
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
File: g5Veubsl3DOnjslssIEXQZxkulw.mft (raw, json)
Hash identifier: v7Uf2TD8oUY7U4RRRQ8OefMxWTiVrRiy7jyM0DmUhWE=
Subject key identifier: 34:EC:E0:47:37:EE:3D:D3:07:02:D5:1B:C8:DD:A0:21:3F:3A:53:BB
Authority key identifier: 83:95:5E:B9:BB:25:DC:33:A7:8E:C9:6C:B0:81:17:41:9C:64:BA:5C
Certificate issuer: /CN=A9155810/serialNumber=83955EB9BB25DC33A78EC96CB08117419C64BA5C
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
Manifest number: A3
Signing time: Wed 05 Nov 2025 06:30:26 +0000
Manifest this update: Wed 05 Nov 2025 06:30:25 +0000
Manifest next update: Wed 12 Nov 2025 06:30:25 +0000
Files and hashes: 1: g5Veubsl3DOnjslssIEXQZxkulw.crl (hash: kqHxaDyhap6E/Grj3LveDOpMCbj6JWzDT091NbtX2/o=)
2: A9D891D4C82B11EF8409A474C4F9AE02.roa (hash: 9VTnLi5T+YYltF+k17fA4MmiG8WRs/lt6DHBJeHF2Cc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.crl
rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155810, serialNumber=83955EB9BB25DC33A78EC96CB08117419C64BA5C
Validity
Not Before: Nov 5 06:30:25 2025 GMT
Not After : Nov 12 06:30:25 2025 GMT
Subject: CN=690aef01-2913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:3b:d6:88:40:d2:72:aa:89:fa:82:f2:81:
13:15:09:c9:fb:e9:e6:29:cd:f9:49:ff:7e:b9:a0:
6b:8f:f3:58:de:f5:9f:94:dc:c3:f8:08:4b:47:91:
37:d5:31:bc:2c:c8:f8:f7:bc:fe:1e:15:39:91:b3:
4b:71:0d:16:2f:cf:6f:4e:2a:9d:45:54:6b:a8:dd:
d1:f0:b8:9d:53:37:85:e2:f7:41:3d:db:3f:7c:c9:
4b:43:6c:a6:be:5c:03:49:0b:1e:30:c7:85:f9:72:
e0:c2:b0:d6:44:c3:77:13:29:8a:ea:9a:bb:e1:eb:
3a:09:61:47:01:b5:71:5d:b5:24:fb:51:da:92:ba:
3d:b7:53:a3:17:71:f8:92:f6:ea:1c:aa:5c:e8:92:
45:29:ec:14:20:c2:11:c7:20:6f:43:e3:d7:c8:25:
40:ac:08:16:01:b0:27:3f:c3:16:e3:71:a5:70:4d:
42:5c:05:00:b9:80:85:ba:4c:af:58:ce:bc:a2:c4:
a9:0d:b4:0c:ef:3e:31:b1:67:d1:c8:af:3e:bb:99:
9a:80:c4:63:d9:bb:87:bd:ac:2a:1c:39:30:df:fd:
f5:2a:3b:d5:ee:af:a7:e9:0e:c7:45:d4:a4:27:5a:
10:b2:f8:97:93:b2:7e:fb:ca:d7:c1:54:cd:e0:12:
a9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EC:E0:47:37:EE:3D:D3:07:02:D5:1B:C8:DD:A0:21:3F:3A:53:BB
X509v3 Authority Key Identifier:
keyid:83:95:5E:B9:BB:25:DC:33:A7:8E:C9:6C:B0:81:17:41:9C:64:BA:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:7d:a8:0e:ce:39:dc:23:87:4b:99:f5:92:11:8c:23:d5:8e:
73:ed:d3:5a:8e:96:84:40:e1:f8:03:2f:4b:fc:6f:62:0a:fa:
01:9e:e7:b7:7d:c8:6d:74:ce:74:57:cb:38:72:92:63:20:3f:
a1:1d:f5:29:b4:ed:4d:8e:8c:49:03:85:d1:82:6a:7a:9b:e6:
ea:0c:ec:e8:40:2e:09:9f:4f:7b:b2:e5:63:a9:a0:7f:4e:79:
fd:23:29:c5:c2:fc:92:fe:31:c2:af:f9:c6:ba:42:7a:60:c9:
b4:05:ec:fb:4e:69:4a:1e:0f:d0:9d:ee:bb:38:e8:3a:57:52:
e8:44:0d:ec:22:48:87:41:34:d5:0d:46:9e:cc:7c:0a:a5:b3:
52:f6:42:af:76:02:7c:0c:0d:92:52:34:1e:50:a6:7e:4f:b2:
86:bf:d7:cb:b7:ae:bb:33:4b:00:54:df:ec:04:37:73:75:30:
b9:e8:b8:a6:2c:a1:28:27:f0:23:a1:7d:4d:26:07:08:cc:94:
20:49:20:f1:d7:8f:83:08:04:3c:48:62:a8:97:01:86:b1:ec:
0f:0c:bb:c5:c8:1f:89:f6:7e:84:7b:7c:aa:26:ee:f8:c6:1d:
94:2c:12:34:17:0b:84:81:d5:ee:3b:ea:e7:2b:9c:10:7b:7d:
22:75:26:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:48:31 2025 by rpki-client