
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft
File: s6HqYHo_df54qoQuuJCSWZEQ_cY.mft (raw, json)
Hash identifier: EQqYJTStCFwS7lNw9AJYr5FzuqAckKmGwDi9cIV0pjU=
Subject key identifier: 97:CF:58:B9:68:4A:18:DC:9B:EB:8C:C0:49:C0:82:9E:E8:60:8B:A0
Authority key identifier: B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6
Certificate issuer: /CN=A91F5BCC/serialNumber=B3A1EA607A3F75FE78AA842EB89092599110FDC6
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft
Manifest number: 9B
Signing time: Mon 03 Nov 2025 06:23:18 +0000
Manifest this update: Mon 03 Nov 2025 06:23:18 +0000
Manifest next update: Mon 10 Nov 2025 06:23:18 +0000
Files and hashes: 1: s6HqYHo_df54qoQuuJCSWZEQ_cY.crl (hash: aDrtRhQAHZC8OtgT5uht+dWLCNFz8RWfdY4mr5xMSKY=)
2: 5FEB0DA8E90611EFA74B611DC4F9AE02.roa (hash: hwuul9zOvXSQLDdgabC6PgRyfpY9SzpmngkkmJxvu+k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.crl
rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5BCC, serialNumber=B3A1EA607A3F75FE78AA842EB89092599110FDC6
Validity
Not Before: Nov 3 06:23:18 2025 GMT
Not After : Nov 10 06:23:18 2025 GMT
Subject: CN=69084a56-6c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f6:6c:0c:c7:35:71:8f:7a:a2:e2:6e:32:f5:
8b:d1:9a:5c:9c:04:a2:86:a7:a4:75:c0:15:95:f9:
20:07:de:de:60:f0:a8:3c:93:ea:4a:92:96:5a:d2:
3d:70:3a:24:da:15:53:1a:ea:81:92:78:8b:be:8e:
8f:2a:9f:67:fd:9b:86:01:aa:7f:9c:db:37:09:f5:
c6:a9:2e:2f:5e:71:0e:91:d6:6f:c0:e3:a5:ed:ee:
13:a0:f4:b7:34:af:eb:e2:a8:51:36:53:2e:7e:9f:
c2:d8:df:09:1e:87:47:6d:71:30:ad:b2:c3:24:7d:
91:dd:e9:3a:43:7a:5a:ed:fa:80:41:f1:33:33:6a:
ea:2e:7b:01:02:f4:e1:62:29:80:b7:69:dc:68:e0:
1c:02:17:15:15:73:e2:4c:71:27:83:59:85:48:49:
0b:6c:a5:27:86:60:c8:d1:84:13:a7:90:8f:aa:65:
41:f8:6a:19:d9:92:c1:74:4f:29:78:e9:5e:fd:56:
77:65:7a:3b:3e:26:27:4e:62:56:7d:80:5b:29:f7:
b9:19:cd:42:73:a8:a3:26:42:67:4d:41:05:5a:55:
27:d7:07:2a:db:53:82:b9:f5:79:2e:57:d8:c6:97:
32:7c:fb:d5:2f:2d:00:f3:d1:62:16:97:01:de:e3:
c3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CF:58:B9:68:4A:18:DC:9B:EB:8C:C0:49:C0:82:9E:E8:60:8B:A0
X509v3 Authority Key Identifier:
keyid:B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:80:b2:78:95:68:d1:2c:96:b5:55:09:e5:91:54:fb:32:cb:
ae:81:52:1c:f0:9e:32:8e:36:03:28:c8:79:67:a4:d1:80:b5:
0a:53:1a:0b:d4:7e:fc:90:54:c4:93:b8:5d:07:2a:31:65:e7:
a0:55:c2:ac:6e:8c:14:3e:40:e3:8b:ce:57:44:f0:73:b1:aa:
f5:9d:6c:f3:8f:b6:51:a8:b5:be:35:5b:11:76:da:b9:5f:be:
78:dc:9f:5e:27:81:f2:f2:ca:e5:cc:fe:b8:4e:1c:ae:75:52:
e1:37:23:dd:56:31:6f:9c:5c:86:91:fc:c9:85:46:e0:a4:fe:
7d:d7:0d:ed:79:dc:dc:e6:00:18:df:a3:3e:1a:2a:3d:38:70:
41:e5:4f:4d:9b:43:dc:52:0b:00:d7:b0:67:0f:3c:76:6c:f7:
0a:d3:61:26:2e:3b:64:1c:55:7e:8b:87:b3:51:77:b5:e8:76:
f3:f0:65:fa:b1:d0:74:a7:fe:da:7c:4a:d0:c0:b6:7d:65:ff:
84:2d:0a:9b:35:d2:e1:ae:84:15:38:59:59:95:0d:b7:a7:4b:
75:0f:58:52:a8:ff:5d:f5:20:1c:b9:08:38:a0:0e:b6:b7:ff:
1c:aa:e7:9c:0b:fb:a9:8e:b4:94:72:af:8a:07:90:47:a8:86:
63:26:81:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:33:42 2025 by rpki-client