
$ rpki-client -vvf rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft
File: mWsZb8o8chhx7p4UE5Mri1DtCas.mft (raw, json)
Hash identifier: MlL8MP+Dffkap1SC97Mq9X1vZQU91FmIzttqMv/d9v0=
Subject key identifier: B1:92:55:EC:84:92:CE:92:9D:44:3A:14:96:41:89:E7:08:69:E9:99
Authority key identifier: 99:6B:19:6F:CA:3C:72:18:71:EE:9E:14:13:93:2B:8B:50:ED:09:AB
Certificate issuer: /CN=A91164D3/serialNumber=996B196FCA3C721871EE9E1413932B8B50ED09AB
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft
Manifest number: FE
Signing time: Mon 03 Nov 2025 05:05:36 +0000
Manifest this update: Mon 03 Nov 2025 05:05:36 +0000
Manifest next update: Mon 10 Nov 2025 05:05:36 +0000
Files and hashes: 1: mWsZb8o8chhx7p4UE5Mri1DtCas.crl (hash: WIacGW48m0c2YBuCZg5P4qwJhvQaVESpXILNpSiDCK8=)
2: 934F8250338A11EFB9C7A738C4F9AE02.roa (hash: FWDEQfcrySfMIWIlPkoTcMajRo2lEM/ZyKql4949RJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.crl
rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91164D3, serialNumber=996B196FCA3C721871EE9E1413932B8B50ED09AB
Validity
Not Before: Nov 3 05:05:36 2025 GMT
Not After : Nov 10 05:05:36 2025 GMT
Subject: CN=69083820-48cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b7:a3:de:61:b8:a7:ec:e5:eb:d5:cf:c8:b8:
b9:db:80:c6:70:78:45:99:77:be:81:a4:f7:44:88:
75:a3:07:ce:5c:98:d4:49:1e:07:b9:98:41:aa:15:
f9:cb:0e:97:95:58:f0:bc:56:61:9e:20:11:86:86:
b6:fe:4a:0e:a9:38:33:37:5e:8c:91:1f:d1:4d:40:
78:28:cb:11:ae:c0:1a:73:f7:78:a9:8d:3d:50:f5:
20:c1:c9:62:f9:dd:a2:f2:5c:d9:8d:33:43:f3:cb:
b6:c2:ee:53:e5:a3:d6:91:f3:a6:92:6a:c2:91:d1:
7e:45:2f:cf:39:7c:6f:02:7b:d8:1e:3c:87:d3:50:
7c:03:2f:2e:e4:67:62:e4:de:0c:d4:9a:d8:88:b5:
73:8b:1f:8e:61:0f:a3:a3:30:7e:a3:e2:bd:11:c6:
f8:74:d2:46:a2:25:7b:58:d0:ef:ae:9f:7d:98:8c:
b3:50:7e:b4:e3:85:73:e8:bb:49:77:eb:cc:d3:2b:
de:0f:19:8d:26:0f:de:54:3a:2c:40:5a:8e:78:00:
18:b9:55:79:ef:d7:de:52:7c:c0:1b:5b:37:94:a8:
33:f4:ff:05:35:15:f4:94:12:31:ca:8b:a9:88:ef:
5e:89:58:ec:1a:27:53:63:c2:d0:81:7d:e2:b3:2b:
4f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:92:55:EC:84:92:CE:92:9D:44:3A:14:96:41:89:E7:08:69:E9:99
X509v3 Authority Key Identifier:
keyid:99:6B:19:6F:CA:3C:72:18:71:EE:9E:14:13:93:2B:8B:50:ED:09:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:cf:58:76:d8:eb:a1:6a:28:ca:86:bd:8a:f4:0a:e8:07:a6:
2f:70:2d:ef:c6:26:fd:8f:4e:68:e8:dc:75:43:fb:1f:a4:37:
c5:ad:d7:3e:dc:3f:08:ab:80:f1:51:52:ed:6e:66:2f:d9:2e:
77:a8:c2:2c:ce:5e:ef:66:fc:26:4c:87:f1:34:64:10:b4:24:
f0:03:82:7e:90:c4:41:c2:96:26:4e:58:a2:26:fc:69:b0:a3:
0b:8a:ed:d3:40:fa:84:64:52:0d:0d:ef:83:f5:f0:b4:a8:ea:
7f:ec:8a:a5:25:89:01:18:2c:06:bd:ae:2d:1d:a6:ca:09:ba:
96:ea:ff:a9:d0:2a:97:7e:7d:b0:ea:8f:4e:ad:ce:56:ef:69:
7f:30:ad:b5:a0:f9:97:e0:66:17:61:4d:6d:3e:20:da:18:d9:
e1:df:e3:3b:5c:45:d0:d8:9d:da:72:a3:a5:ac:1d:3b:52:d4:
af:c5:d7:ba:77:2c:be:75:6e:5c:80:3b:ca:83:a0:d9:91:ba:
f7:40:19:e9:04:fb:00:85:2a:c2:81:01:8c:b2:f1:22:e5:76:
f9:14:88:b0:79:b3:fa:c7:47:f2:ef:ac:22:1c:75:1e:9c:67:
6c:76:a3:c1:4b:40:35:c6:2d:84:1f:84:17:42:25:7d:16:95:
56:d3:33:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:14:39 2025 by rpki-client