
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
File: 6kGaeWKZYloHSmW3ys7_GLgGbIs.mft (raw, json)
Hash identifier: PEesoxppYdCfNcZkh6nALvVM39znDlfXksRU/kl2Kks=
Subject key identifier: C2:11:DD:7F:53:A4:97:F3:AB:CA:17:56:06:7C:75:19:F2:E4:B4:66
Authority key identifier: EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B
Certificate issuer: /CN=A91BEBB1/serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
Certificate serial: 0241
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
Manifest number: 023A
Signing time: Wed 05 Nov 2025 01:58:23 +0000
Manifest this update: Wed 05 Nov 2025 01:58:23 +0000
Manifest next update: Wed 12 Nov 2025 01:58:23 +0000
Files and hashes: 1: 6kGaeWKZYloHSmW3ys7_GLgGbIs.crl (hash: Vjb9X1ezYNk7yp2yB5nyK+b+TPszL1Ht57c3qfviBT0=)
2: 8CD5FC2253A011EDAC40531BC4F9AE02.roa (hash: JPPg4axF52fUr6Imwg/bjNt0uzHT0+P65yVOXCd9Qfg=)
3: FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa (hash: AViHV7y6w+VuXdqb9Rg2Cx88Ixz8kcPYy8eDkaG1C5c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl
rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 577 (0x241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEBB1, serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
Validity
Not Before: Nov 5 01:58:23 2025 GMT
Not After : Nov 12 01:58:23 2025 GMT
Subject: CN=690aaf3f-d2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:cf:40:68:b0:2b:8b:88:ba:c9:a7:d2:85:
2b:81:fd:fc:a6:84:bc:e0:a8:11:db:81:f9:56:d9:
ef:2e:49:6d:b4:d6:05:33:d4:77:b9:9f:45:65:c2:
1c:86:33:06:a9:4f:66:6b:4c:d2:43:f1:10:54:6e:
74:7c:56:c6:e0:31:be:3d:74:56:53:16:02:dc:dc:
7c:02:e6:a3:c3:63:65:e7:43:2d:9a:f2:d8:66:d6:
7f:d0:cd:ab:f7:02:30:71:74:85:84:72:72:02:9b:
bc:a0:41:2c:5f:37:90:6e:27:c7:4f:be:61:29:e7:
47:eb:98:de:4d:72:71:a0:54:61:f4:5f:fb:55:74:
04:fe:6e:b7:b7:e6:47:5c:9a:ee:f2:f2:07:c5:24:
f5:4e:4a:46:17:b4:ff:68:0b:d6:d3:bb:bf:a4:b7:
d3:39:be:88:b2:e4:e7:d7:83:b6:f1:08:36:ab:d6:
fa:91:72:ad:d9:46:b0:2b:ed:07:dd:08:58:b0:31:
a8:73:64:ac:26:61:be:46:7b:38:b9:ca:c6:38:85:
17:e1:e3:c9:45:76:80:39:f0:ca:e1:03:28:9d:17:
31:1d:ff:a2:15:a9:22:f0:c5:0f:92:f9:90:e4:43:
75:f2:75:72:a9:5b:32:40:e6:58:ca:d6:ca:ab:82:
de:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:11:DD:7F:53:A4:97:F3:AB:CA:17:56:06:7C:75:19:F2:E4:B4:66
X509v3 Authority Key Identifier:
keyid:EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:72:f9:20:a1:0b:65:22:86:c5:fc:17:f6:ad:a7:36:dd:cf:
9a:99:49:15:df:64:ec:e4:d4:a5:1b:95:3c:b9:58:33:37:95:
a1:73:3c:0d:cf:0c:eb:82:17:37:a3:b7:82:f9:ea:c1:4c:4d:
57:58:6c:17:52:41:f5:01:7d:82:dc:eb:30:36:44:4b:43:90:
f4:7e:18:57:d5:0c:52:a5:55:82:47:2e:ac:01:b4:6b:43:fb:
98:fa:92:c8:38:64:d8:13:20:68:79:29:9d:d9:3c:d7:fc:97:
73:a5:e5:88:58:ba:7c:9b:c8:32:fb:30:80:1d:d6:a0:9c:89:
a1:d6:9b:a2:67:d9:6f:a2:6f:a0:d1:3a:20:2b:cd:97:99:d5:
d5:54:b9:0c:b3:db:ce:b4:3c:56:8b:10:2b:b7:77:27:95:e5:
cc:ed:19:36:63:51:2c:a7:e8:01:c1:37:97:8d:9a:d8:84:de:
95:65:b6:95:e3:a7:a5:65:c6:b3:02:d5:79:33:3f:7c:2d:ea:
58:55:a1:73:86:a9:71:50:f1:f3:76:e8:09:ac:0c:3c:fe:44:
5a:c1:58:f8:0b:90:d4:d9:71:af:1f:3d:c8:8d:94:27:bb:1d:
72:7e:cf:88:e7:cf:66:42:72:bc:9d:74:be:fc:bf:f3:f8:4b:
55:71:2f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:18:39 2025 by rpki-client