
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
File: K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft (raw, json)
Hash identifier: 6W2rLifZ/422d6Sn+PNeBMn6s5sa1eh6GPTDZoMSGfg=
Subject key identifier: C2:32:2A:F8:0A:0B:90:04:BD:6B:A2:16:E9:D3:18:6B:E1:5C:C1:D4
Authority key identifier: 2B:A7:8B:FE:D9:C1:47:EF:FE:C8:81:D9:C7:36:F6:8F:58:55:34:CB
Certificate issuer: /CN=A91FC1E4/serialNumber=2BA78BFED9C147EFFEC881D9C736F68F585534CB
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
Manifest number: 011E
Signing time: Mon 03 Nov 2025 04:47:07 +0000
Manifest this update: Mon 03 Nov 2025 04:47:06 +0000
Manifest next update: Mon 10 Nov 2025 04:47:06 +0000
Files and hashes: 1: K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl (hash: 5uYIGrtY830kriruRulwH+dOnrgaMZGDWlpSPV40e0E=)
2: C820C000061E11EFA13A0F4AC4F9AE02.roa (hash: 0DUWhAlOmYMH58y7cT6IWqOSq8FJJK/e/LROrKNRNG4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl
rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 04:47:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC1E4, serialNumber=2BA78BFED9C147EFFEC881D9C736F68F585534CB
Validity
Not Before: Nov 3 04:47:06 2025 GMT
Not After : Nov 10 04:47:06 2025 GMT
Subject: CN=690833ca-8302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:64:9c:d5:05:23:d7:c2:f2:16:d6:17:b7:
89:6e:9c:30:6c:27:e3:32:1c:34:bf:3e:77:7a:d5:
95:96:b9:a7:61:c6:f1:21:a8:e5:37:05:ab:c7:74:
b4:54:ec:31:98:ec:88:8c:38:be:8e:7e:5d:5a:72:
a9:18:e7:f5:79:5f:84:8c:74:73:01:1b:cc:16:46:
c0:fb:ed:14:d0:a0:e4:bb:2f:00:5c:58:a2:85:11:
95:c2:b7:1b:a2:3d:78:c4:0a:0c:49:6e:4b:16:ec:
d8:d9:f8:f0:e7:17:55:4f:9a:67:35:b6:30:a8:a2:
6b:fa:d0:cc:7f:c8:01:bd:95:ec:4f:2f:c5:0f:a1:
e1:01:3a:c0:1f:f5:2f:0a:e5:2b:38:43:96:c1:8d:
ad:ff:c8:59:fa:36:62:98:0b:44:97:52:17:03:93:
cd:aa:49:e6:a5:ae:0d:bb:9e:43:12:02:64:9f:8c:
6b:d1:c9:db:19:c5:c9:19:48:de:92:ff:14:36:0a:
2e:f6:b9:36:2f:89:5a:c3:9f:35:5c:c7:c6:2a:69:
3b:ee:12:a0:34:34:3e:02:bd:fd:aa:b4:53:39:5c:
3e:75:35:4c:13:b1:f8:08:20:90:d0:5c:61:ac:f4:
9d:b5:91:aa:12:11:1d:15:bf:3b:10:84:06:97:6c:
fe:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:32:2A:F8:0A:0B:90:04:BD:6B:A2:16:E9:D3:18:6B:E1:5C:C1:D4
X509v3 Authority Key Identifier:
keyid:2B:A7:8B:FE:D9:C1:47:EF:FE:C8:81:D9:C7:36:F6:8F:58:55:34:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:52:89:fc:cd:99:18:59:89:de:8d:85:9b:a6:02:9c:e5:c5:
ab:81:5c:27:71:0c:f5:a6:cc:77:2d:a3:48:bf:c3:6a:ea:51:
5d:b2:64:4a:bf:37:1f:e1:36:3c:a5:d7:88:c1:51:fe:0a:f0:
b4:ac:46:5b:39:4a:14:1a:dc:49:f5:4e:c2:96:fb:46:1c:56:
03:fe:d1:f0:15:9c:c7:a1:24:cf:25:bc:fc:4b:7a:7e:af:5c:
da:53:5f:34:f0:48:d4:16:a9:88:63:37:8f:81:13:42:cc:1b:
48:6b:13:5d:be:b1:4e:67:6c:7f:5a:6f:f5:04:52:7f:06:ac:
46:40:db:12:23:85:21:95:88:4f:a3:db:d7:ce:19:a3:ed:0e:
5e:1c:cc:53:67:46:b6:fd:f9:7e:cc:e6:b8:35:ee:0a:58:06:
7a:74:de:c9:a7:be:e3:ef:e3:33:57:b8:f5:13:cb:62:6c:19:
96:05:1e:47:d4:9e:e8:6b:d3:b0:4a:c0:59:75:20:7b:6d:0c:
50:72:29:ae:93:91:d3:ad:b2:e7:ee:d0:3b:86:41:a4:6f:d8:
13:2d:21:47:fb:f9:6c:97:f0:e8:b7:ae:90:53:e6:a4:18:1c:
88:f7:34:2a:6c:87:a4:f6:1b:fb:e1:8c:e7:12:87:b5:0b:bf:
16:39:f0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:36:35 2025 by rpki-client