
$ rpki-client -vvf rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
File: 5K6ANyqGeYe7Kgq74RCrgENw1eM.mft (raw, json)
Hash identifier: 4hOhQYP05TyUHyiTzcwwbJElNYpx24q0XuZ8mFnCZhU=
Subject key identifier: 1C:58:67:52:CD:C9:67:B9:7D:36:5F:24:5C:42:F2:86:38:BC:70:5C
Authority key identifier: E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
Certificate issuer: /CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Certificate serial: 0364
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
Manifest number: 02EE
Signing time: Mon 03 Nov 2025 01:33:17 +0000
Manifest this update: Mon 03 Nov 2025 01:33:16 +0000
Manifest next update: Mon 10 Nov 2025 01:33:16 +0000
Files and hashes: 1: 5K6ANyqGeYe7Kgq74RCrgENw1eM.crl (hash: x341wXtruTrx309/XcaWfATte298e1WVcy6HxKpNKEA=)
2: 10B04C9853D411EFB53AD61CC4F9AE02.roa (hash: Go+fcAH12BxWvxt8qaSo8+7Glvp6WIQoRE1nDrD2I4U=)
3: AA71F05C60EF11EF8D645D72C4F9AE02.roa (hash: tFX2mHpCejE1T1hhbkEHTKBu8FY85bbr60BmVvCm9y8=)
4: 7D96BB10A96B11F09DD07C12C4F9AE02.roa (hash: ViHn2iEW4lQ+O1XYZSj9KYyVaNPycQ1f+FmvPYdpeXI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl
rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 01:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 868 (0x364)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917452D, serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Validity
Not Before: Nov 3 01:33:16 2025 GMT
Not After : Nov 10 01:33:16 2025 GMT
Subject: CN=6908065c-0c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:90:68:6e:85:c9:6e:6b:9d:2d:f4:b1:fd:c6:
e5:b7:95:02:ab:d5:af:fb:56:c1:cf:55:40:2a:2c:
5d:01:87:e6:bc:02:3a:bf:2c:d7:dc:68:e7:7e:38:
72:89:00:3c:e4:ff:ac:bc:66:48:3c:93:bf:dc:6d:
0e:4d:10:8e:32:4b:a8:fa:ff:aa:1a:53:d0:83:92:
76:e8:71:ee:58:f7:a3:c9:c1:e7:b4:21:64:13:61:
0f:8b:3a:6b:bc:bf:34:70:44:8b:db:d4:1f:34:c0:
96:23:30:f8:4a:d5:64:1b:18:e6:29:bb:90:60:7b:
56:93:df:aa:2f:1c:db:30:1a:3c:ad:f1:1d:00:43:
47:c8:f4:16:ec:09:fd:0c:0c:a5:1e:77:da:03:b3:
1c:45:02:a9:19:2c:7e:ae:64:ef:7d:07:ec:8b:36:
72:98:74:cf:2c:fc:9e:dc:44:c7:40:d5:0f:30:eb:
c7:ad:e7:a1:64:9e:c3:7d:66:57:9e:e7:da:cd:a3:
69:94:28:83:df:f6:1f:24:ec:d5:3c:e3:80:57:00:
56:cf:7c:19:29:d1:fb:20:0d:8d:94:4e:2c:d3:d0:
ec:7c:66:8c:2d:4b:be:e3:6f:52:b6:27:85:7a:f9:
bc:37:92:10:d2:39:fe:cb:03:4b:33:7f:50:82:7e:
73:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:58:67:52:CD:C9:67:B9:7D:36:5F:24:5C:42:F2:86:38:BC:70:5C
X509v3 Authority Key Identifier:
