
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
File: M5P50HCy5wlJrKKqzI5l6JDnQJk.mft (raw, json)
Hash identifier: Yemzxezm8a/sX/MCmJU042E1snkFkKLDYY4KREja1nQ=
Subject key identifier: BB:09:5E:8D:1E:8C:E9:26:61:F4:31:59:A0:60:1E:35:5C:16:0D:86
Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99
Certificate issuer: /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
Manifest number: FD
Signing time: Wed 29 Oct 2025 04:53:14 +0000
Manifest this update: Wed 29 Oct 2025 04:53:14 +0000
Manifest next update: Wed 05 Nov 2025 04:53:14 +0000
Files and hashes: 1: M5P50HCy5wlJrKKqzI5l6JDnQJk.crl (hash: mJHUNKoG/g+dlsMPU/0Mys3bDwO44jGjahTsgAAkWjY=)
2: 92F925C231F511EFA1744F0EC4F9AE02.roa (hash: 4w86q6EWxPppGmN3WAH7cTrMdPvhFQ2gE3GzQQWS4ck=)
3: 81C87DDE6C8311EFB20D5276C4F9AE02.roa (hash: wTzR2Kl8HLux7RLKUCKwWDVl26livIquwtiZpHpO5LA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl
rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 04:53:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DB72, serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
Validity
Not Before: Oct 29 04:53:14 2025 GMT
Not After : Nov 5 04:53:14 2025 GMT
Subject: CN=69019dba-1709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:57:e5:16:be:80:3c:a6:d7:93:d6:59:ca:
4a:80:58:19:c6:0d:05:a6:b8:05:69:07:7f:bf:12:
10:24:05:2a:15:93:0c:a5:2e:f9:80:b7:33:41:39:
06:e7:e6:31:e5:c7:a4:45:a0:36:dc:fb:4c:48:24:
33:ad:44:70:73:c7:5c:51:86:57:3e:d1:cd:fd:04:
28:93:37:85:e0:1e:4d:34:ff:60:80:43:86:47:9c:
d1:f0:63:0f:08:9e:e3:58:7f:3e:95:73:f7:53:94:
f5:c3:11:bc:19:57:51:6e:3c:0f:fb:4f:be:38:b8:
6f:a2:3e:5f:a3:d6:f3:39:e5:91:2c:c2:3e:c3:fd:
74:64:cb:b7:19:e7:84:7f:4d:ad:d1:99:68:85:d6:
1e:88:b6:45:92:52:7a:03:29:25:84:e1:0f:5e:af:
ab:90:71:38:39:6c:8d:25:a1:31:4f:14:90:f0:85:
28:1d:5b:98:49:7f:a1:b8:50:c8:1e:68:94:70:e8:
fb:5c:62:b9:3a:11:ca:a8:8f:91:99:4f:0e:46:88:
03:eb:38:d1:69:08:ce:ee:53:7d:49:4e:73:5d:62:
a6:9b:1e:eb:13:ff:90:e4:7f:84:f7:84:74:dd:7a:
5e:f1:f5:14:21:0a:1d:d8:ec:38:6e:53:f9:24:ad:
74:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:09:5E:8D:1E:8C:E9:26:61:F4:31:59:A0:60:1E:35:5C:16:0D:86
X509v3 Authority Key Identifier:
keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:33:96:b6:a3:8c:04:68:f2:04:46:05:d0:7d:07:f5:68:6b:
7a:ca:79:23:f8:9b:33:00:e2:82:ff:bf:ad:88:e3:a5:be:46:
ec:3c:97:64:26:db:02:57:4d:1e:91:f1:6d:8e:66:15:5f:1c:
ee:05:ad:e7:9c:39:15:f8:25:79:86:68:33:3b:c5:fa:d7:4e:
24:41:ec:d0:38:1f:1e:dd:41:a6:3b:a4:dc:27:7d:e4:84:00:
77:b1:05:a6:a3:1b:16:94:65:51:a3:b9:e4:e1:b1:25:e5:84:
1a:80:1f:1b:bf:c0:d7:e9:98:4a:e1:2a:fa:23:d9:a2:ff:1f:
1a:a8:60:8b:da:06:67:45:c5:05:ac:8a:7f:89:9d:2e:a6:7f:
33:6f:cb:a0:2f:a6:0f:00:c9:4f:af:2e:0b:ba:49:7d:7e:81:
17:ab:a0:20:61:ea:e8:e6:3b:4f:32:24:83:2e:48:08:66:6e:
18:9d:0d:82:76:ac:b3:1d:74:fc:ab:50:55:3f:a0:7d:29:d3:
7a:6c:03:c7:5b:f3:db:cb:6e:c8:22:b8:a6:44:dc:1c:05:86:
78:29:3d:69:a6:f7:b8:12:ad:b9:d3:04:19:6f:6b:d6:81:c1:
2d:ca:f5:36:30:e5:b0:42:52:e1:8f:af:75:6f:bf:6b:b1:6d:
7e:fa:fd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 06:18:06 2025 by rpki-client