
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft
File: ssb_p2w86pWbar20kn5QEjIHLWI.mft (raw, json)
Hash identifier: sElPSKaJYw1cZuZHC3Xs9dClTh8cOVOYIR3V4j7gz40=
Subject key identifier: 9F:9B:EF:E7:5C:C9:C2:D4:99:FE:0B:3F:1A:BD:CA:4D:C4:76:B8:39
Authority key identifier: B2:C6:FF:A7:6C:3C:EA:95:9B:6A:BD:B4:92:7E:50:12:32:07:2D:62
Certificate issuer: /CN=A911BD0C/serialNumber=B2C6FFA76C3CEA959B6ABDB4927E501232072D62
Certificate serial: 60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft
Manifest number: 5E
Signing time: Wed 05 Nov 2025 07:17:59 +0000
Manifest this update: Wed 05 Nov 2025 07:17:59 +0000
Manifest next update: Wed 12 Nov 2025 07:17:59 +0000
Files and hashes: 1: ssb_p2w86pWbar20kn5QEjIHLWI.crl (hash: Aweai0gINm5OPF/cmKl37hdm7EWi9sW9OuiR2v6+cPw=)
2: B977F0322B3411F08FD74443C4F9AE02.roa (hash: v+cdW5qRRy42rcVfsQ7WNZFoarz0/H2Wz0ZGcvG0ojI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.crl
rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:17:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD0C, serialNumber=B2C6FFA76C3CEA959B6ABDB4927E501232072D62
Validity
Not Before: Nov 5 07:17:59 2025 GMT
Not After : Nov 12 07:17:59 2025 GMT
Subject: CN=690afa27-6cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:8c:91:97:39:ec:b2:8b:2d:16:52:ee:49:
93:1f:79:03:7a:97:a9:62:9a:f4:19:31:27:41:bc:
03:c6:19:fa:5a:1a:ec:c0:6f:48:56:00:f9:d7:1f:
99:2c:2e:a1:60:37:19:0b:5c:37:96:9f:21:a4:94:
f5:02:2b:4a:d7:68:87:93:e4:19:1b:11:b7:92:15:
9f:30:a6:7c:17:0c:f2:e3:74:7b:2f:79:1d:24:55:
88:a9:f0:2b:6b:38:76:d8:66:12:09:ac:7f:cb:83:
44:6c:87:f4:d7:26:a0:c1:2d:2c:a3:f0:3e:c7:3b:
f9:80:41:ad:2d:99:07:d3:a8:ee:f7:cb:2c:5d:b4:
64:3e:ea:b3:db:4c:0e:46:27:92:e4:88:0e:6c:16:
4b:c9:0e:9e:58:9f:f1:50:0a:7f:18:bd:1f:e4:65:
19:b4:92:2d:aa:01:51:d5:17:24:1f:51:a0:e1:9e:
0d:61:73:29:eb:1e:0f:8a:f8:92:7a:3b:fd:60:9b:
d6:a3:6d:6d:dc:92:0c:83:9d:1a:9a:5d:01:b9:73:
fe:46:3a:52:e7:fe:f8:31:40:3c:e8:56:36:5d:4d:
e3:07:09:00:3b:69:96:2d:18:94:b5:07:ef:1b:84:
af:8a:ad:b2:a0:0f:00:00:f7:0f:25:21:d1:63:94:
32:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9B:EF:E7:5C:C9:C2:D4:99:FE:0B:3F:1A:BD:CA:4D:C4:76:B8:39
X509v3 Authority Key Identifier:
keyid:B2:C6:FF:A7:6C:3C:EA:95:9B:6A:BD:B4:92:7E:50:12:32:07:2D:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:29:e3:4d:1e:dc:28:d5:52:02:bd:65:d3:55:8a:b1:be:04:
51:b6:67:81:10:07:02:35:8f:3f:d7:4f:eb:28:7c:60:e4:99:
7a:f3:b8:f8:fa:f6:58:7d:f7:10:79:f1:4b:e1:b6:0f:46:a7:
d5:7e:41:93:9c:4a:e0:cc:1f:fc:b9:45:77:d0:82:fd:cb:40:
3b:bd:46:a4:08:60:33:4d:0f:04:74:1c:62:f2:0b:09:7a:e0:
d4:56:d6:38:8a:f0:79:8f:71:bd:03:55:80:b1:25:3a:52:de:
19:6c:c4:71:6e:d7:23:23:f1:8a:c4:78:e9:b9:da:a8:5f:dd:
f8:e5:d1:02:ae:77:01:13:67:3b:9f:38:f1:ce:a9:8a:ff:70:
66:4a:f5:cd:20:bf:c2:bc:6f:75:6f:1d:7c:26:bb:44:e9:75:
cf:89:17:11:64:a2:45:7d:33:c2:18:06:57:6e:3d:46:a0:d6:
d0:62:70:eb:b5:ff:6c:a0:02:bf:69:0e:17:66:f1:c4:8d:ff:
62:48:45:6b:6a:ee:6a:30:c9:ba:91:9c:ef:35:f6:2b:48:fd:
d5:c1:d5:83:c4:ab:f6:db:93:1d:12:6d:61:db:3f:a2:6a:6b:
2e:3a:5a:b7:9d:9c:1a:61:f4:bf:1b:55:ed:53:52:ae:c4:2f:
72:f5:50:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:52:28 2025 by rpki-client