
$ rpki-client -vvf rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft
File: 5c6UvYXPCPR6j97JcE8dztA4Bow.mft (raw, json)
Hash identifier: ttBuGhvqXgwnAzCH22UDtl5cuLFPuR6g+3nQ3ABWUXk=
Subject key identifier: 84:D4:19:A2:5C:E7:33:56:DD:F1:E2:14:09:CB:3E:C8:F0:85:54:06
Authority key identifier: E5:CE:94:BD:85:CF:08:F4:7A:8F:DE:C9:70:4F:1D:CE:D0:38:06:8C
Certificate issuer: /CN=A91517A0/serialNumber=E5CE94BD85CF08F47A8FDEC9704F1DCED038068C
Certificate serial: B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft
Manifest number: B9
Signing time: Wed 05 Nov 2025 06:10:24 +0000
Manifest this update: Wed 05 Nov 2025 06:10:24 +0000
Manifest next update: Wed 12 Nov 2025 06:10:24 +0000
Files and hashes: 1: 5c6UvYXPCPR6j97JcE8dztA4Bow.crl (hash: qd0NoVUl7UHVcFOxmhAlmXzAcXEmByS8WQkYLiaQQ74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.crl
rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91517A0, serialNumber=E5CE94BD85CF08F47A8FDEC9704F1DCED038068C
Validity
Not Before: Nov 5 06:10:24 2025 GMT
Not After : Nov 12 06:10:24 2025 GMT
Subject: CN=690aea50-11e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8d:22:47:46:7f:47:42:aa:cf:60:76:e1:9e:
b5:98:a6:66:c1:da:fa:e8:42:bc:06:5b:b2:2d:ed:
db:97:66:15:84:b5:53:40:5e:d4:c1:79:8a:00:3f:
6a:53:62:11:9b:93:a0:2b:4b:b7:c8:e2:ce:fa:f3:
d9:75:ca:39:6c:45:63:de:8b:19:1d:c6:30:7a:1c:
7e:89:98:47:3d:24:f0:8a:48:84:29:8e:89:13:f1:
db:d8:d6:18:01:58:69:ec:ed:1f:ae:47:26:7a:87:
4e:b6:88:e1:17:dc:0c:07:11:20:2a:91:75:e6:2d:
77:2f:bf:8f:39:51:f1:55:11:5d:13:6d:66:c3:52:
37:63:17:bd:e0:d3:33:3f:b1:27:0b:0e:a8:e6:aa:
96:3b:89:14:48:28:10:7d:62:09:82:c4:31:97:db:
f3:46:3d:b5:0b:cb:a1:b9:90:81:b7:02:a1:3b:0e:
45:8b:b3:13:26:83:8d:3b:fc:53:12:54:51:e5:24:
f5:6d:f3:de:16:b3:e2:25:05:dd:eb:99:47:75:38:
4b:fa:ca:91:7d:01:03:f4:a8:43:3b:9e:c8:e1:2b:
d0:c1:73:4f:c8:57:ef:4b:aa:5c:5d:54:2b:8e:ad:
88:d2:78:50:a3:a1:ff:3e:f4:ea:7b:8c:a9:1e:12:
01:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D4:19:A2:5C:E7:33:56:DD:F1:E2:14:09:CB:3E:C8:F0:85:54:06
X509v3 Authority Key Identifier:
keyid:E5:CE:94:BD:85:CF:08:F4:7A:8F:DE:C9:70:4F:1D:CE:D0:38:06:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:43:3f:ea:01:46:55:99:85:f3:06:5d:e0:6f:76:cd:9d:66:
df:46:ec:70:55:94:82:5d:79:3d:c4:e9:2c:a1:b9:00:f4:0e:
4a:7f:bc:38:08:88:00:1f:bc:24:f8:b8:30:0b:72:f4:ab:3d:
1c:0c:bc:62:80:47:59:5f:af:d1:a2:03:18:8f:0d:ee:6d:70:
2f:7a:7a:ed:6b:42:cf:b5:06:c6:d5:5d:72:50:8b:10:88:43:
7b:3a:1e:ba:5d:dd:02:5d:22:4e:8d:8c:40:83:3b:09:d8:06:
af:6b:0d:18:f6:8e:9c:bf:37:42:8f:99:53:45:45:f6:00:d2:
9f:99:c9:7b:aa:60:ce:ef:a3:0d:c6:2e:5c:16:ae:89:db:5b:
3e:dc:af:b0:a1:27:42:40:db:90:61:f1:e6:a2:8c:88:19:2e:
8f:8d:00:67:95:fc:94:e7:0f:a1:ca:84:dd:d1:cf:3b:35:90:
91:e3:5a:c9:d9:6e:18:77:63:6f:be:7a:dc:e8:8d:e1:69:04:
fb:17:00:e1:61:5c:2e:8e:e4:b3:3b:fb:7c:80:80:34:ec:96:
1a:35:2a:df:8a:e1:90:9e:05:78:bc:23:65:87:af:96:c6:44:
e3:9b:0a:a8:83:8f:21:08:76:d0:e7:fe:44:b0:f2:e9:67:9d:
47:3c:39:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:33:51 2025 by rpki-client