
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
File: wS8PVy2jONITRB7wfKUR0anIm20.mft (raw, json)
Hash identifier: 02sBAMIU0lpuQKBsVgWBCtisNxLnzCOewTvg7G4MOCY=
Subject key identifier: D7:0F:FE:5A:CF:4A:B0:A3:1D:3B:4D:05:CE:06:C9:9F:14:69:D6:F1
Authority key identifier: C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D
Certificate issuer: /CN=A916CA70/serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
Certificate serial: 07FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
Manifest number: 07F4
Signing time: Tue 04 Nov 2025 21:06:53 +0000
Manifest this update: Tue 04 Nov 2025 21:06:52 +0000
Manifest next update: Tue 11 Nov 2025 21:06:52 +0000
Files and hashes: 1: wS8PVy2jONITRB7wfKUR0anIm20.crl (hash: ipYzCM3Za+c3cFsDN0URJupF4ijzGpLb5/YOPKY+Lss=)
2: 1E4394CC03AC11EBBA025F2BC4F9AE02.roa (hash: hCxFygIxGBaZzO8/d0Vcf9NqUsTf/UZgA3mXuGpyT3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl
rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2042 (0x7fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CA70, serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
Validity
Not Before: Nov 4 21:06:52 2025 GMT
Not After : Nov 11 21:06:52 2025 GMT
Subject: CN=690a6aec-ed06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:a5:b9:54:4f:e0:ed:e2:f7:bc:d5:e5:23:
3f:d9:0c:bc:2a:17:c8:be:34:5e:fa:1a:ef:cd:7e:
ae:18:2e:ee:7c:e6:87:61:2d:b4:21:77:61:ca:f1:
db:3d:2c:3c:b3:0c:c4:7b:b0:7d:a9:fb:ce:cf:b9:
8d:9e:66:6b:66:e7:ac:30:c3:fd:87:17:e8:c5:94:
c2:e3:53:f7:7a:4c:26:4b:90:d4:d0:ed:fc:28:5b:
b0:78:23:30:f0:f4:5f:98:01:fa:d7:f0:c2:83:8a:
f8:6c:61:9b:79:d8:16:bf:95:08:bc:46:09:c7:6f:
08:c4:53:c5:e0:11:8e:79:e0:c8:7a:49:99:8d:3d:
48:91:c9:65:66:e1:67:7b:96:cd:e5:65:97:30:e5:
15:2b:48:a5:76:7d:d5:d0:62:21:82:c8:d5:eb:03:
ee:61:db:d1:4f:e6:57:1c:59:44:9a:cd:78:57:6e:
79:0c:a4:fa:eb:bd:5a:35:8c:6c:3c:29:93:1c:70:
8d:cc:a3:88:80:63:c8:df:0d:3a:e1:cb:63:1c:6c:
5b:9a:d0:91:7d:75:ff:ea:5a:52:18:a8:27:11:0d:
50:5c:ab:55:c2:04:df:e9:f5:43:e1:b5:22:ef:bf:
42:fb:ea:1c:3e:6d:b5:ea:e7:92:58:86:a1:95:c3:
7c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0F:FE:5A:CF:4A:B0:A3:1D:3B:4D:05:CE:06:C9:9F:14:69:D6:F1
X509v3 Authority Key Identifier:
keyid:C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8e:c1:a8:92:45:63:13:03:30:ef:a2:77:16:86:84:2a:18:
21:b5:7e:f8:d0:fd:cf:3f:5a:b6:5a:dd:15:01:51:e7:22:28:
e8:f0:df:1f:13:b8:a5:5b:91:3e:08:52:c7:c7:1a:2c:80:84:
e2:c1:5c:13:dd:88:be:f0:12:76:56:57:68:ec:9c:42:1c:c9:
1f:58:80:20:95:a9:98:bd:6f:00:5d:3b:d6:62:67:f8:24:00:
16:7d:2e:1f:95:d4:18:7e:92:65:76:c7:d6:34:4b:d0:38:18:
6e:2a:c3:c0:de:db:4b:6f:19:67:38:09:cf:d5:a9:7a:4d:af:
9c:3a:4a:3b:5d:82:d0:d9:11:d8:69:95:fa:61:2e:98:02:5e:
47:26:fd:8f:a0:2e:aa:16:5f:c1:7e:aa:e1:ff:4d:bc:59:bd:
59:c6:3b:18:c1:79:15:a3:e8:2b:3f:89:19:51:20:48:bf:cc:
ae:0d:32:ee:aa:c5:13:4e:e3:f6:5e:68:ec:fa:f3:fb:10:96:
90:40:8d:b2:6c:72:d0:78:1c:a0:ac:d8:8b:5a:9a:29:68:bb:
12:06:3d:2c:d5:02:15:59:84:a0:00:9d:42:1f:ae:ab:4c:ee:
54:28:ed:ad:ff:ae:90:b6:ef:01:10:e6:74:0e:f8:a0:9e:88:
a9:48:6e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:41:05 2025 by rpki-client