
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft
File: d6ZVRx-6dn5r39z-zejQR3AQCW0.mft (raw, json)
Hash identifier: b0MO+MqOz3Y6KBUcH/O/lCuTGVbbMa2ouNTxbslOlCQ=
Subject key identifier: 5B:AB:3F:04:10:9B:D2:85:74:2E:7A:2B:42:C6:9F:B5:4B:AD:5D:BB
Authority key identifier: 77:A6:55:47:1F:BA:76:7E:6B:DF:DC:FE:CD:E8:D0:47:70:10:09:6D
Certificate issuer: /CN=A91CCF26/serialNumber=77A655471FBA767E6BDFDCFECDE8D0477010096D
Certificate serial: 0992
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6ZVRx-6dn5r39z-zejQR3AQCW0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft
Manifest number: 0992
Signing time: Tue 04 Nov 2025 20:07:40 +0000
Manifest this update: Tue 04 Nov 2025 20:07:39 +0000
Manifest next update: Tue 11 Nov 2025 20:07:39 +0000
Files and hashes: 1: d6ZVRx-6dn5r39z-zejQR3AQCW0.crl (hash: uykEv+Jj2DubO4mAyPW0UGzq9ICQHmof09NoINUzjzI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.crl
rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6ZVRx-6dn5r39z-zejQR3AQCW0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:07:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2450 (0x992)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCF26, serialNumber=77A655471FBA767E6BDFDCFECDE8D0477010096D
Validity
Not Before: Nov 4 20:07:39 2025 GMT
Not After : Nov 11 20:07:39 2025 GMT
Subject: CN=690a5d0c-f861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:b3:ad:2e:35:21:3f:4b:15:f1:9c:af:b4:
49:4d:be:c0:b4:ce:9d:42:10:3d:45:25:79:a4:cb:
71:d3:9f:6b:8c:d7:e8:61:b8:4e:84:53:51:fb:69:
b2:51:8d:ac:6d:0e:6b:6e:76:8e:6b:86:33:0d:9b:
2e:61:65:46:c5:42:67:bd:7b:67:10:e3:72:99:dc:
a4:fa:4d:36:56:e3:2a:85:44:bc:0c:04:b9:81:73:
88:10:52:1f:90:17:74:4f:67:70:0c:40:45:56:8f:
8d:6a:8d:12:58:c5:c6:f8:6d:f7:02:b1:d0:f1:6f:
a1:99:9e:de:0d:de:9d:42:e9:2b:42:4d:0a:f8:f6:
15:f1:b5:b2:e4:e8:0c:09:0b:51:20:5f:e5:86:d0:
a5:77:1a:fc:b3:d3:ff:9e:8f:44:d4:c5:bf:5e:e3:
79:48:90:6b:c2:25:7b:a7:98:60:22:0e:13:bf:60:
7e:58:f8:19:02:45:58:f3:54:d1:22:64:80:7c:97:
9a:8e:07:4a:c7:b6:5e:81:48:d4:6f:d0:f9:e2:35:
a0:9d:64:5a:96:91:40:30:06:13:f0:b2:1b:0f:fe:
b2:06:25:12:13:f0:c3:f9:a1:9c:a6:22:8e:4e:16:
92:01:0d:0b:cb:0f:93:44:32:21:ec:b4:c1:f4:15:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AB:3F:04:10:9B:D2:85:74:2E:7A:2B:42:C6:9F:B5:4B:AD:5D:BB
X509v3 Authority Key Identifier:
keyid:77:A6:55:47:1F:BA:76:7E:6B:DF:DC:FE:CD:E8:D0:47:70:10:09:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6ZVRx-6dn5r39z-zejQR3AQCW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:94:84:23:7a:de:99:97:5b:ab:12:0c:99:a5:04:04:06:6c:
91:d0:d3:49:3a:60:6a:3b:a4:a1:06:d6:ed:75:43:9f:81:52:
86:74:02:1e:1d:76:29:de:9a:25:23:38:93:ab:4c:af:cc:f2:
97:c9:53:8e:af:87:1a:80:df:2e:c3:d5:ce:95:19:21:b4:8e:
50:dc:3f:0c:10:3c:ef:93:b8:e0:89:d8:20:b0:81:56:9f:5f:
e3:8d:54:a1:04:a6:9a:6e:0c:24:8a:6a:d6:f9:21:92:14:f6:
38:d6:e2:2e:d2:f7:69:72:a0:ea:98:88:dc:1e:70:b5:40:7f:
ce:94:57:dc:b2:83:19:11:68:36:1b:ef:30:b9:bd:85:66:f7:
07:e3:f3:09:d3:50:99:6a:55:b6:70:12:09:dc:5e:7d:98:c2:
13:56:bb:bc:bd:fb:42:a5:27:93:bc:2e:bb:c7:3f:e8:d4:a9:
30:46:05:c5:48:f0:8c:59:39:b9:bb:ef:5f:0c:f9:bd:b3:25:
4f:47:55:60:96:d4:8f:d2:9a:fe:86:24:93:3d:b5:d8:3b:b9:
aa:e5:14:09:54:88:7e:3e:ba:9a:e6:2e:e2:0c:e7:8a:f1:5a:
f8:a7:7f:a2:03:ca:19:cd:76:78:76:2b:ac:42:2b:4c:04:db:
d5:dc:24:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:28:39 2025 by rpki-client