
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
File: wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft (raw, json)
Hash identifier: FaJI4SkAkkrCw3WySCZrXZXxm4FyVzgsTGBwlEmkX+I=
Subject key identifier: A9:E7:A4:F5:E5:22:61:1E:F8:2F:BC:AD:A4:EE:FE:1B:59:94:C9:75
Authority key identifier: C2:AC:94:54:15:8A:37:C1:A1:18:9D:46:A2:EE:14:53:75:0D:A9:AF
Certificate issuer: /CN=A912FF31/serialNumber=C2AC9454158A37C1A1189D46A2EE1453750DA9AF
Certificate serial: 07D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
Manifest number: 07CA
Signing time: Sun 02 Nov 2025 21:13:21 +0000
Manifest this update: Sun 02 Nov 2025 21:13:21 +0000
Manifest next update: Sun 09 Nov 2025 21:13:21 +0000
Files and hashes: 1: wqyUVBWKN8GhGJ1Gou4UU3UNqa8.crl (hash: TGMesem/vjeMamUGRCSQLcZJfyZGUsQ37IZPxv9c4ag=)
2: 575CFFB013BE11EB943B905BC4F9AE02.roa (hash: q3e1SxYN4gO4HKEGgzyUKFkCIiem6r+fmpGDRyBSWN8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.crl
rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:13:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2000 (0x7d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FF31, serialNumber=C2AC9454158A37C1A1189D46A2EE1453750DA9AF
Validity
Not Before: Nov 2 21:13:21 2025 GMT
Not After : Nov 9 21:13:21 2025 GMT
Subject: CN=6907c971-f286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:47:e6:48:79:19:9b:80:34:e0:bf:58:1a:72:
cf:01:11:28:54:b1:43:6b:3a:b1:5c:d8:d6:64:f3:
46:c8:41:b1:a3:91:f1:9b:e5:73:43:0e:e0:06:07:
68:cf:d5:0b:dd:d7:b8:64:a7:84:5b:d0:c9:81:ce:
a5:90:ae:75:e5:ac:49:19:08:66:2b:69:1f:53:7e:
27:f4:d0:39:f0:85:41:ee:7c:cf:fc:30:ba:d6:34:
5c:8b:47:90:18:bf:8d:b0:2a:54:4b:6d:e0:53:93:
80:3c:39:d6:eb:3b:a8:fd:6b:eb:2a:b8:ba:45:67:
9b:19:c0:e2:5b:f0:6f:09:1f:84:f6:fb:08:5e:2a:
df:92:e1:0f:1e:05:7e:c2:70:36:0f:0e:11:0a:88:
e3:d8:19:c1:11:4a:7a:14:bc:90:17:c0:cd:fa:6e:
d3:3b:ab:6a:47:ea:56:3d:e7:61:69:21:91:1a:3e:
93:d2:c2:4e:52:04:8c:0c:ca:7b:fc:9b:6e:1a:ff:
d1:e6:23:fd:ea:1a:ad:69:d2:9a:73:e0:0b:33:f9:
8c:14:69:b5:0f:f1:65:b0:5e:98:be:88:01:e1:87:
f2:cd:f2:fb:e1:47:35:1d:c2:0f:28:50:97:21:91:
18:44:87:44:40:1b:08:71:ee:eb:50:0a:e5:45:7c:
75:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E7:A4:F5:E5:22:61:1E:F8:2F:BC:AD:A4:EE:FE:1B:59:94:C9:75
X509v3 Authority Key Identifier:
keyid:C2:AC:94:54:15:8A:37:C1:A1:18:9D:46:A2:EE:14:53:75:0D:A9:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d1:c4:36:6c:fb:78:e2:6a:1d:6b:49:9f:37:35:8c:8f:e5:
0e:ed:2b:dd:59:06:ca:cf:f9:8f:a5:d4:15:e1:fd:a8:2d:0b:
24:ec:0c:9b:50:09:0b:46:07:dc:7f:40:19:08:d3:64:85:6f:
88:60:09:91:f2:60:0d:de:48:2d:f9:8a:3d:55:fb:70:79:08:
4f:df:17:11:f9:df:ac:ca:7a:29:40:d2:6b:65:c1:49:c5:59:
7f:8d:c0:77:71:f3:72:96:e5:9d:ae:16:62:49:06:a7:45:36:
40:9e:d0:27:dc:00:0e:56:2e:f6:02:c4:90:ec:62:ca:7a:cd:
34:27:c4:69:31:3b:23:7b:e1:6b:eb:b1:8a:3c:16:e3:87:20:
cd:0c:0a:0e:ff:93:35:ff:b6:b3:72:05:b0:46:79:ba:da:0e:
f4:59:35:8b:e5:3e:d8:90:13:19:4a:57:e0:19:8b:30:dd:e5:
1d:b3:b0:d9:14:ab:dd:96:c1:5a:63:9d:12:b7:e0:e8:33:6a:
53:b5:13:50:cb:4a:4d:5a:4b:8d:68:dc:62:e8:d2:73:79:f3:
cb:bb:ab:ac:53:a0:03:47:11:37:34:d1:f9:0c:a6:82:94:3a:
07:af:99:e9:ee:1b:70:05:18:eb:13:bf:6a:29:b6:48:91:50:
d3:d9:bc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:37:01 2025 by rpki-client