
$ rpki-client -vvf rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
File: wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft (raw, json)
Hash identifier: 1W0zzprKftFyvROVAwzg7wjWJSrnsyu9ezPbLV2BFo0=
Subject key identifier: 8A:03:22:B7:80:14:E7:CF:56:18:C7:4D:0B:D9:6D:EB:A9:4F:54:2F
Authority key identifier: C3:16:31:95:85:EE:2C:F2:47:B5:35:03:71:46:7D:C2:69:DC:9C:E5
Certificate issuer: /CN=A91619BE/serialNumber=C316319585EE2CF247B5350371467DC269DC9CE5
Certificate serial: 3519
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
Manifest number: 34F0
Signing time: Tue 04 Nov 2025 14:27:04 +0000
Manifest this update: Tue 04 Nov 2025 14:27:03 +0000
Manifest next update: Tue 11 Nov 2025 14:27:03 +0000
Files and hashes: 1: wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl (hash: LsP0KmE2KEPOThB+wHifwG5ciWwVIJ898+aQ8qTnfcg=)
2: 3AA9ABDAA6C711E9933CF621C4F9AE02.roa (hash: 0Vd+S2y27VtxJNaIaSzS26hUg229nb/6aZufw7SyqnQ=)
3: 3A0818A6A6C711E9933CF621C4F9AE02.roa (hash: utwoHGpdCAj4Fmr//A9NQPq/Muvduh7CzdYTs9q3Yzo=)
4: 39651CE6A6C711E9933CF621C4F9AE02.roa (hash: 0S/ooPJ2C5kXa2YUe26MqZS0wv4CYq55uodN29fbqkM=)
5: 387D8CB4A6C711E9933CF621C4F9AE02.roa (hash: EegTeeLlTfEQvKcm3aqYDfh/vKoTkWLQIcSy6ptPChU=)
6: 45598DB8FA1611EA9C6CE978C4F9AE02.roa (hash: EtRSxXLr9JBTJCnUooXoQwRCFg8CAJ0u6Dp1S7zs3Tg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl
rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13593 (0x3519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91619BE, serialNumber=C316319585EE2CF247B5350371467DC269DC9CE5
Validity
Not Before: Nov 4 14:27:03 2025 GMT
Not After : Nov 11 14:27:03 2025 GMT
Subject: CN=690a0d38-78ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:ba:48:3b:4e:2b:2a:5e:47:67:f1:52:92:
fe:ce:0b:c6:59:b8:62:c2:05:68:e4:63:1e:f8:8c:
62:75:6d:38:67:fc:33:ba:59:11:3a:8c:e2:ba:3d:
c0:da:96:2e:d1:fc:97:06:af:1e:e6:3c:a8:da:ca:
0b:01:1e:63:88:f3:83:1a:6f:5e:9f:a2:35:26:1b:
df:81:77:34:2f:d7:0c:62:2c:59:a1:89:86:7a:bc:
de:40:2f:9f:5c:48:a7:1d:ad:55:82:91:9a:e0:1e:
ee:c8:df:e9:d2:44:aa:84:36:cf:a1:28:fb:ec:fb:
67:e9:ad:38:e7:fc:b3:c6:dd:00:0e:d0:a4:97:9b:
af:81:b4:c8:87:a7:78:06:0d:28:0d:e9:25:55:32:
1d:11:6c:8f:7c:fe:c1:a5:a4:fe:7f:7a:0d:25:4e:
ce:33:f0:0f:a1:70:13:71:e5:18:1e:3d:2f:69:03:
2d:2e:35:28:54:8b:04:0f:53:c6:77:ad:07:a6:00:
93:2e:fc:d6:4a:17:ef:84:c1:ad:96:88:27:06:86:
ec:df:0b:ea:ed:ae:c0:ba:04:e5:b1:a0:64:7f:3a:
59:73:9c:20:69:1a:d3:2b:bf:8b:69:43:f3:af:11:
ea:d4:e8:73:f2:a5:74:9d:c1:c9:da:6b:a5:47:45:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:03:22:B7:80:14:E7:CF:56:18:C7:4D:0B:D9:6D:EB:A9:4F:54:2F
X509v3 Authority Key Identifier:
keyid:C3:16:31:95:85:EE:2C:F2:47:B5:35:03:71:46:7D:C2:69:DC:9C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:53:d4:ed:e1:1b:a6:5d:24:f6:f5:f2:ac:10:9f:a5:d7:e4:
7d:60:21:2a:1c:a8:35:e1:f3:5a:0b:c0:91:22:e8:9c:ee:34:
3b:c0:71:7f:a4:e5:18:0a:93:e9:e5:4d:c8:3f:c8:88:c6:12:
f1:e9:98:81:6d:10:60:cf:6e:2c:06:6d:c7:a4:51:22:86:80:
8f:9c:7d:6e:fa:98:20:a8:fe:90:6f:31:90:aa:30:d3:8e:1b:
20:69:a5:ea:61:fc:a1:f3:d0:e2:5f:4d:6d:b8:c2:90:52:43:
da:dc:6f:7a:2b:bf:bc:84:f2:fa:8f:d8:ec:3a:e2:2e:b6:1f:
96:50:cd:2d:e0:9e:ce:86:9e:5f:b7:78:d0:61:78:22:a9:04:
c6:85:cb:d4:0f:dc:29:2f:2f:aa:a9:cc:9a:17:7a:1f:87:3a:
ac:53:3d:06:b1:c5:b1:1e:ec:6f:94:3c:50:74:a2:0e:ad:4b:
a8:55:81:c6:f2:ca:22:4d:85:21:40:3b:2a:aa:05:05:22:3a:
19:18:b1:37:2c:f9:36:f4:13:c9:45:31:63:3f:46:7b:82:1b:
17:e0:c1:19:b2:57:ba:5b:01:ed:b0:27:7b:a7:eb:a8:9f:29:
cd:7f:9e:8e:fd:0f:cb:2f:aa:52:32:f0:d7:15:88:47:bf:7f:
36:6b:29:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:25:43 2025 by rpki-client