
$ rpki-client -vvf rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft
File: T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft (raw, json)
Hash identifier: a1Fhg/Z1Z5gcc1JGt7x6nx95R4IlKxz+TzNwLCd9A0Q=
Subject key identifier: 33:EC:FF:CF:76:93:02:39:DA:E3:AF:CD:9C:9E:FD:14:74:8E:05:37
Authority key identifier: 4F:A3:68:A6:2E:D2:5C:62:78:E2:3B:1B:FF:A2:51:A1:49:AA:2F:58
Certificate issuer: /CN=A916548C/serialNumber=4FA368A62ED25C6278E23B1BFFA251A149AA2F58
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft
Manifest number: 020F
Signing time: Wed 05 Nov 2025 02:27:52 +0000
Manifest this update: Wed 05 Nov 2025 02:27:51 +0000
Manifest next update: Wed 12 Nov 2025 02:27:51 +0000
Files and hashes: 1: T6Nopi7SXGJ44jsb_6JRoUmqL1g.crl (hash: 4bo0qQNKiN91NaBmpmpSvrA7hSJL1eG7erMyZ0Wbj4g=)
2: 0BD8AF96D41A11EF804F7049C4F9AE02.roa (hash: CbsMaT+1o+zoMcHzdBRqNGnxnAlCq5uF3XIGjN5ZkQE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.crl
rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:27:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916548C, serialNumber=4FA368A62ED25C6278E23B1BFFA251A149AA2F58
Validity
Not Before: Nov 5 02:27:51 2025 GMT
Not After : Nov 12 02:27:51 2025 GMT
Subject: CN=690ab628-9374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:15:37:c3:54:d6:89:8a:c7:05:e5:76:0f:
d3:41:64:6f:34:4e:0c:2b:92:46:d3:72:0f:9a:9e:
0b:16:4f:f3:12:dd:e0:ad:04:cb:90:34:34:d5:dd:
3f:1d:60:5d:f3:ee:4e:13:7c:81:29:0e:2f:78:b8:
dd:85:71:9e:a0:29:e2:60:4c:3f:26:c1:c6:ac:0b:
fe:32:68:80:0c:60:31:5a:02:4e:19:07:21:a7:10:
9f:63:dd:31:ae:04:ca:4e:e2:85:7a:f3:3d:8d:6d:
96:99:cb:3e:53:fd:03:6b:b4:6f:c9:18:04:7e:b2:
84:97:0f:29:14:4f:e1:2e:c5:8e:45:89:e4:6a:76:
07:db:07:4d:52:ca:cd:a4:bd:12:55:0e:a8:0c:ce:
8f:30:a3:cd:a5:b5:00:c2:e9:2b:b9:3d:26:5c:4c:
88:30:42:05:68:ba:2a:2c:cd:45:ba:bb:09:7f:ce:
96:ec:39:63:2e:48:b5:a1:0a:ff:b3:83:b1:14:d3:
98:e3:be:61:ea:33:3e:3c:78:94:76:8d:c6:56:f0:
96:10:2d:20:f3:94:b3:8b:37:81:46:62:69:1e:3b:
0b:c5:81:f8:fb:17:ee:b2:79:bb:ce:ba:a7:ac:5d:
df:fb:0b:52:2c:7c:40:79:5b:bd:28:99:0b:f3:79:
6d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EC:FF:CF:76:93:02:39:DA:E3:AF:CD:9C:9E:FD:14:74:8E:05:37
X509v3 Authority Key Identifier:
keyid:4F:A3:68:A6:2E:D2:5C:62:78:E2:3B:1B:FF:A2:51:A1:49:AA:2F:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:77:22:9a:3b:dd:af:b4:06:c1:34:e5:16:de:1f:27:04:b3:
66:0c:ae:ad:7c:fa:29:a4:da:87:99:bb:16:42:53:a0:36:9e:
60:5d:1a:3d:bf:70:2d:85:17:96:7e:a6:4a:31:c3:44:89:60:
1f:68:99:0b:d0:58:35:f3:8d:e1:6e:db:e8:62:85:8e:e0:87:
b8:c0:06:d3:25:41:80:d0:f0:0e:19:28:a7:36:36:32:6d:fc:
c2:df:55:ef:35:8b:e2:c9:fd:6d:0e:2a:bf:c0:d6:82:77:d9:
49:4e:ce:7c:66:ae:8b:ff:84:e1:d3:f9:9e:0a:34:e9:67:49:
fe:00:8b:df:52:5a:c1:4c:da:3f:c4:ab:97:09:4c:13:02:b8:
b5:97:ee:2f:25:bd:16:2c:4c:5d:72:00:b8:8f:f0:5c:f0:02:
96:08:56:45:bc:a7:b4:0f:aa:cf:36:3e:0e:e1:5b:b1:95:47:
bc:81:fc:37:a8:3f:fb:8f:6c:32:ad:1a:91:be:68:7c:ba:75:
68:dc:2e:bc:95:09:94:bd:f7:54:f0:1e:c6:6b:01:c3:57:14:
79:51:99:04:04:b5:16:80:82:12:00:84:47:3b:c0:b5:f9:06:
f7:08:e5:c4:0f:96:6b:78:42:4c:af:d4:ae:a4:64:90:6b:05:
c5:58:b8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:27:47 2025 by rpki-client