
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
File: 5sRskdEtWFoSsFVpYh3uGtP4kI4.mft (raw, json)
Hash identifier: 6iVDv/rRgc4H1LkgipmyQiXO7w0yIC8OI0PvSx/2iWY=
Subject key identifier: 66:EB:4B:24:DF:30:D1:42:3D:53:A8:95:A2:84:29:06:BE:41:F4:A0
Authority key identifier: E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E
Certificate issuer: /CN=A917A362/serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E
Certificate serial: 0183
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
Manifest number: 017F
Signing time: Wed 05 Nov 2025 03:51:57 +0000
Manifest this update: Wed 05 Nov 2025 03:51:56 +0000
Manifest next update: Wed 12 Nov 2025 03:51:56 +0000
Files and hashes: 1: 5sRskdEtWFoSsFVpYh3uGtP4kI4.crl (hash: pZFRMr+Wwgc31OuHWur41NVBJUHp4dq4ysKDd4vrxJo=)
2: 1B299892726F11EEB1217365C4F9AE02.roa (hash: TFl3UUaIvz5mdJOK5oWLRzuJytmWENM4h3ilLWP9+k4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.crl
rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A362, serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E
Validity
Not Before: Nov 5 03:51:56 2025 GMT
Not After : Nov 12 03:51:56 2025 GMT
Subject: CN=690ac9dd-a0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:41:62:ef:0c:c9:9a:5d:34:12:2d:95:72:
ef:e8:2a:fe:6e:b2:0b:87:3d:a3:45:a6:58:e8:9a:
23:83:69:03:fc:8f:fd:fc:6c:ea:f4:59:60:c2:e4:
00:16:1f:16:24:19:cc:98:0a:47:f9:01:a6:b7:71:
b5:55:cb:d3:8b:b3:72:d5:d8:1f:6f:ef:24:e4:84:
de:47:30:d9:9a:37:e0:ab:5f:cc:64:ff:78:5d:16:
af:e2:7c:a6:fd:66:7e:1c:96:32:2b:f6:57:16:b5:
91:a6:07:57:9e:bc:6c:af:a4:e6:0d:95:bd:39:47:
78:ff:0a:df:04:41:61:44:dd:c1:96:1f:d8:7d:48:
87:75:3a:de:47:97:52:89:34:04:3d:47:af:96:35:
2e:87:dd:fd:a2:95:8a:c8:9d:16:68:23:9f:52:89:
3f:6a:47:0c:3f:5a:28:c0:50:5c:23:19:bc:a8:d9:
18:44:6d:41:74:dc:48:8e:ba:c2:26:b1:8a:f6:79:
5a:e1:39:40:87:6a:79:41:99:1a:c5:35:9d:f3:a1:
7f:e4:d6:37:ce:8e:e6:5a:e6:33:e8:01:33:9d:73:
e7:98:ca:d6:2f:d9:01:2a:36:67:cb:1e:1d:c1:4f:
26:f2:88:06:92:73:53:d2:06:22:1d:66:da:06:5a:
71:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EB:4B:24:DF:30:D1:42:3D:53:A8:95:A2:84:29:06:BE:41:F4:A0
X509v3 Authority Key Identifier:
keyid:E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:69:f3:13:eb:e9:f7:2d:d0:0f:81:bb:2f:ab:0f:c6:72:6b:
92:05:24:32:26:fe:43:da:6b:c0:44:36:43:ec:95:53:d2:50:
