
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
File: 6VdtMs2hm7hvPBYuyf020_0lucE.mft (raw, json)
Hash identifier: n7kO9TMMaEFQokGEOcr4dsZd2ArY6YT6SSNTMDshFzE=
Subject key identifier: CE:3C:BD:69:C4:72:2E:AB:16:5F:7D:76:F6:6C:9C:CD:49:FA:C6:F3
Authority key identifier: E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1
Certificate issuer: /CN=A9131359/serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
Certificate serial: 0227
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
Manifest number: 0222
Signing time: Thu 23 Oct 2025 03:29:11 +0000
Manifest this update: Thu 23 Oct 2025 03:29:11 +0000
Manifest next update: Thu 30 Oct 2025 03:29:10 +0000
Files and hashes: 1: 6VdtMs2hm7hvPBYuyf020_0lucE.crl (hash: QRFwB/N+e9yoH0KiPT6+lJoQ1+LD1/Ns9X5Wrat0vy8=)
2: 01C299E0662611ED94A8DA42C4F9AE02.roa (hash: qDl9A66XUfdxXb2Z9BDWMcaLCM85XHiGpfBrshr3vQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl
rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 03:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131359, serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
Validity
Not Before: Oct 23 03:29:11 2025 GMT
Not After : Oct 30 03:29:10 2025 GMT
Subject: CN=68f9a107-4753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:02:35:ad:16:b4:3d:07:e8:c3:dd:cb:44:
98:d6:89:2b:79:bf:a9:59:42:13:93:3b:4f:0b:c1:
44:5f:15:3b:4f:09:fd:84:11:5e:8a:da:f7:f0:42:
c9:95:06:19:fe:38:4a:cb:de:5b:99:56:fc:11:4f:
f2:c6:c4:fa:a1:54:e7:6e:95:b9:e2:06:f6:e6:b5:
39:fa:44:9a:23:ea:67:82:3c:7f:92:2d:ea:3a:37:
76:e7:da:0f:61:5b:39:19:fe:4e:65:6f:b2:8d:95:
f0:45:a8:bf:c0:b0:50:7f:8f:15:07:e6:dc:85:13:
ee:ea:2a:e1:ab:c0:84:34:88:0e:1f:91:a9:d8:d2:
4c:73:72:db:0d:34:c8:b9:76:52:bd:99:ae:7c:20:
20:0c:a5:14:69:5c:94:d7:2b:30:b8:fe:f1:86:7f:
81:11:f7:5f:86:35:a7:34:22:28:91:43:62:cf:83:
a1:55:cf:b8:09:4e:e6:a4:e8:b6:a5:58:d7:59:4a:
76:bf:a2:96:1e:53:37:57:49:51:20:c0:ba:c5:1c:
06:e9:15:8f:d6:1c:b6:62:a3:b5:13:27:48:44:67:
8f:9c:c8:e0:6c:d1:54:86:c9:d5:b7:e6:1a:2e:31:
7f:b2:e8:9d:d8:32:c4:56:b7:d0:ef:da:1e:aa:69:
1b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3C:BD:69:C4:72:2E:AB:16:5F:7D:76:F6:6C:9C:CD:49:FA:C6:F3
X509v3 Authority Key Identifier:
keyid:E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:c8:8d:53:44:d7:b5:d6:a6:e5:51:ca:7d:78:9d:af:b6:fa:
