
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft
File: 6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft (raw, json)
Hash identifier: hm8xGfJu8Vt15mnhjJuiHPPkWT8tfEWD2RXTiLfd18o=
Subject key identifier: 46:94:AA:01:9D:CA:B6:9E:5D:6B:5B:23:4F:0A:44:17:51:BE:6A:E9
Authority key identifier: E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE
Certificate issuer: /CN=A91EBDB8/serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft
Manifest number: 5B
Signing time: Wed 05 Nov 2025 07:19:12 +0000
Manifest this update: Wed 05 Nov 2025 07:19:11 +0000
Manifest next update: Wed 12 Nov 2025 07:19:11 +0000
Files and hashes: 1: 6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl (hash: f7rxsVEfH8rFZdBhU5NvTih6Q1R6FApsQv68nyiduPw=)
2: B0B587222FC911F0938FE136C4F9AE02.roa (hash: AJ6f5YKXMBqxmiNf5w59genHsLltTfcxiqmemHdhYMs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl
rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBDB8, serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE
Validity
Not Before: Nov 5 07:19:11 2025 GMT
Not After : Nov 12 07:19:11 2025 GMT
Subject: CN=690afa6f-8179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:84:9c:7b:f2:54:13:58:af:dd:d1:cb:4a:bf:
b1:7a:1e:7f:26:66:71:1b:01:48:00:49:b7:e5:25:
04:bf:94:63:37:cf:98:2a:60:db:01:96:89:a7:2c:
8b:81:9c:20:6c:6f:bd:16:51:82:7c:24:e5:93:d0:
34:e9:35:4f:86:28:e6:f4:e3:5a:14:b9:24:09:81:
35:e5:3b:e3:12:eb:d3:88:27:16:91:51:cd:80:80:
f8:19:24:66:7b:a2:d4:00:5b:ab:98:20:27:c0:56:
e6:a0:a9:ef:ea:21:d0:11:ce:d7:5e:8b:66:3c:34:
af:8b:16:90:9f:81:2a:24:43:b8:58:2e:dc:78:f3:
45:d1:27:27:6f:a8:9e:23:94:e4:d8:f5:5a:4c:6f:
56:92:af:95:a8:d8:7f:a0:0a:97:7c:33:29:af:9d:
94:99:f4:56:d6:7a:4a:13:ec:95:07:a6:95:42:d9:
33:8d:aa:72:67:27:66:0d:0a:63:3f:60:3d:b1:92:
39:ef:a6:a9:60:73:a1:f2:b3:fb:da:88:62:9c:ec:
2a:da:04:7b:5e:74:cb:5c:4d:8c:bf:b0:3d:09:36:
25:e6:18:b9:64:7b:4b:b5:8b:a6:fd:15:a2:3c:94:
41:0d:02:90:d3:27:3b:57:e4:70:36:1a:ae:8d:6d:
3e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:94:AA:01:9D:CA:B6:9E:5D:6B:5B:23:4F:0A:44:17:51:BE:6A:E9
X509v3 Authority Key Identifier:
keyid:E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:9d:56:b2:c4:8c:d2:3d:5e:24:e3:50:9f:e0:81:14:8f:d3:
c7:47:a1:7e:88:69:1f:d7:a3:ce:20:bb:fe:a0:43:27:60:44:
cd:b8:a4:31:47:a9:59:d3:d0:31:a8:d3:ee:8f:02:6a:9b:79:
43:0c:9d:a3:ec:05:52:a3:84:81:b9:be:e3:97:1e:35:68:06:
f8:18:b1:fd:d8:98:4c:1a:59:36:3a:ff:42:bf:ae:de:3c:17:
86:10:7d:83:ae:a0:a8:72:ac:14:57:77:65:99:6f:80:c7:c4:
65:d8:28:b6:75:d7:01:8d:a8:49:b5:17:e6:72:a3:93:0a:10:
3b:24:fe:d7:54:7c:01:ad:bc:fd:42:0f:80:a7:23:47:fe:00:
1e:26:6e:8a:f2:64:e8:0a:27:69:7b:d8:e7:7b:cc:75:45:57:
3c:3b:6c:e3:11:52:91:de:42:de:af:fd:c6:8e:d0:40:26:0c:
a8:03:a2:f8:8c:f7:15:30:4b:ff:db:0a:b1:19:18:c3:3f:6b:
b5:9c:4e:8a:e8:02:d8:56:e3:8e:7e:de:13:17:99:71:db:24:
c1:4f:cc:c8:09:f7:2e:63:35:85:fe:df:6d:f1:c1:60:0a:cb:
9f:11:b5:df:4a:b7:90:84:16:13:19:8b:32:80:53:98:1f:26:
ba:83:40:55
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
QkRCODExMC8GA1UEBRMoRTg4QjNCMjNFMDk2NzVCNDM3QTgzMjg5NjNDNUNEM0NF
M0U5NUZFRTAeFw0yNTExMDUwNzE5MTFaFw0yNTExMTIwNzE5MTFaMBgxFjAUBgNV
BAMTDTY5MGFmYTZmLTgxNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCnhJx78lQTWK/d0ctKv7F6Hn8mZnEbAUgASbflJQS/lGM3z5gqYNsBlomnLIuB
nCBsb70WUYJ8JOWT0DTpNU+GKOb041oUuSQJgTXlO+MS69OIJxaRUc2AgPgZJGZ7
otQAW6uYICfAVuagqe/qIdARztdei2Y8NK+LFpCfgSokQ7hYLtx480XRJydvqJ4j
lOTY9VpMb1aSr5Wo2H+gCpd8MymvnZSZ9FbWekoT7JUHppVC2TONqnJnJ2YNCmM/
YD2xkjnvpqlgc6Hys/vaiGKc7CraBHtedMtcTYy/sD0JNiXmGLlke0u1i6b9FaI8
lEENApDTJztX5HA2Gq6NbT6rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURpSqAZ3K
tp5da1sjTwpEF1G+aukwHwYDVR0jBBgwFoAU6Is7I+CWdbQ3qDKJY8XNPOPpX+4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCREI4Lzk4MjMwQjJDMkVG
QjExRjA5MEUzNjM4NUM0RjlBRTAyLzZJczdJLUNXZGJRM3FES0pZOFhOUE9QcFgt
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNklzN0ktQ1dkYlEzcURLSlk4WE5QT1BwWC00LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC
REI4Lzk4MjMwQjJDMkVGQjExRjA5MEUzNjM4NUM0RjlBRTAyLzZJczdJLUNXZGJR
M3FES0pZOFhOUE9QcFgtNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAMKdVrLEjNI9XiTjUJ/ggRSP08dHoX6IaR/Xo84gu/6gQydgRM24pDFH
qVnT0DGo0+6PAmqbeUMMnaPsBVKjhIG5vuOXHjVoBvgYsf3YmEwaWTY6/0K/rt48
F4YQfYOuoKhyrBRXd2WZb4DHxGXYKLZ11wGNqEm1F+Zyo5MKEDsk/tdUfAGtvP1C
D4CnI0f+AB4mboryZOgKJ2l72Od7zHVFVzw7bOMRUpHeQt6v/caO0EAmDKgDoviM
9xUwS//bCrEZGMM/a7WcToroAthW445+3hMXmXHbJMFPzMgJ9y5jNYX+323xwWAK
y58Rtd9Kt5CEFhMZizKAU5gfJrqDQFU=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:56:52 2025 by rpki-client