
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft
File: 6tgeRb5BR2cpw1YqNG-29i_IH70.mft (raw, json)
Hash identifier: mw7Hnqf4UvMSt9csbr1bsoSTF+6APl5v8DTnL8UDzLA=
Subject key identifier: 28:80:E2:3A:E7:62:F3:4E:91:62:0E:73:C0:F5:83:13:9F:00:9B:12
Authority key identifier: EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD
Certificate issuer: /CN=A9119624/serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD
Certificate serial: 0D99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft
Manifest number: 0D90
Signing time: Sun 02 Nov 2025 17:56:13 +0000
Manifest this update: Sun 02 Nov 2025 17:56:12 +0000
Manifest next update: Sun 09 Nov 2025 17:56:12 +0000
Files and hashes: 1: 6tgeRb5BR2cpw1YqNG-29i_IH70.crl (hash: ZcAlLxT55MS2whcCWkOM53SF49yyPuSmyP1m2XaKZXU=)
2: 0FA62A50214011EA90EFFE63C4F9AE02.roa (hash: b2eeZFRX3Cfrh2KgUNSH2XUFjtsQ8yv94mtfUkRiNmk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl
rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 17:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3481 (0xd99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119624, serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD
Validity
Not Before: Nov 2 17:56:12 2025 GMT
Not After : Nov 9 17:56:12 2025 GMT
Subject: CN=69079b3c-fb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:89:7e:fb:9e:ab:d3:37:65:20:c8:fe:53:c5:
d4:62:79:b9:58:54:af:df:53:36:5c:b7:d7:92:4a:
51:7b:cb:8f:f8:b4:5b:9e:c4:28:3d:21:e9:21:03:
bf:27:58:05:1b:8c:01:54:38:69:e4:09:ae:06:26:
cc:89:ff:6f:fd:88:f4:85:56:bd:f5:6d:1e:29:a5:
f5:e3:65:e5:1c:20:f7:a4:1c:dd:22:2e:46:35:a0:
23:53:f3:54:d7:40:3c:40:b4:2b:ec:17:c1:ab:ee:
ae:34:52:73:c4:1b:9b:07:86:a4:bf:90:9a:04:14:
f1:53:3c:11:fc:b0:a2:49:87:cf:eb:95:bf:32:dd:
af:e3:ae:84:9f:91:57:7b:bd:95:45:10:5a:cd:19:
a2:a4:96:cf:88:56:f3:61:d2:f0:c1:71:45:0d:2a:
56:96:7f:9e:6b:3f:64:8a:00:0c:0c:2d:dc:a6:2d:
ab:9d:72:96:83:c3:d5:cc:52:de:76:b1:f8:6e:80:
99:74:0d:26:93:f5:a4:8e:8b:ca:6c:57:b8:4d:00:
ac:90:08:06:93:be:9a:02:7b:7b:fe:93:4d:7d:8e:
e4:68:d2:4d:8d:5b:89:fc:1f:4d:3d:25:11:73:60:
34:97:00:2e:91:6d:96:69:cd:77:3b:15:cd:80:e1:
50:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:80:E2:3A:E7:62:F3:4E:91:62:0E:73:C0:F5:83:13:9F:00:9B:12
X509v3 Authority Key Identifier:
keyid:EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:ec:92:15:4c:51:13:03:bc:92:b0:40:5b:29:d4:34:db:eb:
16:6e:20:5f:ef:45:7d:ad:7f:ab:62:24:c9:91:46:36:19:20:
d3:fa:61:b8:aa:36:0f:ba:bd:77:1c:1f:b9:73:af:0d:9c:bb:
c4:c5:0e:67:94:9d:2d:d2:d0:1d:28:75:ea:ab:f2:35:22:85:
a9:57:22:92:7a:f8:aa:59:2e:2b:bb:63:38:86:05:0d:ce:76:
bf:25:1d:66:9f:7f:b0:bc:f3:d1:74:94:ed:cb:47:ce:95:65:
e7:31:5f:5d:99:43:4c:df:e0:38:0f:73:67:46:ea:cb:86:04:
89:b9:44:56:96:5b:d5:3e:f5:4a:44:d8:69:77:76:74:23:11:
94:26:91:16:17:c6:98:81:28:7f:81:99:0d:32:bc:86:bd:67:
51:d6:3f:63:2a:fc:39:82:a7:68:75:41:24:fa:bf:d8:6f:b6:
df:4c:84:75:94:ca:1b:68:f1:69:30:4c:c8:dd:c3:c4:69:d5:
e8:01:c2:fa:01:dd:10:a2:b4:67:70:23:af:4b:23:20:fd:1f:
c8:9a:8b:e0:64:3f:ee:73:3c:27:0c:ee:21:fc:ac:3b:8a:1c:
09:f2:35:f0:2c:e8:e0:8c:ef:8e:5b:a6:ca:73:07:79:94:eb:
54:0e:6e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:08:16 2025 by rpki-client