
$ rpki-client -vvf rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft
File: 5c15IB7rS9nw73ZW5zJfVxZffqA.mft (raw, json)
Hash identifier: dLg8vvSPJhl8cK3tArcnhbRmoCk1MB3UIZyyQHfiuzo=
Subject key identifier: 72:7F:D8:15:28:30:80:A6:8F:0F:7D:65:64:25:54:97:43:A0:18:61
Authority key identifier: E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0
Certificate issuer: /CN=A911218D/serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0
Certificate serial: 0819
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft
Manifest number: 080A
Signing time: Tue 04 Nov 2025 21:03:42 +0000
Manifest this update: Tue 04 Nov 2025 21:03:41 +0000
Manifest next update: Tue 11 Nov 2025 21:03:41 +0000
Files and hashes: 1: 5c15IB7rS9nw73ZW5zJfVxZffqA.crl (hash: d5OY8lc7JsWj89Ehej1s1el20KKsuxcWuE/qvMFCQaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl
rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2073 (0x819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911218D, serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0
Validity
Not Before: Nov 4 21:03:41 2025 GMT
Not After : Nov 11 21:03:41 2025 GMT
Subject: CN=690a6a2d-a766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:42:2c:6a:19:31:c5:87:fb:ac:7d:5a:fb:50:
1c:f8:1f:2a:0e:d3:85:2d:38:35:7b:94:45:b6:3c:
0b:6c:f7:ee:f6:b4:e6:47:d7:4c:a5:ee:63:ad:cc:
92:cb:a8:07:10:54:cf:86:4f:4d:bd:a0:04:19:87:
4f:b0:1a:18:84:7a:4a:43:26:d4:9d:ef:35:5b:89:
20:e4:96:41:f6:07:2a:de:72:ef:87:1b:fa:32:03:
36:3a:7e:1b:0c:bd:af:07:c1:5e:b4:27:06:5f:1f:
33:17:a6:f8:35:63:a7:19:f8:d2:e1:70:e3:a0:49:
50:22:82:84:2b:48:6f:cc:4f:64:af:58:04:9f:75:
4e:d6:52:bb:4f:e7:03:73:f7:0f:e9:3e:c7:82:c0:
26:c8:b7:ad:af:ba:92:eb:1d:a8:ce:35:c8:b7:02:
4f:9c:c1:30:eb:9f:c5:d1:6a:27:26:e8:9b:35:89:
83:f3:48:bc:b0:23:9e:ff:e1:7c:41:67:a9:26:1b:
c9:be:9d:b4:5d:53:1a:57:26:77:c2:74:82:a2:05:
93:a1:94:af:aa:34:71:21:b8:d8:f2:27:8d:ef:6a:
78:16:80:68:56:fe:67:0a:80:6c:81:3c:c3:7c:f0:
00:1e:ac:b0:62:22:15:29:c4:83:bc:8f:9f:79:48:
3a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7F:D8:15:28:30:80:A6:8F:0F:7D:65:64:25:54:97:43:A0:18:61
X509v3 Authority Key Identifier:
keyid:E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:36:a2:a8:8a:bd:c4:59:e8:a3:cf:79:48:3d:e8:4b:53:0c:
c7:2d:42:9d:37:a6:80:09:74:24:a5:d7:10:ce:52:1c:80:c8:
7c:c2:14:52:83:d8:14:cb:ec:29:25:10:84:c0:e0:65:01:20:
53:73:89:91:e8:1d:bf:60:60:9c:7b:ff:2e:b8:00:55:27:62:
1e:70:bf:9d:a0:30:3b:45:e8:66:ef:39:3f:99:f2:14:32:66:
6e:73:7b:3f:e9:33:43:0c:0d:90:89:55:42:10:41:93:96:c5:
a0:bd:60:a8:c2:7c:f3:33:68:f9:bc:e0:c4:b4:f4:1c:91:7d:
69:8f:d6:21:ef:88:43:35:f2:29:82:99:4a:0b:08:21:3a:32:
37:a3:dc:ef:18:43:11:2d:c1:e4:66:2d:0c:00:ce:37:2a:8b:
c2:30:97:bc:e7:e0:5d:af:34:3d:89:f9:e3:da:5d:db:b8:8d:
0b:d1:89:14:6b:28:6d:35:30:a4:26:ea:40:4a:3c:72:40:15:
a7:5b:21:d9:b4:5d:24:c1:61:16:fb:a1:ef:7f:60:c2:c5:48:
28:96:fc:a6:2c:e7:de:26:eb:e1:52:e7:88:0a:39:ea:1d:47:
66:3a:2d:f6:6f:20:3c:a4:7b:21:28:b9:d8:e9:58:c7:5d:82:
f3:a1:51:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:27:21 2025 by rpki-client