
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
File: 5B7XVgdLN63ceU-UC9H1Pj9na5M.mft (raw, json)
Hash identifier: OQNbql9FwHREg4kHHHdKVGwSBoV3y7xwGgfUoz9Nw+w=
Subject key identifier: 60:62:5F:12:26:95:E1:EC:0E:10:13:39:DC:58:B0:35:0A:4E:DE:29
Authority key identifier: E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93
Certificate issuer: /CN=A913B5C7/serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
Manifest number: 012D
Signing time: Wed 05 Nov 2025 04:44:08 +0000
Manifest this update: Wed 05 Nov 2025 04:44:07 +0000
Manifest next update: Wed 12 Nov 2025 04:44:07 +0000
Files and hashes: 1: 5B7XVgdLN63ceU-UC9H1Pj9na5M.crl (hash: sbnZbz00Hb0BJoq0W+MzO7ofVsi3PVitgrWAShjTYr0=)
2: B0CE94A0E80911EEADE3420AC4F9AE02.roa (hash: JMqNNeHY27Hx5eJ7SJKoh8TY1qwKjQvReEB44gwMvpE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl
rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:44:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B5C7, serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93
Validity
Not Before: Nov 5 04:44:07 2025 GMT
Not After : Nov 12 04:44:07 2025 GMT
Subject: CN=690ad617-2b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:60:77:a3:db:f0:d5:51:98:55:bd:b3:c1:
8e:39:5c:76:c0:d4:f6:50:a8:8a:b8:06:56:fb:72:
fd:43:9c:4a:a5:6f:46:c5:34:b2:0b:52:2b:73:72:
f7:c3:d6:db:20:52:cd:41:c1:e1:cb:df:be:6e:a8:
d9:db:97:76:34:48:9d:9d:0d:cc:0b:fb:5d:8b:82:
29:f8:1c:11:0c:c0:08:84:e5:87:fa:e2:7a:09:fa:
26:d3:ae:51:8a:c5:9c:89:a5:ee:c8:4f:41:34:51:
9d:3a:eb:18:3a:63:aa:8d:6c:78:7c:95:64:de:ef:
f6:d2:b7:f0:15:6e:d7:cc:92:33:06:11:e8:5e:fa:
53:8e:02:0f:54:ab:c3:95:ae:9b:de:ec:a2:83:f5:
e6:f3:39:fb:3d:43:d5:6d:bd:13:22:3e:36:e1:c2:
90:69:f4:83:ac:d0:2b:65:24:d2:27:be:8d:5a:36:
d3:c0:1f:d8:98:a8:ba:ee:6d:c9:c3:ba:de:c6:11:
b2:df:64:05:b0:c1:e2:1c:88:b4:5d:bd:64:fe:e9:
00:bb:a7:f1:2c:4b:f9:6c:43:5a:5b:26:21:65:95:
a4:5a:fb:f4:0f:71:3a:d2:aa:66:58:75:26:ae:cf:
8b:12:8c:f2:9b:38:3a:e0:7a:29:e7:f5:5e:07:d6:
28:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:62:5F:12:26:95:E1:EC:0E:10:13:39:DC:58:B0:35:0A:4E:DE:29
X509v3 Authority Key Identifier:
keyid:E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:d9:de:d2:bc:4b:2a:5c:c8:0b:59:e8:e6:2c:a6:05:7e:83:
c9:61:6e:8e:cb:87:20:be:f5:7e:64:c1:f3:b6:a2:02:8f:34:
a4:38:78:5f:98:77:e7:ce:96:0b:16:72:75:5a:24:2b:ac:5b:
fb:1b:84:c7:a8:58:36:16:11:0b:4b:b8:13:87:97:4c:40:ee:
3f:71:20:0e:84:b5:46:86:1a:c0:56:b3:1f:f6:ba:15:ad:b0:
2d:3f:0f:e9:f2:e5:68:64:1f:b5:93:9e:47:0d:90:46:dc:c5:
10:04:7c:ab:c9:c5:b5:dd:6c:75:cb:50:d5:2b:9f:e4:aa:30:
44:ee:0d:d9:11:17:15:0e:e2:2d:eb:80:6d:3d:07:6c:d8:ca:
0d:f4:d5:a9:43:2c:b2:f7:e5:63:a9:90:d9:9b:cb:0b:68:36:
6a:ae:9c:d4:db:31:5b:79:88:6c:02:6c:f4:55:1d:f4:e3:3f:
2b:af:41:a6:46:74:14:6c:6b:70:1e:95:fa:4f:1f:6d:c7:5b:
57:0f:87:48:f8:b8:a3:de:63:e4:6c:48:b2:72:64:ee:0e:be:
47:f9:b7:b9:43:ab:24:c3:bf:1c:99:13:ea:50:1a:1f:b4:f2:
60:0c:79:e1:2e:b9:b5:6c:13:66:85:99:d8:95:ce:24:ce:ea:
2b:c3:b6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:35:20 2025 by rpki-client