
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft
File: C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft (raw, json)
Hash identifier: 49QLR7dCmyZORYXIVJtQwux2MDJB3lr5Xz7JM87ZwVA=
Subject key identifier: 47:DF:B0:DB:0A:B7:C3:B7:05:44:96:1D:24:08:FB:B8:CD:4B:11:91
Authority key identifier: 0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C
Certificate issuer: /CN=A91A279C/serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C
Certificate serial: 1B07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft
Manifest number: 1AEE
Signing time: Sun 02 Nov 2025 16:18:46 +0000
Manifest this update: Sun 02 Nov 2025 16:18:45 +0000
Manifest next update: Sun 09 Nov 2025 16:18:45 +0000
Files and hashes: 1: C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl (hash: 6eoUM/QyJ9ahaUTFiaJ+p2Lc7bubJ2yDfDLvwO0ExZk=)
2: 9D2302A4F1D011E88D564045C4F9AE02.roa (hash: VxTzxn1U/OXB+CWBddl3uRVosJ2/DdLLOs7eSbWCVE4=)
3: 06D9E242335211E79AC36F87C4F9AE02.roa (hash: cOF8JZVjOiBr4JiE8EO1rOQQwXV4Z3nniDklK+R3JE4=)
4: 9DD35B9AF1D011E88D564045C4F9AE02.roa (hash: BfNK79rwC7mJWHyNf4je/JUK8nGDNnAVVEA5gBoGvSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl
rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 16:18:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6919 (0x1b07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A279C, serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C
Validity
Not Before: Nov 2 16:18:45 2025 GMT
Not After : Nov 9 16:18:45 2025 GMT
Subject: CN=69078466-e03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:45:49:82:5d:0b:0e:0f:28:ce:ff:be:30:cd:
fc:3d:23:c0:34:a5:8d:3d:9c:40:9d:71:e9:3c:2a:
dd:df:22:e8:9c:23:36:34:dd:f4:29:f8:21:b6:73:
06:03:4d:28:d6:fd:d4:08:5f:66:75:a0:08:dc:6e:
b0:bd:43:12:bb:92:76:e7:fb:d7:52:e2:3a:ce:84:
da:a9:b4:f8:91:f9:7e:18:f3:4e:27:2c:ac:fe:aa:
53:e2:82:d6:d5:b9:e0:86:fe:d9:53:75:ef:21:25:
00:d3:d8:7b:0d:cc:2c:ad:b6:07:d2:fe:0c:9e:fb:
18:55:b5:e4:7c:55:b1:21:99:2b:90:28:d5:f2:60:
20:a2:60:22:50:82:2c:53:f4:85:f3:59:b1:60:2c:
42:48:18:8c:40:dc:cf:e5:71:cb:d4:67:7d:77:9d:
ca:ed:9c:06:54:94:23:3a:3f:25:7e:bd:35:47:96:
1e:3b:83:97:90:88:f0:6d:58:c8:49:3b:4f:ca:87:
ec:9b:9a:62:b6:b7:a0:18:c1:34:ea:f2:2e:b0:7e:
1e:ac:e2:41:e4:98:e5:6a:04:97:25:e5:50:a8:12:
4e:11:83:7d:1a:bc:e8:4b:c7:ee:a7:0f:ad:2e:34:
f7:d2:80:38:12:f5:c0:5e:86:ad:89:3a:f1:53:a3:
68:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DF:B0:DB:0A:B7:C3:B7:05:44:96:1D:24:08:FB:B8:CD:4B:11:91
X509v3 Authority Key Identifier:
keyid:0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:3a:da:71:d2:09:66:cc:87:a3:69:d4:72:42:b2:52:b3:f5:
84:0e:f6:b2:35:42:aa:73:93:a4:51:08:0e:e9:c1:c0:c6:e5:
f7:48:40:5d:5b:35:37:dc:0a:ef:31:65:fa:5a:22:68:ac:f7:
92:0f:e6:7f:cc:7b:85:c3:ec:44:1c:83:c9:ed:17:fe:c2:6b:
ff:1d:8c:44:e8:f3:d8:3b:30:3a:b3:fe:23:c4:f3:ef:3d:45:
61:f1:36:94:e4:a8:3d:57:60:dc:5a:a4:f4:80:70:9d:ec:38:
ce:ac:b9:ab:4c:2b:d0:74:8e:32:a5:f1:e9:7c:e8:25:36:e2:
cb:6a:1f:84:43:dc:f4:cf:80:9c:fc:19:f7:3f:f4:09:ba:1e:
35:d9:a0:87:d1:b0:7a:17:92:fd:c1:bb:9f:dc:1f:c6:15:63:
c2:63:12:c6:96:f5:c0:5b:b3:df:1b:09:aa:a6:22:c7:69:8f:
41:6a:5d:48:55:2e:68:24:dd:76:99:d2:c6:23:42:a4:68:ae:
be:58:6f:db:27:6a:24:aa:a8:c5:a8:66:f2:6d:67:f9:c3:77:
c0:be:dc:86:9e:f7:d3:6e:ec:d6:dc:40:3d:c7:cd:47:cf:8f:
3a:c0:a2:3d:19:78:12:2a:5c:73:c1:b5:ac:5d:04:ea:1e:19:
ce:b1:c0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:18 2025 by rpki-client