
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
File: Wr7NjqrTfqV665OfLAsUKXSEH4o.mft (raw, json)
Hash identifier: rCWM960nxsUO35c1Bce9ZQSiY871sQ5ffFLbu/OOlKc=
Subject key identifier: 12:BC:D1:54:27:D6:46:FF:1F:1A:1A:E3:63:D6:AF:EE:61:F4:8D:24
Authority key identifier: 5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A
Certificate issuer: /CN=A91A5A82/serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
Manifest number: 73
Signing time: Wed 05 Nov 2025 07:04:21 +0000
Manifest this update: Wed 05 Nov 2025 07:04:20 +0000
Manifest next update: Wed 12 Nov 2025 07:04:20 +0000
Files and hashes: 1: Wr7NjqrTfqV665OfLAsUKXSEH4o.crl (hash: F77o6/o3osbWLu//WJsFrOTdtqc0oWkRf+zhCiaY+U0=)
2: D0B32912090911F0A5348F26C4F9AE02.roa (hash: uW1VF7Kvr3qqb0xY8fd0nDeotf3CK4ccwfdt9+YehUk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl
rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5A82, serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A
Validity
Not Before: Nov 5 07:04:20 2025 GMT
Not After : Nov 12 07:04:20 2025 GMT
Subject: CN=690af6f5-4fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:d7:48:03:9a:89:11:64:a6:bc:0b:bb:53:
b7:03:d9:9e:46:91:3b:e2:62:5c:71:16:8e:9b:b2:
07:fa:63:c1:cd:59:61:09:b5:d3:88:0b:fc:a3:54:
b3:7b:13:9e:42:76:6d:68:59:34:9d:37:98:00:0a:
b1:c8:8f:33:aa:b8:a5:24:2a:f3:8e:43:77:61:10:
57:f7:c1:b2:ca:b9:7d:39:da:67:31:ba:63:74:a5:
bd:2b:2f:ca:61:96:03:15:31:01:92:c5:3f:b9:f5:
ea:93:26:6b:54:20:e7:4d:04:f8:1f:82:e8:d7:0d:
c0:58:06:c1:6c:5d:ce:c4:f7:83:70:29:13:2f:1a:
9e:5a:b3:03:91:ab:f4:9c:48:a4:b1:92:52:55:4d:
25:24:0d:65:b1:3b:3f:f6:c8:9b:c7:04:43:47:e2:
f4:c2:b6:d8:ca:fe:4e:af:9b:b1:a6:b5:b1:66:5e:
0b:86:7d:ee:5a:93:ab:ec:04:59:64:75:df:76:cb:
85:91:e6:3c:c0:a2:a6:c8:40:e9:f4:12:f4:1e:48:
be:d6:99:83:f2:a8:8e:9e:57:ad:d2:5f:91:f4:14:
6a:df:4c:5d:df:b2:37:ed:76:ca:35:9b:73:c3:0d:
77:96:3a:b4:65:ec:bb:ec:e9:6e:0f:00:83:fb:54:
c6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BC:D1:54:27:D6:46:FF:1F:1A:1A:E3:63:D6:AF:EE:61:F4:8D:24
X509v3 Authority Key Identifier:
keyid:5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c6:1e:5a:a5:42:88:25:92:4e:da:ff:99:e9:fc:9f:a5:69:
2d:d6:ac:5c:86:51:3e:b1:62:db:11:9e:61:d1:85:72:54:82:
97:73:9d:ee:70:cc:8e:a6:a3:29:ed:5a:52:7c:dc:ae:00:cc:
f2:ce:bf:51:e1:d9:c8:98:b8:66:1f:50:55:b4:3f:83:3e:a1:
41:4a:47:be:8a:aa:f5:19:84:97:bb:18:d4:c0:f0:d4:d5:5c:
ae:e5:2a:9f:60:9a:0d:97:ac:62:c4:e0:a1:d4:2e:5f:49:39:
4d:b3:53:4c:af:c6:47:f5:55:3d:ce:79:bc:07:5b:5f:db:04:
bb:17:45:a3:7a:c1:0a:3a:aa:2c:8f:f1:3f:43:2a:3f:3b:19:
cf:99:1f:ae:9f:f6:d9:52:49:00:dc:04:4c:e2:2e:87:7e:bc:
3b:70:de:96:6d:e7:fa:af:0b:e2:ec:53:b4:ca:36:9f:ee:29:
ec:cc:92:6d:f7:5c:98:66:be:4e:54:08:67:e4:0e:2b:7b:30:
73:20:21:d0:b2:4d:0d:fd:7f:f6:66:58:d7:9a:02:d9:14:bc:
00:c3:14:e6:05:d0:88:6f:15:5d:58:ec:d3:9b:44:49:d6:75:
63:2f:e9:f1:ac:8b:69:8e:d5:f1:56:55:53:de:80:aa:bb:cc:
e5:80:c0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:39:51 2025 by rpki-client