
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
File: wK73B39SYiVnF5rOVq1e6M1kYE4.mft (raw, json)
Hash identifier: 458Olh7eS3ERsNd+6raF4VWHjRt7D7BO+pVIWYr4zHg=
Subject key identifier: 8B:B0:3B:12:0B:6F:CC:B4:63:3C:D9:C5:34:EC:7F:D3:BA:0C:D3:5A
Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E
Certificate issuer: /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
Certificate serial: 0181
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
Manifest number: 017B
Signing time: Wed 05 Nov 2025 03:55:55 +0000
Manifest this update: Wed 05 Nov 2025 03:55:54 +0000
Manifest next update: Wed 12 Nov 2025 03:55:54 +0000
Files and hashes: 1: wK73B39SYiVnF5rOVq1e6M1kYE4.crl (hash: LGHve4zAbE/1eW/ezHnZuEUQkGTDKgo0MxxF1ht7eQA=)
2: 6307B34A7CAD11EE9E7B9434C4F9AE02.roa (hash: /QiKgn5sBz0ONRYcM1JvQlCWVa4Jvc9ROw/bHMNmg2o=)
3: 3BE03ECC7D4D11EE93D62E30C4F9AE02.roa (hash: 4PWxSJvGPsYEjGtgHYM8obqb8f7X6eyOT+IKt9t0/2Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl
rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B0F6, serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
Validity
Not Before: Nov 5 03:55:54 2025 GMT
Not After : Nov 12 03:55:54 2025 GMT
Subject: CN=690acacb-101f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:3a:18:5b:bd:5b:18:26:03:dc:1a:ad:92:
d5:83:d2:97:7a:30:5e:01:b3:32:3b:4d:ae:dc:38:
5b:f0:d4:75:f3:a5:4e:59:de:a3:f7:1c:40:5b:3d:
03:b6:17:10:d6:df:17:09:6c:bc:f8:bb:12:18:46:
4e:b3:e9:b5:71:32:04:c3:08:07:9f:dd:39:be:f2:
f4:72:90:d9:12:32:97:29:8f:da:30:70:19:c3:fb:
17:99:2b:d1:fc:46:74:3a:c1:35:85:78:dc:4f:ad:
0e:eb:45:0f:1b:20:a6:c0:8e:4c:e8:47:67:91:80:
b2:55:cc:9a:b8:aa:90:74:6e:61:1d:a0:13:9c:7e:
4d:32:18:25:52:6f:ea:3c:67:f2:ab:58:93:bc:4f:
3f:b8:e4:04:95:86:31:70:81:61:23:89:ca:a1:26:
4a:d7:35:73:9e:74:c5:2a:13:0d:c6:b7:52:d9:3a:
57:d1:81:31:07:9d:45:e8:7b:35:26:b3:99:76:68:
34:1e:4d:7b:7b:b2:e3:42:5f:6c:c4:eb:1f:82:5d:
d2:0c:0a:e9:52:42:e3:c6:98:0b:a0:43:ef:ab:ab:
c2:36:21:19:9a:21:23:b0:ef:ca:34:b0:79:b7:90:
25:71:10:ef:8b:ec:fe:b6:21:c7:23:5b:21:84:dd:
24:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B0:3B:12:0B:6F:CC:B4:63:3C:D9:C5:34:EC:7F:D3:BA:0C:D3:5A
X509v3 Authority Key Identifier:
keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:57:88:7d:6f:5e:ad:38:86:b3:bc:7a:ec:c8:e1:98:5f:d2:
65:a8:6b:2e:64:87:55:48:cc:5e:c5:8c:c3:ed:8a:f2:78:8b:
49:47:d5:48:ef:e3:53:76:73:c6:5a:44:d3:f2:c2:8b:2a:ad:
02:48:d8:cc:21:f3:9c:66:6c:e0:15:1f:95:0b:56:74:dc:fc:
3e:7e:5e:6f:54:bf:05:a6:50:31:57:3d:41:6d:a3:52:2a:7e:
ff:92:01:e6:a8:d6:08:90:32:6c:41:05:e9:84:bf:03:79:75:
d1:fa:c8:7f:d3:19:2e:f6:1c:14:5e:01:4f:0c:7b:6b:1a:c3:
fb:66:e7:b2:06:4f:ae:d0:dc:fd:ea:41:06:12:04:80:42:c1:
a6:31:6d:68:c2:31:3c:ed:94:d5:8b:7e:e0:e8:4d:e7:86:2f:
b7:33:59:41:80:02:b9:a4:ad:de:c8:9a:1b:0c:1d:4f:85:12:
91:bb:40:c1:ad:14:6d:0c:9e:28:93:25:71:08:ac:30:56:ea:
fe:80:9a:8c:03:f4:ee:82:c9:b4:24:aa:3f:19:fc:98:43:6e:
71:68:3e:20:1e:6e:23:8d:bb:76:22:0d:5b:69:00:b7:a8:4c:
6e:6d:00:3e:fa:e9:a0:08:cd:f2:12:8a:f9:49:3c:a7:5e:be:
53:82:f5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:29:39 2025 by rpki-client