
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft
File: Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft (raw, json)
Hash identifier: RD0nXIWx9heDvIabI/jXXqKme3JG1ev0Qx6JYq4oOQM=
Subject key identifier: F9:2D:BF:FC:E8:87:26:DA:14:76:0E:E9:86:BF:56:D2:AC:92:20:05
Authority key identifier: 5B:0E:A0:94:51:19:E5:3E:9F:B8:20:D9:22:10:35:74:41:E4:AC:D6
Certificate issuer: /CN=A91A3859/serialNumber=5B0EA0945119E53E9FB820D92210357441E4ACD6
Certificate serial: 07ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft
Manifest number: 07E7
Signing time: Sun 02 Nov 2025 21:05:39 +0000
Manifest this update: Sun 02 Nov 2025 21:05:38 +0000
Manifest next update: Sun 09 Nov 2025 21:05:38 +0000
Files and hashes: 1: Ww6glFEZ5T6fuCDZIhA1dEHkrNY.crl (hash: XO2GsGexSS1p0Zk3Qspt/WTqdCnTURqgF6T2NmTcgPw=)
2: EEC2740A08A811EBB9370955C4F9AE02.roa (hash: FiUICsUD+pZFh3JuPdECp+chLymAF7D/LM+qSXAk6Io=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.crl
rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:05:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2029 (0x7ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3859, serialNumber=5B0EA0945119E53E9FB820D92210357441E4ACD6
Validity
Not Before: Nov 2 21:05:38 2025 GMT
Not After : Nov 9 21:05:38 2025 GMT
Subject: CN=6907c7a2-7a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:da:ee:9b:f4:16:f3:06:63:9d:f3:e2:eb:
61:e0:59:e5:94:2d:00:2d:71:f3:6a:b5:df:5f:61:
66:f5:79:b0:0e:64:fd:f9:e0:69:4c:d4:c2:4c:23:
24:35:f7:75:1e:4c:ce:c8:41:21:96:bf:cc:a3:01:
c5:a5:14:33:4b:72:61:5b:40:d1:9f:4d:fd:79:fd:
24:42:fb:90:5b:18:20:e0:e7:0f:1e:71:11:0d:b6:
07:f2:bc:e2:9d:9d:19:ff:54:a2:b7:f7:7f:d1:10:
fa:02:c7:6c:f7:58:d4:c3:09:82:5e:11:d9:71:42:
10:73:53:59:02:11:5a:b5:e2:c2:21:97:ba:1c:61:
cc:1a:7d:2e:dd:8c:36:92:6b:42:e1:2e:4f:e1:38:
d4:c9:6e:a0:be:9c:cb:48:74:f4:8d:3e:0a:be:da:
75:ac:67:a5:ce:fc:7d:b6:01:ff:17:95:7b:49:e1:
70:02:30:8a:51:be:fe:f4:9a:73:68:d2:53:49:c2:
3b:6d:80:89:fc:ca:65:88:54:00:67:e0:a4:64:69:
53:dc:5a:31:fe:9d:b5:f5:fa:90:6b:ef:35:73:e0:
74:17:4c:c3:68:8c:de:3f:70:73:b7:cd:4a:02:a5:
d3:3b:22:30:dc:4d:02:2e:44:28:36:7a:ff:6a:fc:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2D:BF:FC:E8:87:26:DA:14:76:0E:E9:86:BF:56:D2:AC:92:20:05
X509v3 Authority Key Identifier:
keyid:5B:0E:A0:94:51:19:E5:3E:9F:B8:20:D9:22:10:35:74:41:E4:AC:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:7a:8b:4a:b4:8b:38:30:0d:13:ba:43:ac:c4:95:67:41:ff:
23:ad:24:0d:f5:35:fb:31:3f:40:4e:af:55:69:03:d2:63:c3:
64:89:22:37:6e:af:b5:9a:9a:df:bf:eb:1b:d2:09:db:4a:82:
83:bc:51:e2:42:c8:b8:c6:24:3f:17:d9:af:75:a4:81:e1:9f:
f5:b9:d2:60:bb:d6:2f:4c:aa:85:1b:18:68:cd:1f:86:ab:52:
5f:1e:36:eb:54:1c:c1:36:4b:16:38:b7:ce:94:31:4b:f2:d3:
44:fa:cb:3d:c7:fc:d7:20:b4:02:87:72:8f:54:55:d5:21:75:
b0:1f:a0:58:ea:a6:38:9f:84:dc:cb:38:de:e6:2b:df:56:ce:
f8:e0:d9:43:c6:d1:0d:4e:50:85:3d:89:7f:da:5e:8f:aa:84:
12:78:3a:fc:18:2a:57:1c:d3:ef:bf:f0:10:59:6e:bc:59:e6:
46:9c:0b:a6:8f:d4:89:1d:22:9c:cf:01:35:75:7b:3b:f4:5f:
14:7d:06:2f:f1:59:b6:27:0e:96:54:f3:5e:31:8f:16:35:07:
61:a2:b9:10:78:3e:76:89:e6:bb:0b:51:d5:94:4d:e1:71:6f:
26:46:19:76:ae:6a:9b:8b:c6:27:f0:02:08:f9:32:b9:f9:8a:
8e:cf:e8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:51 2025 by rpki-client