
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.mft
File: AWVpw8-OcAky8U5ILFaqZruvK2E.mft (raw, json)
Hash identifier: uRGeh3jynKyh0hNDC4BgIPWUc1+cBYrzMSExX9ApELM=
Subject key identifier: E2:17:10:F5:AA:BB:61:4F:4E:6B:1A:C1:8B:62:7B:DF:E3:C2:57:10
Authority key identifier: 01:65:69:C3:CF:8E:70:09:32:F1:4E:48:2C:56:AA:66:BB:AF:2B:61
Certificate issuer: /CN=A918A132/serialNumber=016569C3CF8E700932F14E482C56AA66BBAF2B61
Certificate serial: 0139
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.mft
Manifest number: 0133
Signing time: Wed 05 Nov 2025 04:43:04 +0000
Manifest this update: Wed 05 Nov 2025 04:43:04 +0000
Manifest next update: Wed 12 Nov 2025 04:43:04 +0000
Files and hashes: 1: AWVpw8-OcAky8U5ILFaqZruvK2E.crl (hash: +563keqYd0LItbBznntA3hDVOFPB/DXNbcDzDrEt6BE=)
2: 1CDA8D8A613A11EF81FCD418C4F9AE02.roa (hash: vjUQbwkbtyGM1JhdKofog7wHQ8T4feb2Yii5jS5PVag=)
3: 29779172DD2311EF87F5EC47C4F9AE02.roa (hash: zO5pfufkvbKtzs3Is2jhE8FRoNAl15kjJ/LEGBkA2JA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.crl
rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:43:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A132, serialNumber=016569C3CF8E700932F14E482C56AA66BBAF2B61
Validity
Not Before: Nov 5 04:43:04 2025 GMT
Not After : Nov 12 04:43:04 2025 GMT
Subject: CN=690ad5d8-b47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1a:44:d7:7e:88:f5:1c:26:ab:ab:ef:90:4a:
12:98:eb:ae:52:d0:82:06:44:ae:ec:90:50:80:8e:
ad:b8:3f:e1:31:ea:b2:1a:a6:5c:d9:6a:d2:ff:dc:
1b:d4:78:55:f0:c1:61:bf:35:9d:a3:74:6b:73:8f:
ae:f4:dd:63:90:a1:2a:a3:87:e9:24:8a:fb:a2:8a:
a8:6c:59:3c:65:73:20:3c:c2:39:dd:44:30:e8:ec:
e2:91:34:d8:10:d0:98:d6:5c:be:b5:b1:bc:e2:0d:
4c:eb:c7:e6:2a:42:74:a7:6b:cc:b7:83:4b:d4:74:
82:9b:e8:ae:c2:f3:da:02:89:14:1d:48:16:1b:4c:
6d:af:38:ff:f4:06:34:52:d9:e3:de:47:c2:52:ba:
19:2f:bc:7d:49:ac:77:c5:f1:bd:bc:61:4e:06:6f:
94:5d:fd:e5:a4:b1:f9:ce:ba:a3:ba:f8:4f:70:42:
cb:aa:cd:aa:2a:57:27:ce:fd:f3:82:90:79:37:ee:
c6:61:e7:d1:1b:e8:c0:f7:f2:10:00:dc:2d:89:68:
bd:2a:3f:9e:f1:de:37:6a:7c:c4:f9:4a:8d:d8:d8:
42:eb:57:ef:f3:cd:38:1d:29:a5:a5:f4:cf:43:2d:
aa:fa:03:79:ff:56:aa:f3:c8:eb:89:58:f9:b9:71:
a3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:17:10:F5:AA:BB:61:4F:4E:6B:1A:C1:8B:62:7B:DF:E3:C2:57:10
X509v3 Authority Key Identifier:
keyid:01:65:69:C3:CF:8E:70:09:32:F1:4E:48:2C:56:AA:66:BB:AF:2B:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:98:6e:42:8b:9d:a1:b2:87:a4:44:a5:02:1c:65:52:5a:51:
75:04:22:2c:ca:ca:99:bc:16:1d:1f:9e:c2:0c:a6:da:c8:09:
ca:35:4b:f4:80:87:8f:8b:9a:64:28:78:ae:1b:f9:1a:f5:f7:
24:7f:c3:67:53:d3:26:0c:56:ee:a6:b6:ad:6c:30:40:0f:97:
f3:51:a4:6b:b6:53:5f:7a:9f:61:1c:25:78:76:16:10:d2:61:
5e:17:de:f0:46:cf:84:4b:17:21:eb:7c:96:c4:95:2a:3b:54:
9d:85:b3:d5:54:bb:4c:a5:2d:c2:0b:ae:3e:d1:51:ba:f3:a3:
b8:2f:ec:35:b5:4e:b4:34:9d:d4:06:cf:8d:8b:0f:ea:02:a1:
46:43:6a:74:22:e1:d1:b8:00:91:aa:8e:14:b1:d9:08:11:2e:
71:b5:b5:f2:fa:24:18:a6:0c:39:69:eb:c6:ba:b5:91:72:b8:
ff:cf:c4:a9:fd:03:a9:85:99:09:33:0a:82:db:6e:a8:3f:f0:
be:d4:e2:73:bf:4d:9f:2f:50:02:68:bc:c8:f2:9e:c8:eb:f7:
25:42:bd:d2:39:d7:e2:7b:5f:cf:d8:fd:05:93:71:ea:07:8b:
58:7a:d0:d9:c9:48:98:16:b4:35:c9:88:46:74:44:e1:1f:e7:
aa:c2:73:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:23:47 2025 by rpki-client