
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft
File: 5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft (raw, json)
Hash identifier: POEmJQuwqdK0RdPv3pKFwC79uAoLHKh4fjuDHFfrW0Q=
Subject key identifier: 58:BC:86:81:FC:79:28:50:04:A4:C0:67:2C:5F:5E:4F:E0:9E:7B:17
Authority key identifier: E6:F0:81:9C:59:FD:C6:41:E4:5B:CC:33:CB:50:F3:CD:85:4A:C2:F5
Certificate issuer: /CN=A9119363/serialNumber=E6F0819C59FDC641E45BCC33CB50F3CD854AC2F5
Certificate serial: 04A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft
Manifest number: 06D1
Signing time: Wed 05 Nov 2025 00:08:07 +0000
Manifest this update: Wed 05 Nov 2025 00:08:07 +0000
Manifest next update: Wed 12 Nov 2025 00:08:07 +0000
Files and hashes: 1: 5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl (hash: d35mDzjExQnnxOJPXN3m98PQOgmvXHjh+ITamjmSx5Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl
rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1184 (0x4a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119363, serialNumber=E6F0819C59FDC641E45BCC33CB50F3CD854AC2F5
Validity
Not Before: Nov 5 00:08:07 2025 GMT
Not After : Nov 12 00:08:07 2025 GMT
Subject: CN=690a9567-d944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:18:e4:d1:52:85:43:c8:ee:85:65:9b:64:02:
97:a0:22:e7:42:5c:2a:d8:5b:41:a4:2c:14:7d:75:
c2:22:ce:e6:3e:24:2b:87:9c:6c:b6:40:6f:55:c2:
c8:70:a0:bc:19:0b:3b:b6:cc:ab:19:f6:c1:e4:8d:
61:a5:7f:25:97:96:4f:36:8a:e9:91:43:65:6a:a8:
ce:62:09:ff:a1:be:9f:65:68:c0:4c:41:35:57:4f:
44:de:9f:5c:7e:88:20:94:2b:13:1f:b1:e1:2f:d0:
fa:6a:77:1c:98:59:1a:88:77:d8:e0:15:14:07:3c:
8f:f3:31:fa:3e:4f:7b:0d:81:cd:7f:32:09:dd:6c:
75:9b:1e:73:ce:e6:c7:95:f2:45:69:28:5d:04:6a:
bc:43:b5:66:f2:1c:c0:cb:81:90:16:83:bd:c2:f0:
fa:86:58:6c:b8:2c:ce:23:65:f0:16:04:09:af:cd:
83:1e:d6:3b:ac:a3:0d:70:47:af:08:66:da:82:58:
43:2c:0a:e9:d0:08:89:67:00:7d:05:c2:98:4d:57:
bc:3d:fe:99:ad:13:bd:56:49:9f:6e:37:7b:8e:f8:
85:6f:f3:9f:b8:80:eb:86:00:e8:a0:97:16:6b:91:
cb:e5:bf:fb:8b:12:98:ce:50:1d:69:27:44:d0:c1:
03:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BC:86:81:FC:79:28:50:04:A4:C0:67:2C:5F:5E:4F:E0:9E:7B:17
X509v3 Authority Key Identifier:
keyid:E6:F0:81:9C:59:FD:C6:41:E4:5B:CC:33:CB:50:F3:CD:85:4A:C2:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:1a:ec:1a:74:32:77:9d:c6:03:24:9e:c3:7a:1f:a0:dc:c4:
74:b8:bf:7a:4a:1a:6d:cd:1c:a1:df:0a:3b:b8:18:5c:7c:bd:
ff:9c:c1:0c:de:cb:cb:2f:3d:25:2b:25:22:e2:bc:89:c8:1b:
a3:a0:22:e3:4d:f5:8d:9b:df:74:75:38:a0:02:02:d9:49:01:
d3:aa:ce:3e:09:c3:a2:eb:10:d7:ae:1a:7e:78:9a:a5:65:dd:
5a:5a:b6:22:48:2c:12:8d:67:97:e5:eb:de:1f:b2:61:b7:1f:
c0:ee:91:fc:81:7e:ed:8c:7c:2c:9b:0d:0b:db:a3:40:4b:d6:
d8:ed:cd:a5:b3:7f:b4:28:cb:e7:27:b8:a7:c1:57:08:64:8e:
a6:70:e5:1d:74:24:d8:ad:cf:ac:c1:cd:08:78:fc:eb:f0:3d:
45:53:3e:58:26:3b:a2:9b:3f:a6:23:67:4b:8a:e6:c5:ca:12:
8b:26:b5:09:d9:b5:29:24:0b:61:b0:ba:08:c8:16:7e:d7:1c:
e8:e9:2f:cc:d6:81:79:23:6e:00:41:29:49:df:79:25:c1:e5:
2e:ac:2a:86:2b:bb:42:14:d9:96:54:fe:80:e7:78:d9:37:f3:
44:87:ca:12:f5:a5:93:e9:62:98:81:88:f0:fb:04:db:dc:09:
f8:5a:1d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:25:55 2025 by rpki-client