
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft
File: 6w67ZlG90AYnOWdC_xoLTqD94uU.mft (raw, json)
Hash identifier: HB8PZL74AwAM/+EpaabhV90UXVbvxzCOX4F3V2uagdg=
Subject key identifier: 62:2E:7F:D0:01:6A:57:6F:7B:38:CF:FE:56:11:F8:E5:8D:F3:5E:79
Authority key identifier: EB:0E:BB:66:51:BD:D0:06:27:39:67:42:FF:1A:0B:4E:A0:FD:E2:E5
Certificate issuer: /CN=A913E504/serialNumber=EB0EBB6651BDD00627396742FF1A0B4EA0FDE2E5
Certificate serial: 1904
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft
Manifest number: 18F5
Signing time: Sun 02 Nov 2025 16:27:41 +0000
Manifest this update: Sun 02 Nov 2025 16:27:40 +0000
Manifest next update: Sun 09 Nov 2025 16:27:40 +0000
Files and hashes: 1: 6w67ZlG90AYnOWdC_xoLTqD94uU.crl (hash: yALJDM8EnOHDQ6EC4KyzHvv1OmlAAWAc+FOJivtjXmE=)
2: C00CB30A87A711EA94E5CF22C4F9AE02.roa (hash: p54j5D7iq0gvHbqwmE5ZZRlIhbibIt/Fl7WSmYHuiWk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.crl
rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 16:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6404 (0x1904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E504, serialNumber=EB0EBB6651BDD00627396742FF1A0B4EA0FDE2E5
Validity
Not Before: Nov 2 16:27:40 2025 GMT
Not After : Nov 9 16:27:40 2025 GMT
Subject: CN=6907867c-d103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:46:ee:df:fb:cf:5c:c2:b0:a6:1c:41:5d:
99:4a:55:8d:e8:dc:42:da:2d:56:b2:1b:cb:eb:97:
8a:00:97:78:94:46:ae:31:48:1d:73:33:44:7d:31:
b0:3b:43:41:03:f2:b3:ed:47:12:e4:f5:3d:d4:c8:
60:4a:4a:d3:54:dc:86:67:4f:7e:6b:06:0f:e6:b3:
9f:d3:cd:42:06:7e:1c:d6:63:6b:7a:69:5b:fb:ea:
6a:7d:30:bf:7d:11:7c:a1:eb:70:86:24:45:e9:94:
60:64:4e:e6:bd:00:6e:5e:2b:ca:2e:d9:7a:5e:91:
4b:4b:41:ac:25:1d:4b:3f:c3:6b:2d:14:61:b9:6b:
90:de:9d:6a:b2:73:76:7d:db:0a:9d:7a:43:36:c6:
77:c0:c6:ec:89:2b:a0:f6:9c:40:34:8a:6a:23:d0:
ed:a2:b7:e1:ed:8e:94:de:e4:ba:77:8b:d2:c6:a7:
4f:35:25:1a:c0:ec:19:d1:3a:3b:2f:a9:40:cd:97:
5f:8b:2a:33:31:1e:42:ab:a0:71:53:55:25:fa:e6:
47:b1:09:44:f7:dc:1f:49:d3:b4:a3:78:c4:35:31:
49:73:3f:c3:69:41:de:82:cf:4f:64:9b:e9:a3:61:
cd:6e:2f:18:ce:79:03:d0:da:88:c1:52:db:ae:26:
47:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2E:7F:D0:01:6A:57:6F:7B:38:CF:FE:56:11:F8:E5:8D:F3:5E:79
X509v3 Authority Key Identifier:
keyid:EB:0E:BB:66:51:BD:D0:06:27:39:67:42:FF:1A:0B:4E:A0:FD:E2:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:fb:c8:eb:4c:19:fa:ba:d9:66:d7:ac:e3:51:ec:e8:97:35:
99:33:77:43:d3:dd:50:8a:c4:2d:30:3f:ce:7c:09:78:3b:25:
9a:ad:ba:8c:ce:04:86:2b:89:48:c6:cd:ab:76:ef:93:7a:c4:
84:9f:85:23:29:e2:14:2b:83:df:67:3c:e7:37:2e:b3:e4:cc:
51:dc:0c:50:63:55:65:9d:0a:c6:5f:9a:2d:6b:53:cf:f6:69:
5b:3d:9f:99:af:ad:6a:56:0d:d1:64:39:7e:01:a5:a4:94:15:
37:24:25:2a:48:87:00:d4:e4:19:e3:bd:04:77:b8:39:57:72:
c4:67:83:81:3d:85:c2:78:fd:e1:cb:b6:9b:3b:2c:dc:41:1f:
64:05:2b:b6:7c:8e:e3:20:fc:8a:0a:be:b1:5a:a0:e3:16:cf:
78:fb:3e:32:a1:aa:06:db:2f:a2:e8:45:77:ab:1b:a9:4a:6c:
99:73:be:cd:f6:0f:e0:b8:fb:7a:98:10:14:ad:14:04:44:cf:
3a:88:72:74:1b:bb:02:59:93:28:c7:46:b4:57:ff:70:53:f4:
09:fb:a0:28:8d:1c:91:61:3e:4d:1d:a5:11:ff:1d:da:84:c5:
66:06:89:9d:3c:cb:69:e9:7f:79:e1:a2:ab:42:2d:37:50:96:
c4:a4:e8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:14:34 2025 by rpki-client