
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
File: w5O8331Fpxlv881tMNYjDfT9xX0.mft (raw, json)
Hash identifier: m0uKA1zFtFbuGdRcmqfOhN2lG3OwvlvsLyzUV28gFaI=
Subject key identifier: 8B:2E:12:15:75:B0:F5:55:BA:E8:22:E6:C7:28:F0:03:55:7E:23:5C
Authority key identifier: C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D
Certificate issuer: /CN=A916ED2B/serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
Manifest number: F3
Signing time: Wed 05 Nov 2025 05:25:19 +0000
Manifest this update: Wed 05 Nov 2025 05:25:19 +0000
Manifest next update: Wed 12 Nov 2025 05:25:19 +0000
Files and hashes: 1: w5O8331Fpxlv881tMNYjDfT9xX0.crl (hash: kx7MmaKhUp6tAwHjUAw26ery/hlWUyHVXg4xCsoq3ek=)
2: 2B4804B845B211EF9B812019C4F9AE02.roa (hash: nLqd4iOtl1GLw2Gq5WmxNPMWDRnWSTF7f/Jyns3zXvM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl
rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED2B, serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D
Validity
Not Before: Nov 5 05:25:19 2025 GMT
Not After : Nov 12 05:25:19 2025 GMT
Subject: CN=690adfbf-ba19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:f0:46:d3:36:56:0e:56:48:7a:43:04:05:
cd:4d:83:6e:6c:c2:c8:b0:22:82:9e:52:c3:52:50:
ac:93:8c:4a:0f:8f:d5:30:de:d2:68:8c:b6:81:d1:
a1:8a:50:67:81:f5:46:1c:e5:11:06:36:49:19:8c:
7a:1d:7e:77:79:a5:77:2c:44:ca:e7:56:76:85:77:
f8:2e:31:7e:68:b8:e9:a3:c6:2b:bd:28:2f:bc:6b:
46:de:4a:1c:aa:39:f9:ff:53:77:2b:4c:7c:6f:f1:
3a:99:8b:90:b0:af:8a:ca:6e:28:08:5c:01:b6:b3:
be:5c:7b:76:1e:50:00:5a:b1:d7:3c:44:d4:5b:a6:
7d:aa:7a:e6:f3:ae:80:cc:dc:03:2c:4d:8a:1e:94:
1b:83:08:09:0d:fb:b1:18:b2:3a:28:67:9d:31:29:
04:38:f8:24:1e:96:52:f0:bd:83:ab:18:f2:2b:03:
7a:c3:9f:e0:05:06:2c:15:55:5c:e7:0d:01:f5:f2:
f3:cf:5c:0c:1e:67:72:04:cf:8c:4d:df:36:f0:27:
0a:cd:e6:df:cd:3a:4b:78:ca:1b:95:15:a8:d5:16:
ae:dd:94:77:83:f9:83:e5:66:c5:f5:09:2a:da:d7:
d6:5b:df:1b:6a:5f:b4:5d:5e:58:aa:1c:f8:da:75:
42:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2E:12:15:75:B0:F5:55:BA:E8:22:E6:C7:28:F0:03:55:7E:23:5C
X509v3 Authority Key Identifier:
keyid:C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:32:72:fb:30:e5:50:fb:e3:1a:37:09:35:64:59:9a:28:88:
29:26:24:a2:b8:fa:01:8e:24:f5:4e:01:0d:2f:fa:df:9a:e9:
ea:98:71:11:bd:e1:1e:c4:17:78:32:87:24:58:29:19:0d:08:
20:60:81:32:e6:3b:68:0c:d6:89:bc:4e:39:da:35:fe:63:75:
82:16:db:48:34:ca:b8:e5:03:8b:09:77:f3:79:9c:09:57:b3:
cf:52:41:78:f3:1a:97:d7:52:dd:cd:66:3e:c1:dc:ff:1d:81:
e6:bd:28:61:5c:c2:fe:b9:03:e7:5f:6f:5b:d8:4c:49:67:48:
e5:74:7a:6c:15:bf:a6:9d:2c:46:10:0f:b0:47:c4:dc:a1:ea:
c8:cf:21:c5:f4:ea:d9:6b:c1:1b:8f:ce:fc:10:4e:f9:93:ce:
ea:86:f0:93:4d:a0:b9:7a:36:29:32:fd:c0:9d:7a:65:62:b3:
c3:8b:a9:93:db:3e:6f:32:69:a7:1c:1c:ff:36:b3:20:1a:02:
fc:15:a0:aa:46:24:24:73:16:6f:e4:a9:7a:07:9c:00:b0:b1:
18:f1:b1:74:18:17:2b:bb:9f:3a:0c:20:16:5c:12:dd:68:4f:
af:ff:55:27:55:4e:96:3f:25:b0:5e:e2:16:85:eb:7c:14:24:
c3:6c:cc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:56:49 2025 by rpki-client