
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft
File: pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft (raw, json)
Hash identifier: ZOmcXjO3BNXUGhydZ7sMZ1p1apIBcSqzE6lR6XZGLVQ=
Subject key identifier: C5:54:BF:3E:52:51:1F:A3:3A:DB:6A:C4:9D:AB:A9:4A:EA:1B:6E:D5
Authority key identifier: A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80
Certificate issuer: /CN=A912A471/serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780
Certificate serial: 016D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft
Manifest number: 0169
Signing time: Wed 05 Nov 2025 04:05:37 +0000
Manifest this update: Wed 05 Nov 2025 04:05:36 +0000
Manifest next update: Wed 12 Nov 2025 04:05:36 +0000
Files and hashes: 1: pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl (hash: Uto4wSU0ZYL/eiy7nySj3KShOa49GeMRfDJ1RqVxma8=)
2: AC21E1E8924411EE96AA9544C4F9AE02.roa (hash: 84BaytmnsBEk+UaP5PFkzVU27GE8sU0iFIMHsasg/ys=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl
rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365 (0x16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A471, serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780
Validity
Not Before: Nov 5 04:05:36 2025 GMT
Not After : Nov 12 04:05:36 2025 GMT
Subject: CN=690acd10-31c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:26:9b:2c:d4:ed:ba:ba:53:69:55:c5:ca:5d:
ba:52:16:a2:39:ce:3d:66:16:38:ad:f2:ec:f2:be:
dc:f2:b7:c9:25:0c:58:41:e7:9d:11:8f:47:34:5c:
fd:5b:84:83:ba:0d:ec:81:c8:a1:3f:de:c1:1c:42:
6d:0a:74:19:39:1f:47:12:b9:8c:51:f3:4f:9a:ef:
d1:e3:60:44:a8:5a:19:69:66:d7:dd:a2:bd:f8:b0:
bf:10:28:79:e3:c0:44:07:56:dc:7a:ab:f6:49:52:
c9:5a:b8:0a:55:a4:0f:3a:ad:2e:8b:19:e5:61:e0:
7b:6b:6e:6d:25:60:1f:ea:29:47:54:70:f7:d6:51:
d2:22:2f:c2:8d:69:79:1c:c8:2a:14:d5:7b:f3:eb:
a7:fe:16:0d:82:92:da:e5:96:3f:0f:9e:a2:88:03:
62:d5:0a:ad:2b:02:60:13:4c:01:57:8d:50:19:9a:
2d:64:b8:09:4c:e6:3d:0e:ce:64:56:ce:fb:57:d0:
dd:20:d1:76:9c:61:5a:01:96:58:e6:51:a3:24:a0:
ce:2f:50:18:07:6c:7f:74:44:1b:eb:23:26:ce:7f:
14:74:8e:06:62:d1:8f:46:76:e9:0d:23:18:a1:04:
6c:5a:75:18:bf:97:da:b9:d3:cf:5f:4a:d5:58:d9:
b3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:54:BF:3E:52:51:1F:A3:3A:DB:6A:C4:9D:AB:A9:4A:EA:1B:6E:D5
X509v3 Authority Key Identifier:
keyid:A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7d:54:a9:8d:47:1d:45:c1:da:56:df:e1:97:b8:54:04:66:
a2:1d:01:29:1b:60:9f:de:f8:78:e2:dc:52:b4:0b:24:16:59:
01:25:14:2c:01:aa:43:6a:31:81:3d:96:e5:37:b3:4b:a4:c5:
7a:f5:cf:14:91:a9:88:83:39:ee:72:7f:ee:94:cb:35:95:6d:
5a:47:86:8b:84:74:31:f1:dd:2c:68:91:f6:1f:7a:e3:5a:8c:
ba:02:f5:95:71:bd:f3:00:54:9a:74:11:5d:40:24:37:89:fc:
32:bb:74:30:91:cc:50:08:dd:d5:4c:99:57:2c:a0:5c:66:a5:
c5:c5:47:ec:b2:e0:36:12:f5:ed:bd:39:92:a6:9b:08:72:1b:
60:d9:d7:3d:29:d3:65:95:d9:e2:70:e7:95:9e:3d:b9:2e:b9:
41:a5:9d:8c:90:6e:5e:23:9d:73:51:e8:6c:fa:c7:3d:ca:29:
0a:8c:f8:84:1f:3a:14:58:ce:b2:0e:7f:a6:8c:ad:82:38:f6:
34:c6:1b:45:dc:ad:87:cc:05:12:fa:91:9e:a9:62:78:00:28:
15:82:38:d5:cf:7c:0c:db:62:3c:bf:50:41:be:58:43:93:11:
ec:3d:c2:2d:46:c0:60:24:ee:a4:0c:b9:83:0d:c1:e9:4b:38:
43:19:f9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:57:23 2025 by rpki-client