
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft
File: x6CGcqgQDaMwwSIxURVYe-YRDfE.mft (raw, json)
Hash identifier: RxTXLNiGpujyU1ElcNG/4Wl7Z444cO5zn1C15wWSTog=
Subject key identifier: A9:22:EA:AD:0C:92:E1:06:80:42:2B:C6:F5:ED:5A:65:B3:A1:A0:6A
Authority key identifier: C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1
Certificate issuer: /CN=A9149CA9/serialNumber=C7A08672A8100DA330C122315115587BE6110DF1
Certificate serial: 0737
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft
Manifest number: 0731
Signing time: Tue 04 Nov 2025 21:49:57 +0000
Manifest this update: Tue 04 Nov 2025 21:49:57 +0000
Manifest next update: Tue 11 Nov 2025 21:49:57 +0000
Files and hashes: 1: x6CGcqgQDaMwwSIxURVYe-YRDfE.crl (hash: x8zY2/Kj0tQ9MIUAwx5BzSmOIAsKRj9i17q9Ldbz8ec=)
2: 3F6A3A284F1C11EB9953172CC4F9AE02.roa (hash: fLIn/n29gS9WQea5NQ408mptvqiyp1OsclxpM5zgbkA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.crl
rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1847 (0x737)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149CA9, serialNumber=C7A08672A8100DA330C122315115587BE6110DF1
Validity
Not Before: Nov 4 21:49:57 2025 GMT
Not After : Nov 11 21:49:57 2025 GMT
Subject: CN=690a7505-47d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b8:eb:8d:6c:ee:18:a0:5a:68:0f:56:73:29:
24:b1:0c:62:93:e4:9c:22:ba:35:9c:47:ee:10:ab:
4a:a4:31:a7:e0:d7:8b:02:2d:10:fb:68:65:d2:8c:
e1:51:91:07:86:14:7e:a5:64:f6:23:16:12:86:b4:
17:3e:f2:6c:f3:af:fa:2e:dd:54:95:d1:2d:43:e5:
25:c3:b6:e3:fb:d5:2a:58:0d:88:5a:58:72:10:ce:
ee:4d:92:bc:55:66:2f:38:28:28:d6:a8:66:73:50:
e0:92:72:5c:13:ba:1f:a5:ec:6f:fc:14:a8:ba:bc:
58:4d:85:5b:b0:ae:53:f6:ad:d6:26:db:ca:16:9b:
40:ce:f3:f3:bc:85:da:bd:9f:62:63:d9:cd:11:16:
84:01:c1:82:b0:d6:59:bf:6e:5f:65:05:66:03:f8:
1a:6e:85:04:12:19:44:8d:33:36:d7:41:52:6d:c1:
91:1f:1b:43:ef:01:4c:39:dc:ac:4e:9b:03:38:8e:
8c:25:4d:3d:a2:e4:d9:2f:20:41:a6:26:88:81:ee:
ca:08:b6:2e:7b:b8:77:8b:0b:4b:f5:15:f9:eb:bf:
6f:73:9b:54:18:fd:a6:e3:11:0e:65:ce:ff:b6:7f:
1b:3f:e3:3d:a4:73:75:74:22:fb:6c:1d:ee:a7:af:
f1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:22:EA:AD:0C:92:E1:06:80:42:2B:C6:F5:ED:5A:65:B3:A1:A0:6A
X509v3 Authority Key Identifier:
keyid:C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:1c:d6:55:09:fb:a3:38:f6:f4:ca:f3:4f:6c:78:1c:ab:7c:
