
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
File: fWozDw0BJJQnx_yd3dz0qCh2CwY.mft (raw, json)
Hash identifier: m7SnX7ECCrknZHnlIkTfYQksVodp+JaoYllRLd2u3Ig=
Subject key identifier: D5:77:93:79:8C:0E:9E:D3:74:58:44:56:AB:02:6B:E0:C0:0F:A5:0A
Authority key identifier: 7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06
Certificate issuer: /CN=A9145519/serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06
Certificate serial: 1CA0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
Manifest number: 1C8E
Signing time: Tue 04 Nov 2025 16:16:41 +0000
Manifest this update: Tue 04 Nov 2025 16:16:41 +0000
Manifest next update: Tue 11 Nov 2025 16:16:40 +0000
Files and hashes: 1: fWozDw0BJJQnx_yd3dz0qCh2CwY.crl (hash: Xw45vJ/eOq2k4q4lo92U0RqCTsAAuWrmEOyuxG9H4rM=)
2: 78D1DAC8E45E11E681F82341C4F9AE02.roa (hash: VSkeUxaSAuJFpGB7aelToeed4EztsVL3PeuQY5Xovws=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl
rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:16:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7328 (0x1ca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145519, serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06
Validity
Not Before: Nov 4 16:16:41 2025 GMT
Not After : Nov 11 16:16:40 2025 GMT
Subject: CN=690a26e9-2963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:42:b2:63:73:3e:4b:01:5e:bb:a2:c7:2e:89:
cf:91:8b:93:c0:c1:b7:27:cd:44:09:2d:42:b6:0e:
d4:bc:b0:ba:13:4c:79:90:b0:66:c0:2b:63:e5:05:
41:3a:00:27:17:d3:b6:a1:77:f5:9d:8d:ca:a5:b6:
f3:f2:e1:cf:b8:95:3f:e8:3d:9e:c2:51:82:b4:b3:
6b:c2:8b:48:99:ac:3d:79:b2:2c:ec:0e:6c:8f:bb:
2e:d3:01:db:b8:f1:92:05:b0:ea:6d:da:ca:6b:c9:
66:6b:41:e7:51:dd:8a:64:8f:e0:a8:9e:19:7b:c2:
53:b9:ae:ee:b2:3c:9d:27:17:34:8e:32:aa:5e:4a:
5f:20:c4:34:c3:9b:78:f9:4f:6c:3c:fb:a5:5c:85:
6a:d4:ba:70:be:13:3a:2b:82:81:f1:86:18:0b:77:
ce:e9:ea:ea:ff:26:e1:4a:4f:48:83:9a:e6:d5:e6:
51:30:35:08:5e:8c:ab:96:54:a5:76:06:54:9e:11:
33:1f:68:a7:fc:e3:89:a3:fc:2d:60:24:6b:37:bc:
ec:66:9e:1c:e8:cc:d1:a0:07:8e:e7:06:71:d2:a8:
6a:87:c5:1f:e8:31:08:53:3d:a0:41:f6:0f:b8:f4:
06:83:1a:45:d2:db:db:d2:d1:24:22:b0:28:2e:4c:
a1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:77:93:79:8C:0E:9E:D3:74:58:44:56:AB:02:6B:E0:C0:0F:A5:0A
X509v3 Authority Key Identifier:
keyid:7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:bb:6f:6e:2b:31:5a:ad:e9:69:0f:47:a7:03:cb:6b:f0:7b:
e7:70:d9:9d:b6:b2:69:ef:32:43:8f:f8:52:5b:ed:49:61:5c:
4e:dd:aa:1f:54:28:21:9c:ff:19:60:20:23:cc:cb:33:24:24:
d5:c2:29:ec:5f:47:9f:8e:4b:37:e8:e6:a3:33:fb:56:5b:a6:
54:3e:15:75:5f:71:2c:e5:c6:ea:c5:30:ee:f6:21:dc:0b:23:
ea:a5:ed:fd:da:d5:26:78:f5:6c:f7:b6:e1:21:15:d4:d0:a9:
f0:70:f5:da:c8:35:75:c9:5f:e4:b1:6d:bc:85:46:e5:36:83:
ac:af:4b:63:c6:1b:78:4a:ac:76:c9:26:0e:fe:ea:92:61:54:
1a:25:31:57:d1:6b:1d:92:77:76:e0:80:9c:4c:b1:9a:5f:79:
74:79:2f:f5:86:ac:6e:d0:49:27:98:b8:1d:62:31:02:08:d3:
44:a2:e3:d0:6b:e5:e0:c0:f5:4e:2c:85:c0:57:1b:e3:6a:06:
b0:b7:6f:59:b1:da:b2:1a:c1:88:26:d3:62:1a:cd:ce:a7:17:
df:d3:43:77:b9:32:84:83:8b:3f:f7:02:cc:24:98:fc:92:7a:
82:74:ba:22:cd:5c:ae:19:8c:d7:12:a2:3a:6f:76:90:ea:80:
a2:e5:35:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:02:37 2025 by rpki-client