
$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.mft
File: wUJMTMxZyaAxvhrN95gth6tX0Gg.mft (raw, json)
Hash identifier: XUwQ894z3iQVMx8EIHodeb0Lru+mLaaGhvpWKsZ0qs4=
Subject key identifier: 56:CB:DB:14:B8:6A:55:E8:15:23:3E:A9:C2:D5:EB:A2:AB:3E:68:BB
Authority key identifier: C1:42:4C:4C:CC:59:C9:A0:31:BE:1A:CD:F7:98:2D:87:AB:57:D0:68
Certificate issuer: /CN=A91139AB/serialNumber=C1424C4CCC59C9A031BE1ACDF7982D87AB57D068
Certificate serial: 08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUJMTMxZyaAxvhrN95gth6tX0Gg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.mft
Manifest number: 092A
Signing time: Sun 02 Nov 2025 21:24:30 +0000
Manifest this update: Sun 02 Nov 2025 21:24:30 +0000
Manifest next update: Sun 09 Nov 2025 21:24:30 +0000
Files and hashes: 1: wUJMTMxZyaAxvhrN95gth6tX0Gg.crl (hash: 4TNiMEi7SXe8GccUUiOiEU0zOQww8eG2iM067wGI9xo=)
2: 96AD16C6B5FA11F0A1583C84C4F9AE02.roa (hash: X1CXYIMIZkpo0trxnTIO9Mj79rEmc2HBewb/GCod5Qw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.crl
rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUJMTMxZyaAxvhrN95gth6tX0Gg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:24:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91139AB, serialNumber=C1424C4CCC59C9A031BE1ACDF7982D87AB57D068
Validity
Not Before: Nov 2 21:24:30 2025 GMT
Not After : Nov 9 21:24:30 2025 GMT
Subject: CN=6907cc0e-fb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:d2:4d:aa:8a:80:8b:72:cd:77:b0:5c:ea:
a6:d1:96:1d:a6:68:d9:98:42:d1:ab:71:2d:37:30:
39:24:9d:73:25:ff:7b:a2:92:5f:7c:10:a2:3a:76:
21:9e:10:2b:0c:ae:a3:c4:63:82:63:7a:7e:8c:b2:
6c:a0:7c:6c:22:ea:79:8c:77:1d:3b:33:46:a8:1b:
77:3e:61:d3:fd:c3:d8:18:b4:1a:ad:5e:63:e2:f2:
64:56:51:a0:77:0b:5c:a0:e8:0f:54:c8:d7:1e:f8:
3d:47:24:ba:00:51:56:ad:ff:1d:1d:f7:91:db:0a:
5d:b6:d4:5b:dc:91:fa:ee:a6:2f:b8:e0:e8:73:fd:
65:e1:43:2c:23:28:15:4d:11:36:77:fc:87:ef:9b:
d7:ab:6a:4b:7c:ec:bf:6a:7e:c2:a6:2f:5d:a9:7a:
0c:15:24:c3:ab:2e:53:9c:0e:bb:9a:a2:41:9a:d4:
52:09:6d:b8:14:57:03:1d:1c:72:64:b9:03:48:1e:
cc:64:8e:02:bd:ff:54:c7:f3:d9:3c:a5:d1:32:7c:
0c:18:53:7b:04:89:7b:d3:d7:4d:05:4a:e6:a2:c9:
a8:41:22:10:dd:ce:7d:55:11:9a:cc:1e:7e:ba:ca:
62:a6:4c:81:5c:20:c6:d3:fd:d7:41:ea:9b:f2:2f:
f0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CB:DB:14:B8:6A:55:E8:15:23:3E:A9:C2:D5:EB:A2:AB:3E:68:BB
X509v3 Authority Key Identifier:
keyid:C1:42:4C:4C:CC:59:C9:A0:31:BE:1A:CD:F7:98:2D:87:AB:57:D0:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUJMTMxZyaAxvhrN95gth6tX0Gg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:45:a5:1b:7e:dc:d0:70:67:45:14:ff:49:bd:b9:9f:3e:80:
b2:e2:d4:c0:72:c7:2f:25:e8:eb:86:35:4c:0b:9a:05:6d:a6:
54:8e:b2:e7:ef:5c:0a:4e:21:2f:85:f0:36:7a:2e:07:19:2b:
45:86:71:80:23:1c:69:5a:81:8b:9d:83:ac:c4:fc:01:8f:90:
4e:aa:ea:f1:99:f4:43:89:7d:b7:21:50:fa:3a:4d:62:7a:a6:
0e:92:fd:3f:17:62:63:98:88:9a:2c:ee:4b:7b:d4:f7:c0:9f:
4b:5b:96:d3:94:f2:24:2c:7f:0a:54:3d:60:fd:12:6e:58:fd:
6f:b9:de:f1:52:fe:d0:c8:85:1d:20:c0:60:1d:18:9e:9c:ed:
61:19:4c:9f:73:6f:ca:fb:1e:d2:38:02:3f:71:95:43:82:05:
ba:1f:ac:f4:ea:a0:ff:e3:3f:37:c1:9b:b8:e3:e2:c5:57:6b:
3a:6d:03:fb:79:84:11:cd:02:3a:ce:26:6c:f6:55:d8:c4:66:
93:89:af:84:36:33:30:4f:45:26:58:64:06:21:9e:63:1c:2b:
8f:ca:51:a8:27:c5:68:da:18:f7:38:33:0b:08:56:33:60:b4:
33:ac:33:4c:23:76:2d:2c:d6:06:2e:92:82:d6:25:79:d8:14:
8e:9b:54:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:09:52 2025 by rpki-client