
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
File: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft (raw, json)
Hash identifier: JSOWlBXSjAEVzcKn4Fey2MwEjOK+l6Vp8lN1nOmZkYs=
Subject key identifier: 75:26:C4:1F:A8:EB:83:75:6B:CE:2B:B4:E8:CA:66:44:DD:AD:7A:49
Authority key identifier: E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04
Certificate issuer: /CN=A919F207/serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
Certificate serial: 08EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
Manifest number: 08CA
Signing time: Tue 04 Nov 2025 20:32:17 +0000
Manifest this update: Tue 04 Nov 2025 20:32:16 +0000
Manifest next update: Tue 11 Nov 2025 20:32:16 +0000
Files and hashes: 1: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl (hash: FwkwV9Mi7IqBAzygHvCdhssx3GglbqSRNAURYMVBsrE=)
2: FE5523767A4111EB9E76B867C4F9AE02.roa (hash: CVJgpgajxXp0nfuwvvTtpQWL1YkwrnLOPz0dX0Da2i8=)
3: 9F95B0B4232811EBB98A6C1AC4F9AE02.roa (hash: GSjiN54ewIGr1b61gD43aUHOWLJAe+Bq3TA3yh28IwU=)
4: 0A88715AC2A711EAB8D9B426C4F9AE02.roa (hash: 0NHrksBzZ1sw6KKMUlk4z1DIMariid2PsdJfHN0oQM8=)
5: 0A00EE7EC2A711EAB8D9B426C4F9AE02.roa (hash: GmMG2dURnElUOnQiq0F5h7Z6METNWOktXhEJ+2ZzA/g=)
6: D661BF1821E111EB85E9C824C4F9AE02.roa (hash: XkWTXb6PHytvZUY7EAUhHe4Q0yrK6oVBVW0wC1ENUcY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl
rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:32:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2283 (0x8eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F207, serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
Validity
Not Before: Nov 4 20:32:16 2025 GMT
Not After : Nov 11 20:32:16 2025 GMT
Subject: CN=690a62d0-3399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:ac:4d:e7:b5:3f:f5:c0:82:7b:e5:82:d8:
25:fc:1b:4f:2e:19:45:03:98:6b:ca:e5:cf:58:72:
45:32:9c:cd:ff:7d:a5:25:32:56:a6:9c:33:b7:30:
08:a3:93:8e:41:6f:2d:81:f7:12:d2:2b:df:f5:88:
2a:12:3d:5c:ae:41:1a:f5:27:2b:c2:a7:98:5a:62:
d7:7d:ce:67:6f:8a:55:11:68:69:6f:d5:8d:06:2c:
91:04:44:5e:2b:32:0f:5c:6a:be:0d:1c:e2:4b:af:
20:93:ba:1f:95:61:d5:5d:4c:6d:20:48:93:b4:a1:
ad:49:ce:3d:48:95:dd:7d:6d:2c:6e:2e:a2:01:bd:
00:70:51:e1:46:fb:13:8b:04:52:e5:c2:15:2f:30:
ac:80:14:e4:4d:4d:f6:d5:ca:3b:c5:c0:4a:4a:8f:
32:d6:12:f8:3c:04:4e:7e:92:8a:20:72:d9:76:49:
da:e9:fa:19:c1:02:dd:2c:d8:18:2a:89:da:1c:98:
1c:33:12:5d:ab:5b:12:49:b3:fe:1e:6c:8a:3b:3c:
17:36:9d:31:f6:ca:f1:19:8e:a0:01:56:d1:01:54:
6c:d4:af:db:a7:af:67:ab:00:93:39:22:f2:38:66:
80:11:e4:ca:4b:86:db:ec:ce:f1:28:43:a3:2a:f2:
c1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:26:C4:1F:A8:EB:83:75:6B:CE:2B:B4:E8:CA:66:44:DD:AD:7A:49
X509v3 Authority Key Identifier:
keyid:E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:94:bc:8c:77:97:ec:58:f5:84:b5:5e:7d:90:65:7e:6a:1d:
65:15:7e:74:da:a1:15:ec:5a:ab:08:a9:ef:53:78:b1:a4:d5:
ee:55:0b:20:dc:e1:5c:cd:8b:18:7c:ab:b0:e5:c3:34:30:9c:
c4:5d:25:9c:c5:04:0d:25:ed:0e:13:14:89:38:25:0b:6c:99:
dd:06:1f:4c:04:55:6e:b4:a5:de:d9:60:4b:f2:88:04:56:a6:
49:4e:60:13:2a:af:40:b9:b0:e5:29:de:9e:d3:56:d9:91:94:
ea:ff:ff:5b:f2:bb:b8:da:68:47:ea:19:31:81:bb:da:cd:15:
00:93:c8:2e:b3:dc:a9:38:a0:ee:23:10:07:dd:55:08:fc:63:
ce:cf:a4:1f:37:70:1f:6e:69:25:7a:84:ed:24:bd:aa:27:2c:
4d:b6:e1:24:b8:70:31:9d:50:60:64:cd:22:ec:2b:58:68:2a:
67:ea:38:30:3d:89:d7:8a:28:ed:c6:f5:81:9d:d1:e6:9c:f9:
d7:72:7a:f5:25:f9:0f:e1:88:52:a7:75:ef:40:ed:e2:77:00:
6a:e1:12:39:a3:b5:2b:71:32:25:c1:4d:52:b6:8d:6d:0d:00:
8c:9c:81:e1:57:31:a2:55:da:fa:a6:03:6d:10:3a:47:ce:6c:
9b:21:6f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:50:43 2025 by rpki-client