
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft
File: GWgoqCH0FqupzswxqnGjA_QhR3g.mft (raw, json)
Hash identifier: X0oR9HHG9OFMsvTL4fjArf8tjul355NeQcbfnFPvySk=
Subject key identifier: 78:D3:56:C1:83:D6:11:CF:1C:9F:6E:07:9D:66:C8:69:A9:27:83:AC
Authority key identifier: 19:68:28:A8:21:F4:16:AB:A9:CE:CC:31:AA:71:A3:03:F4:21:47:78
Certificate issuer: /CN=A9197724/serialNumber=196828A821F416ABA9CECC31AA71A303F4214778
Certificate serial: C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft
Manifest number: C5
Signing time: Wed 05 Nov 2025 06:03:12 +0000
Manifest this update: Wed 05 Nov 2025 06:03:11 +0000
Manifest next update: Wed 12 Nov 2025 06:03:11 +0000
Files and hashes: 1: GWgoqCH0FqupzswxqnGjA_QhR3g.crl (hash: QjjbmL4IEo/F5/hDCvCqly/Q3mliuR7vxbblSwLrv0s=)
2: B5907D4E904E11EFA704CB22C4F9AE02.roa (hash: 5l5e+UsXvisCMP10s+0rYzrljGYf5zRzOJR/tcgke3o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.crl
rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197724, serialNumber=196828A821F416ABA9CECC31AA71A303F4214778
Validity
Not Before: Nov 5 06:03:11 2025 GMT
Not After : Nov 12 06:03:11 2025 GMT
Subject: CN=690ae89f-e4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:42:ac:01:de:e6:51:79:9e:71:0a:bf:40:9d:
a8:bf:07:4a:4f:55:bb:0c:67:f2:91:5e:f3:01:44:
70:48:61:0f:24:38:05:03:7d:7f:c7:49:22:01:1f:
4c:1b:a7:89:16:ba:09:fa:ab:74:27:b8:b6:f6:28:
90:b4:f5:19:2e:25:2f:33:0e:72:da:6a:6b:f9:18:
f7:08:0c:3c:be:00:28:a5:f4:6e:fd:6e:b2:5f:77:
7f:3d:15:9c:b7:e7:39:d2:41:71:6d:b0:f8:61:59:
70:ab:e6:f2:02:95:9e:08:23:23:2e:17:77:12:00:
6c:11:c0:4f:80:ae:27:76:9f:f9:bd:ef:a3:45:32:
c4:f4:e1:41:8f:67:2a:7f:65:c1:f1:20:1a:56:f4:
55:97:d1:3c:1a:92:22:d3:b3:a4:a5:91:25:c8:dd:
03:b6:4f:9c:17:53:10:4d:e1:f3:0d:23:d8:66:66:
50:57:c0:7b:99:c1:9c:0b:85:c4:90:ca:65:c0:7c:
fa:76:6d:9d:4e:0f:f5:19:5d:05:03:36:21:c3:b8:
7e:fc:65:e6:c8:49:a3:9d:7b:ed:9f:a4:83:9a:26:
d7:32:5f:9c:d1:98:bf:c4:16:44:fb:38:b4:72:81:
d4:b0:28:a1:76:48:b0:ca:80:67:d2:05:d4:91:67:
6a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D3:56:C1:83:D6:11:CF:1C:9F:6E:07:9D:66:C8:69:A9:27:83:AC
X509v3 Authority Key Identifier:
keyid:19:68:28:A8:21:F4:16:AB:A9:CE:CC:31:AA:71:A3:03:F4:21:47:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:04:9c:4d:14:87:55:11:42:d0:e7:be:92:13:f8:0a:f7:82:
7c:92:69:94:26:ae:72:19:13:53:16:49:59:08:b2:b1:50:30:
46:2f:35:af:af:b2:c8:a5:c9:35:c8:d6:db:1e:41:05:1e:36:
cf:fa:71:31:b5:c1:1b:e9:52:63:b0:99:87:24:f6:db:a1:27:
3c:98:7c:58:6d:a8:70:30:1b:3f:36:b9:e5:e2:06:e8:3d:ce:
c7:15:a7:e0:6a:40:b1:e8:fe:94:ea:93:18:9c:e3:de:ea:1f:
f4:69:e1:fb:00:e4:b6:0d:67:10:07:27:28:d4:f0:da:12:5a:
e9:20:8a:63:f0:26:09:d1:53:5b:56:c5:ee:b2:5d:51:bd:b2:
f4:32:c5:9d:98:a7:99:bd:5e:d0:04:12:70:46:d1:06:c8:ac:
a3:21:07:1f:be:5a:85:b4:0f:3d:27:ba:e4:c9:7e:40:63:fe:
77:11:60:3d:42:a1:45:af:aa:7b:71:ad:0a:57:33:32:f5:2c:
8a:83:6e:2d:0b:d7:b2:85:ad:1b:85:95:4d:75:1c:d6:33:93:
88:28:24:57:80:15:61:3d:81:77:b2:31:4e:98:87:85:24:8b:
79:7f:79:1e:80:50:67:f0:e8:79:d5:be:85:6f:d9:0a:2d:e3:
60:b0:e8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:43:11 2025 by rpki-client