9a:e9:b0:96:ba:bd:71:42:33:59:2a:09:20:ce:e4:31:ab:bd:
ed:f6:44:d1:05:1e:d0:1c:f0:9c:cd:18:e9:9f:a5:78:d9:e6:
df:19:c7:d5:69:00:81:c6:e6:81:60:3e:a8:ff:30:9f:9d:fe:
48:1c:88:45:c5:47:e4:50:aa:e0:7e:c9:03:4d:0f:15:22:e2:
97:ba:5d:52:5b:56:39:78:f9:ff:ca:c9:7d:8a:ee:20:92:dd:
01:88:d4:82:36:ac:24:c2:d7:07:c2:1e:67:21:69:e6:cf:47:
26:11:da:ac:95:a5:9f:46:4a:bb:88:e3:e0:a2:09:1d:4c:73:
07:dc:61:82:63:e8:b0:af:4e:48:71:d1:59:e9:1c:2e:9e:69:
86:18:a4:27:0a:72:90:b6:fd:c8:2a:43:30:f5:3b:2e:ec:9c:
26:43:1a:47:c7:e4:0b:8c:23:4a:11:13:ef:f4:ea:9d:e9:5f:
21:1f:c7:a7:8a:fd:1c:c9:0d:61:cb:21:2b:f9:e8:e8:9b:33:
2a:24:40:97:24:86:22:9f:42:44:0b:6e:e7:52:9c:45:32:32:
b0:1f:77:ab:f3:03:f6:96:fc:1f:c7:1a:21:cb:d2:33:12:90:
f5:05:d5:b4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzEzNTkxMTAvBgNVBAUTKEU5NTc2RDMyQ0RBMTlCQjg2RjNDMTYyRUM5RkQzNkQz
RkQyNUI5QzEwHhcNMjUxMDIzMDMyOTExWhcNMjUxMDMwMDMyOTEwWjAYMRYwFAYD
VQQDEw02OGY5YTEwNy00NzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu/MCNa0WtD0H6MPdy0SY1okreb+pWUITkztPC8FEXxU7Twn9hBFeitr38ELJ
lQYZ/jhKy95bmVb8EU/yxsT6oVTnbpW54gb25rU5+kSaI+pngjx/ki3qOjd259oP
YVs5Gf5OZW+yjZXwRai/wLBQf48VB+bchRPu6irhq8CENIgOH5Gp2NJMc3LbDTTI
uXZSvZmufCAgDKUUaVyU1yswuP7xhn+BEfdfhjWnNCIokUNiz4OhVc+4CU7mpOi2
pVjXWUp2v6KWHlM3V0lRIMC6xRwG6RWP1hy2YqO1EydIRGePnMjgbNFUhsnVt+Ya
LjF/suid2DLEVrfQ79oeqmkbRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM48vWnE
ci6rFl99dvZsnM1J+sbzMB8GA1UdIwQYMBaAFOlXbTLNoZu4bzwWLsn9NtP9JbnB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTM1OS9DQTlBMzRCNjY2
MjMxMUVEOTE4NTVENDJDNEY5QUUwMi82VmR0TXMyaG03aHZQQll1eWYwMjBfMGx1
Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzZWZHRNczJobTdodlBCWXV5ZjAyMF8wbHVjRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTM1OS9DQTlBMzRCNjY2MjMxMUVEOTE4NTVENDJDNEY5QUUwMi82VmR0TXMyaG03
aHZQQll1eWYwMjBfMGx1Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAWyI1TRNe11qblUcp9eJ2vtvqa6bCWur1xQjNZKgkgzuQxq73t9kTR
BR7QHPCczRjpn6V42ebfGcfVaQCBxuaBYD6o/zCfnf5IHIhFxUfkUKrgfskDTQ8V
IuKXul1SW1Y5ePn/ysl9iu4gkt0BiNSCNqwkwtcHwh5nIWnmz0cmEdqslaWfRkq7
iOPgogkdTHMH3GGCY+iwr05IcdFZ6RwunmmGGKQnCnKQtv3IKkMw9Tsu7JwmQxpH
x+QLjCNKERPv9Oqd6V8hH8eniv0cyQ1hyyEr+ejomzMqJECXJIYin0JEC27nUpxF
MjKwH3er8wP2lvwfxxohy9IzEpD1BdW0
-----END CERTIFICATE-----
Generated at Fri Oct 24 05:56:13 2025 by rpki-client