
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft
File: 6EhjdESa3lWB63jDmC8d4SpKYAM.mft (raw, json)
Hash identifier: B2cYCNZMADyF1oCVURImrrbBIPGF0u/PmJY6es3gNDI=
Subject key identifier: D1:6C:CF:7C:A6:09:1D:93:98:9C:4A:3E:15:EE:8C:77:E6:8F:A1:73
Authority key identifier: E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03
Certificate issuer: /CN=A919D2AF/serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003
Certificate serial: 41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft
Manifest number: 023E
Signing time: Mon 03 Nov 2025 02:28:39 +0000
Manifest this update: Mon 03 Nov 2025 02:28:38 +0000
Manifest next update: Mon 10 Nov 2025 02:28:38 +0000
Files and hashes: 1: 6EhjdESa3lWB63jDmC8d4SpKYAM.crl (hash: UIzK0ZBwR1Km2GFc2pWJGYIMc3vcFV5R85NC+kHnDfg=)
2: AA13A4AC58BA11F08C19015DC4F9AE02.roa (hash: i2dZXW4ctNp3phocZHsJWaRw5A5TAnPYhmdH2iztb0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl
rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 02:28:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D2AF, serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003
Validity
Not Before: Nov 3 02:28:38 2025 GMT
Not After : Nov 10 02:28:38 2025 GMT
Subject: CN=69081357-1fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:50:1c:26:d0:b5:94:7f:10:eb:61:11:5c:57:
9e:e8:c7:25:be:a9:d3:d1:00:1d:ec:56:e7:c5:65:
fb:5c:19:3f:19:10:d5:f4:8e:7b:34:68:3a:e2:f8:
73:84:f3:10:cc:6f:a4:51:a5:26:61:df:20:ef:63:
55:f4:19:a9:56:cb:96:dc:bd:ae:13:e1:90:85:5d:
b0:92:9c:44:76:de:45:dc:38:80:5f:c0:9e:91:2c:
fb:9b:a4:3e:c7:81:c0:3f:31:60:e4:84:fe:bc:52:
94:f3:8a:ca:a9:3a:16:c6:a2:66:65:ba:d6:4c:fc:
d9:6b:4e:55:01:fc:9a:4c:ed:20:62:4e:d5:ca:bf:
5d:48:e8:12:21:e1:a8:88:fc:b2:f9:8b:6e:48:c5:
cb:c8:38:5c:39:ee:18:ed:4c:c2:65:6c:09:50:7b:
62:cc:ce:6f:c1:0a:36:8e:4f:db:50:d8:d9:37:63:
5f:08:9a:b5:77:e9:af:82:69:35:5f:b0:09:14:28:
6d:66:43:3d:8d:47:d3:e7:00:09:e7:09:23:8a:04:
dd:39:68:09:5c:94:e6:33:32:8e:17:08:69:3f:69:
11:af:a6:8a:da:8f:d8:2d:06:48:02:76:cb:5f:0c:
80:23:90:d7:97:51:cc:d0:be:3e:a2:78:d4:aa:52:
a9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6C:CF:7C:A6:09:1D:93:98:9C:4A:3E:15:EE:8C:77:E6:8F:A1:73
X509v3 Authority Key Identifier:
keyid:E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:c9:28:f1:a6:9b:b8:a2:b3:5f:b1:b5:8e:f0:44:77:c6:7c:
b0:a4:92:9e:da:8a:2f:ca:7f:4e:d3:22:41:b3:e9:87:ea:97:
fe:e4:22:1e:c4:a6:70:e9:9c:1c:e5:82:6b:ab:c8:3d:8e:30:
24:d0:e6:15:c0:df:42:1e:58:54:b3:45:8d:6d:a1:4d:9d:75:
3f:6b:1a:8d:55:65:8d:bd:eb:c6:f4:34:76:42:43:0d:ae:21:
a1:39:24:35:74:df:9a:db:62:68:37:5c:e0:3f:20:d2:89:20:
7e:fc:31:a1:ea:6b:17:4e:6c:eb:2f:8a:29:e3:e4:8d:89:3b:
74:b0:51:de:ab:a2:cd:38:10:35:01:aa:1b:c9:41:b3:cc:5c:
90:e4:c1:26:d0:5c:f1:61:15:0d:c8:f5:19:a7:b7:f0:36:72:
19:5a:1e:f5:43:19:32:b7:36:e5:11:86:aa:3a:1b:ba:96:43:
53:dd:f3:13:a3:17:fa:c2:59:07:21:b3:48:c0:86:ec:13:43:
8e:de:c0:92:33:51:4e:ca:38:90:2d:45:2c:6a:c2:70:5b:ee:
e1:06:d9:71:77:f9:ef:64:bb:13:b6:8e:0e:25:68:1b:a8:71:
dd:f9:80:fe:63:93:c2:e9:83:68:d8:cc:8a:3c:2d:d1:b1:49:
ca:9f:7f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:18 2025 by rpki-client