
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
File: 6tZGNV11k2y5Pta623kKh_4VN0o.mft (raw, json)
Hash identifier: xMWHctsFXkBXZEH+QLqT990yo4fMoFRV5DYwHhOME5c=
Subject key identifier: 8C:21:E5:42:41:33:06:A4:CD:F0:B9:59:D1:C0:5D:12:B5:61:7B:A2
Authority key identifier: EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
Certificate issuer: /CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
Certificate serial: 015C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
Manifest number: 014D
Signing time: Sat 25 Oct 2025 07:50:29 +0000
Manifest this update: Sat 25 Oct 2025 07:50:29 +0000
Manifest next update: Sat 01 Nov 2025 07:50:29 +0000
Files and hashes: 1: 6tZGNV11k2y5Pta623kKh_4VN0o.crl (hash: ITcFfMulrArKSBcqB5H3w+BvkAH9kmLCKp0+WikiWfc=)
2: DD555A9CEC3A11EE8CC3B820C4F9AE02.roa (hash: IYbwvT3qmzwsASPi9gEwkFkjfys+ZxVpssJBjkvN+uw=)
3: DC3455AAEC3A11EE8CC3B820C4F9AE02.roa (hash: lkljamiAGuWTdMNk035Kt/plV9Fx0R6Faku03HPbg7U=)
4: 85F80AF6EC3011EE92FDDE25C4F9AE02.roa (hash: tLt6JDfDub8DNFZW2G3EMTsxDiFDr62JlgmUF1Jhoi8=)
5: 836FCA52168411EFB6BDB96BC4F9AE02.roa (hash: TAOed49FFqoRHgKFy+Jz2KuJalrMPjm52i7KeouMhd0=)
6: DCE2A830EC3A11EE8CC3B820C4F9AE02.roa (hash: wVAgrqCE/Wj+Oq7c+aZ97qsJSVe62sCRsRf4hdQIDT4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl
rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 07:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F535, serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
Validity
Not Before: Oct 25 07:50:29 2025 GMT
Not After : Nov 1 07:50:29 2025 GMT
Subject: CN=68fc8145-0ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e0:fe:88:52:ef:af:77:f7:06:86:b0:d7:08:
9c:a0:a2:c4:6a:24:04:0f:ef:b4:c6:7f:94:b3:01:
f9:a3:ce:1c:cc:19:55:8f:73:40:4a:6c:90:01:63:
69:64:29:6a:cf:dc:07:67:35:e3:fe:64:78:55:c1:
46:46:df:ce:dd:76:1b:ab:63:df:c6:42:5f:61:03:
30:8a:63:fb:bc:7d:4e:bb:54:fd:15:dd:32:39:a1:
18:16:86:9f:b6:34:17:80:8b:85:50:cf:64:1f:a5:
1f:6a:60:29:87:da:84:18:c2:09:59:70:8d:93:1b:
fa:76:e8:b0:02:25:a5:48:be:74:ff:b6:db:8e:2a:
3b:ee:18:80:1a:b0:f2:83:1f:76:23:45:cd:fb:8d:
a9:1f:71:66:b5:d3:88:4c:ff:b5:8a:88:be:60:59:
05:0d:6e:f4:b6:ca:71:c9:37:a7:bf:fb:b8:f9:05:
53:5d:08:63:df:fc:f4:32:2e:1e:d7:cd:57:13:84:
f4:26:5e:95:cb:64:09:d5:06:a6:f5:62:13:ae:87:
02:16:64:0d:ae:76:e1:e6:ea:ab:cf:3d:a7:75:20:
d9:84:b1:52:42:70:69:ca:d8:0f:7d:7d:0d:b1:9c:
0b:dd:62:72:ba:12:34:95:27:19:f2:95:89:28:d4:
57:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:21:E5:42:41:33:06:A4:CD:F0:B9:59:D1:C0:5D:12:B5:61:7B:A2
X509v3 Authority Key Identifier:
keyid:EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:42:1b:33:1c:42:3f:33:dc:d6:c8:6b:70:b4:c4:bd:05:4c:
9b:c7:d1:71:89:1c:40:0d:5a:63:48:68:d6:c2:a9:22:60:19:
79:b1:23:70:04:ad:61:3d:ea:cf:bc:41:82:61:65:08:b8:8e:
26:0e:81:f2:b5:af:41:d6:e1:7b:c7:84:29:c2:d9:1e:ae:91:
bf:b7:55:71:09:7f:0c:e3:01:44:fe:7b:6e:80:01:3b:42:43:
11:83:8f:0e:db:94:ae:02:01:e2:8e:bf:b3:c2:94:2e:4a:dd:
94:39:97:4e:15:db:4d:52:4b:1e:56:40:36:c6:d5:be:de:8f:
1d:59:06:56:b8:e0:92:6c:97:0f:33:da:bf:55:9b:35:36:5b:
72:15:ea:45:8c:12:b7:19:b3:1c:f2:27:f1:e1:df:e8:ff:7d:
b0:83:a9:a7:a7:2b:c4:64:be:66:b7:48:22:7b:2b:0d:03:35:
ee:d1:5a:97:f6:72:ac:14:81:df:19:c2:7a:ba:74:e4:72:57:
cd:05:cf:5c:f8:55:d5:6f:68:e1:0a:25:47:64:e2:43:29:d6:
83:e8:dd:e5:84:da:0d:61:29:89:cc:f2:78:a5:cb:fc:40:49:
3c:a0:cd:e6:28:0a:cc:eb:69:54:05:9e:d9:79:7c:53:f0:d3:
a5:e9:00:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:12:50 2025 by rpki-client