
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft
File: 6mA98ryp7Vu3vSDB9LxR15fApj8.mft (raw, json)
Hash identifier: u4UUVIZv9eG5hh1q3xiUqqCx63CIvW/yolpP8QlnFKw=
Subject key identifier: 88:FB:61:3B:4C:F4:8A:D4:0C:CE:1D:36:F0:37:26:AA:93:F7:64:DE
Authority key identifier: EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F
Certificate issuer: /CN=A9169E54/serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F
Certificate serial: 48
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft
Manifest number: 46
Signing time: Mon 03 Nov 2025 07:22:20 +0000
Manifest this update: Mon 03 Nov 2025 07:22:18 +0000
Manifest next update: Mon 10 Nov 2025 07:22:18 +0000
Files and hashes: 1: 6mA98ryp7Vu3vSDB9LxR15fApj8.crl (hash: O4dFhAg/IcOGHFgU8nEror93RrN6LdaH96L+bIV6kUA=)
2: 554EE88487D911F08B837C49C4F9AE02.roa (hash: mrqENyuiKG5xVgDdo7UrrcMh5yOfyP2Su4rVIqkeeYw=)
3: C2A46ED64FFD11F085A32C7CC4F9AE02.roa (hash: kAJy+kbDfHSxGirPMu77eyrxHf+CDgBjh/BH4GL9KVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl
rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169E54, serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F
Validity
Not Before: Nov 3 07:22:18 2025 GMT
Not After : Nov 10 07:22:18 2025 GMT
Subject: CN=6908582b-078f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:78:e1:6b:be:05:a9:17:49:53:32:51:ef:71:
9e:c0:4f:25:4b:0e:28:88:1b:6d:73:d3:9b:61:e9:
17:a4:d2:38:4d:54:63:90:e1:47:72:90:c2:52:bd:
2d:96:24:4e:71:bd:92:4a:28:83:6e:b9:bc:f4:0b:
21:34:98:c5:84:42:51:05:83:69:66:85:80:03:c6:
da:73:7b:4c:99:90:a7:a6:30:e8:c2:b5:7b:25:43:
ce:44:68:03:9e:ff:c6:1f:b4:a9:02:38:2c:00:58:
37:a7:7e:3f:ba:bb:bc:16:f0:d1:43:17:a3:13:71:
76:51:48:da:52:7f:10:2e:3d:84:33:99:6a:e6:2b:
50:95:6e:30:3b:59:db:0f:f8:03:a0:e7:d2:b2:e5:
5a:3a:4f:a2:6a:20:e4:5b:69:1a:79:f6:62:72:3d:
16:c6:7a:0e:27:bd:03:cc:fa:96:8a:01:4d:79:3e:
26:25:c8:00:2b:d0:6b:8d:38:a4:7f:09:90:4d:1f:
06:4b:00:7d:66:d1:a9:12:72:1f:ba:43:15:dd:b8:
37:05:02:a9:23:54:49:a0:45:da:c1:fc:87:a1:6f:
1b:12:19:62:74:b6:53:f3:66:59:77:57:05:51:77:
a4:1f:23:98:19:5f:8d:bc:56:34:12:c4:8b:8e:ed:
ae:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FB:61:3B:4C:F4:8A:D4:0C:CE:1D:36:F0:37:26:AA:93:F7:64:DE
X509v3 Authority Key Identifier:
keyid:EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:c7:08:4b:f9:31:73:f2:93:40:2c:f4:35:c5:45:60:98:3c:
