
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
File: u5rRr2kxSy7y9klB8Db94PfMTwI.mft (raw, json)
Hash identifier: ngxHLYjtXjwMkLx0+1fmxGiNgp2CQzzYuUV9uIb9qdE=
Subject key identifier: 83:4B:23:AA:2A:33:A3:2B:DB:CD:9E:8C:E2:9F:AE:C1:CF:A8:EE:D1
Authority key identifier: BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02
Certificate issuer: /CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02
Certificate serial: 019C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
Manifest number: 0198
Signing time: Mon 03 Nov 2025 00:54:01 +0000
Manifest this update: Mon 03 Nov 2025 00:54:00 +0000
Manifest next update: Mon 10 Nov 2025 00:54:00 +0000
Files and hashes: 1: u5rRr2kxSy7y9klB8Db94PfMTwI.crl (hash: WIYrmRoEEkY+Qcc43vJOfsYNjvL18alJ4wWcGHnjftE=)
2: B6369EA2521711EE899DAC80C4F9AE02.roa (hash: leuMzpLaxFsvYZtfj5XFjNm4DVLoebp+rvO2FUHNRVo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl
rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 00:54:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DA8C, serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02
Validity
Not Before: Nov 3 00:54:00 2025 GMT
Not After : Nov 10 00:54:00 2025 GMT
Subject: CN=6907fd28-73ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:34:8d:59:96:ef:55:86:4f:ae:20:d6:92:0f:
13:1d:f7:af:fa:89:2e:41:1f:01:d4:da:71:3f:59:
98:e3:87:36:6c:ee:95:bf:53:6e:7c:b8:0a:2e:92:
28:5b:f6:3d:90:03:ae:8d:c6:2b:fe:be:71:e6:4f:
6b:bf:45:a8:ea:0f:d4:98:d9:6d:b3:b3:c0:2e:59:
eb:4f:fc:f2:e4:68:9e:a4:4c:1c:aa:d7:79:c7:ff:
5f:33:36:69:df:83:ec:90:2b:5d:bb:a3:30:0b:67:
ee:75:e2:8a:de:f5:97:29:de:7f:55:34:db:d6:76:
1e:27:d8:84:81:54:ec:08:14:3f:23:59:9e:c1:27:
6d:cf:52:ba:d1:cd:a2:fa:6f:90:82:51:7b:ab:a2:
1c:6d:36:e7:a2:b0:eb:7e:8c:f3:a9:36:35:73:5b:
6e:35:4c:a5:7c:8e:e3:d2:0c:6a:5a:c6:a4:be:94:
80:f7:d8:75:e6:29:04:ba:54:45:4d:d0:2e:24:b2:
a8:ac:7e:d5:56:80:37:85:1c:d8:85:74:ef:55:b3:
9c:49:6d:04:e3:c5:cd:7e:96:a6:4a:89:eb:c5:55:
03:ab:94:05:16:95:e8:8c:55:8b:9c:4b:b0:fa:7f:
77:3a:13:84:f9:3c:02:ef:e0:1d:93:7c:86:c9:a1:
82:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4B:23:AA:2A:33:A3:2B:DB:CD:9E:8C:E2:9F:AE:C1:CF:A8:EE:D1
X509v3 Authority Key Identifier:
keyid:BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:00:da:17:67:8f:de:1e:36:83:47:d3:5f:4c:06:a7:44:76:
6b:4f:11:5f:c9:e9:68:9b:fc:88:fc:00:1a:43:16:d2:49:c4:
19:e7:41:83:b9:23:fb:d9:d8:3e:f1:31:67:c8:6e:8b:71:3e:
c8:42:8a:8f:8b:49:18:f9:9a:b9:42:88:b9:8d:6c:44:22:19:
30:91:28:df:c9:ee:8d:99:ea:8d:6e:15:df:b9:5c:68:4c:88:
99:1e:3c:56:01:70:da:fc:b6:ae:11:46:1a:f9:ae:00:18:66:
bb:db:ed:34:bd:81:34:78:08:d5:ac:34:24:0c:a1:0e:0f:30:
70:2e:70:53:9d:8b:9b:a9:66:ee:22:75:51:ce:ed:aa:e3:68:
df:c9:99:34:3a:1c:26:7d:f0:0a:a7:27:1e:0d:8e:38:3e:8b:
9a:a3:7a:c4:24:9e:19:fc:72:8c:30:cd:a5:76:93:24:a5:0d:
32:d8:ca:04:b2:b7:6b:91:15:fd:c7:4a:41:c9:9e:7c:55:fe:
cd:8e:1d:30:c3:d3:c0:22:3f:88:41:66:e3:ff:ec:9f:c9:4c:
c3:45:69:b5:77:e6:35:32:41:81:35:2a:2c:a6:83:1a:6d:f5:
19:1f:9f:59:a1:de:22:cb:10:37:69:ac:7d:8a:d3:8f:dc:f0:
ea:14:cc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:43:02 2025 by rpki-client