
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft
File: wDouaJYDIEoCs4vve5CDsQJ2JpE.mft (raw, json)
Hash identifier: CpgCjqMIHSxdsAv2P9N5AVcKsOunt+3wGZPi24qJtOQ=
Subject key identifier: 04:12:BF:ED:9F:F1:96:FC:DD:4B:B6:CB:26:80:86:59:87:76:38:EA
Authority key identifier: C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91
Certificate issuer: /CN=A919C7B8/serialNumber=C03A2E689603204A02B38BEF7B9083B102762691
Certificate serial: 0631
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft
Manifest number: 062B
Signing time: Tue 04 Nov 2025 22:49:23 +0000
Manifest this update: Tue 04 Nov 2025 22:49:23 +0000
Manifest next update: Tue 11 Nov 2025 22:49:23 +0000
Files and hashes: 1: wDouaJYDIEoCs4vve5CDsQJ2JpE.crl (hash: JehOsnnk0vbi2XStXANO1/gBEGs4KkjmtKfX1yKxCls=)
2: F8A90D48B7EA11EB91C5D25EC4F9AE02.roa (hash: 3oYf4D2aeCXu56f8mNAcOhJ4M4El8ji8s2gDvwvZjUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl
rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1585 (0x631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C7B8, serialNumber=C03A2E689603204A02B38BEF7B9083B102762691
Validity
Not Before: Nov 4 22:49:23 2025 GMT
Not After : Nov 11 22:49:23 2025 GMT
Subject: CN=690a82f3-02d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:12:fa:f3:83:2d:b3:1e:7d:4a:e0:5c:14:1e:
8a:24:e7:74:f9:e8:a1:24:76:86:19:08:bf:8a:7c:
8e:5d:c9:fa:ca:23:7a:7b:ca:4e:bf:ee:15:47:19:
0d:d3:3d:cd:40:bf:0a:74:29:d2:ef:0a:4c:56:81:
cc:c9:26:1b:a8:a4:cc:84:d8:4e:ac:67:83:c5:00:
41:19:dc:3c:5e:63:77:64:b1:6d:c0:d5:60:83:2f:
76:87:63:34:60:59:48:14:75:72:de:c6:58:54:2c:
dd:7e:65:ef:12:e3:82:68:71:0f:6f:17:2d:e8:78:
b2:56:f1:a5:e8:c9:bb:c4:7b:25:b1:21:00:7e:de:
f6:55:21:d0:d5:fa:0d:87:6c:df:30:0f:98:4d:60:
bc:58:7e:5e:12:9b:5e:0c:dd:33:7a:8e:d0:dd:f4:
8d:d0:64:ad:c5:53:21:17:30:03:aa:fe:72:ab:5c:
2e:ee:d4:e8:b6:3a:13:1d:ac:ee:52:4c:58:2f:7e:
b5:82:35:18:01:22:f1:89:54:37:0c:20:95:92:7c:
4b:1a:5c:76:3e:18:2a:60:dc:3c:46:5d:01:f4:3a:
67:cd:ba:6b:ab:16:25:ec:5f:29:0d:af:78:bf:8c:
6f:5d:3e:cc:2e:1e:9e:e9:e8:8d:8a:f9:0d:6f:91:
fc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:12:BF:ED:9F:F1:96:FC:DD:4B:B6:CB:26:80:86:59:87:76:38:EA
X509v3 Authority Key Identifier:
keyid:C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ab:83:d8:2c:22:a7:f2:38:a0:f4:77:6c:48:7a:ad:c6:98:
cb:9a:91:26:9c:e1:f3:8c:b3:e0:01:f3:e8:33:5b:1b:91:e6:
a7:01:bc:6b:1a:92:a0:c9:d6:88:55:c2:c1:5d:01:f0:f2:b8:
44:7a:a5:ac:0f:96:7e:f8:88:13:65:9a:0c:a7:9f:1e:c4:e2:
ed:45:67:11:85:19:14:d1:ed:4e:76:0e:c4:ea:ad:09:35:a7:
ce:85:c8:6b:3d:ea:93:ba:97:8c:07:af:fe:8c:cb:0f:1a:4c:
65:03:51:f7:08:f7:92:da:bf:b9:8f:f7:61:01:e9:ee:e7:b7:
40:0c:e9:3c:41:2f:57:2f:bc:19:8b:d0:f9:ce:3c:ab:28:79:
e0:08:7b:c2:06:f6:56:eb:1e:0d:d4:93:04:7f:c4:24:2b:30:
1d:08:33:32:dd:00:07:75:74:de:2f:83:22:94:a5:31:8b:1d:
cc:31:19:c2:24:bc:c6:07:08:86:bb:0f:96:43:b4:ff:68:8c:
be:f9:63:5e:fa:5b:af:d7:5d:8f:0d:09:e8:bc:b3:62:47:65:
ef:bd:76:c5:16:c9:be:f4:25:d8:0f:ca:12:cd:9f:a9:f5:b7:
1b:5f:5a:d3:9b:df:24:21:a7:e1:c5:82:7a:e4:6f:63:9f:0c:
c6:c6:63:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:56:49 2025 by rpki-client