
$ rpki-client -vvf rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
File: 5LOuPtIxeiPhm9egMr766tU3J9M.mft (raw, json)
Hash identifier: XPVaWzfoTsMvNpxqiH0KkVbpnnMBwTORM+xOIGBxz8Y=
Subject key identifier: AC:2E:B9:13:E8:26:75:91:07:AA:F1:8E:0A:F0:AC:26:64:F5:A3:E1
Authority key identifier: E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3
Certificate issuer: /CN=A91298E0/serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3
Certificate serial: 34D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
Manifest number: 34D4
Signing time: Sun 02 Nov 2025 14:42:50 +0000
Manifest this update: Sun 02 Nov 2025 14:42:50 +0000
Manifest next update: Sun 09 Nov 2025 14:42:50 +0000
Files and hashes: 1: 5LOuPtIxeiPhm9egMr766tU3J9M.crl (hash: XyUfKj7r5FfOLogrykviPi6vpm8T6YVfIhZWV6NNhPM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl
rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 14:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13524 (0x34d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91298E0, serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3
Validity
Not Before: Nov 2 14:42:50 2025 GMT
Not After : Nov 9 14:42:50 2025 GMT
Subject: CN=69076dea-e0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:95:3b:e7:7b:0e:f5:1c:55:d1:1c:a5:87:1f:
43:09:6c:54:84:a7:56:84:b3:a7:a0:54:b1:1c:fc:
c2:cb:8b:68:58:c3:64:8d:10:f1:86:90:72:3e:0d:
47:75:d4:30:4c:a5:35:87:7d:6c:83:8e:48:b4:e1:
b0:95:80:da:5a:e6:ef:de:68:42:b8:a2:b7:a3:13:
a2:50:c9:51:70:c8:85:da:ab:8c:24:ff:d4:3b:3c:
78:b3:7a:8e:d7:8f:25:76:8b:81:52:c1:3a:38:ad:
d5:32:8d:90:de:33:8e:95:e6:e8:87:38:23:2f:4a:
91:ec:2c:f7:a3:da:a3:b4:c1:09:e9:03:cc:12:45:
3e:0d:8b:6f:52:af:60:f1:fd:d8:d6:d7:d3:49:bc:
ff:9d:9a:c5:3e:6f:ac:3a:ba:c4:ba:4c:1a:f8:62:
49:59:fd:ae:76:bc:30:5b:17:08:96:06:26:df:29:
02:91:c5:d6:02:40:f8:ca:0d:a7:fd:77:6b:40:1e:
97:ea:8c:0e:45:65:f5:cd:3a:a8:85:cc:2e:4d:be:
ef:23:1f:8d:bc:d4:ac:75:02:ca:ee:a4:d0:67:d9:
27:3e:0b:cd:c8:5a:ac:12:71:16:f7:8d:1b:da:3e:
e5:e9:09:09:43:7d:de:79:a9:4e:0b:54:00:0c:17:
23:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2E:B9:13:E8:26:75:91:07:AA:F1:8E:0A:F0:AC:26:64:F5:A3:E1
X509v3 Authority Key Identifier:
keyid:E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:64:86:54:0b:50:28:07:5a:0c:63:7d:5b:ae:be:ef:2b:1b:
e6:cc:17:c2:f6:5e:f5:d1:1f:2b:fe:a2:57:c6:bd:90:32:1a:
5d:3d:6b:c6:06:7f:5d:c4:38:4b:f4:23:09:ee:a7:2f:ac:c7:
e2:03:0c:88:37:c0:5e:e9:b5:dd:38:ff:5c:ac:f3:4d:44:92:
41:9d:a3:10:11:3f:88:2e:ec:2d:30:42:71:36:09:25:79:e0:
81:7c:69:05:e3:a3:82:57:cb:fa:d9:06:34:c8:5b:51:0a:ce:
4c:9c:38:96:65:d5:7e:c1:54:4f:dd:96:fa:b9:4b:5d:2d:19:
a6:d3:e0:de:ec:e0:41:11:df:fe:cb:11:8f:23:c0:94:25:5c:
f4:fb:06:70:bd:2c:dd:4e:12:d1:f3:60:e0:7b:de:3d:9c:3b:
5e:6e:e7:39:3d:3d:e8:02:f6:06:35:d4:de:4a:20:81:70:2d:
9a:e7:33:28:dc:2f:a3:72:c0:84:32:58:5c:91:b4:43:ff:51:
9d:6b:02:50:5e:46:13:81:4f:50:c6:bd:96:25:90:7c:74:6e:
98:9e:62:ec:c3:5f:64:a0:7b:dd:af:53:53:f3:fb:35:95:0d:
d1:06:e8:d5:62:28:b5:44:e8:69:a6:b7:7c:3f:f8:35:b4:81:
d8:36:35:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:18:53 2025 by rpki-client