
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft
File: k1ndLhIU62ulYiqzyAtqkhZoDMw.mft (raw, json)
Hash identifier: 1w3BVJe0E9cA0RG4p7GSAYjb549bcweyRw7Lvt+fC8A=
Subject key identifier: 99:49:A4:A8:78:E1:D9:A6:EC:6B:EF:6D:F9:5E:21:38:20:42:C2:19
Authority key identifier: 93:59:DD:2E:12:14:EB:6B:A5:62:2A:B3:C8:0B:6A:92:16:68:0C:CC
Certificate issuer: /CN=A913BBE6/serialNumber=9359DD2E1214EB6BA5622AB3C80B6A9216680CCC
Certificate serial: 0656
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft
Manifest number: 064C
Signing time: Sun 02 Nov 2025 22:40:08 +0000
Manifest this update: Sun 02 Nov 2025 22:40:07 +0000
Manifest next update: Sun 09 Nov 2025 22:40:07 +0000
Files and hashes: 1: k1ndLhIU62ulYiqzyAtqkhZoDMw.crl (hash: BLwO+10nRt0X2VOxB+VKDt0H5+5uJ0ooXLjy6J5fRF4=)
2: B8B720BEF9EF11EDA3C9C234C4F9AE02.roa (hash: RiYKggVueinAfkkm1CWWkBP9HAijB4Cuv9DZ3Kk07P4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.crl
rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 22:40:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1622 (0x656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BBE6, serialNumber=9359DD2E1214EB6BA5622AB3C80B6A9216680CCC
Validity
Not Before: Nov 2 22:40:07 2025 GMT
Not After : Nov 9 22:40:07 2025 GMT
Subject: CN=6907ddc7-3b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:77:d9:8f:a1:88:41:d3:49:a5:01:b6:39:
43:5f:29:17:f9:14:c5:4d:96:a6:6e:fa:7c:24:75:
ac:07:62:eb:be:fe:b1:88:34:27:be:8c:b5:19:fd:
7c:b2:ba:5d:1a:97:9f:f8:ff:0d:8b:97:53:44:9d:
e5:18:c1:6c:50:6e:6d:4b:a2:25:c4:2a:c0:58:b8:
df:4f:bb:13:95:a1:c9:14:70:19:cb:eb:7c:3e:49:
01:09:14:45:7c:a3:e8:25:8e:e6:5b:2f:e6:7c:ee:
8f:7c:f5:5a:61:3a:de:4a:da:ad:67:15:96:5d:99:
22:52:de:bf:7f:15:36:f6:5e:fa:8f:27:4b:32:ab:
e2:f9:04:9c:ff:45:8e:4e:4d:bc:53:6c:50:45:cc:
ed:2a:cd:98:e1:7e:0e:20:a7:d8:2f:5c:6f:aa:f5:
68:c0:2d:96:30:4f:0d:24:3f:fd:38:c0:35:d8:89:
f3:9c:d1:84:b5:b0:c3:7a:f5:11:f1:e1:d0:57:bb:
65:20:4c:93:d9:48:62:30:45:df:95:66:5e:7d:49:
37:48:fb:c6:dd:6f:de:ca:62:a1:66:99:55:b6:19:
5c:e2:88:d5:db:b7:50:3e:a1:8a:aa:a9:9f:7f:a8:
71:52:63:0e:65:e9:ef:e9:d0:92:ec:ef:eb:ab:ea:
00:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:49:A4:A8:78:E1:D9:A6:EC:6B:EF:6D:F9:5E:21:38:20:42:C2:19
X509v3 Authority Key Identifier:
keyid:93:59:DD:2E:12:14:EB:6B:A5:62:2A:B3:C8:0B:6A:92:16:68:0C:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:4b:ad:3b:79:45:d3:2f:3f:90:03:dd:e4:2f:ec:33:4b:04:
