
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
File: 5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft (raw, json)
Hash identifier: /TiHoBoaOGZrFiUs+9Ltm9yHfPM/Vzp+Au3FBoR2bTk=
Subject key identifier: CC:B9:90:19:E5:35:F2:47:BF:13:4F:BD:A6:19:77:A2:89:67:D2:E6
Authority key identifier: E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8
Certificate issuer: /CN=A9115122/serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
Manifest number: 01D4
Signing time: Wed 05 Nov 2025 02:55:03 +0000
Manifest this update: Wed 05 Nov 2025 02:55:03 +0000
Manifest next update: Wed 12 Nov 2025 02:55:03 +0000
Files and hashes: 1: 5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl (hash: GFMLG7y8l4bbm0W431vqN86YVmoWZsXZ6oRyATLTyr0=)
2: D4B97082EF2211EDB7EFE882C4F9AE02.roa (hash: HWnaY2EEm6u/FMZ1I67pi/PyglY7//JccNuuPPpBYpw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl
rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115122, serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8
Validity
Not Before: Nov 5 02:55:03 2025 GMT
Not After : Nov 12 02:55:03 2025 GMT
Subject: CN=690abc87-193f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:eb:89:f4:60:51:b4:87:62:59:b3:82:0b:
fa:48:b2:e0:6b:5b:c1:a7:65:ed:0b:3d:43:fe:92:
a8:62:12:5a:fe:cc:fc:da:61:40:44:ce:6a:5a:9f:
20:1c:4c:86:a7:a1:6d:80:2b:ec:5d:64:81:87:44:
49:0b:68:ef:48:49:05:3b:e5:d3:e4:d3:5b:95:60:
25:0c:fd:b8:d9:e1:17:2e:63:06:1f:8d:b0:58:11:
b2:d0:30:ee:07:97:9c:5d:e3:37:90:da:3a:8d:24:
b4:22:de:c0:fe:31:e0:40:db:8a:5e:ff:fd:6b:52:
ad:5d:83:bf:37:d7:8e:00:2d:07:3d:e9:d5:a6:2f:
30:95:82:2f:89:1d:f8:2c:89:f8:21:c5:23:24:b7:
8a:19:fc:85:d4:2a:03:a5:19:31:f7:e1:f8:97:b9:
05:08:ac:37:8d:8f:d0:ce:c1:98:6b:06:90:eb:d0:
c4:7d:0d:2c:d0:91:6d:dc:bf:92:44:d0:0a:e6:a3:
86:e5:76:dc:d9:fd:b9:4c:84:da:6c:4b:7d:63:6e:
c0:02:0b:b7:96:7a:39:9e:1f:91:ea:87:b6:65:7b:
df:96:d7:c1:00:ef:47:3b:9b:be:23:48:f6:8d:68:
fc:33:16:69:09:25:0d:4a:8f:cf:c2:a0:2b:15:43:
b2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B9:90:19:E5:35:F2:47:BF:13:4F:BD:A6:19:77:A2:89:67:D2:E6
X509v3 Authority Key Identifier:
keyid:E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:d6:e5:d4:6a:1a:6b:7b:ac:49:41:c2:51:f0:f9:24:63:2a:
7e:9f:d4:7f:fb:e3:64:47:d5:a5:95:bd:b2:99:4b:c0:94:a0:
ff:2e:74:db:11:09:19:af:5a:9c:24:54:21:c8:6d:bc:ac:38:
18:77:2c:9f:a4:0a:a4:80:b6:48:83:de:b3:d9:d3:e8:23:75:
7c:ef:c7:15:8f:fa:03:43:f4:fd:00:c3:5a:55:51:eb:4d:b8:
9e:21:44:1c:c2:4e:bf:10:f8:f2:15:f4:57:ad:a2:cf:4c:1a:
57:6b:52:94:92:b6:7c:a1:1d:d4:0a:80:f1:1e:a0:1d:f3:1f:
87:2c:04:ce:47:b0:92:fb:ef:f0:ef:7d:f9:0d:fc:6d:ae:af:
38:6f:a0:35:d9:5e:3d:a0:d8:51:fd:19:cc:49:bd:78:12:1a:
38:c2:bc:e9:6c:e0:08:87:a0:f9:92:f1:b9:2a:54:6a:60:f6:
db:3e:28:82:2c:d9:df:60:47:f1:72:c1:cc:e4:6c:96:0c:39:
5b:6a:eb:e7:e4:98:47:65:f0:ac:24:bc:ed:e7:c5:99:97:40:
1f:fa:e2:38:18:b8:fa:a5:af:d8:06:e8:d6:96:90:79:72:6c:
d5:7d:7d:88:b2:bd:b6:f6:81:a8:ea:0f:2c:41:2b:67:62:33:
66:8f:b1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:59:46 2025 by rpki-client