
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
File: 6WkLu582wJ1MLtT2bPVdw1J1-3I.mft (raw, json)
Hash identifier: l/kZmOyExOXx7WAnd4M1FRAoKXHNLG+d0KpVrLR8PL4=
Subject key identifier: 10:E5:91:B2:A7:91:91:22:EE:46:D3:36:3C:82:C0:08:27:6B:CA:BB
Authority key identifier: E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72
Certificate issuer: /CN=A91BA9CE/serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72
Certificate serial: 0CDD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
Manifest number: 0CB6
Signing time: Tue 04 Nov 2025 18:20:05 +0000
Manifest this update: Tue 04 Nov 2025 18:20:05 +0000
Manifest next update: Tue 11 Nov 2025 18:20:05 +0000
Files and hashes: 1: 6WkLu582wJ1MLtT2bPVdw1J1-3I.crl (hash: auSUr4WjVNmvp2IEX5yZw3J1D91F/7E9qgVCvk3rUT8=)
2: 703918CC69EA11EE83318C50C4F9AE02.roa (hash: sl3iOiIpHmamaoTiyabLQSY+b6gx0pCXz/Ji33uFHt4=)
3: DC79515C011411EAAB0EF153C4F9AE02.roa (hash: S09PILGMyTlUME8baJPdO5/QImyMfRyviwRhAxvfwcM=)
4: 843F754669EA11EE90D6585BC4F9AE02.roa (hash: JzYOC6lX/mEpxkty6VDIE3Zxqj0b88u+IzzJMZUEq3s=)
5: DBED3B7C011411EAAB0EF153C4F9AE02.roa (hash: Om0jdNklpNSJZKsNEHd4KcWViukVVvJhi2Cyd/8/qjc=)
6: DB63CF9A011411EAAB0EF153C4F9AE02.roa (hash: wGD4GgZYH8Wu637cB2mtopho5iC5QPWCCDSkj49GCdU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl
rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3293 (0xcdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA9CE, serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72
Validity
Not Before: Nov 4 18:20:05 2025 GMT
Not After : Nov 11 18:20:05 2025 GMT
Subject: CN=690a43d5-387f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7a:7f:d7:b9:ef:6a:c6:79:53:20:12:42:91:
56:64:5a:e7:0a:ac:12:ba:09:4a:5d:f8:10:a4:17:
3f:a4:68:93:f2:29:9e:6f:b2:8b:27:e8:6d:7d:1b:
16:60:3c:75:58:9c:fe:7d:fe:03:d9:33:30:df:35:
83:a0:d3:b5:13:30:b5:61:07:75:e1:52:f6:8e:0b:
c9:cc:52:98:5e:6d:d1:5d:3c:51:b9:59:91:28:61:
e0:7e:d2:af:c5:ba:fe:72:b4:f9:44:fb:52:1c:45:
ed:d3:39:f8:5b:75:df:e9:25:ec:ad:bb:64:b6:44:
a3:69:3a:df:6c:b0:a8:c5:5c:c8:01:4f:66:f1:4c:
29:45:1f:57:49:92:ef:8c:6d:5f:da:9d:cf:2f:44:
3b:4c:91:02:df:65:7e:1a:42:91:d8:44:6e:9c:f1:
99:0f:3e:d0:4c:76:cc:05:64:8a:e9:e0:4d:20:3c:
bc:19:b0:cc:fb:a6:02:a8:f4:f3:14:5a:3c:38:05:
3f:96:18:9b:a5:47:f7:54:61:ff:a3:92:f2:63:29:
a6:06:08:eb:7a:6b:0f:57:0b:d2:49:3c:7f:45:02:
43:c1:45:d3:44:3b:1f:83:12:01:8f:fc:37:40:0f:
19:37:05:b4:61:98:d0:3c:1b:6e:5e:ee:62:88:7f:
ba:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E5:91:B2:A7:91:91:22:EE:46:D3:36:3C:82:C0:08:27:6B:CA:BB
X509v3 Authority Key Identifier:
keyid:E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:45:16:66:fe:cc:ab:8b:8b:e3:df:de:ba:11:d6:7d:39:dc:
54:c9:54:2f:e1:36:7a:fb:94:da:7d:12:b1:c8:8b:9e:0a:54:
b6:ec:29:32:d8:0f:cf:73:2b:32:0e:a2:ff:56:9f:01:db:f3:
c2:68:63:ca:d5:b2:45:b0:b2:44:f8:5b:fe:4c:2f:5a:d2:f5:
9c:f4:fc:e9:3d:3a:fd:8d:cb:d7:a7:ae:d2:69:3f:38:5d:a0:
83:51:c4:92:0e:a2:41:2a:f0:a8:02:c8:71:24:ad:12:d9:ce:
56:51:9f:a1:2b:0e:3b:5d:61:c0:c3:85:95:9a:05:75:7f:fc:
de:be:dd:b4:f9:51:e7:29:d9:21:89:b6:be:43:68:9d:66:65:
bb:39:2e:67:48:ca:21:16:b5:fc:5a:35:a5:d1:6a:15:b0:fc:
4e:d3:db:ef:2f:43:e2:ab:99:a8:53:55:b7:ef:f3:01:98:ba:
0c:2b:fa:fd:c5:39:c6:24:32:75:da:a2:68:d7:48:b9:9f:6a:
df:cb:c4:8d:6e:95:c3:56:21:30:64:1c:94:7c:98:38:19:fd:
ff:a6:f8:4a:06:10:16:bb:0b:5b:ce:37:07:62:c1:50:6c:43:
3e:4d:51:35:4b:e1:70:83:77:d8:31:70:28:ee:e9:06:49:00:
12:2f:23:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:48:43 2025 by rpki-client