65:2e:85:45:9d:f6:b6:23:f0:66:8f:d2:c1:74:b3:23:34:0f:
9f:fc:a0:92:20:cb:cc:b2:69:93:13:5a:bd:c5:5c:af:9f:d8:
c9:91:21:50:6f:82:0c:a9:b3:91:92:b8:d3:27:7d:87:30:f2:
f6:fb:6a:5d:4d:1e:ed:db:2f:46:a5:85:28:ea:47:df:86:57:
0a:12:28:89:c9:32:7b:f6:aa:ab:3b:19:fe:a0:03:23:b0:f2:
15:ea:98:4a:3f:d5:7f:47:cc:db:26:6e:ef:dc:07:f7:a5:62:
88:72:02:93:8c:0d:b0:f7:be:9b:80:98:25:58:eb:dc:be:12:
bc:88:cb:2f:61:61:05:c2:40:2a:ac:9b:4e:3d:99:19:fd:5e:
9a:63:14:16:6e:54:77:cc:b2:10:d8:ad:0c:d5:d5:f6:fb:96:
27:90:b3:c9:50:f1:29:b5:0f:26:1f:c2:6e:86:d6:3e:4c:ff:
7c:eb:1e:3f:03:d0:23:a7:ce:d9:ca:09:6f:3e:55:54:bc:84:
46:bd:c1:d6:d9:d6:ea:69:7f:5b:46:e0:d4:b7:97:b6:d2:d7:
d8:8c:f4:70:bb:02:b8:4e:cf:78:d4:0d:30:dc:39:5a:80:2d:
89:95:cc:57
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlDQTkxMTAvBgNVBAUTKEM3QTA4NjcyQTgxMDBEQTMzMEMxMjIzMTUxMTU1ODdC
RTYxMTBERjEwHhcNMjUxMTA0MjE0OTU3WhcNMjUxMTExMjE0OTU3WjAYMRYwFAYD
VQQDEw02OTBhNzUwNS00N2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4bjrjWzuGKBaaA9WcykksQxik+ScIro1nEfuEKtKpDGn4NeLAi0Q+2hl0ozh
UZEHhhR+pWT2IxYShrQXPvJs86/6Lt1UldEtQ+Ulw7bj+9UqWA2IWlhyEM7uTZK8
VWYvOCgo1qhmc1DgknJcE7ofpexv/BSourxYTYVbsK5T9q3WJtvKFptAzvPzvIXa
vZ9iY9nNERaEAcGCsNZZv25fZQVmA/gaboUEEhlEjTM210FSbcGRHxtD7wFMOdys
TpsDOI6MJU09ouTZLyBBpiaIge7KCLYue7h3iwtL9RX5679vc5tUGP2m4xEOZc7/
tn8bP+M9pHN1dCL7bB3up6/xOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKki6q0M
kuEGgEIrxvXtWmWzoaBqMB8GA1UdIwQYMBaAFMeghnKoEA2jMMEiMVEVWHvmEQ3x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUNBOS9FRUQ3NDhENjRG
MTUxMUVCOEM3RUFCMUFDNEY5QUUwMi94NkNHY3FnUURhTXd3U0l4VVJWWWUtWVJE
ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3g2Q0djcWdRRGFNd3dTSXhVUlZZZS1ZUkRmRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OUNBOS9FRUQ3NDhENjRGMTUxMUVCOEM3RUFCMUFDNEY5QUUwMi94NkNHY3FnUURh
TXd3U0l4VVJWWWUtWVJEZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAAHNZVCfujOPb0yvNPbHgcq3xlLoVFnfa2I/Bmj9LBdLMjNA+f/KCS
IMvMsmmTE1q9xVyvn9jJkSFQb4IMqbORkrjTJ32HMPL2+2pdTR7t2y9GpYUo6kff
hlcKEiiJyTJ79qqrOxn+oAMjsPIV6phKP9V/R8zbJm7v3Af3pWKIcgKTjA2w976b
gJglWOvcvhK8iMsvYWEFwkAqrJtOPZkZ/V6aYxQWblR3zLIQ2K0M1dX2+5YnkLPJ
UPEptQ8mH8JuhtY+TP986x4/A9Ajp87ZyglvPlVUvIRGvcHW2dbqaX9bRuDUt5e2
0tfYjPRwuwK4Ts941A0w3DlagC2JlcxX
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:25:23 2025 by rpki-client