
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft
File: wTya41wnwxAw4CQoc7otWnNdeBE.mft (raw, json)
Hash identifier: XwZHM0qk4aFLD0DsWhJmMTYIYdUv2N7/QX86cHvomjE=
Subject key identifier: 47:BF:C5:14:E6:75:7A:D1:EB:F5:4F:A7:31:7C:BC:F7:95:7E:55:D8
Authority key identifier: C1:3C:9A:E3:5C:27:C3:10:30:E0:24:28:73:BA:2D:5A:73:5D:78:11
Certificate issuer: /CN=A9161F73/serialNumber=C13C9AE35C27C31030E0242873BA2D5A735D7811
Certificate serial: F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft
Manifest number: F9
Signing time: Wed 05 Nov 2025 05:20:50 +0000
Manifest this update: Wed 05 Nov 2025 05:20:50 +0000
Manifest next update: Wed 12 Nov 2025 05:20:50 +0000
Files and hashes: 1: wTya41wnwxAw4CQoc7otWnNdeBE.crl (hash: 2cGI7ZaIyzqHxjySLp2Wso7wj6ZGwSot0zLzTD1Xj6E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.crl
rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161F73, serialNumber=C13C9AE35C27C31030E0242873BA2D5A735D7811
Validity
Not Before: Nov 5 05:20:50 2025 GMT
Not After : Nov 12 05:20:50 2025 GMT
Subject: CN=690adeb2-ac86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:55:46:b8:14:b3:76:66:85:60:8e:45:75:
0c:f0:b7:39:31:a9:1a:bb:10:57:52:69:a7:be:1b:
a9:6d:f9:8e:55:fc:5e:55:b6:81:52:a0:05:fb:fe:
9f:b9:01:cd:fc:a2:55:85:c2:dd:17:49:d5:10:8c:
05:e8:e2:e0:bd:ab:01:d9:02:f3:e8:ec:51:4f:eb:
0d:45:69:03:b1:cd:76:21:be:c4:d7:5f:c9:bf:e9:
d4:65:97:68:d8:2e:29:ea:74:d2:65:8e:d8:b1:1d:
01:85:a7:0f:9e:89:ae:45:e7:fe:79:9d:24:79:ba:
af:c1:e3:91:1e:bc:ef:b6:8f:d5:0d:cc:95:2b:0f:
77:bc:c7:23:8a:ba:d8:42:25:11:95:d8:3e:d6:ad:
8a:25:bc:e3:9f:b3:e0:8b:36:4e:ca:1f:e3:84:e5:
b8:56:ff:23:bd:3d:70:ac:9f:a2:a9:6c:63:24:84:
39:f4:95:32:da:f8:e0:f3:c2:3a:cd:ad:49:b4:06:
c7:58:02:5f:10:13:d8:61:b8:20:4c:43:9e:d5:c3:
07:2b:db:ea:47:ae:a5:ae:e1:46:b2:aa:75:13:b4:
44:24:e5:d3:cd:4e:77:1c:06:d0:e7:d9:9f:ce:5a:
e3:b4:01:6c:d7:d5:6c:29:05:77:74:52:c6:04:98:
66:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BF:C5:14:E6:75:7A:D1:EB:F5:4F:A7:31:7C:BC:F7:95:7E:55:D8
X509v3 Authority Key Identifier:
keyid:C1:3C:9A:E3:5C:27:C3:10:30:E0:24:28:73:BA:2D:5A:73:5D:78:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3e:44:89:65:68:c9:03:ff:41:d4:fd:29:00:00:bb:75:68:
79:3b:a2:39:95:0a:fa:32:33:47:61:23:cc:b1:de:d6:c9:eb:
8b:4e:60:61:76:6e:19:a0:aa:f0:08:34:b5:ac:6f:20:ff:2f:
63:32:ed:31:f0:83:28:b5:b1:ec:ee:ce:8b:43:ab:29:6b:38:
97:fd:6f:3f:51:d1:62:b2:6a:7b:45:3e:e4:28:67:18:96:df:
50:93:e0:13:91:8c:f7:47:80:c1:2e:67:06:70:06:af:b2:69:
cb:ce:aa:e9:41:bf:33:f3:bd:35:de:85:c7:53:f4:f8:74:cd:
0a:1d:73:1e:c1:5e:87:0d:01:57:5f:6f:b5:48:6e:7b:5f:98:
b8:93:7e:c3:28:cf:70:e9:19:57:ae:39:4a:b5:ed:46:91:23:
de:1d:12:a3:83:19:22:09:9c:6e:62:0f:56:0c:ec:eb:36:43:
ff:d5:67:bc:8c:79:84:d6:a0:e7:06:08:32:a0:a9:40:ed:c7:
83:b9:8e:ec:e5:ea:da:0b:96:2d:20:9f:04:a7:c2:09:90:44:
b2:11:bf:58:04:8b:56:c1:0b:41:ed:22:94:ed:89:fc:56:43:
9e:6e:b9:62:1a:e6:de:35:2c:b3:39:34:c9:db:2a:10:a0:7f:
d0:f2:74:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:37:22 2025 by rpki-client