
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
File: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft (raw, json)
Hash identifier: 5Wdn1Weit2ayf8/u3FN6fhUviqHxUzkw8rkGLXYgm1Q=
Subject key identifier: 0C:18:2B:33:EC:3C:ED:EB:2E:6A:E5:9C:00:04:C1:71:25:18:F6:1C
Authority key identifier: BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
Certificate issuer: /CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Certificate serial: 0557
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
Manifest number: 054B
Signing time: Tue 04 Nov 2025 23:31:29 +0000
Manifest this update: Tue 04 Nov 2025 23:31:28 +0000
Manifest next update: Tue 11 Nov 2025 23:31:28 +0000
Files and hashes: 1: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl (hash: iHQwFIuaZow4q0uGVn4MON0wq8vhjj/zJe96Z1cuJDQ=)
2: 9B741CFE0C3411EDB8619843C4F9AE02.roa (hash: EaQ615UaoSlbYGe5kp9Ft1URPJxHKbUFtgfGcBgBPeU=)
3: 37FE553E5CAB11F08FCD0029C4F9AE02.roa (hash: GLm2AKslZ/503xaJdyFMTW6e2t7uEKz1XmKi3aW5E9E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 23:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1367 (0x557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186B80, serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Validity
Not Before: Nov 4 23:31:28 2025 GMT
Not After : Nov 11 23:31:28 2025 GMT
Subject: CN=690a8cd0-8631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:7f:3d:10:76:fa:6e:b5:bc:b9:46:20:25:
6e:91:f5:14:65:60:27:0e:33:46:8b:d0:ce:4f:5b:
ad:f1:02:5d:a0:b1:a0:3b:ae:08:ab:20:4d:8f:a8:
72:93:77:ca:27:6e:ea:98:55:60:00:8e:a4:78:ce:
e5:50:5a:7f:4d:c8:22:a7:eb:10:7f:cf:f2:64:6e:
41:4c:26:6e:58:7e:62:95:d3:0b:a1:f5:a2:d7:e2:
0a:3c:25:69:56:8c:5d:61:15:f7:e4:d6:f3:fb:34:
dd:50:e6:8e:e8:b4:eb:1e:70:6d:7c:a3:b9:8e:f4:
7f:02:55:1c:9e:b2:6f:69:78:0e:d1:68:f9:06:79:
97:bc:e6:a6:91:14:0d:1e:a3:9b:c4:d7:d9:24:82:
90:57:03:47:6c:04:77:6a:ad:9c:7a:f3:a9:63:f9:
85:55:93:95:84:f6:54:56:c3:1d:4a:88:a7:78:7a:
bc:7b:14:10:e6:c7:04:26:83:2e:bd:ca:d6:26:74:
16:46:89:c9:c0:38:72:af:a4:d5:06:f1:ed:fc:99:
53:44:c3:2b:d5:d9:92:a9:11:50:0c:96:ba:33:a5:
f8:8f:2c:e3:f4:39:92:90:c5:ea:7f:bd:6a:79:51:
ac:ab:96:b4:ef:29:ff:d9:ca:26:9a:cd:7d:b5:5a:
97:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:18:2B:33:EC:3C:ED:EB:2E:6A:E5:9C:00:04:C1:71:25:18:F6:1C
X509v3 Authority Key Identifier:
keyid:BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:38:f6:5c:30:a4:ec:c9:a8:e3:e0:be:67:aa:81:aa:16:4f:
e3:76:fc:1b:0e:a7:30:66:6d:ad:a0:d5:57:57:cc:f9:c1:68:
a4:6c:d1:a9:89:07:3c:c5:0f:0f:44:28:80:16:0b:aa:12:be:
ab:48:33:41:0f:79:56:b5:97:dc:c9:c0:f0:3a:6f:a1:e7:66:
be:05:3f:c5:a7:54:ae:be:76:67:79:3f:dc:d6:cf:9e:fb:9f:
d2:06:3f:f7:bd:ad:de:19:48:9e:8e:c9:e7:b0:50:35:7c:02:
fe:b0:2f:5a:fc:18:87:74:f9:5c:73:7e:7a:1e:ed:42:61:50:
ad:d1:60:0d:32:3a:b7:6b:e1:b1:f3:23:94:8d:bc:95:6c:01:
99:fa:c9:38:10:90:af:cd:f6:8e:7d:6c:70:b1:95:d9:56:2a:
51:9c:6a:28:97:ee:15:c7:d2:a4:ef:af:4e:90:54:ae:1d:d5:
4c:f1:77:c5:c0:2d:74:06:f6:f5:78:9e:f7:de:cf:d5:b8:58:
31:a8:c8:48:17:7f:3b:ed:22:d4:c8:fb:bb:fa:a1:ec:19:61:
4b:ac:ae:0b:40:64:25:c6:c5:08:5c:02:e3:94:8d:df:13:50:
32:56:5b:c5:4a:03:7b:62:c2:30:c9:4c:4c:9f:08:bd:a6:f5:
26:29:eb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:47:54 2025 by rpki-client