
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft
File: G6b_I23_7pYJaapF2ZXZb-TSmPE.mft (raw, json)
Hash identifier: K2Y55CGZbNa1hiQDPkSOsdBaQvbeFriyUFyoUif4cBk=
Subject key identifier: 67:FA:22:BB:90:B2:AF:27:DB:CC:33:0E:C2:31:78:14:D6:69:62:0E
Authority key identifier: 1B:A6:FF:23:6D:FF:EE:96:09:69:AA:45:D9:95:D9:6F:E4:D2:98:F1
Certificate issuer: /CN=A9194AE2/serialNumber=1BA6FF236DFFEE960969AA45D995D96FE4D298F1
Certificate serial: F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6b_I23_7pYJaapF2ZXZb-TSmPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft
Manifest number: F8
Signing time: Mon 03 Nov 2025 05:09:59 +0000
Manifest this update: Mon 03 Nov 2025 05:09:59 +0000
Manifest next update: Mon 10 Nov 2025 05:09:59 +0000
Files and hashes: 1: G6b_I23_7pYJaapF2ZXZb-TSmPE.crl (hash: trFQUvOzdw4TyUeII+K9pRNKjO0xGYk9yUN1Po1gflk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.crl
rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6b_I23_7pYJaapF2ZXZb-TSmPE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:09:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194AE2, serialNumber=1BA6FF236DFFEE960969AA45D995D96FE4D298F1
Validity
Not Before: Nov 3 05:09:59 2025 GMT
Not After : Nov 10 05:09:59 2025 GMT
Subject: CN=69083927-88c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:24:82:dd:45:ee:a6:a6:7c:7a:99:73:22:e5:
95:be:c5:9e:a9:14:bd:c8:81:c8:21:d5:23:7f:f0:
23:7b:78:42:41:d1:c8:24:7b:cb:2b:9b:e8:6a:2f:
e0:6c:74:c3:58:25:ce:e0:95:f8:37:a6:96:24:73:
86:f7:a5:cd:41:d7:4f:a1:5d:15:e1:ae:e0:0a:f0:
66:83:0c:25:d4:f4:88:65:d0:f2:c0:da:e8:b4:50:
67:cc:86:41:e6:19:f0:0c:a2:5c:51:b5:f9:50:c9:
13:e4:92:54:a7:64:ca:9d:b6:0f:c6:88:c8:56:d6:
be:00:97:d8:7f:31:ac:47:dc:d9:59:47:85:78:58:
8e:e8:8a:b5:a8:b7:c2:ef:f7:79:ce:f5:e0:27:e1:
0a:c1:ef:60:1f:c0:87:e6:e3:68:3c:ae:90:3a:08:
ef:fe:57:2a:67:32:c8:48:b3:65:6a:1d:c5:72:12:
5d:02:3e:af:11:ac:9f:b1:62:f7:a3:3e:d1:68:2f:
d3:e9:6a:2f:2d:10:d1:5d:23:7a:13:c3:77:70:bc:
61:18:42:4a:08:a4:68:4d:c7:77:51:39:bd:c2:ef:
51:1c:99:d9:2e:73:fe:e2:d8:57:79:a9:7e:56:2c:
00:10:90:dd:7b:f7:e8:73:65:d5:b6:ff:e4:f4:ae:
20:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FA:22:BB:90:B2:AF:27:DB:CC:33:0E:C2:31:78:14:D6:69:62:0E
X509v3 Authority Key Identifier:
keyid:1B:A6:FF:23:6D:FF:EE:96:09:69:AA:45:D9:95:D9:6F:E4:D2:98:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6b_I23_7pYJaapF2ZXZb-TSmPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f6:b0:52:3f:bf:5d:fb:22:8f:57:da:f0:ea:11:68:0c:9b:
11:70:a1:21:ae:9b:fc:5a:76:69:1b:6c:90:6c:d3:a7:dd:80:
36:ef:50:19:d5:b1:c6:7b:aa:65:4f:8c:0e:59:47:25:95:3d:
d7:74:94:e3:f9:2f:8b:92:00:6f:9c:27:44:53:bf:45:62:3d:
16:0c:b6:9e:5b:f1:53:fb:87:e5:87:f4:c0:4d:ab:d9:32:44:
ff:10:ba:a3:0c:38:81:a2:4f:86:22:2b:01:e3:77:96:3b:ab:
62:34:d6:8f:c1:17:1e:00:65:11:55:0e:cc:cb:a0:35:cf:93:
5d:ef:72:d9:68:39:97:2f:4b:ba:4b:95:c0:37:c5:e6:07:21:
5f:24:b4:31:84:74:5c:c5:18:2d:88:9b:54:12:e2:03:d8:cd:
5b:e9:eb:17:c7:3f:73:4c:35:5d:80:cb:a6:93:6d:ce:fe:9c:
c1:c6:df:76:7d:45:34:33:f8:96:3d:f7:f4:73:a8:84:57:ae:
97:7f:09:1a:34:bf:54:0c:e8:ad:46:1f:5b:f1:5b:0e:25:1b:
b0:98:9b:f3:c6:db:10:a1:58:ad:b2:68:15:86:f4:d8:e8:39:
2b:89:70:2a:ac:53:35:21:f9:ed:3c:47:c7:83:27:0e:40:a4:
6c:6b:3c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:26:01 2025 by rpki-client