
$ rpki-client -vvf rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft
File: 5c15IB7rS9nw73ZW5zJfVxZffqA.mft (raw, json)
Hash identifier: uODUiHEpQ/lreOqZie8PtPAkuP2hHiTSqCjYPEVg0yQ=
Subject key identifier: 32:BC:19:D2:7E:56:E4:E7:77:E7:1C:EB:79:1B:D0:8C:70:AE:98:70
Authority key identifier: E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0
Certificate issuer: /CN=A911218D/serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0
Certificate serial: 0818
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft
Manifest number: 0809
Signing time: Sun 02 Nov 2025 20:56:57 +0000
Manifest this update: Sun 02 Nov 2025 20:56:56 +0000
Manifest next update: Sun 09 Nov 2025 20:56:56 +0000
Files and hashes: 1: 5c15IB7rS9nw73ZW5zJfVxZffqA.crl (hash: KlJbPxhX245qXiKLxHmD3/8DIL/WAIPcpQRbtA3eOPQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl
rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 20:56:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2072 (0x818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911218D, serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0
Validity
Not Before: Nov 2 20:56:56 2025 GMT
Not After : Nov 9 20:56:56 2025 GMT
Subject: CN=6907c599-1930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ae:93:91:0f:12:8e:0f:6a:4b:68:d7:57:b8:
81:a3:70:98:94:5f:a6:da:14:1b:32:4b:13:2a:34:
7a:5f:d8:59:4e:41:1c:87:be:2a:83:c1:0d:4b:e1:
12:5e:df:4f:67:9b:19:3c:28:53:82:ed:00:cd:b6:
21:70:99:e3:93:be:9d:cd:1b:07:54:52:a6:56:0b:
35:9c:90:e6:2e:51:b2:15:ae:56:aa:41:21:9f:56:
aa:6a:3f:5a:14:b4:11:7b:21:3d:98:11:b7:9a:65:
89:5f:c9:98:f3:b4:af:89:e4:12:64:b5:e4:e6:14:
20:42:46:03:fe:38:60:d0:76:f7:b8:33:f5:21:35:
57:8b:d7:ed:41:2f:22:f7:b6:62:96:05:3b:8c:77:
25:56:bc:52:ee:49:d9:0e:7b:ec:7b:1d:0f:44:44:
ba:5a:22:a3:29:f8:ae:60:e8:37:b9:65:fc:72:b9:
08:1a:f4:32:37:53:bf:83:2a:aa:78:d6:a5:91:22:
2d:58:8c:e8:3d:67:7a:0a:5c:50:54:89:03:ab:1a:
8c:d0:b2:1c:18:7c:76:aa:7a:c1:bf:1d:9e:db:e6:
4e:7c:a2:69:c7:50:ac:75:ae:3e:e3:14:03:d3:76:
db:a3:eb:17:54:38:8e:7d:87:0e:2b:c9:85:8f:37:
95:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BC:19:D2:7E:56:E4:E7:77:E7:1C:EB:79:1B:D0:8C:70:AE:98:70
X509v3 Authority Key Identifier:
keyid:E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e4:0a:e4:3f:76:be:ac:50:6f:d0:53:46:b9:0f:0d:0f:87:
e8:a8:56:70:10:61:e5:2a:bd:e8:35:f1:56:f7:79:a7:f1:8f:
d9:36:43:5d:15:fc:29:40:c4:47:0c:d6:36:3e:ae:01:8d:ec:
92:12:99:ef:a3:64:5d:e5:9d:a8:4c:9e:32:1e:79:34:dd:9c:
e1:be:2b:60:31:ec:99:db:e8:4b:b8:5a:d4:36:83:2c:e6:83:
61:9a:32:a1:d8:42:43:1e:8d:b4:b1:f2:82:e0:3f:0a:e1:42:
16:59:41:ec:44:cd:1d:ee:ff:dd:cc:af:2c:3c:e2:ba:77:91:
63:ef:6d:cb:9b:d6:11:3d:28:a5:94:34:a5:3a:3e:af:9f:d3:
8a:4b:e2:15:63:3b:3d:3d:bb:01:d8:07:97:31:3a:5a:2f:73:
14:47:6c:a6:77:0f:00:d8:e6:d1:58:28:f9:73:8a:3b:71:a6:
b9:40:fe:30:07:7a:83:ea:88:a2:85:75:a9:06:48:74:bd:f1:
dd:b1:f8:34:07:59:c4:be:72:39:05:3f:a7:bc:ba:dc:f2:3d:
be:ff:16:53:63:13:85:7b:a9:42:5a:76:e0:b4:c2:f5:65:da:
a5:e2:ad:0c:d5:6c:00:91:eb:77:f4:30:b0:8f:2f:6b:3c:91:
dc:78:31:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:36:25 2025 by rpki-client