
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.mft
File: a6pcUguOS_VkxLv0bh8xa9RfoDc.mft (raw, json)
Hash identifier: tztEf+BcJAjH1Q2X8AmXICl6E5HzycrHvBK4Mb34K7E=
Subject key identifier: 3C:A4:CB:B2:0C:10:25:D8:25:DC:17:50:56:B8:78:1B:BE:B3:99:11
Authority key identifier: 6B:AA:5C:52:0B:8E:4B:F5:64:C4:BB:F4:6E:1F:31:6B:D4:5F:A0:37
Certificate issuer: /CN=A9144463/serialNumber=6BAA5C520B8E4BF564C4BBF46E1F316BD45FA037
Certificate serial: 02D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6pcUguOS_VkxLv0bh8xa9RfoDc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.mft
Manifest number: 02C7
Signing time: Thu 06 Nov 2025 21:57:08 +0000
Manifest this update: Thu 06 Nov 2025 21:57:08 +0000
Manifest next update: Thu 13 Nov 2025 21:57:08 +0000
Files and hashes: 1: a6pcUguOS_VkxLv0bh8xa9RfoDc.crl (hash: T6Zrs9OUU9Ir+mnKHd//k6L5iK9lqJ6+vaWBCSqWtrI=)
2: 5B9A1DA0114211ED957E085DC4F9AE02.roa (hash: 434R2ZI7IqSBRHE33dBHuVGC0axS/evdyQtP96MQ17A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.crl
rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6pcUguOS_VkxLv0bh8xa9RfoDc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Nov 2025 21:57:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722 (0x2d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144463, serialNumber=6BAA5C520B8E4BF564C4BBF46E1F316BD45FA037
Validity
Not Before: Nov 6 21:57:08 2025 GMT
Not After : Nov 13 21:57:08 2025 GMT
Subject: CN=690d19b4-529a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:66:99:5c:6a:d9:45:38:3e:26:03:f2:d0:ac:
ee:1d:4a:22:86:7e:1d:c8:e5:8b:3d:01:1d:3d:b3:
7b:ba:ae:fd:12:3b:d7:1e:e5:a2:93:e9:f2:dd:58:
76:cd:b5:bf:25:f1:f0:db:bb:ad:bd:2d:0e:de:96:
7c:cb:a2:cb:1f:03:e5:67:f5:34:51:f2:40:88:97:
03:72:9d:e9:4d:73:fa:c2:7d:91:a4:c6:10:8a:2e:
c3:3d:1b:3f:0b:3a:92:2e:c0:18:23:e2:ea:dc:1b:
85:ea:47:d9:50:ab:c8:e1:5e:25:ca:8f:3b:3d:2f:
39:75:d6:e1:17:38:36:0a:29:47:2a:d4:5a:ca:b5:
37:71:3f:76:f6:75:9b:d0:06:39:42:ed:5a:42:70:
16:ff:b1:2d:4d:e7:1d:77:70:f0:11:f3:7b:48:76:
f1:eb:dd:26:45:38:1c:97:db:0d:c2:12:65:e2:07:
ca:aa:f7:34:65:0e:42:17:64:9b:45:b2:af:5f:8b:
e4:02:90:71:9a:46:d8:79:ad:f7:83:93:5c:1e:30:
2e:96:83:60:7e:0d:eb:ff:aa:5a:56:db:53:ee:1e:
63:f8:b1:20:63:f2:5e:56:81:a0:b9:16:a9:6e:1b:
34:f2:b1:77:3c:b2:1b:da:0c:81:86:c9:68:14:f1:
86:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A4:CB:B2:0C:10:25:D8:25:DC:17:50:56:B8:78:1B:BE:B3:99:11
X509v3 Authority Key Identifier:
keyid:6B:AA:5C:52:0B:8E:4B:F5:64:C4:BB:F4:6E:1F:31:6B:D4:5F:A0:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6pcUguOS_VkxLv0bh8xa9RfoDc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:b0:26:5c:46:c9:02:6e:fa:51:26:94:ca:e3:13:e2:19:7c:
38:a5:24:7d:52:9d:65:21:5d:42:2f:93:9f:4d:e5:e4:a3:5d:
57:68:75:f5:0c:b1:5e:a2:ce:61:94:f1:1a:22:05:6e:00:43:
56:4d:35:72:2f:bd:7d:d5:37:e1:c7:8b:f1:b3:ec:41:12:db:
b2:0a:b5:7b:8f:8b:9b:e0:97:35:ff:aa:55:35:49:d3:cd:a0:
fb:0a:c8:e1:57:07:e3:83:ea:7b:6c:5e:a9:bb:09:c6:f1:d5:
8f:f5:4c:f5:57:9d:1c:65:e4:61:80:aa:8d:d9:40:32:d5:31:
11:88:6d:09:eb:2f:73:53:dd:d6:fd:c9:73:42:09:01:90:f6:
83:77:e8:8d:4c:43:59:bc:f7:f4:58:8d:09:46:5d:de:64:cc:
27:b9:32:76:43:5d:69:4f:d0:13:d9:4b:2e:83:4e:67:75:e4:
58:86:a0:a1:91:56:71:83:cf:1d:24:63:5c:2d:cf:63:db:a6:
1d:d6:d4:2f:80:36:13:c1:50:b9:d2:c6:3c:60:92:fc:06:f7:
06:e3:9a:66:ba:be:7f:1d:22:b9:e3:c6:50:e1:ad:89:23:c0:
3c:96:5f:41:60:4a:4b:9b:cb:a1:14:bd:20:67:4f:ac:18:df:
cf:31:35:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 11:46:55 2025 by rpki-client