
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
File: a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft (raw, json)
Hash identifier: AyV0p822QFYihFzkt6bx1E5C7CNKnaOCJQqGvhs/wMs=
Subject key identifier: B6:CB:28:68:F7:99:52:DA:73:C3:3B:A5:81:BB:FE:1E:72:59:B0:E3
Authority key identifier: 6B:A7:9A:D5:4A:93:83:CB:52:67:33:99:6B:E6:6E:92:BF:8D:38:4D
Certificate issuer: /CN=A9112804/serialNumber=6BA79AD54A9383CB526733996BE66E92BF8D384D
Certificate serial: 0CE1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
Manifest number: 14B4
Signing time: Sun 02 Nov 2025 18:07:14 +0000
Manifest this update: Sun 02 Nov 2025 18:07:13 +0000
Manifest next update: Sun 09 Nov 2025 18:07:13 +0000
Files and hashes: 1: a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl (hash: VPOCynW5wEnXy3EwwJGXD7hZew2N6mM1aU+MFQaUrM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl
rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 18:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3297 (0xce1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112804, serialNumber=6BA79AD54A9383CB526733996BE66E92BF8D384D
Validity
Not Before: Nov 2 18:07:13 2025 GMT
Not After : Nov 9 18:07:13 2025 GMT
Subject: CN=69079dd1-ae11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:79:77:d4:e2:c8:cf:0b:c2:18:2e:e5:e4:a2:
97:e7:06:87:89:fe:d5:c5:54:d1:e7:62:1e:c7:08:
06:19:87:e7:37:ff:e8:4d:fb:c0:68:48:8e:08:5b:
12:8a:f4:7f:8d:2f:ed:4f:7c:6c:ad:e7:ae:76:1e:
c6:06:85:71:7e:97:dc:dd:24:9b:52:33:38:e1:dc:
59:43:aa:fe:2a:30:25:19:4c:b1:f9:33:9e:96:a3:
dc:75:22:59:36:41:49:07:f1:ff:70:a0:8e:d7:51:
8b:51:1b:04:ed:a1:ac:25:d0:9d:d5:9f:37:e2:75:
92:9d:79:f7:76:0f:16:8e:72:ca:0e:c1:86:a2:fe:
9b:a0:0b:14:64:37:c9:8e:c4:39:69:71:b1:23:79:
3c:af:f0:92:7a:d8:90:ff:b1:ab:f2:f7:5d:23:05:
14:1c:8f:34:83:18:2a:29:af:c8:2a:2e:1a:6f:58:
f2:84:9e:3a:d2:be:ef:7c:7b:4f:41:11:e8:74:bb:
70:35:91:86:37:20:61:97:d5:67:66:4f:3d:f4:33:
b7:4f:bf:1f:8f:33:80:02:da:46:bd:5e:2f:f7:c2:
2b:26:16:7f:b3:5e:e9:0d:83:cb:26:9f:6d:d1:f4:
0c:92:7c:7d:50:b9:45:bc:6c:1c:a2:f1:18:f0:3c:
71:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CB:28:68:F7:99:52:DA:73:C3:3B:A5:81:BB:FE:1E:72:59:B0:E3
X509v3 Authority Key Identifier:
keyid:6B:A7:9A:D5:4A:93:83:CB:52:67:33:99:6B:E6:6E:92:BF:8D:38:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f1:cc:1e:72:be:fb:a9:98:7a:b3:00:91:60:d9:72:7b:c0:
4e:a8:de:1c:f5:5b:2a:1a:76:03:33:cb:e1:93:74:f2:43:8b:
6d:fd:60:80:55:83:ef:90:be:e2:7a:b1:03:78:e6:28:c3:32:
5c:3a:4c:cf:f5:c4:16:35:20:5c:10:81:1c:f7:c7:a7:05:35:
64:d1:51:5c:3d:87:91:2d:38:8f:6b:ac:ce:7b:f4:c0:84:37:
19:c1:41:cb:21:36:5a:c7:a8:fb:08:b2:49:78:9d:5f:d4:73:
e1:7e:ec:53:72:46:0c:46:1d:e7:f7:90:94:b2:02:4c:d7:96:
28:54:fa:c3:15:c0:0a:0c:89:3f:6a:ff:e3:63:79:e5:a5:86:
3b:30:51:c3:50:dd:a6:7c:53:b6:02:db:a1:7b:72:8f:bf:30:
07:36:c2:2e:bb:ca:d6:bb:5b:a3:27:a7:0b:40:28:8f:be:e4:
47:92:6d:ee:43:4a:fc:21:99:0b:e4:e8:80:39:85:95:b2:bd:
c9:5e:d9:78:6c:e7:ab:ee:b5:6b:27:6a:85:7c:2c:95:79:31:
3c:48:95:d8:bf:0d:7b:ee:d1:33:d9:54:9f:3d:aa:c7:71:00:
29:01:71:07:85:0b:fa:70:8d:08:32:29:17:42:1c:17:6f:33:
69:f9:5c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:14:42 2025 by rpki-client