
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
File: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft (raw, json)
Hash identifier: k95rnedyOgRu+S2mDkKR7ilKJ4GQBTJirwFRAtiHkgk=
Subject key identifier: 61:43:12:0B:26:9F:53:2F:07:28:B2:B3:44:97:28:7D:4A:C1:B3:D3
Authority key identifier: 9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56
Certificate issuer: /CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
Certificate serial: 0C55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
Manifest number: 0C47
Signing time: Tue 04 Nov 2025 18:44:58 +0000
Manifest this update: Tue 04 Nov 2025 18:44:57 +0000
Manifest next update: Tue 11 Nov 2025 18:44:57 +0000
Files and hashes: 1: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl (hash: YM/mG8Xdb+jua1kqBQUYZ4yUcrWnv1xgiDAcJw6ozPg=)
2: 7E565BCC02EB11F084618D33C4F9AE02.roa (hash: AZHVgAf1kSXl8BI/BQ5H295EutsYIoNTNb8l2dBtz+M=)
3: 702B683202E911F097290F2EC4F9AE02.roa (hash: K+XoaDEFz5EZQGsqk/BrrsJpJvi+KU83oJ9JVUv/YSY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl
rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3157 (0xc55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131579, serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
Validity
Not Before: Nov 4 18:44:57 2025 GMT
Not After : Nov 11 18:44:57 2025 GMT
Subject: CN=690a49aa-c1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:5a:86:68:17:16:e7:20:fa:89:7b:68:92:
87:25:85:b3:88:6c:a2:92:2d:50:49:d7:61:f9:1a:
47:8f:ac:25:fb:76:74:1e:a2:11:b6:2f:cb:83:c0:
cf:d7:7a:3d:59:29:8e:fd:7e:f7:ba:47:bd:70:ed:
d8:79:1c:e0:85:a9:a9:a7:b5:47:93:4a:4e:d7:a9:
23:d2:5a:81:b3:6c:d4:a2:77:33:42:b8:2d:3e:81:
7a:05:24:ba:80:3f:03:00:d0:98:4c:82:72:2e:0b:
27:33:9f:3f:a4:da:ef:f8:e4:9a:27:1e:0b:75:c1:
48:b5:3c:bd:a2:42:d6:b6:36:bd:8e:10:7b:47:32:
33:d7:09:13:c9:5d:8e:12:db:eb:2d:4a:55:c1:7f:
73:38:00:a9:90:44:9d:55:2e:d8:59:eb:46:dd:dc:
65:de:9f:4b:25:e1:8e:e6:f9:7a:2e:51:0f:8a:c3:
ed:6b:7c:da:51:14:51:85:72:84:6c:60:16:3d:fd:
b2:b0:21:b5:ec:2e:f9:8b:af:57:ae:e7:21:81:b5:
5a:da:bf:14:fb:40:52:d6:2a:7d:f8:70:f2:66:04:
5a:ae:6f:8e:3f:00:69:99:7a:7b:64:09:48:f9:3e:
ad:7c:85:c7:b5:af:96:a3:c0:29:41:c4:4b:70:9d:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:43:12:0B:26:9F:53:2F:07:28:B2:B3:44:97:28:7D:4A:C1:B3:D3
X509v3 Authority Key Identifier:
keyid:9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:32:21:76:40:1c:ef:c4:94:b7:88:a9:4b:a1:5a:36:d3:cc:
e7:5e:e8:49:61:d9:a8:e5:0a:56:76:47:c6:dc:1e:eb:d6:51:
ae:83:c1:eb:a1:1d:22:36:2b:2b:55:29:db:d9:27:16:05:93:
7f:69:b8:e7:ac:13:79:74:9c:6c:3c:94:b9:55:cb:27:f9:84:
3a:28:dd:09:db:c4:aa:41:a1:52:4a:0f:4f:91:c4:ab:d0:ed:
cd:6e:d9:a5:99:db:2b:53:85:4e:c8:86:ba:1e:9e:c6:83:b5:
36:32:98:fb:b2:23:d2:0c:e2:d5:06:16:f6:01:4e:c2:e6:ad:
2c:0d:e2:43:7e:d8:79:f0:af:cd:2d:5f:25:ec:67:1c:0a:97:
8a:75:29:e0:fd:78:77:b9:ec:13:df:87:87:e7:de:66:de:a6:
4d:c8:ae:61:42:23:76:ef:dc:9a:19:f4:23:1b:64:2b:b4:de:
17:61:7c:15:fa:a9:1a:e2:d1:3f:23:6f:9a:da:44:5f:4c:1e:
b3:db:2c:77:31:2d:e7:c0:ef:0a:c7:f2:a4:0a:85:ed:a3:24:
49:89:89:7c:3f:28:b8:14:f5:a5:3d:cf:24:6e:f0:03:1d:c6:
a8:c0:75:55:0d:91:b2:d6:5b:a6:19:76:fc:7c:3e:1c:79:d7:
6c:1d:11:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:49:26 2025 by rpki-client