
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
File: gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft (raw, json)
Hash identifier: im9zW2KpUlDMCIJ/Wk/OL41iu0Tm508WLgZixxzV/ck=
Subject key identifier: 15:84:48:77:63:8E:D8:A8:25:2E:2C:4C:8A:47:F4:FD:3C:8B:40:6A
Authority key identifier: 81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE
Certificate issuer: /CN=A919D08A/serialNumber=816A478D86E7E21BF3178510B8585325583430EE
Certificate serial: 0175
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
Manifest number: 0174
Signing time: Wed 05 Nov 2025 03:54:48 +0000
Manifest this update: Wed 05 Nov 2025 03:54:47 +0000
Manifest next update: Wed 12 Nov 2025 03:54:47 +0000
Files and hashes: 1: gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl (hash: YiMirZBLRmCNX4QIVzv0oGrf4au6eFH6muXTPiWWjuE=)
2: 2DBBD9E2788D11EEA502B350C4F9AE02.roa (hash: OAmPRTah7XdC92cyaOL1VT2tDGpsaJQwQAJo+nqjJlo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl
rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:54:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D08A, serialNumber=816A478D86E7E21BF3178510B8585325583430EE
Validity
Not Before: Nov 5 03:54:47 2025 GMT
Not After : Nov 12 03:54:47 2025 GMT
Subject: CN=690aca87-3c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:6c:1a:2a:12:94:70:53:d7:24:f9:20:9a:
64:79:0d:29:d8:46:8c:10:8f:e3:bd:c4:f4:a2:4d:
39:a2:ae:1b:e6:e0:e7:dd:c3:f9:9d:2f:0b:b8:3d:
0c:1c:4d:5d:e6:75:50:63:fe:97:7b:cc:ca:4d:a1:
f5:17:85:11:07:7b:bd:50:8c:7c:79:31:7b:e2:04:
ab:1d:13:54:18:c5:dc:68:e5:26:3e:ad:a4:73:15:
75:af:ee:a9:d9:2a:0c:e2:aa:60:dd:9c:36:51:87:
7b:5a:1c:0e:6b:71:c6:17:b7:2c:6c:f6:12:18:7d:
26:b0:b9:0c:28:05:aa:98:9a:43:ef:10:2d:31:65:
28:84:e9:ea:ac:78:c7:1b:1c:39:bd:eb:d3:55:a0:
cb:1e:af:38:fa:52:4b:2f:d6:0a:51:b2:1b:95:a8:
53:d1:74:8d:8f:84:07:d1:c9:4a:a7:64:e5:9a:44:
e8:5f:da:5c:31:37:59:51:8d:ab:0d:a0:46:ca:57:
14:5f:39:d4:14:68:05:95:99:98:5c:c6:79:f7:c6:
6b:14:b4:cf:5b:3c:00:2a:fe:33:2e:8a:87:3d:e4:
ea:cb:4b:4e:f2:9d:33:dc:24:47:74:6a:3b:a6:00:
4e:6e:12:4e:7e:f9:2e:cf:85:e0:60:b2:de:cc:33:
51:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:84:48:77:63:8E:D8:A8:25:2E:2C:4C:8A:47:F4:FD:3C:8B:40:6A
X509v3 Authority Key Identifier:
keyid:81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:55:a4:49:8b:bc:29:f4:74:d4:a6:36:a9:87:77:1e:71:90:
4c:72:bb:80:f8:88:1c:ad:df:9f:7e:b3:63:2b:c3:fa:47:50:
5d:40:1c:25:bc:58:a8:69:e5:a4:cc:ac:4e:63:fa:fc:81:31:
fa:3b:42:1d:ec:ce:48:04:da:70:d1:00:a8:82:37:f6:6b:65:
91:1a:07:93:91:55:56:d4:5e:94:4c:fb:ff:13:e5:02:6c:8a:
e2:d9:bd:85:32:81:17:9a:38:b1:c6:b2:31:3d:35:aa:43:d8:
c7:9d:6c:82:dc:6c:89:70:64:43:e7:d5:bd:aa:6b:fb:4a:8d:
4a:41:92:d9:fc:73:41:a2:dc:53:83:58:57:23:02:57:ca:2e:
f2:37:a8:1b:7d:4f:32:36:52:2e:da:97:1f:01:eb:17:8e:4f:
f1:ba:e4:5e:15:32:b6:45:26:06:e6:13:ea:18:65:2f:61:de:
a0:2b:63:33:b3:8e:9f:2f:24:98:82:63:61:9a:3c:62:4d:d1:
92:ff:d2:6e:51:d6:37:5e:78:b9:56:99:e7:4c:8a:67:95:64:
3e:85:e5:59:bd:9b:26:b6:47:1f:01:3a:ec:35:69:b9:d2:7e:
12:91:62:ea:53:43:a5:e9:35:1a:c6:6f:df:31:ae:b3:a6:20:
c3:21:98:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:18:14 2025 by rpki-client