
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
File: w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft (raw, json)
Hash identifier: W7ml5mQyClIyGOJAlbzZ6WK8fN4GZlPYxFWmRIHTaho=
Subject key identifier: BA:B0:50:48:B0:F4:B2:A3:D3:22:3F:57:26:AD:7B:E6:14:F1:6D:07
Authority key identifier: C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43
Certificate issuer: /CN=A9150080/serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643
Certificate serial: 0432
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
Manifest number: 042C
Signing time: Tue 04 Nov 2025 23:56:49 +0000
Manifest this update: Tue 04 Nov 2025 23:56:48 +0000
Manifest next update: Tue 11 Nov 2025 23:56:48 +0000
Files and hashes: 1: w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl (hash: 1y+XlTTU2MniBdJGCUYELf/TijBxSpnR0FiC+4uP5FU=)
2: 9904EDFA857E11ECA6A4FB59C4F9AE02.roa (hash: uXNN93KPpMh1sC/GxXfk7rupN3sWo7udXfCSk3ZQb8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl
rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 23:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1074 (0x432)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150080, serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643
Validity
Not Before: Nov 4 23:56:48 2025 GMT
Not After : Nov 11 23:56:48 2025 GMT
Subject: CN=690a92c0-9497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:8f:f0:fe:e5:f9:a3:a2:0b:b0:cd:5a:0b:
9f:df:e7:a6:93:11:58:12:1a:85:a8:ee:c1:44:56:
46:d0:d6:f4:b5:9e:9e:f4:eb:93:49:13:31:c8:26:
7c:7f:34:e4:5c:97:48:74:43:8a:d8:ca:0d:43:3d:
fd:8b:01:1c:ca:d5:e0:4f:f0:95:5e:ba:82:98:4b:
e2:65:bb:33:1b:4f:16:32:ac:7e:e0:4a:ed:a3:d4:
01:40:39:86:4e:97:40:c6:09:bb:24:8f:c6:ba:87:
3e:83:0f:21:5e:f0:6f:31:31:ea:48:60:ca:77:6e:
d2:24:4d:eb:ca:ef:50:29:d6:c6:1f:cd:c8:1a:73:
e4:12:c8:74:aa:ba:c3:7d:be:a8:16:c6:6c:80:87:
0a:a5:04:63:72:a8:2e:77:86:88:d6:c3:1f:14:44:
3b:18:e7:5d:f8:25:bc:c5:f2:9e:f3:6b:e5:75:25:
90:96:80:6c:80:8c:b8:a4:c8:ec:74:72:73:a3:a7:
7e:22:d7:91:b9:8e:0c:50:bc:03:b9:b1:a9:ee:06:
65:7b:3a:8c:52:26:22:a0:11:03:45:ff:60:95:b4:
21:ce:5d:1e:67:b8:9c:25:9d:54:45:9c:a4:18:3b:
17:7c:ca:78:08:bf:52:0c:d4:a3:e5:1e:e8:14:6d:
54:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B0:50:48:B0:F4:B2:A3:D3:22:3F:57:26:AD:7B:E6:14:F1:6D:07
X509v3 Authority Key Identifier:
keyid:C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:82:d4:23:c2:e3:4f:d8:b8:52:25:70:90:52:55:23:60:94:
f4:45:8c:2b:65:98:ec:4d:3d:5e:b0:27:e5:49:18:8a:4c:ff:
2f:99:21:21:fb:8c:cc:bc:a5:ad:57:9e:9a:93:59:78:28:a6:
eb:bd:92:3f:d1:63:df:d5:87:33:0e:08:fb:f5:b2:5e:02:e9:
b6:44:c1:14:4f:f3:5e:f4:ed:38:19:17:3f:3e:26:c3:0d:d3:
fe:f5:ef:7a:69:6d:09:4c:9b:f3:94:59:b6:cf:42:0e:c7:79:
49:9c:4c:13:27:1c:1a:d5:b9:f0:d7:19:8f:8a:c8:42:90:02:
7d:a6:aa:2d:12:d5:a8:db:ce:5e:07:84:44:dc:e9:16:00:54:
22:0e:de:eb:c6:80:ba:5e:84:45:a1:2a:a3:a9:eb:19:50:a9:
ce:a3:e0:c6:3c:b9:73:71:79:ef:16:e5:18:1e:e7:0d:e7:73:
d3:93:90:47:00:8b:af:3d:9e:20:c4:e7:ae:03:f3:24:8d:52:
f3:52:b3:0b:4b:6a:7c:2a:28:0c:7a:09:42:04:30:b8:a2:cf:
3e:98:01:2b:44:ab:9c:57:b2:fe:b7:41:55:f0:d3:8d:bf:f1:
0e:6a:ea:66:30:35:b6:3b:46:39:cb:95:b8:6b:da:3a:56:15:
57:e4:29:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:03:49 2025 by rpki-client