18:b1:05:ea:3a:08:91:10:dd:fd:4a:2a:b8:5c:49:b1:ab:87:
ee:a5:64:a9:39:bc:a1:8a:b0:e1:61:6a:f0:9f:e1:57:41:d1:
48:1f:d3:6d:51:0b:0a:e2:b9:0f:20:35:43:09:99:df:ac:76:
23:3e:31:73:96:a0:26:73:3d:a4:3f:24:42:06:57:5b:5c:07:
2f:6c:2a:fd:2f:d7:b6:30:b0:1b:d1:cd:03:01:e4:5d:3a:6c:
20:37:d0:4e:6e:d3:a9:de:33:9a:7f:cc:48:90:c0:79:6d:b0:
6d:f4:77:60:82:2d:7b:c5:f0:28:4c:14:6a:53:5d:d7:7b:be:
ab:46:e3:17:68:0d:7e:96:5f:fa:89:e1:01:7d:1e:58:d5:42:
06:b8:0b:63:d3:8c:f9:5a:e4:6f:24:04:66:60:55:ce:f7:96:
1f:df:dd:af:7e:2f:61:b0:36:6b:ea:c0:38:b0:61:98:48:9e:
83:22:20:e3:fe:0d:46:8a:8e:47:a5:17:83:22:d2:d6:49:8f:
d5:69:fd:90:b3:20:ec:fc:39:17:fb:d8:6c:1b:5a:f2:ac:68:
68:a3:4e:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0EzNjIxMTAvBgNVBAUTKEU2QzQ2QzkxRDEyRDU4NUExMkIwNTU2OTYyMURFRTFB
RDNGODkwOEUwHhcNMjUxMTA1MDM1MTU2WhcNMjUxMTEyMDM1MTU2WjAYMRYwFAYD
VQQDEw02OTBhYzlkZC1hMGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApy9BYu8MyZpdNBItlXLv6Cr+brILhz2jRaZY6Jojg2kD/I/9/Gzq9FlgwuQA
Fh8WJBnMmApH+QGmt3G1VcvTi7Ny1dgfb+8k5ITeRzDZmjfgq1/MZP94XRav4nym
/WZ+HJYyK/ZXFrWRpgdXnrxsr6TmDZW9OUd4/wrfBEFhRN3Blh/YfUiHdTreR5dS
iTQEPUevljUuh939opWKyJ0WaCOfUok/akcMP1oowFBcIxm8qNkYRG1BdNxIjrrC
JrGK9nla4TlAh2p5QZkaxTWd86F/5NY3zo7mWuYz6AEznXPnmMrWL9kBKjZnyx4d
wU8m8ogGknNT0gYiHWbaBlpxKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbrSyTf
MNFCPVOolaKEKQa+QfSgMB8GA1UdIwQYMBaAFObEbJHRLVhaErBVaWId7hrT+JCO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTM2Mi83Q0JBNEM0Qzcy
NkUxMUVFOUZFMzUwNjFDNEY5QUUwMi81c1Jza2RFdFdGb1NzRlZwWWgzdUd0UDRr
STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVzUnNrZEV0V0ZvU3NGVnBZaDN1R3RQNGtJNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTM2Mi83Q0JBNEM0QzcyNkUxMUVFOUZFMzUwNjFDNEY5QUUwMi81c1Jza2RFdFdG
b1NzRlZwWWgzdUd0UDRrSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA9afMT6+n3LdAPgbsvqw/GcmuSBSQyJv5D2mvARDZD7JVT0lAYsQXq
OgiREN39Siq4XEmxq4fupWSpObyhirDhYWrwn+FXQdFIH9NtUQsK4rkPIDVDCZnf
rHYjPjFzlqAmcz2kPyRCBldbXAcvbCr9L9e2MLAb0c0DAeRdOmwgN9BObtOp3jOa
f8xIkMB5bbBt9Hdggi17xfAoTBRqU13Xe76rRuMXaA1+ll/6ieEBfR5Y1UIGuAtj
04z5WuRvJARmYFXO95Yf392vfi9hsDZr6sA4sGGYSJ6DIiDj/g1Gio5HpReDItLW
SY/Vaf2QsyDs/DkX+9hsG1ryrGhoo07y
-----END CERTIFICATE-----
Generated at Wed Nov 5 23:08:19 2025 by rpki-client