
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
File: 6wr0cxLfFL-ROszd3wzcPTwV6mA.mft (raw, json)
Hash identifier: WbAxpNyypYwfaoJU7jmMrMWEEsjzhD0xqEIz6ppUs6Y=
Subject key identifier: 8A:EE:79:29:5E:E1:3C:C4:AB:8C:C7:97:AD:6D:DD:05:00:E4:B4:DF
Authority key identifier: EB:0A:F4:73:12:DF:14:BF:91:3A:CC:DD:DF:0C:DC:3D:3C:15:EA:60
Certificate issuer: /CN=A91BF119/serialNumber=EB0AF47312DF14BF913ACCDDDF0CDC3D3C15EA60
Certificate serial: 01BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wr0cxLfFL-ROszd3wzcPTwV6mA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
Manifest number: 01BA
Signing time: Sat 25 Oct 2025 06:23:56 +0000
Manifest this update: Sat 25 Oct 2025 06:23:55 +0000
Manifest next update: Sat 01 Nov 2025 06:23:55 +0000
Files and hashes: 1: 6wr0cxLfFL-ROszd3wzcPTwV6mA.crl (hash: y4QyOsNt3Gt6MC6ZTyLfASzyZCoANLLxGfuSHFhOvTU=)
2: F08468EC092811EEA1BB7E73C4F9AE02.roa (hash: MXFdujZ+nAPECH8UBuQy5IelDh540oVpA1herCcQ+54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.crl
rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wr0cxLfFL-ROszd3wzcPTwV6mA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 06:23:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF119, serialNumber=EB0AF47312DF14BF913ACCDDDF0CDC3D3C15EA60
Validity
Not Before: Oct 25 06:23:55 2025 GMT
Not After : Nov 1 06:23:55 2025 GMT
Subject: CN=68fc6cfb-7537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:4c:c7:02:b5:2e:32:54:d4:90:65:c1:36:
76:6a:d4:5e:8b:ff:a4:28:2d:3b:c9:bb:ae:f3:15:
cc:eb:0e:de:8a:ea:e9:9b:e7:74:72:16:5e:db:c3:
d1:50:21:b4:40:0c:97:3f:2e:f9:69:07:53:fc:a2:
2e:b1:80:d6:9b:f8:e4:d4:69:9a:c2:d9:21:3d:2e:
fc:28:47:68:b0:ab:1c:86:0b:30:95:ba:8d:ea:e1:
c9:e7:4b:ab:f2:92:17:6f:05:c7:d7:e2:1f:d3:9c:
4a:cb:f7:0f:32:69:5f:b2:8f:7a:a3:5b:e7:d0:4d:
17:7b:03:7d:79:f3:13:df:c5:1e:cc:c0:b3:2b:72:
05:28:3a:a1:ec:2a:1e:94:0b:73:ac:e2:44:21:6f:
79:ae:41:fd:eb:a0:21:22:8d:d0:8d:70:fb:f9:38:
81:2c:ca:28:39:16:ed:be:0b:08:0f:8a:4d:f6:b8:
28:48:50:28:a5:98:98:66:c7:7e:ef:4c:e4:32:8a:
36:c3:b6:8a:43:c4:4a:67:80:7f:c0:59:68:1f:c2:
17:0c:50:6b:cf:d0:3d:43:c5:da:77:5b:3b:6b:40:
b4:b4:44:ae:16:05:cd:21:0e:e3:9a:de:df:91:85:
06:2b:a7:51:85:fd:96:71:f6:84:a9:ea:1a:85:d6:
47:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EE:79:29:5E:E1:3C:C4:AB:8C:C7:97:AD:6D:DD:05:00:E4:B4:DF
X509v3 Authority Key Identifier:
keyid:EB:0A:F4:73:12:DF:14:BF:91:3A:CC:DD:DF:0C:DC:3D:3C:15:EA:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wr0cxLfFL-ROszd3wzcPTwV6mA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:8a:f5:33:17:6a:20:3d:6a:05:64:98:53:59:d6:d7:73:63:
e7:25:58:ee:4e:c6:d1:40:43:6f:4a:06:15:c7:68:f9:46:7e:
3f:3a:a4:c2:41:45:54:4e:5a:a6:65:80:a5:3a:e4:2a:58:88:
04:1a:2e:a4:ca:f8:86:60:11:0e:01:35:0d:38:92:4a:9d:3c:
97:f2:59:41:97:f6:ce:9e:c8:0c:3b:28:2d:2d:e8:9a:45:fe:
06:82:5f:c6:f5:ab:ad:4e:b6:1c:80:78:7b:8a:74:24:d0:a2:
e4:5c:f6:cb:58:83:05:be:81:f2:b6:69:96:90:b7:9d:17:3f:
a4:85:5a:e1:c9:75:93:cf:39:8a:4e:91:80:e3:94:0a:0f:70:
c7:41:82:52:51:88:07:70:cc:3a:fd:8e:45:49:a0:bc:12:0d:
53:f3:9f:83:e2:b9:8b:f7:80:a8:52:a6:cc:53:c7:a3:88:b8:
32:e0:37:fc:df:0b:f0:c3:81:a4:7e:bb:f2:11:28:c7:bb:aa:
36:57:45:8b:1f:fc:95:6d:55:74:65:5d:5f:0d:5a:dd:0f:a6:
55:7c:1d:fc:27:16:37:9c:24:73:ca:a8:7b:86:c1:94:ea:1c:
be:fc:b1:e1:1c:25:c1:ac:81:31:ca:81:25:5f:95:ac:a4:d9:
1b:12:3f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:42:26 2025 by rpki-client