
$ rpki-client -vvf rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft
File: 2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft (raw, json)
Hash identifier: V80P0MCx4nidFkDrx5syvraLo/3wily4nJlUKEAjs/Q=
Subject key identifier: 5F:29:91:74:60:38:1B:20:A7:8E:E3:E2:F2:FD:6D:A4:42:83:77:20
Authority key identifier: D8:AF:F5:03:FE:8C:5B:D2:26:6A:A2:EC:AB:E5:52:CA:75:14:7F:66
Certificate issuer: /CN=A918049D/serialNumber=D8AFF503FE8C5BD2266AA2ECABE552CA75147F66
Certificate serial: 06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft
Manifest number: 06
Signing time: Mon 03 Nov 2025 08:03:00 +0000
Manifest this update: Mon 03 Nov 2025 08:02:59 +0000
Manifest next update: Mon 10 Nov 2025 08:02:59 +0000
Files and hashes: 1: 2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl (hash: ZAGaWi3TeB3y52qlbUjLA/6K8X3ol1cI/IGLWkJfFtU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl
rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 08:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918049D, serialNumber=D8AFF503FE8C5BD2266AA2ECABE552CA75147F66
Validity
Not Before: Nov 3 08:02:59 2025 GMT
Not After : Nov 10 08:02:59 2025 GMT
Subject: CN=690861b3-29aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c9:fe:86:54:bd:3d:9e:d7:ed:6c:da:eb:0b:
8e:df:f0:59:ec:72:29:72:33:e8:73:73:bd:39:d1:
c4:16:bc:92:2f:7b:91:99:b1:d8:dd:6f:13:e1:0a:
2f:b0:89:90:ec:3f:ea:81:a8:75:ed:d5:3c:68:50:
36:da:b6:b4:b7:6c:3f:4e:e9:f5:94:c8:d7:40:f6:
1c:0e:71:29:79:d5:1f:b1:31:3b:02:83:3c:f9:ed:
db:cc:73:39:aa:fa:2d:84:2e:81:08:ba:3f:94:aa:
e6:41:f6:35:75:15:a9:85:f5:99:3b:8e:56:f3:be:
aa:3c:60:10:9d:4a:ae:79:b4:2d:4e:db:ad:ea:e2:
04:7a:0f:cf:40:ef:e9:10:fe:9d:fb:a5:fa:23:1f:
69:29:4d:06:b5:8c:fd:b4:f9:54:64:80:7b:12:68:
07:15:30:9f:2c:97:91:d4:fd:d7:ef:97:d3:86:b0:
be:30:a4:a3:aa:ef:1a:c3:10:b6:e7:6b:9e:6c:53:
8b:ad:2f:19:f3:d1:1e:77:3c:ef:87:b2:46:7c:73:
4f:57:3b:51:f7:b1:4a:5c:3f:20:b2:4d:ff:d4:0d:
40:f7:1a:38:c5:81:01:45:fa:0b:c1:54:da:cf:03:
ea:03:a7:4f:74:c7:97:e3:b9:3b:5e:34:04:e4:56:
c3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:29:91:74:60:38:1B:20:A7:8E:E3:E2:F2:FD:6D:A4:42:83:77:20
X509v3 Authority Key Identifier:
keyid:D8:AF:F5:03:FE:8C:5B:D2:26:6A:A2:EC:AB:E5:52:CA:75:14:7F:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:80:a6:d1:0b:2d:2d:df:68:c0:34:26:e5:18:21:87:1d:ca:
