
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
File: uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft (raw, json)
Hash identifier: wJxhCATQiod7Zz+WFsmBEe9iRnr42mFnZLlXX/G/YA0=
Subject key identifier: 54:60:06:C7:D5:C9:C6:22:C8:AB:C5:5E:C0:64:E2:2B:DD:ED:A8:14
Authority key identifier: BB:0E:55:03:79:FE:A2:81:A8:81:A6:74:79:B7:7C:86:02:D0:13:14
Certificate issuer: /CN=A9138C14/serialNumber=BB0E550379FEA281A881A67479B77C8602D01314
Certificate serial: 04A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
Manifest number: 0495
Signing time: Wed 05 Nov 2025 00:07:16 +0000
Manifest this update: Wed 05 Nov 2025 00:07:15 +0000
Manifest next update: Wed 12 Nov 2025 00:07:15 +0000
Files and hashes: 1: uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl (hash: +nTRZXV7otLaxrI6Z0LVlEXtxqzl8AGp5n8Pw6uNThY=)
2: 4911720A694F11ECB6F9B541C4F9AE02.roa (hash: 7k8YHn/nAtUVU3VLssB80YxDHO9IxRBfL7eh5zIgJsw=)
3: 53E4239C99F811ECA0663D19C4F9AE02.roa (hash: Y7h+ThuR3023tbfID3tJUzdvMuVp3Y56Ae3EjEbCXpU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl
rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1186 (0x4a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138C14, serialNumber=BB0E550379FEA281A881A67479B77C8602D01314
Validity
Not Before: Nov 5 00:07:15 2025 GMT
Not After : Nov 12 00:07:15 2025 GMT
Subject: CN=690a9533-f397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:e4:7b:ce:56:43:e2:91:81:67:18:8b:88:
c9:f9:a3:3c:44:f1:04:28:75:f4:39:9a:54:46:c1:
82:05:d4:03:c6:fb:f3:4f:f1:f3:30:0f:4d:dc:0e:
9e:c5:6b:8b:5e:29:c3:82:a0:cb:86:20:6b:a9:7c:
31:07:0c:fc:e3:eb:e5:59:46:fd:16:28:55:7d:06:
94:3c:45:47:43:23:db:bf:03:57:ff:6d:1e:cf:92:
43:4c:61:d3:ec:76:81:30:39:58:cd:8e:bc:76:d9:
e7:92:4e:83:d1:c8:45:05:e2:e5:a6:66:a7:65:b7:
14:c2:30:6e:20:8c:85:ef:d1:25:01:71:22:c1:1a:
01:ed:71:72:ac:a1:db:0d:00:72:09:13:92:51:c3:
96:df:a4:f6:e7:a6:82:e3:53:5d:b8:9a:8c:b9:f1:
97:f0:a4:d7:59:38:4b:40:b3:b5:f0:1a:0b:ab:31:
fd:b6:f0:00:01:33:fc:0e:b5:ed:7b:93:92:aa:f5:
32:06:c7:3e:89:f3:07:31:03:4f:f6:1f:f3:ca:e5:
5c:67:c1:3e:ad:ae:9d:07:66:c0:4b:9d:db:88:78:
e9:2d:cb:79:1b:ff:a9:32:d6:ef:17:09:9f:d2:09:
99:d4:3d:ac:12:25:29:6d:07:d9:c2:c7:40:11:81:
d0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:60:06:C7:D5:C9:C6:22:C8:AB:C5:5E:C0:64:E2:2B:DD:ED:A8:14
X509v3 Authority Key Identifier:
keyid:BB:0E:55:03:79:FE:A2:81:A8:81:A6:74:79:B7:7C:86:02:D0:13:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:59:ba:0b:a1:a9:52:76:88:88:eb:1c:f3:d6:0e:c9:a4:85:
f0:e0:86:33:25:30:7d:5a:29:ce:5d:07:38:2a:74:65:3a:96:
32:43:c0:49:4a:d0:5f:4a:d6:dd:20:fa:56:79:ad:b6:be:51:
f5:70:3b:bc:ef:9b:ab:80:4c:0a:3b:fe:e2:48:79:a8:28:42:
cf:94:fe:e9:cd:39:20:52:9e:42:61:3d:3f:2d:bb:5f:97:f4:
01:05:a1:d6:1d:9e:24:28:e7:a9:d1:66:36:21:60:19:94:6d:
e9:be:47:b1:6b:76:87:ea:82:7f:99:5c:5d:72:70:9a:bf:f6:
19:72:0e:5b:5d:b3:40:ed:73:3c:83:8e:f7:6a:43:1c:f3:bf:
dc:98:27:8b:fa:d0:76:64:cc:be:0b:e6:e1:65:65:2f:c2:61:
89:f4:6f:f7:33:47:7a:61:eb:9b:bc:41:b2:9b:0a:b0:27:64:
94:65:27:bf:f2:8a:17:f5:e1:f2:ce:9a:bd:46:74:79:3e:3b:
c6:ec:39:8e:f2:5f:2f:bf:87:99:5f:4f:db:74:03:5e:a6:3f:
42:9e:59:1b:e7:0f:7d:b7:a2:99:71:ce:d3:e7:35:16:ad:7f:
74:4c:cb:e0:d0:97:28:59:da:72:44:ef:a9:eb:e3:95:cd:88:
0c:67:97:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:26:51 2025 by rpki-client