keyid:E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:52:0b:c7:90:91:fb:09:c1:35:b2:c7:65:33:ff:b9:0d:64:
53:4e:7c:3a:9c:e8:87:85:f2:7f:75:10:e1:39:5c:1f:69:de:
32:77:23:08:da:0d:5e:8b:1b:94:65:14:df:9a:81:96:38:c5:
5a:ea:68:79:26:5a:87:0e:f5:25:2e:b7:ae:b2:39:e3:21:91:
bf:38:9a:a4:36:7c:fa:14:0c:96:34:68:08:12:36:56:7b:b7:
00:99:13:b9:a7:89:2d:6f:4c:bf:34:a0:80:7d:cc:d5:e4:ae:
95:19:ad:f6:6e:d5:51:6e:18:3c:4c:37:05:4a:42:1e:83:4a:
ca:d4:44:2e:99:51:a1:e2:03:f4:27:bc:97:5d:32:4a:d5:40:
7e:76:47:f7:fa:86:88:38:3a:89:1d:e9:a0:58:9d:3f:ac:28:
4c:dc:33:d4:39:a7:56:eb:8e:f3:23:f0:12:52:5e:eb:10:4c:
c1:2d:5f:05:53:39:f3:37:1a:35:7a:a2:97:1e:78:bc:00:70:
9d:42:89:98:06:2d:51:f7:dc:25:dc:a0:8e:f2:71:fd:42:cd:
45:84:11:4e:e8:17:4a:54:83:30:75:5d:98:bb:80:c4:05:b2:
30:29:1c:a7:bd:ad:ea:05:d8:03:88:a8:c5:fd:72:55:7b:8b:
cc:d5:ee:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQ1MkQxMTAvBgNVBAUTKEU0QUU4MDM3MkE4Njc5ODdCQjJBMEFCQkUxMTBBQjgw
NDM3MEQ1RTMwHhcNMjUxMTAzMDEzMzE2WhcNMjUxMTEwMDEzMzE2WjAYMRYwFAYD
VQQDEw02OTA4MDY1Yy0wYzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtpBoboXJbmudLfSx/cblt5UCq9Wv+1bBz1VAKixdAYfmvAI6vyzX3Gjnfjhy
iQA85P+svGZIPJO/3G0OTRCOMkuo+v+qGlPQg5J26HHuWPejycHntCFkE2EPizpr
vL80cESL29QfNMCWIzD4StVkGxjmKbuQYHtWk9+qLxzbMBo8rfEdAENHyPQW7An9
DAylHnfaA7McRQKpGSx+rmTvfQfsizZymHTPLPye3ETHQNUPMOvHreehZJ7DfWZX
nufazaNplCiD3/YfJOzVPOOAVwBWz3wZKdH7IA2NlE4s09DsfGaMLUu+429StieF
evm8N5IQ0jn+ywNLM39Qgn5zcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxYZ1LN
yWe5fTZfJFxC8oY4vHBcMB8GA1UdIwQYMBaAFOSugDcqhnmHuyoKu+EQq4BDcNXj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDUyRC9BQTQyMTcxRTI3
NjgxMUVEOUEyMjE3MzBDNEY5QUUwMi81SzZBTnlxR2VZZTdLZ3E3NFJDcmdFTncx
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVLNkFOeXFHZVllN0tncTc0UkNyZ0VOdzFlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NDUyRC9BQTQyMTcxRTI3NjgxMUVEOUEyMjE3MzBDNEY5QUUwMi81SzZBTnlxR2VZ
ZTdLZ3E3NFJDcmdFTncxZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCNUgvHkJH7CcE1ssdlM/+5DWRTTnw6nOiHhfJ/dRDhOVwfad4ydyMI
2g1eixuUZRTfmoGWOMVa6mh5JlqHDvUlLreusjnjIZG/OJqkNnz6FAyWNGgIEjZW
e7cAmRO5p4ktb0y/NKCAfczV5K6VGa32btVRbhg8TDcFSkIeg0rK1EQumVGh4gP0
J7yXXTJK1UB+dkf3+oaIODqJHemgWJ0/rChM3DPUOadW647zI/ASUl7rEEzBLV8F
UznzNxo1eqKXHni8AHCdQomYBi1R99wl3KCO8nH9Qs1FhBFO6BdKVIMwdV2Yu4DE
BbIwKRynva3qBdgDiKjF/XJVe4vM1e6P
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:34:54 2025 by rpki-client