
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
File: HgeR690MlMNWujc9fg8BYQPUC5I.mft (raw, json)
Hash identifier: +G+8d5Rn4gylEgb+4iQ7IX/mdCAzTwJAIoe1xWD5W0I=
Subject key identifier: 55:41:8C:D1:3D:72:8B:97:1C:D0:A4:F6:CF:C3:8B:44:3F:49:5F:6B
Authority key identifier: 1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92
Certificate issuer: /CN=A916D07E/serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92
Certificate serial: 6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
Manifest number: 6A
Signing time: Mon 03 Nov 2025 06:58:17 +0000
Manifest this update: Mon 03 Nov 2025 06:58:16 +0000
Manifest next update: Mon 10 Nov 2025 06:58:16 +0000
Files and hashes: 1: HgeR690MlMNWujc9fg8BYQPUC5I.crl (hash: c+00x3hrZCGdwg7wVRSvHw/7OGxA0w5yktT+aH72Rgo=)
2: 6014E88A257E11F08DB64644C4F9AE02.roa (hash: nOUBr+CqAJHxGP5VlXuW/aGl6J+jLJf/ElMdL6qIZFQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl
rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D07E, serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92
Validity
Not Before: Nov 3 06:58:16 2025 GMT
Not After : Nov 10 06:58:16 2025 GMT
Subject: CN=69085288-f4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3d:91:7a:99:c3:93:64:6b:95:46:f8:47:25:
85:dc:b4:0d:60:f0:fb:5f:ba:0c:d1:cb:ef:d6:aa:
1f:50:7a:95:ba:66:f0:d7:f9:e4:e0:fd:c0:51:45:
db:97:6e:4f:4c:5c:b9:7e:3f:99:37:4c:f1:14:6f:
fd:1c:df:df:a6:d4:fc:dd:26:40:d2:ad:95:6e:27:
95:47:32:a9:ba:92:d0:83:a3:6d:b6:79:9d:a3:37:
52:3f:c8:53:44:11:9c:e7:b0:db:20:ea:b8:c5:07:
57:91:e6:9e:0e:64:da:a7:b6:6a:be:55:8e:fc:ba:
3c:23:0a:c5:2e:c3:ec:50:dd:b9:07:b4:77:d7:b9:
70:12:65:3a:11:ad:fa:e8:aa:28:4f:60:5c:fa:87:
15:f8:a8:b9:10:02:a8:82:a7:cf:0d:cd:8f:4f:1a:
66:e1:7b:7e:92:ce:7c:a9:c7:33:ab:78:3f:46:47:
6a:6d:e0:01:b2:17:c0:e7:fa:4f:e1:db:67:16:13:
49:f5:70:b8:e9:de:0f:fa:92:25:23:f2:92:60:a8:
d2:7f:e9:53:f2:ed:a5:7e:26:5e:39:d4:c0:bd:6c:
2a:bd:83:6d:d4:8d:5c:8a:57:6b:8f:bc:a7:e1:73:
b8:f4:71:2b:26:2e:75:42:56:f5:54:bd:98:f5:69:
21:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:41:8C:D1:3D:72:8B:97:1C:D0:A4:F6:CF:C3:8B:44:3F:49:5F:6B
X509v3 Authority Key Identifier:
keyid:1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:12:9b:72:57:67:fc:6c:fd:23:14:db:7c:78:db:1d:41:ec:
12:04:62:e9:7b:da:48:4f:24:04:76:25:26:e1:7a:0a:d6:94:
13:9c:7c:0f:c8:c8:3d:b3:f2:06:03:2c:77:d9:c3:85:92:c8:
85:da:2e:f9:db:fe:bf:9d:8c:60:32:05:34:26:11:f8:f0:30:
a6:9f:2c:a9:0c:63:11:e6:ff:f5:99:af:88:0d:1e:4f:a2:13:
be:7c:3b:1c:a2:82:c3:43:c0:68:34:3b:fa:83:40:c9:11:b5:
57:28:98:4f:46:80:d1:32:4d:7c:1e:55:f5:f3:74:7b:79:cf:
fb:c1:b1:72:64:23:52:0c:02:fd:fa:28:2b:0b:98:17:f0:79:
c3:e0:da:98:02:ee:6e:52:5c:e0:45:ee:5a:70:cd:25:88:e3:
f0:c1:04:78:4d:72:a3:6d:66:73:be:e5:59:a6:06:da:df:43:
a2:b1:76:ea:ce:ec:d3:d3:30:28:06:a8:04:e3:62:b1:26:57:
1e:bc:ce:3d:e9:27:21:72:08:15:30:25:c3:6a:76:23:c5:f7:
b6:d8:55:3e:d2:d9:e7:26:84:94:bf:04:06:07:1b:8b:4c:15:
72:72:a2:1b:b1:72:32:db:30:2b:91:08:0e:ce:8d:15:24:53:
d5:84:a6:75
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
RDA3RTExMC8GA1UEBRMoMUUwNzkxRUJERDBDOTRDMzU2QkEzNzNEN0UwRjAxNjEw
M0Q0MEI5MjAeFw0yNTExMDMwNjU4MTZaFw0yNTExMTAwNjU4MTZaMBgxFjAUBgNV
BAMTDTY5MDg1Mjg4LWY0YWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDEPZF6mcOTZGuVRvhHJYXctA1g8PtfugzRy+/Wqh9QepW6ZvDX+eTg/cBRRduX
bk9MXLl+P5k3TPEUb/0c39+m1PzdJkDSrZVuJ5VHMqm6ktCDo222eZ2jN1I/yFNE
EZznsNsg6rjFB1eR5p4OZNqntmq+VY78ujwjCsUuw+xQ3bkHtHfXuXASZToRrfro
qihPYFz6hxX4qLkQAqiCp88NzY9PGmbhe36SznypxzOreD9GR2pt4AGyF8Dn+k/h
22cWE0n1cLjp3g/6kiUj8pJgqNJ/6VPy7aV+Jl451MC9bCq9g23UjVyKV2uPvKfh
c7j0cSsmLnVCVvVUvZj1aSFtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVUGM0T1y
i5cc0KT2z8OLRD9JX2swHwYDVR0jBBgwFoAUHgeR690MlMNWujc9fg8BYQPUC5Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZEMDdFL0UwMjNGMjFFMTUw
NzExRjA4NUZCNDQ1NUM0RjlBRTAyL0hnZVI2OTBNbE1OV3VqYzlmZzhCWVFQVUM1
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSGdlUjY5ME1sTU5XdWpjOWZnOEJZUVBVQzVJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE
MDdFL0UwMjNGMjFFMTUwNzExRjA4NUZCNDQ1NUM0RjlBRTAyL0hnZVI2OTBNbE1O
V3VqYzlmZzhCWVFQVUM1SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBANISm3JXZ/xs/SMU23x42x1B7BIEYul72khPJAR2JSbhegrWlBOcfA/I
yD2z8gYDLHfZw4WSyIXaLvnb/r+djGAyBTQmEfjwMKafLKkMYxHm//WZr4gNHk+i
E758OxyigsNDwGg0O/qDQMkRtVcomE9GgNEyTXweVfXzdHt5z/vBsXJkI1IMAv36
KCsLmBfwecPg2pgC7m5SXOBF7lpwzSWI4/DBBHhNcqNtZnO+5VmmBtrfQ6KxdurO
7NPTMCgGqATjYrEmVx68zj3pJyFyCBUwJcNqdiPF97bYVT7S2ecmhJS/BAYHG4tM
FXJyohuxcjLbMCuRCA7OjRUkU9WEpnU=
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:13:43 2025 by rpki-client