
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft
File: H50_mRdMazcKDlEAAMo997Z0DHs.mft (raw, json)
Hash identifier: ggPqx4YUzVIo1YOEPRPaq5IFwUcKiLx0JD7+axEZmZE=
Subject key identifier: 90:74:58:44:8A:2B:DC:B0:98:F0:34:24:75:D1:EB:DC:EE:06:49:03
Authority key identifier: 1F:9D:3F:99:17:4C:6B:37:0A:0E:51:00:00:CA:3D:F7:B6:74:0C:7B
Certificate issuer: /CN=A9154388/serialNumber=1F9D3F99174C6B370A0E510000CA3DF7B6740C7B
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft
Manifest number: C5
Signing time: Wed 05 Nov 2025 05:59:40 +0000
Manifest this update: Wed 05 Nov 2025 05:59:40 +0000
Manifest next update: Wed 12 Nov 2025 05:59:40 +0000
Files and hashes: 1: H50_mRdMazcKDlEAAMo997Z0DHs.crl (hash: tCHCYLEj/MndYcFG8+hCvn0CKsdkg3+YpRxyOLP6PRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.crl
rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154388, serialNumber=1F9D3F99174C6B370A0E510000CA3DF7B6740C7B
Validity
Not Before: Nov 5 05:59:40 2025 GMT
Not After : Nov 12 05:59:40 2025 GMT
Subject: CN=690ae7cc-9544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cd:4c:d4:ea:d6:9b:9c:ba:49:8a:b1:fa:87:
7e:4a:f2:ad:0d:f0:3c:b9:08:a5:1c:b6:c1:92:a1:
18:62:56:cc:eb:ad:c5:f2:5f:02:d2:83:87:a4:3e:
4c:96:45:42:10:1b:59:1f:05:95:b9:ff:98:81:85:
99:00:3b:5b:b9:b6:2e:e4:7b:e9:2d:b3:46:ad:24:
ad:00:1d:15:82:a7:23:5b:f9:7f:cb:51:91:7b:4f:
b5:3f:96:71:aa:a7:cb:c0:0f:97:90:5b:af:9d:7f:
6f:b6:e4:a7:6c:79:99:30:16:c1:b5:c4:9c:93:76:
f1:b9:16:ab:3a:06:5e:59:4b:a4:02:7d:9f:9d:09:
33:d0:04:83:45:5e:30:a0:59:ea:70:13:b5:37:6b:
72:ea:91:66:92:64:6e:a9:ff:bf:b5:a2:25:b3:cb:
c4:03:4e:ef:11:14:7b:d5:e0:d4:5b:4a:ca:a4:2c:
c5:ce:92:86:36:1e:e3:15:50:ff:e6:0e:f1:92:27:
17:82:1b:bf:09:da:96:63:ac:b5:43:7d:9f:07:09:
ea:7d:76:72:59:10:26:15:bc:be:59:67:e2:0a:63:
aa:83:70:76:ba:04:6b:e2:80:6e:12:01:ce:92:09:
6f:01:ed:96:09:37:c8:68:a1:35:43:d7:30:b3:69:
99:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:74:58:44:8A:2B:DC:B0:98:F0:34:24:75:D1:EB:DC:EE:06:49:03
X509v3 Authority Key Identifier:
keyid:1F:9D:3F:99:17:4C:6B:37:0A:0E:51:00:00:CA:3D:F7:B6:74:0C:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:82:22:a1:b0:c7:1c:67:7b:25:2b:60:6f:18:0a:56:4b:af:
59:52:f8:9a:13:62:6d:46:ca:14:a5:0e:9f:d3:32:cf:9e:f2:
1d:85:e8:86:a2:b8:ac:98:ef:13:cd:88:34:88:83:1e:f4:6d:
ed:db:89:6d:b4:22:33:55:04:64:c7:8f:76:fa:a0:66:0c:6e:
18:99:be:24:8e:c6:b0:10:5a:d6:bb:5f:40:61:75:3c:de:66:
b5:9d:7c:3e:1b:ac:d0:46:e7:28:ab:06:9a:c7:2e:3c:04:0f:
8f:6d:1e:4a:b3:5f:b6:eb:7f:b6:e0:a0:ae:57:49:29:80:15:
a2:94:5c:b9:48:7b:57:3b:13:b1:7e:5f:61:c9:64:b9:27:0d:
af:56:2c:9f:1c:a0:57:ae:ea:0c:ab:01:10:ff:42:64:88:6f:
c9:90:bc:25:a5:8e:84:ab:1d:34:df:33:23:4e:b8:f5:2b:7f:
47:76:15:0f:6e:b9:1b:ad:24:e1:7a:d4:91:e3:53:37:79:dd:
00:e6:5c:fb:49:bf:e4:71:c6:8d:f0:c0:eb:2b:c6:24:c2:0e:
5c:fc:6d:af:45:68:25:f9:0a:7c:73:e7:6b:d1:29:97:41:56:
1d:95:3e:55:a5:36:c9:83:17:ff:dd:25:56:9b:3c:28:71:48:
85:13:9e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:10:29 2025 by rpki-client