
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
File: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft (raw, json)
Hash identifier: JQLyL0qL8x37NPYeN0tvne3oSaAzRFaW5aFkRQEzx4Q=
Subject key identifier: 54:14:15:EB:DA:6E:D4:9B:7B:FB:8D:15:9D:62:03:19:C7:7C:F8:D3
Authority key identifier: E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF
Certificate issuer: /CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
Certificate serial: 19B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
Manifest number: 1999
Signing time: Tue 04 Nov 2025 16:28:48 +0000
Manifest this update: Tue 04 Nov 2025 16:28:47 +0000
Manifest next update: Tue 11 Nov 2025 16:28:47 +0000
Files and hashes: 1: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl (hash: ZV0kYxKJTmkOXzyyJdjJRH8PaDELr5XJ4zsZNiMkVtk=)
2: 98E572FC777011E7BF7EED10C4F9AE02.roa (hash: lV2/2NW27xVZaBILThpNeuepTXhQgC2yA5suVSBt5Mg=)
3: 9787989A777011E7BF7EED10C4F9AE02.roa (hash: /pOoncr1KzYRXYjLbZuRohrO0FiLH7LyekaH9trend8=)
4: 97F31854777011E7BF7EED10C4F9AE02.roa (hash: 7+Ks4jZyLMHPbzW7FZP/GDFbxrDItsZ+/jUs9u2MSic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl
rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:28:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6584 (0x19b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187313, serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
Validity
Not Before: Nov 4 16:28:47 2025 GMT
Not After : Nov 11 16:28:47 2025 GMT
Subject: CN=690a29c0-f850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d1:51:24:e8:f9:a7:a5:bd:6d:60:0b:8f:78:
ac:2d:33:68:c6:72:20:a4:a8:ce:a2:b8:30:0d:58:
48:21:70:4f:f8:c9:d3:cd:ad:7f:3b:1a:85:aa:7a:
53:85:0d:c3:53:ce:6f:1c:9c:dc:20:bc:e8:b8:23:
39:71:d9:8c:c0:05:b1:22:31:4b:4b:75:4b:0c:d5:
58:43:9a:e6:83:62:9c:27:07:7d:91:f5:0c:24:13:
10:d4:44:cb:69:b1:b9:4e:cd:30:4f:ff:11:74:5c:
36:52:8b:d2:47:d2:c2:24:87:f5:7a:96:7e:3d:40:
11:50:e1:e9:9c:3d:fd:93:e2:ba:bb:5b:e1:ad:79:
b0:5e:f9:0f:ca:7f:16:ef:3c:95:d1:f2:9e:40:f8:
cf:33:fc:a8:a4:de:75:af:d2:33:47:c2:a8:08:45:
05:12:ca:1d:2a:0b:e1:7a:1e:ad:4c:19:e5:da:e4:
f6:c6:42:f4:20:50:80:00:2f:85:71:36:3f:fc:e5:
f1:09:56:17:c9:76:19:08:09:f5:15:b2:2b:59:ae:
aa:77:a0:b1:a0:fa:a3:6c:18:ee:1d:23:fb:e0:39:
e3:63:6a:d0:02:1d:5f:e0:b2:19:90:02:44:71:da:
c3:76:67:75:cd:ee:c0:74:2f:f2:be:5d:a2:b8:f4:
8c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:14:15:EB:DA:6E:D4:9B:7B:FB:8D:15:9D:62:03:19:C7:7C:F8:D3
X509v3 Authority Key Identifier:
keyid:E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:07:85:f5:32:2e:6b:e9:3c:97:2a:15:05:85:12:2d:34:4f:
cf:57:97:8f:b4:a8:e6:93:3c:14:2c:15:2b:2c:90:28:eb:ac:
7b:5c:96:94:ce:9b:01:ed:ac:3b:44:37:dd:93:a3:5c:a6:be:
1d:dd:b3:48:f0:27:6c:c1:e6:be:14:60:6d:66:7e:6b:1c:00:
dd:02:89:f8:bb:64:74:f8:69:5c:c8:27:cf:56:43:d3:52:8c:
8e:25:ee:7b:fb:3f:7a:43:9d:9a:ee:e9:e5:49:04:03:f5:af:
04:3e:c5:27:9e:31:f5:4c:2b:c4:c5:59:0d:ce:e5:a4:99:57:
48:e5:70:df:49:5f:df:58:77:95:8c:1e:06:a2:e4:18:22:2d:
b7:9a:e8:b5:69:8c:1d:e6:d3:16:6f:f8:ea:2d:32:74:76:f4:
a4:3d:fe:2a:84:fa:ff:82:9a:a3:49:bc:0d:6d:05:9a:81:14:
de:3c:78:10:9c:6e:4e:33:fc:ef:78:8a:0d:d2:85:2d:35:f8:
fe:d5:27:28:fb:46:be:dc:60:40:5a:bb:56:96:d5:67:0c:5b:
23:42:2d:c4:f2:38:8d:de:e0:cf:0c:5b:e2:fe:55:66:2b:8f:
ed:8e:01:8f:99:e6:16:01:01:58:fe:3e:b2:72:21:25:71:f5:
24:92:20:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:29 2025 by rpki-client