8a:6a:c3:04:57:96:87:9f:67:a3:76:c7:29:ee:f5:99:41:62:
16:e4:08:ed:95:a1:80:2e:e9:69:b6:0d:43:b5:5a:48:91:21:
51:c7:d3:a5:61:17:51:a9:4b:dc:27:76:85:76:a5:e4:6f:35:
e3:82:64:4f:b0:72:07:7f:44:e8:74:26:30:3c:e5:8f:78:9e:
97:26:87:48:e2:22:c4:1c:31:b6:0e:b8:ce:1c:1a:74:38:90:
aa:78:4c:e8:50:58:12:b3:5e:80:2e:0a:54:bd:ad:55:5d:7c:
05:f6:2f:e4:34:81:6f:99:ab:54:f1:cf:59:97:16:f1:29:ce:
71:1f:d8:e6:13:d1:64:a6:2b:2b:d0:06:53:80:29:a5:ca:dd:
3f:da:bb:01:87:c3:58:38:af:84:45:6d:22:73:60:37:e6:b0:
63:92:ad:3e:b6:4b:fb:9f:07:ad:b7:50:c4:72:d5:ee:b7:31:
54:de:54:a1:5d:4e:89:5d:7f:8d:e0:74:70:a8:c8:ef:71:56:
a2:93:af:62:4b:0a:d0:55:c5:94:13:94:95:ae:1e:5f:65:67:
47:c3:22:24:cc:85:2c:90:dc:84:96:e4:68:42:9d:12:d1:bb:
44:f1:f0:1f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MDQ5RDExMC8GA1UEBRMoRDhBRkY1MDNGRThDNUJEMjI2NkFBMkVDQUJFNTUyQ0E3
NTE0N0Y2NjAeFw0yNTExMDMwODAyNTlaFw0yNTExMTAwODAyNTlaMBgxFjAUBgNV
BAMTDTY5MDg2MWIzLTI5YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDRyf6GVL09ntftbNrrC47f8FnscilyM+hzc7050cQWvJIve5GZsdjdbxPhCi+w
iZDsP+qBqHXt1TxoUDbatrS3bD9O6fWUyNdA9hwOcSl51R+xMTsCgzz57dvMczmq
+i2ELoEIuj+UquZB9jV1FamF9Zk7jlbzvqo8YBCdSq55tC1O263q4gR6D89A7+kQ
/p37pfojH2kpTQa1jP20+VRkgHsSaAcVMJ8sl5HU/dfvl9OGsL4wpKOq7xrDELbn
a55sU4utLxnz0R53PO+HskZ8c09XO1H3sUpcPyCyTf/UDUD3GjjFgQFF+gvBVNrP
A+oDp090x5fjuTteNATkVsONAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXymRdGA4
GyCnjuPi8v1tpEKDdyAwHwYDVR0jBBgwFoAU2K/1A/6MW9ImaqLsq+VSynUUf2Yw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwNDlEL0I1N0NBNTU4QjJD
NjExRjA5MTM0QkE2REM0RjlBRTAyLzJLXzFBXzZNVzlJbWFxTHNxLVZTeW5VVWYy
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMktfMUFfNk1XOUltYXFMc3EtVlN5blVVZjJZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw
NDlEL0I1N0NBNTU4QjJDNjExRjA5MTM0QkE2REM0RjlBRTAyLzJLXzFBXzZNVzlJ
bWFxTHNxLVZTeW5VVWYyWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJmAptELLS3faMA0JuUYIYcdyopqwwRXloefZ6N2xynu9ZlBYhbkCO2V
oYAu6Wm2DUO1WkiRIVHH06VhF1GpS9wndoV2peRvNeOCZE+wcgd/ROh0JjA85Y94
npcmh0jiIsQcMbYOuM4cGnQ4kKp4TOhQWBKzXoAuClS9rVVdfAX2L+Q0gW+Zq1Tx
z1mXFvEpznEf2OYT0WSmKyvQBlOAKaXK3T/auwGHw1g4r4RFbSJzYDfmsGOSrT62
S/ufB623UMRy1e63MVTeVKFdToldf43gdHCoyO9xVqKTr2JLCtBVxZQTlJWuHl9l
Z0fDIiTMhSyQ3ISW5GhCnRLRu0Tx8B8=
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:09:43 2025 by rpki-client