ec:7d:58:1f:ea:94:31:28:2f:4f:aa:f1:fc:ca:84:b2:27:52:
15:46:be:14:f4:ff:5d:fe:ce:1f:0f:80:e3:2e:0f:98:aa:09:
69:6c:70:bd:78:b5:0c:ac:a0:0f:03:57:52:13:a2:25:98:d7:
72:34:08:6b:57:14:25:18:96:af:eb:ce:1c:83:c6:cc:b6:27:
fd:af:7c:a0:36:60:19:21:13:e3:db:ea:4f:5e:80:19:19:f2:
31:35:b5:61:f8:16:cf:d3:a4:bc:99:aa:5a:d7:19:f6:d8:a8:
53:f3:de:5f:e2:d5:79:e0:87:eb:b5:75:24:5a:f3:93:e1:ee:
05:48:a6:dc:1b:4f:27:58:bf:1f:58:9e:b3:61:9c:51:91:04:
91:5d:38:92:38:22:c5:8c:39:ec:c4:da:23:f0:b5:fb:7a:cd:
90:42:b6:72:f9:a4:a4:92:f1:fc:ad:db:92:c5:98:8e:08:67:
f3:1f:99:a0:48:34:79:2e:31:08:7f:f5:bb:5a:f9:0c:48:27:
d8:4a:64:db:66:33:f9:94:89:8b:eb:42:2f:23:8d:8a:09:65:
8b:ea:f0:b6:4f:55:12:08:39:a3:45:27:7f:10:fc:0f:fa:7f:
94:ed:79:8c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0JCRTYxMTAvBgNVBAUTKDkzNTlERDJFMTIxNEVCNkJBNTYyMkFCM0M4MEI2QTky
MTY2ODBDQ0MwHhcNMjUxMTAyMjI0MDA3WhcNMjUxMTA5MjI0MDA3WjAYMRYwFAYD
VQQDEw02OTA3ZGRjNy0zYjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt/N32Y+hiEHTSaUBtjlDXykX+RTFTZambvp8JHWsB2Lrvv6xiDQnvoy1Gf18
srpdGpef+P8Ni5dTRJ3lGMFsUG5tS6IlxCrAWLjfT7sTlaHJFHAZy+t8PkkBCRRF
fKPoJY7mWy/mfO6PfPVaYTreStqtZxWWXZkiUt6/fxU29l76jydLMqvi+QSc/0WO
Tk28U2xQRcztKs2Y4X4OIKfYL1xvqvVowC2WME8NJD/9OMA12InznNGEtbDDevUR
8eHQV7tlIEyT2UhiMEXflWZefUk3SPvG3W/eymKhZplVthlc4ojV27dQPqGKqqmf
f6hxUmMOZenv6dCS7O/rq+oAUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlJpKh4
4dmm7GvvbfleITggQsIZMB8GA1UdIwQYMBaAFJNZ3S4SFOtrpWIqs8gLapIWaAzM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkJFNi9BMDk3RjBENEFE
MzAxMUVCQjEyN0I2MjNDNEY5QUUwMi9rMW5kTGhJVTYydWxZaXF6eUF0cWtoWm9E
TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2sxbmRMaElVNjJ1bFlpcXp5QXRxa2hab0RNdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QkJFNi9BMDk3RjBENEFEMzAxMUVCQjEyN0I2MjNDNEY5QUUwMi9rMW5kTGhJVTYy
dWxZaXF6eUF0cWtoWm9ETXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCLS607eUXTLz+QA93kL+wzSwTsfVgf6pQxKC9PqvH8yoSyJ1IVRr4U
9P9d/s4fD4DjLg+YqglpbHC9eLUMrKAPA1dSE6IlmNdyNAhrVxQlGJav684cg8bM
tif9r3ygNmAZIRPj2+pPXoAZGfIxNbVh+BbP06S8mapa1xn22KhT895f4tV54Ifr
tXUkWvOT4e4FSKbcG08nWL8fWJ6zYZxRkQSRXTiSOCLFjDnsxNoj8LX7es2QQrZy
+aSkkvH8rduSxZiOCGfzH5mgSDR5LjEIf/W7WvkMSCfYSmTbZjP5lImL60IvI42K
CWWL6vC2T1USCDmjRSd/EPwP+n+U7XmM
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:20:01 2025 by rpki-client