
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
File: ltMlORFGzztdo_4Uaf7BKLS2jEk.mft (raw, json)
Hash identifier: mXyLiZXC6/3gvZ4nQRjnwKNd0Ay5tIdJiFphntuqRGQ=
Subject key identifier: F5:72:77:4D:C2:DF:41:B7:FE:7B:A8:2E:21:B5:B5:83:AE:CD:98:5E
Authority key identifier: 96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49
Certificate issuer: /CN=A91E63E7/serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
Manifest number: C6
Signing time: Mon 03 Nov 2025 05:47:56 +0000
Manifest this update: Mon 03 Nov 2025 05:47:56 +0000
Manifest next update: Mon 10 Nov 2025 05:47:55 +0000
Files and hashes: 1: ltMlORFGzztdo_4Uaf7BKLS2jEk.crl (hash: 5FkaDbDL57obmtNSmlkfBLVVdIicpis5n6zUNPH4dDQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl
rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E63E7, serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49
Validity
Not Before: Nov 3 05:47:56 2025 GMT
Not After : Nov 10 05:47:55 2025 GMT
Subject: CN=6908420c-690d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c9:7b:22:33:92:0b:00:72:63:34:61:84:97:
f9:48:82:71:e1:0d:32:41:44:ff:28:b8:85:37:40:
c0:2a:b5:1a:c1:0d:11:2b:96:41:55:0d:32:53:91:
58:0e:fb:3e:56:a8:9e:52:0b:a3:27:1b:15:9d:c7:
34:ce:c4:85:47:fd:44:8f:55:e9:66:d9:59:9f:0e:
ae:68:79:31:0e:36:32:64:7b:22:65:3c:c6:db:1c:
f1:94:83:07:a6:b8:54:a5:a5:5c:a9:4c:db:56:94:
b4:a6:8c:6b:a0:50:0c:d2:58:48:11:30:a6:3a:15:
d0:eb:95:94:77:e3:71:e5:db:3d:5d:cf:f7:88:2d:
05:21:1f:43:c8:74:44:61:cc:b7:20:1e:c2:c9:b7:
56:65:2d:e9:48:f0:72:5d:e6:c3:2a:d3:0f:a0:d9:
6c:27:4f:f9:40:d3:74:9c:e5:0f:78:fd:a3:30:a5:
f2:5c:09:d5:cc:84:9f:45:04:e5:63:2e:8c:c0:5f:
6d:43:84:cc:b0:86:46:0d:c7:ae:dc:5f:a2:0c:72:
51:d1:99:6c:b9:c1:00:be:a6:15:00:fe:46:b6:cf:
1e:7f:16:29:4f:d8:74:be:87:d4:d4:87:8a:e9:e4:
2a:7f:e8:d1:16:b4:15:d4:e0:25:6c:36:93:ec:ba:
3f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:72:77:4D:C2:DF:41:B7:FE:7B:A8:2E:21:B5:B5:83:AE:CD:98:5E
X509v3 Authority Key Identifier:
keyid:96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:c9:91:64:16:b1:31:10:13:2d:c8:01:c8:95:ca:b4:a3:32:
e2:97:f4:a5:24:4c:f9:81:ed:84:1f:03:16:0a:55:45:97:53:
a0:95:f3:fc:ea:ea:a2:01:49:9c:89:a1:3f:10:ea:6a:69:db:
8b:c0:aa:17:7d:9b:21:68:42:25:3f:28:8e:a0:4b:6e:95:d9:
70:d7:87:bc:83:33:26:3b:c0:a5:70:d1:df:d3:7c:7a:b8:9c:
2d:48:fa:12:dd:cd:a8:02:54:ba:aa:a1:f1:75:b0:c7:4d:82:
50:43:ad:0c:c8:12:31:23:28:c3:b2:84:5d:61:2c:c8:29:a4:
cc:89:5c:b9:01:7f:a3:8d:ed:c9:01:97:da:7e:d5:68:f0:a1:
9d:2c:30:66:9e:e5:b8:22:33:ea:99:24:88:a8:e3:6a:20:82:
ce:b1:8d:e2:38:3f:7e:c0:35:2f:13:f1:c9:7f:fe:ae:95:fb:
76:aa:e4:f1:d6:4c:e0:55:fe:0a:84:ed:8c:7d:9b:b5:46:52:
a1:2b:0f:55:76:40:54:3f:86:ce:55:a8:1c:98:3a:84:e7:20:
97:07:6b:a7:76:cd:cb:89:14:b3:4e:15:4e:56:90:98:af:03:
d7:f8:24:e0:53:ca:47:aa:f1:d1:c1:36:fe:34:15:45:9c:66:
f0:72:1e:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYzRTcxMTAvBgNVBAUTKDk2RDMyNTM5MTE0NkNGM0I1REEzRkUxNDY5RkVDMTI4
QjRCNjhDNDkwHhcNMjUxMTAzMDU0NzU2WhcNMjUxMTEwMDU0NzU1WjAYMRYwFAYD
VQQDEw02OTA4NDIwYy02OTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3cl7IjOSCwByYzRhhJf5SIJx4Q0yQUT/KLiFN0DAKrUawQ0RK5ZBVQ0yU5FY
Dvs+VqieUgujJxsVncc0zsSFR/1Ej1XpZtlZnw6uaHkxDjYyZHsiZTzG2xzxlIMH
prhUpaVcqUzbVpS0poxroFAM0lhIETCmOhXQ65WUd+Nx5ds9Xc/3iC0FIR9DyHRE
Ycy3IB7CybdWZS3pSPByXebDKtMPoNlsJ0/5QNN0nOUPeP2jMKXyXAnVzISfRQTl
Yy6MwF9tQ4TMsIZGDceu3F+iDHJR0ZlsucEAvqYVAP5Gts8efxYpT9h0vofU1IeK
6eQqf+jRFrQV1OAlbDaT7Lo/hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVyd03C
30G3/nuoLiG1tYOuzZheMB8GA1UdIwQYMBaAFJbTJTkRRs87XaP+FGn+wSi0toxJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjNFNy80QUNCOEJGMDg4
NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9sdE1sT1JGR3p6dGRvXzRVYWY3QktMUzJq
RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x0TWxPUkZHenp0ZG9fNFVhZjdCS0xTMmpFay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NjNFNy80QUNCOEJGMDg4NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9sdE1sT1JGR3p6
dGRvXzRVYWY3QktMUzJqRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCRyZFkFrExEBMtyAHIlcq0ozLil/SlJEz5ge2EHwMWClVFl1OglfP8
6uqiAUmciaE/EOpqaduLwKoXfZshaEIlPyiOoEtuldlw14e8gzMmO8ClcNHf03x6
uJwtSPoS3c2oAlS6qqHxdbDHTYJQQ60MyBIxIyjDsoRdYSzIKaTMiVy5AX+jje3J
AZfaftVo8KGdLDBmnuW4IjPqmSSIqONqIILOsY3iOD9+wDUvE/HJf/6ulft2quTx
1kzgVf4KhO2MfZu1RlKhKw9VdkBUP4bOVagcmDqE5yCXB2unds3LiRSzThVOVpCY
rwPX+CTgU8pHqvHRwTb+NBVFnGbwch40
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:04 2025 by rpki-client