
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
File: we5pqmqhrLoy4Wdk2oG_ekFopg0.mft (raw, json)
Hash identifier: R9/hBe6PgPSrn/7MKMTZFYK3LA9xm6VE7aF5YvOZqys=
Subject key identifier: 0F:26:F6:2F:A0:CA:49:FE:E1:DE:93:29:04:A9:2D:1F:4B:41:33:E5
Authority key identifier: C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D
Certificate issuer: /CN=A91D0B6B/serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
Certificate serial: 7C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
Manifest number: 7B
Signing time: Mon 03 Nov 2025 06:47:27 +0000
Manifest this update: Mon 03 Nov 2025 06:47:27 +0000
Manifest next update: Mon 10 Nov 2025 06:47:27 +0000
Files and hashes: 1: we5pqmqhrLoy4Wdk2oG_ekFopg0.crl (hash: 8jPTxLjS/rsThUf6224PV4DyCIjbN36fprgSCSxP3l0=)
2: CBB83D902F1E11F09BFFB056C4F9AE02.roa (hash: pyDccoxQQCInnCAtVt40DDMgxlsFoS9iakn/+FoSyug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl
rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:47:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B6B, serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
Validity
Not Before: Nov 3 06:47:27 2025 GMT
Not After : Nov 10 06:47:27 2025 GMT
Subject: CN=69084fff-eb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:49:0c:0b:77:dd:d0:ee:be:a1:89:cc:73:20:
77:d5:a8:9e:e6:ca:87:f1:0a:e0:9a:bf:7f:58:f7:
b8:d0:fd:67:74:e1:54:92:6c:74:85:61:3c:d2:4d:
67:39:86:54:84:c6:8c:da:78:f1:76:29:22:c3:9a:
2b:0c:50:7b:bb:65:6b:bf:22:f9:38:07:99:c7:1f:
e7:69:76:22:63:0c:e2:e9:66:8e:3d:3d:e3:bf:92:
f6:5b:5c:8a:15:ae:4a:be:02:0a:b1:cf:8a:3b:05:
56:23:80:08:94:9c:b6:73:78:ca:08:15:53:92:84:
82:77:03:2c:49:f5:73:ee:a6:f8:37:d9:ad:ba:81:
78:cc:50:79:5f:92:98:4a:c0:20:e5:92:a1:d4:88:
53:2d:8a:00:6d:05:be:13:23:ec:e4:47:57:22:7b:
66:36:80:f7:0e:16:91:44:72:96:48:ee:03:79:c2:
7d:97:61:68:eb:ce:cd:4a:4e:37:a2:68:5c:32:0d:
69:f8:8c:74:5d:0c:f9:b5:e2:44:a3:03:32:b7:e0:
75:45:07:26:42:e9:df:a2:9a:60:cb:c4:ec:e7:b6:
08:1b:cd:84:d2:c1:76:b9:bd:2e:65:93:90:9c:e5:
f9:ce:19:64:63:be:70:7d:72:d8:e5:9f:86:40:d0:
9c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:26:F6:2F:A0:CA:49:FE:E1:DE:93:29:04:A9:2D:1F:4B:41:33:E5
X509v3 Authority Key Identifier:
keyid:C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:96:90:3a:1f:e6:11:1f:e2:b0:3f:e4:b4:40:c8:c5:3a:3a:
64:4e:83:68:fa:41:fe:0e:db:9b:ea:63:b7:21:1a:23:f8:c9:
2d:bc:a3:db:9f:13:19:e6:82:5f:e9:6d:ac:dd:a1:34:9a:8d:
99:c4:d8:dc:5c:98:1d:bf:14:78:5f:e9:dd:a5:fb:03:46:5c:
38:81:ea:8a:3a:16:82:0e:30:f2:f3:cf:b5:c3:d1:d4:37:5f:
fb:a1:35:ca:f1:5c:6d:8d:09:4b:8a:4c:4e:54:55:4b:ea:01:
61:b7:46:2f:35:93:45:70:87:be:39:c2:7a:49:31:a4:45:6f:
6b:7e:e7:6a:ea:b2:cc:37:72:5c:82:cc:20:a8:89:0e:37:dd:
f5:4b:1c:88:04:29:bf:0f:24:73:aa:1f:11:a3:e8:7d:92:2a:
be:a9:9f:06:f4:2b:58:bc:b5:4f:a0:5a:53:f8:f3:c4:4a:6f:
7a:b8:85:2e:53:cf:a7:56:6f:99:6e:6f:a7:17:72:62:23:fd:
68:39:41:23:8f:0a:19:5e:f6:17:9f:1a:4b:8d:dd:8d:0e:99:
84:94:2a:42:b7:6c:ee:8e:ae:68:c2:79:80:75:fc:61:70:05:
c5:24:f1:4f:48:22:40:85:ca:e5:8f:6b:4e:bd:f8:3f:07:ca:
54:be:c2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:32:12 2025 by rpki-client