
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft
File: mBpus4OnlllRIB38cbLqDUSWGxQ.mft (raw, json)
Hash identifier: kq5xo9P+w3XyWwGeKZGg7PoWlbXxevfwkFe/H0pngqc=
Subject key identifier: 12:D6:3E:9D:83:6A:D7:8E:3E:F1:0A:1D:AB:A4:7F:7D:46:89:7C:0E
Authority key identifier: 98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14
Certificate issuer: /CN=A9110888/serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14
Certificate serial: 05B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft
Manifest number: 05AB
Signing time: Tue 04 Nov 2025 23:13:50 +0000
Manifest this update: Tue 04 Nov 2025 23:13:49 +0000
Manifest next update: Tue 11 Nov 2025 23:13:49 +0000
Files and hashes: 1: mBpus4OnlllRIB38cbLqDUSWGxQ.crl (hash: 7VrUKchNuGAHj86OjcLP3084ESlgg86i/DtkOWHZSVY=)
2: B6FC3096EB1611EBB525CD6AC4F9AE02.roa (hash: 9s+ytbSfZP14tsCh3SQ3yDAVSot/0B8wxn8RGQZH8yM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl
rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 23:13:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1457 (0x5b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110888, serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14
Validity
Not Before: Nov 4 23:13:49 2025 GMT
Not After : Nov 11 23:13:49 2025 GMT
Subject: CN=690a88ae-a88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:10:eb:0c:29:e6:5b:6f:34:c8:3e:1b:a1:25:
62:64:40:41:20:28:5b:aa:03:74:03:c7:a3:f4:5f:
20:d1:78:7d:3b:9f:0b:f0:ac:c7:c9:28:11:58:08:
2d:06:ea:a4:66:5f:55:03:a8:4e:17:0d:2a:e7:2e:
51:46:48:27:e5:a5:7c:31:5b:01:6f:4c:34:24:99:
ca:47:be:28:89:b8:10:ae:a9:a0:d2:a5:c0:44:74:
3e:78:8f:4b:e5:4d:6b:86:3f:ab:31:4c:91:33:86:
c8:70:0c:03:e4:1e:cd:45:76:29:09:a5:1e:5b:48:
7a:71:52:0d:11:39:58:d8:2c:36:16:9a:a2:13:2b:
79:2e:3e:01:3a:31:94:e3:11:bf:b4:05:d3:a6:d2:
e8:9f:a0:c4:70:1b:d3:98:2a:4a:db:8d:2a:a1:97:
bc:21:ce:c9:d8:59:96:d6:2f:0b:92:31:9f:92:3f:
19:3b:9c:61:26:3e:00:3b:7a:d0:39:18:54:88:8e:
87:f0:01:ef:80:a5:51:cd:85:31:f1:1b:36:02:f2:
b8:be:53:76:e3:8b:ae:8d:19:30:d0:b3:1f:19:c3:
a9:60:73:01:ce:17:94:75:35:5f:08:31:92:e4:00:
5c:00:70:13:94:7d:5a:c4:8f:d0:6e:eb:57:da:4e:
52:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D6:3E:9D:83:6A:D7:8E:3E:F1:0A:1D:AB:A4:7F:7D:46:89:7C:0E
X509v3 Authority Key Identifier:
keyid:98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:49:dd:01:95:e9:4e:83:f5:33:d0:a3:b9:09:27:1d:2e:9c:
ed:76:c8:61:1d:e3:8b:0c:a9:fa:eb:80:10:5b:fd:23:be:29:
28:ce:08:79:95:b7:27:ce:1d:20:96:a6:64:37:4e:3b:4d:8b:
e5:db:2a:0b:a2:b1:44:80:53:df:79:97:93:d2:69:6a:31:7f:
ac:92:8d:33:5a:9f:13:5d:08:f4:e3:aa:37:bc:72:e0:44:de:
bd:38:f7:dd:8b:bb:64:6f:f1:dc:91:90:c0:6f:3e:5d:da:76:
a5:8f:56:df:29:6b:f6:e7:33:d9:26:d2:9b:df:43:e5:8c:03:
ea:88:e5:58:f0:03:d0:e9:95:8b:8a:54:62:de:00:75:4a:de:
25:ef:bf:c9:23:e9:d8:00:8f:bf:ae:1e:c0:b3:4f:44:96:59:
af:39:40:07:10:7b:73:b3:d8:94:ff:7a:b7:8d:a2:5c:a4:6f:
5e:f0:93:3d:cb:19:b2:b3:bb:54:da:98:94:28:d4:40:9a:fb:
db:45:6a:ee:dc:ca:ec:1c:8e:0d:34:86:c1:ba:51:13:4d:3d:
d1:4f:27:83:33:ee:01:4d:0c:c7:71:85:3c:34:ff:5d:60:ab:
df:0f:c1:07:cf:51:57:95:a2:ee:a6:2a:a1:28:9f:44:ec:97:
7d:76:46:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:25:28 2025 by rpki-client