
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
File: mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft (raw, json)
Hash identifier: pcR7UhwgdnHjrpaRuEgK3F7LcThYa4aSk4YSFcv8oys=
Subject key identifier: C6:10:5E:F7:E0:12:90:88:0E:57:A5:B9:91:8D:8D:B8:A0:82:CE:D9
Authority key identifier: 9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9
Certificate issuer: /CN=A91F3B6C/serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9
Certificate serial: 05C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
Manifest number: 05C1
Signing time: Tue 04 Nov 2025 23:10:42 +0000
Manifest this update: Tue 04 Nov 2025 23:10:42 +0000
Manifest next update: Tue 11 Nov 2025 23:10:42 +0000
Files and hashes: 1: mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl (hash: m9hwYCjhSdKO06L1KaAPXyGY7sTmAMWENdwTIUYWoK8=)
2: C4CB04C4E2A911EBB4631960C4F9AE02.roa (hash: w5XSagCBbj7wYrqd/6P5FJGCYb7FRwj35SS+I3gJcAU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl
rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 23:10:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1480 (0x5c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B6C, serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9
Validity
Not Before: Nov 4 23:10:42 2025 GMT
Not After : Nov 11 23:10:42 2025 GMT
Subject: CN=690a87f2-9c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:18:02:2f:b0:de:50:16:44:dc:fd:4f:61:
15:33:78:97:9b:57:f6:0b:b2:8b:13:ae:a5:7c:82:
15:d1:fe:0b:9d:84:fc:70:e4:b2:69:fd:19:26:87:
d4:c1:2c:52:6f:f0:05:74:56:34:45:a9:6d:fe:19:
cd:75:8b:8d:3b:88:69:ac:ae:a5:95:21:59:52:b6:
ab:8f:05:8f:5f:2c:c2:7f:c3:b6:55:8e:e9:f5:21:
ee:e4:6f:97:2c:58:11:37:c2:0c:ee:34:a2:52:a2:
40:76:d9:a4:4f:8d:46:53:63:c7:1d:5a:62:6b:8c:
b3:f9:ec:8f:21:a6:89:24:8d:21:73:53:67:ef:07:
55:0a:46:82:f4:3b:95:cc:f9:bc:30:c6:04:b5:9b:
5d:77:5d:45:e6:a7:ea:2e:34:4a:f9:73:68:2d:3a:
25:20:b4:af:5a:1c:c7:be:51:d1:b0:02:03:88:ab:
fa:ec:05:b8:2c:0a:cd:77:20:7c:c9:ca:14:42:a6:
79:b7:10:c6:f5:4d:ae:a4:09:26:15:9f:79:db:98:
2b:97:b2:4e:90:c5:40:7f:3e:6d:1a:d4:99:c4:67:
0b:b7:71:3b:e8:b3:fe:ad:e9:71:e2:fc:8d:2c:35:
d2:5f:e3:ea:05:b7:5c:9a:04:e3:77:2d:0d:d6:9b:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:10:5E:F7:E0:12:90:88:0E:57:A5:B9:91:8D:8D:B8:A0:82:CE:D9
X509v3 Authority Key Identifier:
keyid:9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:a9:9e:4f:19:eb:a8:f3:bd:d1:aa:0b:37:4e:b9:e7:63:22:
da:8c:ae:19:f9:1d:58:ef:34:be:d3:b9:0d:ae:89:87:f5:8a:
86:50:a8:f2:2f:46:f0:48:fd:09:d5:15:0f:67:7a:0f:5a:b3:
12:35:10:47:22:d4:a0:53:ae:88:e1:d3:5c:87:9d:71:45:8b:
be:ef:4a:8f:48:ae:9d:73:eb:42:fb:64:49:39:5b:f9:9b:69:
42:98:8d:6e:29:64:d7:06:93:1f:9b:1f:3f:3e:a0:f4:c4:c3:
91:54:fe:a6:97:5f:23:23:8c:46:4f:b9:d0:a3:2d:ea:85:cc:
87:b2:f6:3a:05:66:09:22:24:53:3e:e2:e3:14:3d:89:ee:64:
de:dd:53:d3:7a:29:32:29:63:5e:36:f4:ff:b7:70:52:fb:4c:
16:da:e9:72:ac:54:cb:49:64:77:48:2e:43:aa:47:1a:dc:af:
8c:fd:7a:f7:d2:88:08:79:db:eb:6b:06:e0:b9:6a:39:a6:e6:
df:60:59:0d:f7:91:98:a4:06:a4:a7:12:af:22:6b:b4:1c:49:
90:2c:ed:5d:e7:e6:44:fd:e1:69:3e:5c:8b:ff:fb:47:6b:55:
55:4f:54:ee:d8:27:d1:3c:a0:a3:38:f4:b4:a9:71:ee:25:81:
2a:cd:9f:85
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjNCNkMxMTAvBgNVBAUTKDlCMDlFOTVGRTQ2QUJEQkM5RjkwMjA1ODVGOUE1ODMy
Njc3NzNGQzkwHhcNMjUxMTA0MjMxMDQyWhcNMjUxMTExMjMxMDQyWjAYMRYwFAYD
VQQDEw02OTBhODdmMi05Yzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzUEYAi+w3lAWRNz9T2EVM3iXm1f2C7KLE66lfIIV0f4LnYT8cOSyaf0ZJofU
wSxSb/AFdFY0Ralt/hnNdYuNO4hprK6llSFZUrarjwWPXyzCf8O2VY7p9SHu5G+X
LFgRN8IM7jSiUqJAdtmkT41GU2PHHVpia4yz+eyPIaaJJI0hc1Nn7wdVCkaC9DuV
zPm8MMYEtZtdd11F5qfqLjRK+XNoLTolILSvWhzHvlHRsAIDiKv67AW4LArNdyB8
ycoUQqZ5txDG9U2upAkmFZ9525grl7JOkMVAfz5tGtSZxGcLt3E76LP+relx4vyN
LDXSX+PqBbdcmgTjdy0N1psZCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYQXvfg
EpCIDleluZGNjbiggs7ZMB8GA1UdIwQYMBaAFJsJ6V/kar28n5AgWF+aWDJndz/J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0I2Qy84QjA4OTIwQUUy
QTUxMUVCQUQxM0NDMzVDNEY5QUUwMi9td25wWC1ScXZieWZrQ0JZWDVwWU1tZDNQ
OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL213bnBYLVJxdmJ5ZmtDQllYNXBZTW1kM1A4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
M0I2Qy84QjA4OTIwQUUyQTUxMUVCQUQxM0NDMzVDNEY5QUUwMi9td25wWC1ScXZi
eWZrQ0JZWDVwWU1tZDNQOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA3qZ5PGeuo873Rqgs3TrnnYyLajK4Z+R1Y7zS+07kNromH9YqGUKjy
L0bwSP0J1RUPZ3oPWrMSNRBHItSgU66I4dNch51xRYu+70qPSK6dc+tC+2RJOVv5
m2lCmI1uKWTXBpMfmx8/PqD0xMORVP6ml18jI4xGT7nQoy3qhcyHsvY6BWYJIiRT
PuLjFD2J7mTe3VPTeikyKWNeNvT/t3BS+0wW2ulyrFTLSWR3SC5Dqkca3K+M/Xr3
0ogIedvrawbguWo5pubfYFkN95GYpAakpxKvImu0HEmQLO1d5+ZE/eFpPlyL//tH
a1VVT1Tu2CfRPKCjOPS0qXHuJYEqzZ+F
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:04:29 2025 by rpki-client