
$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
File: 6Ihh_0pFOAJnqBtY-pnkia0AG70.mft (raw, json)
Hash identifier: lozqH5lERI2kFatxbCklBYqQrEK+LmHR/Geb5TAhkzo=
Subject key identifier: B9:2F:07:6A:73:5C:D8:24:30:61:0D:F0:CD:A6:70:3B:5C:9A:A6:34
Authority key identifier: E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD
Certificate issuer: /CN=A918ACB2/serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD
Certificate serial: 015C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
Manifest number: 0155
Signing time: Wed 05 Nov 2025 04:22:30 +0000
Manifest this update: Wed 05 Nov 2025 04:22:30 +0000
Manifest next update: Wed 12 Nov 2025 04:22:30 +0000
Files and hashes: 1: 6Ihh_0pFOAJnqBtY-pnkia0AG70.crl (hash: 5sh/y2GbUefnCr68TR7i3hxktokO0hwFdZa/ZwIOW0w=)
2: B66B434EBCE011EE98AEB646C4F9AE02.roa (hash: 4+NB3j+Ku9z9DW7nQRzRq87llzJ2sOudlesGDx2vWI8=)
3: BD1A38D4984B11EFB342C220C4F9AE02.roa (hash: EIknsqOvV+3/e4OowMHbRVdsbkd9a/wu1lD+d08gIWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl
rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ACB2, serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD
Validity
Not Before: Nov 5 04:22:30 2025 GMT
Not After : Nov 12 04:22:30 2025 GMT
Subject: CN=690ad106-e647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:5d:f0:e8:10:f8:12:c3:05:8e:8b:52:6d:
6d:12:98:af:3e:8e:54:e2:3d:24:6a:4b:f5:ee:59:
c2:e9:07:ed:26:26:5b:ee:32:a6:4a:d8:4c:75:49:
12:46:7c:fd:a9:e5:8e:13:fd:c4:d0:0c:3d:9f:f5:
8d:f8:21:4e:8c:18:ba:b8:21:8c:b8:cf:dd:d5:6c:
31:c9:d2:c9:c5:56:ed:ec:58:a4:8a:af:cc:97:87:
6f:7b:fd:2e:f5:16:72:69:b1:19:9b:6d:55:0e:5b:
39:77:83:b7:dc:2d:aa:29:bd:43:76:01:e0:07:c9:
a4:fa:fc:fa:61:34:76:73:1d:bd:88:42:91:e6:33:
3a:bf:dd:fc:87:32:f0:30:39:30:37:ac:22:a7:39:
1c:6b:9f:58:44:9e:ff:99:24:87:28:09:18:7f:c5:
1e:81:fe:da:16:04:8b:4b:27:2a:24:2c:da:91:2c:
63:69:d4:f1:57:5b:81:cb:f9:b2:71:3c:60:bc:8a:
a7:0d:6f:88:51:7f:7d:28:97:ad:b4:f0:81:9f:54:
c2:38:ba:35:5f:60:30:df:07:f2:36:47:58:12:b2:
32:83:ed:8e:b4:33:ab:33:fb:eb:aa:b3:1c:46:85:
ae:e3:5c:73:f4:c9:7a:9e:07:38:7e:df:18:19:83:
f6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2F:07:6A:73:5C:D8:24:30:61:0D:F0:CD:A6:70:3B:5C:9A:A6:34
X509v3 Authority Key Identifier:
keyid:E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5a:65:a0:57:6b:11:24:ca:24:4e:40:c9:bf:37:5f:21:5b:
cc:d5:64:fc:c8:a1:d5:d7:2e:ee:76:71:98:ca:2b:51:59:be:
b6:66:d0:80:ee:1b:5c:34:97:90:48:2f:74:01:3d:f6:10:d0:
cc:7f:ff:fd:4b:30:3d:6e:fd:a7:1e:80:fe:5d:1c:65:37:a9:
16:7e:4b:67:f6:3f:04:67:e6:df:5b:b4:b3:93:01:86:12:08:
2e:ed:a1:fd:cc:d3:ce:77:0c:a2:23:d3:d7:cb:64:6b:3a:eb:
b4:ab:f7:f1:53:cf:29:b0:e6:47:8d:f1:7a:95:fc:0a:2a:43:
2c:34:4e:eb:3f:b5:56:bb:10:1f:3f:2f:d1:ee:e4:55:70:21:
67:fc:53:58:2b:94:2f:b0:02:1a:ab:6d:50:b4:7b:3b:9f:3b:
db:de:77:d8:36:ec:be:31:4a:d4:c0:4b:12:48:bc:54:ee:b7:
1c:e5:eb:30:b6:4f:16:ed:de:39:50:c2:3b:f0:0b:2b:ce:c6:
af:4b:ff:ba:21:cb:d9:17:e0:56:cf:50:7b:39:82:91:e7:38:
64:41:9a:a4:9b:fd:4e:23:d5:cf:fe:6f:89:3e:42:25:64:d4:
7b:16:a2:8e:71:37:5e:8e:61:c2:85:7f:d9:fa:73:3c:cd:76:
f8:39:be:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:25:07 2025 by rpki-client