
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
File: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json)
Hash identifier: 7U2UhIGbTuXPC1q3J06rCyNznCo4gQBA/nUPUXmgBoU=
Subject key identifier: 22:9A:73:86:8E:DE:57:40:16:0B:8E:D7:DF:36:80:C3:8E:6C:17:5D
Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
Certificate issuer: /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Certificate serial: 0ADC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
Manifest number: 0ABD
Signing time: Sun 02 Nov 2025 19:28:22 +0000
Manifest this update: Sun 02 Nov 2025 19:28:21 +0000
Manifest next update: Sun 09 Nov 2025 19:28:21 +0000
Files and hashes: 1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: m+DMO9HSTQAEztemCw26Wu/Dm+DgUAopgmld6kBEGi8=)
2: BE633CD283A611EE804BB319C4F9AE02.roa (hash: NPIjvL++urku6C6DzlbI7Tjblbx8i4fhbfChdZsNErw=)
3: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: ynLMF5PjpFkvP/pk/9zlgeaTF7AgzyDNzOj/EUi7rZI=)
4: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: iGUFOWK6oRwPeEo+C87zciurGuoBwNOi2mVgrnihqBQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 19:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2780 (0xadc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Validity
Not Before: Nov 2 19:28:21 2025 GMT
Not After : Nov 9 19:28:21 2025 GMT
Subject: CN=6907b0d6-88f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:80:7a:c9:7a:e7:ef:8c:58:8c:2e:ee:46:
e5:a0:9f:0e:ad:3a:d0:7a:a6:e6:0d:6e:e4:e0:91:
34:22:59:93:69:16:d8:b6:70:22:77:f6:02:9b:72:
03:7f:c7:81:cd:5f:d8:fa:43:e3:0c:23:2c:df:37:
c7:63:12:24:cd:ae:17:15:d9:5f:32:66:6f:ba:1e:
05:35:38:47:47:7e:f3:cc:f6:9f:a3:01:aa:65:fd:
e3:aa:62:86:1c:0c:bb:d1:67:50:a2:76:93:dd:a6:
ce:83:b1:9f:dd:e2:2f:7d:c0:ac:e9:2d:2d:0e:da:
b9:47:58:ff:3a:4e:85:1f:48:39:c1:1f:a5:03:97:
81:3b:b1:ff:e1:e9:3c:a4:81:d2:4d:d2:5f:ed:65:
0a:cd:47:f8:14:4d:d9:6f:1b:1e:36:09:dc:8f:d3:
9b:fb:e2:11:04:68:48:e5:e8:d5:3c:2c:2a:0c:6e:
41:f5:56:02:3d:97:14:39:ec:38:f3:96:f5:84:77:
47:8a:fc:ef:d8:a9:06:27:be:a5:31:5b:1e:bf:c6:
a5:98:ae:8f:a4:2b:18:9d:04:b6:0f:30:c4:ee:2c:
e7:f5:41:e2:cc:e3:9a:be:dd:29:63:7f:0e:73:d2:
3e:5a:31:0d:64:60:46:f4:dd:d5:28:c0:6c:bd:3d:
6d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9A:73:86:8E:DE:57:40:16:0B:8E:D7:DF:36:80:C3:8E:6C:17:5D
X509v3 Authority Key Identifier:
keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:ec:78:f2:ea:f4:33:9c:c8:80:24:7a:c2:fb:90:b8:8d:de:
63:6c:a4:ce:17:d1:70:cf:2a:4b:e2:c3:81:f0:c0:f0:84:fb:
32:8d:63:2d:43:80:9f:44:be:68:43:64:9e:2f:aa:2d:c1:cf:
7f:fd:e7:ea:b5:9f:8c:3e:29:aa:d2:7a:42:b3:ae:6c:c5:fa:
d4:07:9e:63:90:15:35:fc:da:70:45:9c:07:b0:ad:00:d1:48:
7f:de:c9:76:4d:e8:d6:49:45:3c:47:65:f7:c7:7a:88:43:83:
ad:89:56:f4:94:75:f7:2e:0e:2f:b2:21:8b:d3:dd:9f:3b:6d:
f3:c0:05:3f:e4:56:e0:cd:e0:d8:73:92:ab:b1:3c:d8:f3:88:
01:f3:22:20:af:aa:6b:1f:85:d5:dc:e5:82:ff:13:97:db:1c:
02:54:be:e1:b4:47:ec:dc:04:e5:6a:5f:6c:19:90:10:b8:ef:
cf:66:32:38:81:7d:f7:84:8e:50:2a:ae:26:92:ba:cc:ae:92:
00:0b:24:e7:ad:a8:83:ab:61:a8:93:ae:1f:45:f9:41:e0:92:
ca:30:e5:3f:81:52:e6:c4:61:50:96:ed:51:0b:32:99:f9:37:
86:66:ad:98:3c:9a:97:9d:a4:07:60:cf:32:6b:0c:60:86:88:
de:38:8c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:23:33 2025 by rpki-client