
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft
File: akoHTuW-fzuoULO6IUKWtlsaLa0.mft (raw, json)
Hash identifier: 71qwWPujcPdMuaLYz81k3QpKJMAk6yIrI+EVGDe0+7U=
Subject key identifier: 25:AE:C4:F0:C1:09:78:29:09:4D:5F:90:2D:DA:CE:CC:A4:24:AA:68
Authority key identifier: 6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD
Certificate issuer: /CN=A9141A6A/serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD
Certificate serial: 08C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft
Manifest number: 08B1
Signing time: Tue 04 Nov 2025 20:40:06 +0000
Manifest this update: Tue 04 Nov 2025 20:40:06 +0000
Manifest next update: Tue 11 Nov 2025 20:40:06 +0000
Files and hashes: 1: akoHTuW-fzuoULO6IUKWtlsaLa0.crl (hash: eE4G68PVm6PBwAR3S64YHIXs9YrpjMi+MaDg/xA2kVI=)
2: B37A1AB4E1A811EFBC05A21AC4F9AE02.roa (hash: z3K308cWVqAEh897XBjNlJlHxtZw2Llz47fylxLHRHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl
rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2249 (0x8c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141A6A, serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD
Validity
Not Before: Nov 4 20:40:06 2025 GMT
Not After : Nov 11 20:40:06 2025 GMT
Subject: CN=690a64a6-03e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:96:61:bb:1c:6c:e8:78:10:f8:1a:d9:79:
ad:b0:e7:46:47:87:c7:21:f7:88:4f:f7:8f:d5:33:
29:de:81:eb:fb:d5:ae:d0:0d:8e:2a:f5:ab:af:06:
d0:c0:57:0c:77:f8:b4:7a:45:de:b8:c5:c8:fb:94:
0e:e7:a0:c8:81:ef:6a:33:d0:d1:03:e5:32:8c:44:
40:80:bc:d4:07:fa:02:87:c6:8a:1c:2e:53:58:06:
75:9e:12:4f:5d:e3:7b:ff:b0:34:5f:c4:e7:8b:1b:
e6:27:3e:34:9f:b2:12:22:c9:cb:57:42:2b:50:b8:
a1:ec:1a:2b:b2:fd:1e:bb:8e:fe:28:d5:a9:b1:a0:
84:57:18:a1:1a:cb:09:9e:d5:cf:22:02:17:eb:7b:
5e:f9:1c:0c:81:e3:64:1b:99:bb:bc:5f:56:d7:0c:
f9:4c:f6:68:26:e5:80:77:1a:e1:4c:f8:0b:73:83:
69:f2:e3:68:28:9d:b0:04:a8:7e:f0:14:0c:a0:38:
1e:3b:12:e5:73:79:34:03:06:13:da:94:8d:cf:f1:
7b:0d:df:af:1c:18:59:0a:80:eb:b7:76:41:f6:02:
63:b2:d1:3d:a1:45:3f:18:1a:e3:87:ef:ef:c6:ea:
f5:50:48:eb:45:76:ce:78:c9:bd:54:84:d8:e0:56:
9c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AE:C4:F0:C1:09:78:29:09:4D:5F:90:2D:DA:CE:CC:A4:24:AA:68
X509v3 Authority Key Identifier:
keyid:6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:56:1f:99:cc:d2:81:61:dd:3c:d6:c5:6e:31:18:e2:9f:db:
9e:ad:2c:8f:cb:a2:30:02:e3:20:11:42:45:2b:d5:de:ff:e6:
93:d9:e8:f5:0f:c7:c5:20:26:ab:46:a7:01:cb:72:f6:88:01:
c8:cb:63:dc:a8:75:e6:af:b7:76:0c:b9:15:2f:72:f5:5c:f3:
7f:e2:dc:d3:b0:da:45:fd:11:9a:6a:11:90:63:6b:86:39:47:
19:df:cf:7e:81:f7:9d:27:dc:7e:6c:62:58:36:7c:75:c7:14:
73:86:2c:a5:d6:b0:64:0f:72:bc:76:64:52:4c:86:17:51:c8:
db:a6:7f:a1:7b:e9:12:fd:fd:33:63:43:1e:29:9c:8d:e2:ab:
a3:ca:2a:88:7e:b3:00:4b:2d:7a:20:28:23:9b:88:69:8b:99:
51:b3:3e:b8:35:68:e7:e0:95:0e:f6:a6:64:b7:8f:04:8b:4b:
b1:e1:03:de:25:a7:08:82:ed:8a:1f:84:40:d8:cc:70:1d:1b:
22:5b:a0:15:70:60:fd:a6:4f:14:6d:6c:5a:f5:42:1d:0c:bc:
d3:fa:db:7b:8d:64:04:1e:76:95:d7:7d:05:c2:21:d8:b7:f6:
4e:44:b4:ee:ad:5d:64:3d:00:d6:ce:b7:e7:ea:4b:a2:55:1f:
58:da:0d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:51:53 2025 by rpki-client