
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
File: D6nlM-haGDwUUwAIqLliP4VtXes.mft (raw, json)
Hash identifier: HJlIpMorJu2/NzCH6VnTyc84159DjbG3S8uof/I++XE=
Subject key identifier: 5B:17:3D:B7:97:48:FE:54:F0:B2:38:FB:1D:34:9C:7D:5E:23:E7:1A
Authority key identifier: 0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB
Certificate issuer: /CN=A9160455/serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
Certificate serial: 0C79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
Manifest number: 0C62
Signing time: Tue 04 Nov 2025 18:42:43 +0000
Manifest this update: Tue 04 Nov 2025 18:42:43 +0000
Manifest next update: Tue 11 Nov 2025 18:42:43 +0000
Files and hashes: 1: D6nlM-haGDwUUwAIqLliP4VtXes.crl (hash: dESuxgupS91IJ+rMY2FT3PUZfLW1qKTke6G8TodxvEM=)
2: 49E515C2C0F211EEA14E0122C4F9AE02.roa (hash: hANV6ERnDblIoU8kPVg1/VC/XygDNvVoYUOvd3sESZc=)
3: AADE9E9C5B9511EEA8190143C4F9AE02.roa (hash: FO7phPYzfDla6aPOyvXALwSuyaWj8a9hgRlX/QWvNY4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl
rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3193 (0xc79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160455, serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
Validity
Not Before: Nov 4 18:42:43 2025 GMT
Not After : Nov 11 18:42:43 2025 GMT
Subject: CN=690a4923-3370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:6a:c0:43:64:6a:fc:ec:b0:c7:1b:2c:ac:
a0:ec:af:93:ef:79:e8:44:c2:9e:24:a3:c5:bb:eb:
5c:fb:13:d3:bf:42:4f:19:8e:5a:76:fc:96:01:80:
71:c3:c2:28:21:7e:dc:a5:96:07:50:4f:05:0f:51:
08:3b:83:77:17:9d:71:08:2f:0a:8c:ea:e1:9a:79:
63:75:4c:6d:e1:aa:44:54:22:c8:5e:5a:dd:af:4b:
44:4b:a8:3e:28:75:2f:eb:12:33:45:55:a4:be:51:
5a:d7:3c:2d:7c:f5:24:df:e7:1e:e9:9f:78:56:ad:
36:02:b8:32:f2:bb:96:33:dd:bb:72:bd:74:17:c2:
d2:55:18:10:1f:74:d9:88:46:1d:e4:c3:b9:e6:7a:
cf:ea:dc:ba:99:fe:5f:78:67:1d:8d:03:a5:27:f6:
6e:a1:73:86:7b:e3:e4:71:f6:10:54:5f:da:4a:ea:
b2:15:64:d3:4c:28:2c:7a:54:de:34:b6:f6:c4:3c:
ef:39:65:f8:ff:a4:ae:e4:eb:e9:e8:87:bb:15:ea:
25:70:5c:b9:73:91:3b:8b:d8:8d:9a:57:7c:c3:8b:
ba:5c:3d:1c:90:73:48:8d:2f:68:be:5b:db:77:a2:
73:9d:00:f4:e5:e2:bd:79:16:f6:07:42:b6:f3:5f:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:17:3D:B7:97:48:FE:54:F0:B2:38:FB:1D:34:9C:7D:5E:23:E7:1A
X509v3 Authority Key Identifier:
keyid:0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:16:09:c9:c2:7f:3e:d2:0c:86:ce:7e:b7:1c:6e:c7:a0:97:
3f:03:12:3d:12:c4:62:61:5a:f4:e4:3b:6a:78:31:9e:6e:39:
82:0d:a5:a4:63:d5:28:a9:a5:aa:50:36:cb:48:97:87:e5:a4:
a8:14:c5:4c:29:31:a7:dd:97:fb:27:c1:5c:e9:4f:7f:a1:6e:
d1:34:d6:db:c8:90:eb:18:ff:87:1b:5f:b6:a4:f1:fe:30:df:
ff:9a:45:1e:9e:c8:eb:a7:d8:27:dc:c9:35:5c:f3:ce:5e:a8:
84:9a:0c:04:3b:8b:0b:f2:da:d8:4a:98:50:50:ae:21:36:5e:
46:04:4a:9f:09:02:d2:38:8a:8f:47:1a:28:3b:dc:47:75:77:
be:91:d9:29:58:f7:c8:d7:59:f4:03:79:05:38:44:f9:11:46:
5d:b1:20:87:97:e8:90:58:98:9c:17:ab:90:23:35:ae:6d:09:
90:e8:e2:9f:d4:34:19:7b:cb:fd:7f:80:d3:1f:14:eb:a2:bb:
ea:c1:12:38:0e:ff:4f:f0:9a:1b:c2:26:df:a3:8b:2b:5c:6a:
c2:2b:01:47:1e:81:c6:32:c7:c7:68:93:4a:f1:df:ed:2b:03:
c1:3d:75:cc:58:66:0d:dd:ce:aa:dc:a5:c5:22:ac:62:3e:88:
ae:51:25:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:36:51 2025 by rpki-client