
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
File: OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft (raw, json)
Hash identifier: Cy/V7p8GkpejnkwIZ9XkZgtC8v8oPAnQ6iMwnaApjeM=
Subject key identifier: 83:A8:6A:D5:3D:C3:51:7D:20:47:61:5E:89:23:D2:DB:AD:7D:75:D8
Authority key identifier: 38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C
Certificate issuer: /CN=A911E502/serialNumber=386C300ED72F12B905478A33CEF27799254A691C
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
Manifest number: 7F
Signing time: Wed 05 Nov 2025 06:56:46 +0000
Manifest this update: Wed 05 Nov 2025 06:56:45 +0000
Manifest next update: Wed 12 Nov 2025 06:56:45 +0000
Files and hashes: 1: OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl (hash: 26kqwSkJnLQ43KA2VzzmopR54mo6ZHhQdNZX/pQr9G4=)
2: 54DA33D2FB2E11EFB488A95EC4F9AE02.roa (hash: L/7VzM2fbo0IdE808LBeTzf3z0geWQ0SpeUJCZmWPBg=)
3: 53E9C44CFB2E11EFB488A95EC4F9AE02.roa (hash: hzaK0MTBJLVrmr0hWnuGmH3SdcFclIxCzlQUZOQabQ8=)
4: 5460E9C8FB2E11EFB488A95EC4F9AE02.roa (hash: bkhjgOMD/IEHS+ly/VrsRugL9cN6Yu5sgUx5f40TuYM=)
5: 553798E2FB2E11EFB488A95EC4F9AE02.roa (hash: p8161Irka1RhOlKGL72R+iegNNjEoBL5dnyvjeUTVQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl
rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E502, serialNumber=386C300ED72F12B905478A33CEF27799254A691C
Validity
Not Before: Nov 5 06:56:45 2025 GMT
Not After : Nov 12 06:56:45 2025 GMT
Subject: CN=690af52d-33b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:1e:40:a2:64:b4:43:4a:4a:2b:4a:8c:2c:
6f:a5:54:fa:04:63:17:b7:05:b1:33:6c:d2:78:eb:
50:20:de:70:06:e4:91:bd:d0:77:02:f8:04:72:7b:
6b:b4:ac:aa:14:aa:42:d9:f0:c8:2d:af:15:e5:aa:
d3:aa:5a:0b:29:d4:2f:e3:d1:d4:7e:a2:d5:1d:29:
00:8d:4e:54:fe:6e:74:c6:67:39:23:a1:db:87:eb:
67:ab:5e:29:9d:0d:10:a6:82:97:ec:76:33:f6:2a:
c0:9d:7c:c6:73:a9:08:ca:f4:98:fc:c6:3a:92:67:
fb:7e:eb:63:e7:68:32:87:22:87:8d:88:4b:7d:a1:
4d:37:6d:bd:43:19:23:28:f2:e6:94:23:36:48:44:
d9:b7:d7:53:1c:eb:c9:c6:00:c2:71:ff:ad:60:0f:
68:0a:f7:4b:f1:e3:27:c2:e3:15:e5:9a:b1:b8:21:
d6:76:d9:d8:53:c8:bf:f8:d3:81:54:09:68:2a:0b:
24:5c:ce:93:ab:44:cd:e5:bc:ff:02:f8:20:21:2b:
f3:cb:1c:a6:05:9c:b0:de:4b:6c:f3:6b:21:87:83:
e3:6a:c3:e8:91:17:bb:c8:96:d9:03:65:8b:24:fa:
4c:27:b1:e1:68:18:d4:a2:8b:e1:a7:82:b4:73:30:
78:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A8:6A:D5:3D:C3:51:7D:20:47:61:5E:89:23:D2:DB:AD:7D:75:D8
X509v3 Authority Key Identifier:
keyid:38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:be:89:ef:ae:69:6a:d9:c9:3c:aa:af:d6:c2:c7:e2:49:36:
d8:28:1e:cd:d0:a1:f6:39:72:49:1a:e8:d8:36:91:33:18:58:
ed:35:4d:15:5c:a6:09:84:f8:a4:d9:e6:4a:ac:00:99:ba:aa:
7a:ae:88:0c:a9:e4:61:7d:56:34:d1:df:09:4d:fe:01:3e:33:
93:0e:44:d4:73:73:61:d0:12:e0:76:bf:5c:71:ff:8a:85:77:
97:dd:ec:41:af:d6:03:cc:96:8b:d9:8b:65:dd:b1:68:5c:6a:
b3:1c:8c:d0:8e:6f:b8:cf:3a:9e:91:65:9a:45:a1:ea:03:95:
4f:6d:cf:33:7f:65:ba:cb:d9:98:a7:88:e0:b7:6c:63:dc:9a:
49:5b:94:74:e0:94:22:a5:a0:c1:7e:d9:3b:78:41:d1:2d:aa:
dd:3f:3f:fd:7d:ef:62:22:26:1d:50:63:a3:61:7a:b8:53:d6:
df:07:49:ab:c0:51:08:b8:26:d1:36:af:09:38:35:96:64:45:
1e:4a:ea:dc:4c:06:02:83:15:b0:a4:f8:69:1f:c0:05:48:46:
98:dd:0c:80:06:ed:5b:6c:9e:31:c2:18:11:8c:0b:47:4a:c6:
9c:6d:f5:bc:f3:53:28:35:f6:52:1b:75:96:d9:da:89:35:3f:
a4:9e:12:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:59:20 2025 by rpki-client