
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
File: G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json)
Hash identifier: 2R5t+ogIMtUOKHy9uZiDBqxm2VNCOFwmEhHSZiuN5gY=
Subject key identifier: 72:50:96:A9:95:08:2A:A6:FB:2B:91:A6:04:90:CF:B6:3E:81:99:EF
Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52
Certificate issuer: /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752
Certificate serial: 11AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
Manifest number: 1186
Signing time: Sun 02 Nov 2025 17:14:31 +0000
Manifest this update: Sun 02 Nov 2025 17:14:31 +0000
Manifest next update: Sun 09 Nov 2025 17:14:31 +0000
Files and hashes: 1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: nGpmM3xeCriC2dyVAjAb2UVzYBprrFxIvBODnIOq284=)
2: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: QAHQPcFmHI85jnhx3yTg0Uyrxvkcct/mLJCXfcGhkyU=)
3: FB675E140F0311E997412A4EC4F9AE02.roa (hash: nR4PLCRvWUgAotRGtX9lE5KuM6BWBXj0rPbeaYR4XNg=)
4: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: V2NhhwUM+gXJ6K0MxfFES/mwWiEj/nQp8QceYienoFY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl
rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 17:14:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4525 (0x11ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752
Validity
Not Before: Nov 2 17:14:31 2025 GMT
Not After : Nov 9 17:14:31 2025 GMT
Subject: CN=69079177-ecbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b9:de:ac:1a:bf:d6:2b:0c:43:15:d8:55:58:
28:6d:68:41:38:8b:d1:bd:b3:88:e0:30:32:3e:98:
12:53:c4:76:d7:73:a8:f6:42:66:a7:3f:f0:5f:4d:
22:40:08:79:dd:f8:3b:9b:55:f6:cd:43:6d:b4:56:
ff:41:a2:c6:20:e0:49:76:78:8b:95:03:5d:b6:41:
88:80:42:5d:f3:d3:90:2b:6b:62:6f:d9:bb:bd:42:
b8:d9:ca:c7:1d:94:9c:49:5e:50:ba:f9:6f:d9:77:
bb:b9:cf:80:7c:9f:22:a2:4a:6d:d9:aa:16:17:6f:
6c:ee:62:3b:69:b9:c5:50:f1:d7:18:7d:b4:15:88:
06:f7:08:75:24:23:73:6b:5a:b3:f0:8b:69:47:27:
82:ef:80:0b:5b:cc:29:dd:35:e5:01:43:ea:f3:e1:
dd:0d:63:04:19:33:1a:c8:76:71:cf:17:90:94:d1:
f9:13:c3:35:ce:e6:3f:c4:fe:ae:0d:44:f1:9f:49:
83:92:9b:30:d3:81:2e:7d:f3:be:bc:6a:b8:e0:33:
18:91:b4:2e:c5:06:45:29:15:1d:24:e4:d8:89:d1:
65:c2:e3:dc:d6:b1:c2:cf:de:38:c2:b4:ba:01:24:
b4:c2:60:e6:99:95:83:64:c4:6b:08:29:3d:f3:da:
65:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:50:96:A9:95:08:2A:A6:FB:2B:91:A6:04:90:CF:B6:3E:81:99:EF
X509v3 Authority Key Identifier:
keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:0f:10:72:8e:ef:e7:ee:8c:38:48:c8:0c:9e:c9:ed:05:12:
7e:73:f6:26:5e:ee:c4:f6:c2:b8:a0:23:cf:91:af:69:21:59:
96:35:40:1c:47:55:5b:08:0e:29:83:f3:4b:ce:2b:bc:55:cb:
ce:06:ac:21:8d:ff:78:64:d4:03:60:86:df:be:51:c1:84:30:
f3:43:65:67:0b:1e:a3:91:a1:8f:35:3a:4d:2e:c8:f0:fc:09:
e2:5a:e2:de:73:cd:d4:e1:19:75:ed:94:8b:2b:ba:d7:83:6a:
2c:da:eb:fd:f9:ed:23:15:29:4e:00:ec:2c:6a:5b:c8:39:a7:
49:71:c6:57:60:d6:0b:2b:75:03:7e:75:d3:d7:91:88:54:b7:
90:10:86:9c:40:55:75:96:54:1d:e3:46:33:cd:a0:65:1d:48:
23:2b:02:8c:ad:e7:0f:e2:de:54:5f:8b:ba:48:92:8a:e9:0a:
ad:a6:ce:09:90:9c:b3:a9:83:91:b4:6c:fb:79:ef:fc:9b:69:
a8:e2:02:f2:f1:b0:e9:67:93:02:b4:bc:9e:4d:1b:69:bb:cc:
28:64:42:a5:f3:b2:e2:54:64:d2:e9:2f:e7:47:70:e1:98:75:
40:25:37:a4:3f:02:fc:06:b4:73:ff:4f:ee:68:20:86:7a:ee:
6a:4b:f7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:18:23 2025 by rpki-client