30:eb:a3:f6:06:c7:62:71:cc:58:73:c3:32:58:20:91:21:9e:
ef:3a:c4:dd:47:a6:70:0a:de:63:c4:65:22:05:d4:4c:27:9c:
a6:5f:fd:c8:70:60:91:89:65:9b:f2:1a:38:67:25:32:65:e2:
f9:a3:db:5a:ae:6b:7e:00:0e:af:21:4e:a5:ad:2c:ea:ca:b7:
ea:4f:a4:ea:60:ee:04:dc:fe:1b:80:5b:a6:0c:7f:3b:34:a3:
1e:3f:e0:09:22:a9:5c:2a:f2:1d:2b:b6:4d:98:b4:b3:26:20:
ff:af:ef:6d:44:da:04:44:1a:b1:17:d5:ba:5d:8a:7e:56:a5:
3c:e3:89:a8:92:3c:7e:42:e7:6c:55:f8:34:47:08:6c:b5:64:
de:1d:4e:f4:e2:be:2a:0f:b4:fc:7e:36:9e:fa:7a:8d:db:da:
08:30:25:25:23:79:62:f3:03:db:d8:28:ce:1d:00:b5:65:e4:
71:b2:78:ba:8c:93:85:28:f3:ef:36:bc:02:b8:f5:85:53:db:
c2:b3:31:b8:d5:a7:72:d2:eb:d9:1c:6e:28:ac:d7:ab:97:a3:
34:cd:56:80:5e:69:81:b3:c0:96:c6:96:61:ee:56:e6:b3:f3:
5a:ed:dd:0c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
OUU1NDExMC8GA1UEBRMoRUE2MDNERjJCQ0E5RUQ1QkI3QkQyMEMxRjRCQzUxRDc5
N0MwQTYzRjAeFw0yNTExMDMwNzIyMThaFw0yNTExMTAwNzIyMThaMBgxFjAUBgNV
BAMTDTY5MDg1ODJiLTA3OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDheOFrvgWpF0lTMlHvcZ7ATyVLDiiIG21z05th6Rek0jhNVGOQ4UdykMJSvS2W
JE5xvZJKKINuubz0CyE0mMWEQlEFg2lmhYADxtpze0yZkKemMOjCtXslQ85EaAOe
/8YftKkCOCwAWDenfj+6u7wW8NFDF6MTcXZRSNpSfxAuPYQzmWrmK1CVbjA7WdsP
+AOg59Ky5Vo6T6JqIORbaRp59mJyPRbGeg4nvQPM+paKAU15PiYlyAAr0GuNOKR/
CZBNHwZLAH1m0akSch+6QxXduDcFAqkjVEmgRdrB/IehbxsSGWJ0tlPzZll3VwVR
d6QfI5gZX428VjQSxIuO7a6lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiPthO0z0
itQMzh028DcmqpP3ZN4wHwYDVR0jBBgwFoAU6mA98ryp7Vu3vSDB9LxR15fApj8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5RTU0L0Q5RUVEMTAwNEZG
QjExRjBBQUVCMzg3N0M0RjlBRTAyLzZtQTk4cnlwN1Z1M3ZTREI5THhSMTVmQXBq
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNm1BOThyeXA3VnUzdlNEQjlMeFIxNWZBcGo4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5
RTU0L0Q5RUVEMTAwNEZGQjExRjBBQUVCMzg3N0M0RjlBRTAyLzZtQTk4cnlwN1Z1
M3ZTREI5THhSMTVmQXBqOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHDHCEv5MXPyk0As9DXFRWCYPDDro/YGx2JxzFhzwzJYIJEhnu86xN1H
pnAK3mPEZSIF1EwnnKZf/chwYJGJZZvyGjhnJTJl4vmj21qua34ADq8hTqWtLOrK
t+pPpOpg7gTc/huAW6YMfzs0ox4/4AkiqVwq8h0rtk2YtLMmIP+v721E2gREGrEX
1bpdin5WpTzjiaiSPH5C52xV+DRHCGy1ZN4dTvTivioPtPx+Np76eo3b2ggwJSUj
eWLzA9vYKM4dALVl5HGyeLqMk4Uo8+82vAK49YVT28KzMbjVp3LS69kcbiis16uX
ozTNVoBeaYGzwJbGlmHuVuaz81rt3Qw=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:25:08 2025 by rpki-client