
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.mft
File: r6xXdRxedph17Sb1vN8X9T3_nJk.mft (raw, json)
Hash identifier: 7yurJHpvddDyGezzqyVn6A3NfS/gGEav3xf2ILC3Ngo=
Subject key identifier: C1:6D:58:2B:DE:6A:76:F0:F8:68:16:D7:6A:4F:20:4B:C4:11:86:0A
Authority key identifier: AF:AC:57:75:1C:5E:76:98:75:ED:26:F5:BC:DF:17:F5:3D:FF:9C:99
Certificate issuer: /CN=A914F0E7/serialNumber=AFAC57751C5E769875ED26F5BCDF17F53DFF9C99
Certificate serial: 0762
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6xXdRxedph17Sb1vN8X9T3_nJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.mft
Manifest number: 075D
Signing time: Sun 02 Nov 2025 21:37:40 +0000
Manifest this update: Sun 02 Nov 2025 21:37:39 +0000
Manifest next update: Sun 09 Nov 2025 21:37:39 +0000
Files and hashes: 1: r6xXdRxedph17Sb1vN8X9T3_nJk.crl (hash: /iNGcY4qFen1IIcWdfuP+92dRDmw+m+By8gKavM1ebk=)
2: 595EF8C63DC711EBA35AB51DC4F9AE02.roa (hash: kDcfkRRwNdoJ431TUAg/mhxPRjcYBJFeGLnnYla+ins=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.crl
rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6xXdRxedph17Sb1vN8X9T3_nJk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:37:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1890 (0x762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F0E7, serialNumber=AFAC57751C5E769875ED26F5BCDF17F53DFF9C99
Validity
Not Before: Nov 2 21:37:39 2025 GMT
Not After : Nov 9 21:37:39 2025 GMT
Subject: CN=6907cf23-3c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8c:c7:1f:9b:41:71:78:ed:cb:61:44:a9:de:
8d:9e:fc:04:59:a0:f1:fb:6b:44:d1:ec:46:4f:cd:
ac:a2:3e:43:b2:0b:75:36:a0:6a:a9:7c:5f:c1:02:
56:5f:70:1d:06:74:eb:33:cd:50:14:52:11:2c:3c:
a5:25:29:7d:16:6e:a9:bc:84:93:50:22:d0:a2:bb:
9f:f5:07:c2:c2:19:ad:62:2e:04:c6:3d:54:7d:02:
ea:bf:28:f3:66:10:7d:40:2f:f0:40:bc:3c:f8:a0:
5d:e1:06:bf:aa:38:06:ec:f8:b7:4e:40:30:2c:9a:
bf:3c:e9:7f:f2:4c:f2:c1:9f:ba:8e:63:fe:ae:10:
11:fb:a1:06:ee:0a:31:9f:62:52:d4:fc:24:4e:a6:
89:d5:1d:60:cb:ed:5f:f8:3e:ab:f8:24:35:9a:f5:
3a:3d:54:67:84:d9:f0:49:a4:18:8b:b8:ec:c5:f5:
a0:cd:9f:f3:ad:7d:3c:36:44:ca:de:7f:80:40:c4:
62:47:17:99:9d:97:f4:f0:a6:78:cf:f5:c3:7b:0e:
a4:c2:7f:4e:a7:1f:70:e5:f9:27:55:9e:f7:b3:94:
74:8e:b4:38:61:6e:12:dc:42:46:0f:93:bb:f6:d7:
77:0e:03:da:70:74:a3:95:47:e2:5c:88:f2:1d:d1:
e7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6D:58:2B:DE:6A:76:F0:F8:68:16:D7:6A:4F:20:4B:C4:11:86:0A
X509v3 Authority Key Identifier:
keyid:AF:AC:57:75:1C:5E:76:98:75:ED:26:F5:BC:DF:17:F5:3D:FF:9C:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6xXdRxedph17Sb1vN8X9T3_nJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:fa:ee:03:a8:69:3f:c7:4a:9f:08:48:2b:57:a9:c4:21:d0:
2e:86:8d:e7:d3:d2:af:44:2f:70:85:56:40:77:48:bc:0f:02:
d8:ff:e6:cb:82:52:88:ce:41:d6:cb:6b:8e:75:a9:c6:32:64:
01:10:70:97:7d:f2:cf:69:a0:22:e9:83:b6:7a:b1:81:53:cd:
a2:e9:f2:93:20:2a:ff:bf:13:8f:07:d3:35:b0:7a:53:58:7b:
9a:21:a4:e1:6a:35:92:0f:49:16:ee:d0:2d:f6:d4:fc:20:50:
55:fe:04:3f:c0:f2:e6:73:92:ae:b2:f1:23:d4:b2:87:eb:ba:
2b:b5:53:62:9e:f6:84:89:14:b1:49:43:8e:e9:67:c5:bf:fc:
74:6a:5c:a9:68:96:9d:c0:84:44:a6:87:5d:1f:73:f9:46:2c:
a8:2f:ed:17:b9:e5:33:d1:89:d0:99:8f:78:5e:26:90:ca:0d:
e3:dc:a2:e5:b9:7e:a9:75:eb:eb:37:d9:2b:e5:30:29:57:48:
9f:26:6e:b7:ae:13:f4:da:1b:6f:bb:82:35:31:c3:f5:77:7c:
d5:6c:90:1c:c5:83:9b:14:31:26:08:f4:5f:f4:1c:c1:cd:53:
ea:06:7d:06:49:22:42:8e:f9:5e:1c:47:66:00:d6:e1:9e:74:
78:fa:54:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:21 2025 by rpki-client