
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
File: f_ZWW3k9deFOctx32CgmvUO3_nU.mft (raw, json)
Hash identifier: DZhNFsCw5hzZ3RvHUgJAP5YyiF9BS5SA+0zYUEY7/ws=
Subject key identifier: 79:E4:AF:3B:21:12:A7:93:A5:B5:DB:BE:4A:00:8A:31:0A:0E:4A:AE
Authority key identifier: 7F:F6:56:5B:79:3D:75:E1:4E:72:DC:77:D8:28:26:BD:43:B7:FE:75
Certificate issuer: /CN=A91B13C3/serialNumber=7FF6565B793D75E14E72DC77D82826BD43B7FE75
Certificate serial: 01F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
Manifest number: 01F2
Signing time: Wed 05 Nov 2025 02:40:24 +0000
Manifest this update: Wed 05 Nov 2025 02:40:23 +0000
Manifest next update: Wed 12 Nov 2025 02:40:23 +0000
Files and hashes: 1: f_ZWW3k9deFOctx32CgmvUO3_nU.crl (hash: z6tvznjc7Y98yascQBSDHc8P96Oc41dDLTaRS44oEg8=)
2: 7B45598CC3F111EDAB69B855C4F9AE02.roa (hash: bJ0v83C66Egxm5Wkl4eVEIZVTUzpH+tAcrHqbaRE6ow=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.crl
rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502 (0x1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B13C3, serialNumber=7FF6565B793D75E14E72DC77D82826BD43B7FE75
Validity
Not Before: Nov 5 02:40:23 2025 GMT
Not After : Nov 12 02:40:23 2025 GMT
Subject: CN=690ab917-9819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:29:78:09:e3:eb:2d:36:28:fb:e1:d0:d7:f4:
f3:f7:9c:b7:e9:bb:02:f2:93:bc:3c:a9:30:cc:f0:
5d:b0:19:ea:75:f9:48:4b:a8:c3:5e:24:1b:8b:5d:
83:8f:92:85:3e:94:97:e8:81:dd:ae:7f:b1:96:18:
62:27:f6:e0:66:0a:bb:61:3e:8d:ee:9e:54:15:c5:
f5:78:b3:02:9e:45:12:47:fd:ff:47:cc:0e:b5:71:
0a:67:d5:64:ab:a2:7e:09:fc:0c:16:61:09:f4:ef:
ee:bf:ef:69:67:92:53:dc:bf:ac:08:8e:52:6c:3f:
25:8c:46:06:e2:62:f0:a9:27:d3:e2:ee:39:3f:89:
18:d8:6c:50:5c:ef:c0:f4:fd:8f:a2:fe:14:b7:56:
92:3c:cd:1c:07:e3:f7:47:eb:85:e1:f7:38:8f:2b:
19:40:f2:56:2a:a0:a2:59:a4:a8:5d:9c:bb:c7:5c:
05:cd:bd:30:a2:45:a5:0b:b9:ff:02:e2:df:cc:3c:
31:de:44:05:bb:b8:ec:85:cf:e6:84:9c:01:d4:0f:
f8:dd:bc:82:43:2b:c0:d8:2c:59:08:f4:6c:3f:62:
5b:90:3c:b6:c2:b7:88:2f:f1:e0:68:52:ca:35:ea:
25:c5:62:a5:bd:fb:cd:28:aa:ed:76:54:bf:20:b7:
30:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E4:AF:3B:21:12:A7:93:A5:B5:DB:BE:4A:00:8A:31:0A:0E:4A:AE
X509v3 Authority Key Identifier:
keyid:7F:F6:56:5B:79:3D:75:E1:4E:72:DC:77:D8:28:26:BD:43:B7:FE:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f7:35:3f:e3:2a:ae:4c:fe:6a:ab:30:b8:84:bc:c9:73:8e:
db:43:8c:87:c5:17:a9:87:e8:5d:0b:42:fd:6e:8e:3a:78:24:
f2:b0:28:55:6f:c6:55:ea:d1:75:b2:e6:b7:9e:af:f2:2d:fa:
7a:73:95:f2:e8:74:cc:22:de:82:71:08:f9:93:43:7d:83:f8:
eb:73:10:a0:c2:2d:ff:91:1b:19:34:b6:ee:2b:e1:d1:6f:76:
8b:f6:a8:7a:b8:2d:89:64:9f:7e:73:18:0c:3f:79:b9:0c:3e:
0a:1d:5b:13:2f:cd:b3:29:03:87:f9:24:80:28:fd:d8:ee:f1:
ba:27:c2:e4:c5:d7:9b:96:60:ba:30:4d:2a:3a:9b:56:94:8d:
0f:48:bf:52:04:ce:d6:09:3d:10:26:ab:97:18:75:99:2f:00:
47:3d:bc:f1:cd:3e:4a:62:8a:47:cb:30:09:fa:89:14:7f:b6:
44:92:1a:d9:85:77:cc:b5:eb:0e:86:31:d9:b6:75:a7:f1:22:
67:fa:21:49:6e:a2:4c:73:78:9b:5b:fe:0e:d7:8b:4f:61:32:
9a:d5:51:af:9c:74:d3:76:ef:08:25:0a:9b:91:47:87:7e:3e:
ca:3a:63:e3:03:12:a1:95:59:47:f2:64:be:49:fd:b5:2f:e9:
81:11:d7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:25:20 2025 by rpki-client