4F9AE02.roa (hash: lvbDAxOQ41m3fnpVcOJWBX3CzhcnEIm/Ym/qa3pTN/Q=)
4: 036356DC573611F08FD0E718C4F9AE02.roa (hash: dAcM+WPTq+lpF6zBrb9QFub64ROSS+oF3Dzc2JF12yY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl
rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13567 (0x34ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B9CB, serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479
Validity
Not Before: Nov 4 14:42:51 2025 GMT
Not After : Nov 11 14:42:51 2025 GMT
Subject: CN=690a10eb-882d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e0:71:e3:33:89:b5:ed:63:03:3a:e3:b8:f7:
65:4e:9b:ca:0c:8f:95:a4:74:64:af:ec:91:7e:8b:
6c:20:1a:5f:cb:2e:d8:f9:74:70:a8:8d:8e:17:96:
c6:1a:f3:8d:cc:de:04:ad:4c:6e:e7:28:a7:35:3d:
25:a4:c3:49:cb:76:92:23:29:f0:90:2c:01:b2:ad:
29:f7:79:2c:cd:be:1b:80:72:c9:a1:7e:b8:02:97:
6b:4b:46:9b:0e:63:11:45:69:78:39:a8:ff:66:33:
52:8e:b2:c6:77:c5:b1:48:5b:3f:b9:e7:e9:53:58:
15:7a:8b:96:64:54:d5:80:27:f7:59:c5:12:0b:f3:
4b:bf:a9:9f:2b:4d:97:68:ad:e8:d7:5a:ae:37:df:
ce:20:2b:75:85:0b:7d:a4:ac:76:10:b5:72:40:e3:
40:2c:fe:49:99:ff:ca:52:a4:3f:e7:e2:40:de:6c:
78:67:06:e5:82:64:fe:7e:56:1e:5f:8c:72:81:38:
3e:1a:9e:f4:18:37:6b:35:cb:cd:2b:6c:27:5c:ff:
70:25:59:15:27:7d:71:c6:2d:31:9f:80:a0:86:a3:
1b:f6:da:22:8f:14:c3:71:82:41:22:91:f2:4d:5f:
ac:3b:a6:c6:f0:8b:84:9b:ed:94:07:56:37:8b:63:
e2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:00:A9:84:36:5D:38:1B:95:43:2E:56:6F:0C:D0:DE:A9:EA:6D:73
X509v3 Authority Key Identifier:
keyid:33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:26:a2:aa:95:92:b5:5c:53:e4:d3:08:30:88:60:37:64:0d:
50:c2:5c:aa:9f:53:89:a9:0a:61:77:6d:54:39:62:fe:50:0b:
fd:61:bd:c3:87:72:57:55:fe:00:ac:0d:38:df:66:dc:b0:a8:
cb:70:5d:01:47:8c:8c:e1:56:ab:37:14:51:63:ad:6d:89:ee:
1b:8c:f1:18:04:26:5b:11:14:ab:2b:2c:53:8f:cc:9f:59:30:
37:e2:65:65:28:52:08:a7:54:8e:03:a8:2f:6b:ef:5d:22:c6:
cf:d5:05:7f:c8:61:b1:ff:97:6b:2f:53:9b:28:46:b9:b7:3b:
79:41:e7:cd:6c:71:26:b3:f0:a9:cc:90:1f:ac:f2:0b:11:53:
aa:c4:81:f7:c8:5c:46:ac:f6:a2:a5:f5:86:34:a5:0a:a7:fd:
ee:b6:b3:ed:0d:82:61:89:02:3c:54:90:8e:76:8e:4b:d6:c9:
a5:21:79:d5:39:24:18:7e:cc:e5:2b:38:3b:59:f3:02:bd:d4:
74:d3:45:d8:9c:d1:75:15:6b:e8:5a:24:01:c4:fd:67:b8:90:
31:18:11:7a:8d:7f:25:b7:80:e2:0b:36:51:f4:24:b2:17:81:
06:50:4d:63:66:5b:82:cf:7a:87:fc:6e:0a:93:c8:6d:44:7d:
e7:04:9d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:25:55 2025 by rpki-client