
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft
File: 6qltynQw36Rxyim4Q4NsHIDlQ54.mft (raw, json)
Hash identifier: +Bs68Xopx/NbM0xY5WiI5ixICAGmNb8xfId9P/hLt1w=
Subject key identifier: 25:A3:F6:69:BA:16:30:B5:5C:1B:E5:06:9D:C4:1C:9D:C2:E7:AD:C8
Authority key identifier: EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E
Certificate issuer: /CN=A91BB87C/serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E
Certificate serial: 0CEA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft
Manifest number: 0CD6
Signing time: Tue 04 Nov 2025 18:15:46 +0000
Manifest this update: Tue 04 Nov 2025 18:15:45 +0000
Manifest next update: Tue 11 Nov 2025 18:15:45 +0000
Files and hashes: 1: 6qltynQw36Rxyim4Q4NsHIDlQ54.crl (hash: zEEhrB+AqWQz7HuNr40SmGyFPLJW96Lzbw5zP3Aj/1w=)
2: 5B01916AD15911EE8B8BB151C4F9AE02.roa (hash: j94Y9byA6hrJjWvSwlJFmsvrVOzYBezuSr8IKFG6YL4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl
rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3306 (0xcea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB87C, serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E
Validity
Not Before: Nov 4 18:15:45 2025 GMT
Not After : Nov 11 18:15:45 2025 GMT
Subject: CN=690a42d2-4caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b2:ff:7f:2e:17:34:b5:5f:05:de:36:37:fb:
91:d0:02:b2:66:18:fe:4b:4c:86:4e:6a:cb:f7:7c:
91:a6:8e:1c:70:ad:08:be:75:e0:13:5e:f7:16:a0:
75:6e:5a:8f:64:c2:a5:9f:e9:27:fc:11:17:45:f4:
fd:10:72:59:a8:39:7e:30:34:8b:9c:9d:8b:fe:31:
32:13:24:a9:ae:ee:50:47:2d:9a:1a:48:7d:89:73:
75:b3:17:e5:b3:8f:10:e8:8f:71:99:ea:7f:6a:21:
bd:85:4d:21:dd:ce:26:03:04:03:e2:75:f5:23:e3:
b2:0e:51:c6:ab:01:51:c8:7d:36:1c:83:5c:54:17:
c2:c5:3a:70:2e:3c:65:06:e4:fd:ea:38:13:4c:6d:
21:cc:5e:d3:41:d3:8d:4e:55:43:0f:ed:7e:1d:a0:
86:78:6b:ae:d3:2b:d2:88:60:35:75:4a:b1:45:e2:
38:99:f4:21:52:64:e6:10:3d:73:50:e2:a3:58:fc:
be:2d:6c:81:72:58:13:e2:58:1a:c8:3d:2e:46:46:
c2:f6:ba:08:5a:e0:63:1e:d5:bf:66:3a:35:3b:1f:
83:c0:0e:b3:7c:ff:e1:bc:9c:ce:ff:f3:90:58:a0:
b6:16:88:3d:42:15:1e:fe:62:34:d4:ca:84:f4:f6:
d8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A3:F6:69:BA:16:30:B5:5C:1B:E5:06:9D:C4:1C:9D:C2:E7:AD:C8
X509v3 Authority Key Identifier:
keyid:EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:09:ab:54:a9:73:f2:00:d3:bd:4d:dd:a1:c5:df:92:5f:20:
1d:6b:e8:04:b4:c0:df:e3:e7:33:c9:4a:1a:95:38:61:f3:8b:
b8:a4:83:ea:c8:84:6c:ea:b9:1b:32:32:ef:ac:e3:a6:8d:7c:
33:96:6d:99:e9:21:1a:c4:76:9a:14:b7:0c:3e:50:c4:2a:0f:
d9:d3:69:d6:55:95:5f:8a:5a:68:24:75:11:86:0a:0c:e4:cb:
08:49:ab:39:76:58:c3:b5:18:ec:b0:4c:ce:a5:94:5f:5e:f2:
ef:b9:e2:26:26:65:c4:f5:56:39:a3:39:56:1f:1b:5f:9e:c8:
7b:92:33:83:b4:5a:67:e2:10:63:fb:12:e9:1d:c4:82:07:7d:
e7:35:33:34:d8:a2:61:55:3e:50:b9:ac:52:11:42:10:70:6e:
c7:19:54:14:2f:51:72:b9:68:19:48:5c:f5:99:ef:c6:02:d9:
60:d0:23:73:e5:0e:57:91:89:64:25:82:cb:b2:de:6a:f4:a7:
f4:d5:1a:ff:f1:ce:21:9d:3e:61:9d:89:52:a1:4a:0d:75:0d:
94:ff:e6:41:a7:00:10:bc:13:9d:80:9b:8e:a5:ea:d9:a8:dd:
57:53:e6:ac:44:17:78:c1:05:f7:86:4a:b0:d2:7c:45:f1:22:
75:6a:3b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:51:22 2025 by rpki-client