
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
File: N6CiG7WFEffv59KwRIPtgLSgIzo.mft (raw, json)
Hash identifier: j0pDdMBl7uidBdMrWzx8odjcmz6YLbXRi9m5HU2u88c=
Subject key identifier: EA:0A:DB:4D:E3:6E:98:D5:61:F2:4B:40:A6:97:CD:22:F0:7E:28:D8
Authority key identifier: 37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A
Certificate issuer: /CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A
Certificate serial: 03E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
Manifest number: 03DC
Signing time: Mon 03 Nov 2025 00:33:22 +0000
Manifest this update: Mon 03 Nov 2025 00:33:22 +0000
Manifest next update: Mon 10 Nov 2025 00:33:22 +0000
Files and hashes: 1: N6CiG7WFEffv59KwRIPtgLSgIzo.crl (hash: 1QckKb/T/MRp6NdKKBHa032c3z8dOQi5qnc1JoQnSxU=)
2: AF95CCA0A08711EC88A88D39C4F9AE02.roa (hash: f88t3B3XEIrStaMOLBEX51aBDTSHx6vviz1RmYW+1Aw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl
rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 00:33:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 992 (0x3e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C456F, serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A
Validity
Not Before: Nov 3 00:33:22 2025 GMT
Not After : Nov 10 00:33:22 2025 GMT
Subject: CN=6907f852-9711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:61:b4:3d:08:02:0d:01:7c:fa:ff:2a:75:ae:
28:cc:79:ab:7b:54:5d:ba:00:9a:ed:9c:39:2c:19:
62:95:09:0c:47:4a:ba:0c:67:1e:f3:18:9a:69:b2:
8c:08:1c:a9:4f:b4:bb:61:05:8c:a2:ce:e1:2b:97:
5a:89:93:cb:2b:f1:1e:2f:52:1a:12:b9:c6:bc:19:
52:2f:76:b4:01:86:96:6a:7e:00:87:33:bd:ef:a6:
ca:77:f8:10:4b:f0:cb:64:31:28:4e:12:4f:eb:29:
69:8c:af:57:47:4b:a2:d9:15:ca:6f:ae:33:58:d1:
97:31:e8:e3:39:15:a8:47:20:bd:c2:04:47:b8:0a:
a4:91:f1:1e:01:1a:74:16:e0:9c:b1:d1:77:55:58:
aa:e9:c7:eb:bc:54:7f:32:a7:71:78:5d:5d:1c:48:
8c:43:e3:46:35:91:b6:91:d3:01:5b:5f:47:f3:7d:
09:c6:e9:47:23:28:08:1f:e3:5e:4e:96:1b:c1:a5:
c5:d1:7a:86:fb:68:39:b8:17:3d:83:00:44:19:ea:
d8:3b:a4:ea:24:ac:70:55:3a:e2:f9:2a:98:b9:49:
d9:ff:5e:fc:36:7e:e9:ea:c6:f7:7d:be:e4:4f:7f:
34:34:38:dd:5f:a8:a0:52:c1:82:c7:c6:0b:0d:b5:
a3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0A:DB:4D:E3:6E:98:D5:61:F2:4B:40:A6:97:CD:22:F0:7E:28:D8
X509v3 Authority Key Identifier:
keyid:37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:a2:22:02:a8:94:e0:83:ed:6d:be:b9:ea:ae:ce:2d:56:f7:
dc:07:6b:e3:02:58:3e:83:03:91:05:ad:88:86:ed:f9:d1:c6:
33:6d:54:0a:97:28:be:97:93:22:31:db:46:71:e5:0c:2b:45:
52:5e:e5:d2:b0:06:fb:89:1f:1e:4e:f8:c1:f1:a9:78:5a:b8:
db:5e:90:49:30:17:a0:b7:02:20:88:22:22:ad:0c:1c:7c:f9:
41:c8:a4:53:78:22:1c:0b:11:55:9b:79:cc:e2:4c:a3:97:df:
cb:e7:68:f4:52:e1:c8:21:b5:ec:08:73:45:59:f9:70:27:0b:
c4:82:a1:90:76:21:45:e4:75:f8:b7:6b:e1:4e:4a:c5:46:f3:
f7:21:f1:20:2f:3a:88:ef:04:49:8f:df:5f:bd:a9:d2:ae:f7:
e2:06:29:80:58:fb:93:61:c5:8f:70:e1:2d:63:0b:05:a3:29:
7a:a5:ca:8d:a5:c4:fc:31:74:ec:fe:aa:d0:09:f0:08:cd:3a:
5e:3b:88:7f:e4:1e:6c:20:c8:78:f7:46:a5:cb:3d:46:fe:20:
ea:00:8a:31:d7:4c:87:a2:3e:8b:03:47:50:4a:f8:47:7f:f9:
04:6c:36:8e:81:39:ce:f2:dc:3d:84:15:ad:e0:53:40:56:fa:
57:45:f5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:00 2025 by rpki-client