
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft
File: 2WQZRdW0z31j_JExr89yeuNtkCA.mft (raw, json)
Hash identifier: Ppx7cmQwwpf4i00jiryWEEBNmkjsNJ2UfMZUXdcI56Q=
Subject key identifier: CF:A1:A1:E7:1F:44:E9:99:56:FC:D2:14:DD:5F:42:AC:78:B8:BE:78
Authority key identifier: D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20
Certificate issuer: /CN=A911F316/serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020
Certificate serial: 022C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft
Manifest number: 0222
Signing time: Wed 05 Nov 2025 02:13:21 +0000
Manifest this update: Wed 05 Nov 2025 02:13:21 +0000
Manifest next update: Wed 12 Nov 2025 02:13:21 +0000
Files and hashes: 1: 2WQZRdW0z31j_JExr89yeuNtkCA.crl (hash: L1Q8Dju2q5MOea9iTFvbrjzEaeGTSwLeXBhdjH/0RbY=)
2: 15714ED2776A11ED98AF7341C4F9AE02.roa (hash: WBxu67wj7qK+1XHnF6Gm/tpT83HjDxcRJ+5R7dbCf7I=)
3: 77490C9A792F11EEBF849942C4F9AE02.roa (hash: +qSb4R4TGVMwO8UibifLnyUfy5g07BZr/1fOfOFiaKg=)
4: 590A6A9A792E11EEA5AAB840C4F9AE02.roa (hash: TjgZvd8NTyfnTIYx+SMzczM6IMYvFc5scP1aWMMbHyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl
rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:13:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F316, serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020
Validity
Not Before: Nov 5 02:13:21 2025 GMT
Not After : Nov 12 02:13:21 2025 GMT
Subject: CN=690ab2c1-8b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:ba:ff:14:c4:82:34:56:e1:26:c5:bc:4d:
be:5c:73:d8:9d:c6:7f:18:50:7d:96:60:e6:38:e3:
77:4c:04:a9:0f:9a:17:75:f7:14:6a:92:25:e2:03:
fb:b8:dd:7d:ad:fb:cd:95:45:ef:dd:6f:ab:d9:61:
95:ce:00:34:77:c5:82:0d:4d:97:16:b2:7c:1f:2d:
86:6b:05:b6:0d:fd:a0:bd:ac:bf:9b:e8:d0:fb:f9:
67:71:3c:bc:7a:12:87:d9:4b:ee:8c:82:7c:50:8b:
fb:bd:44:00:94:6b:f4:9f:ec:a4:e0:52:12:c6:37:
51:02:2f:8a:37:54:5d:8a:dd:b9:70:46:18:9c:f1:
2e:2d:d4:15:42:af:fa:f3:b2:36:85:3a:f0:d7:61:
ab:95:3b:3e:55:a7:95:74:6c:3d:61:2f:e9:8a:0a:
9a:e2:3b:10:98:86:0d:69:fa:f8:c5:27:68:9e:ec:
6a:15:51:03:b2:dd:82:b9:e5:41:f7:0d:0d:ba:9e:
80:4d:07:d2:4f:9b:7c:32:94:74:9a:07:47:35:22:
c1:9d:d0:b3:76:e5:48:a7:05:cc:30:2f:c5:f5:a2:
a4:ef:45:eb:1d:12:5f:6c:fc:eb:83:6e:2a:cd:14:
53:99:c1:a7:9b:9d:51:89:43:8e:dd:df:24:00:74:
4e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A1:A1:E7:1F:44:E9:99:56:FC:D2:14:DD:5F:42:AC:78:B8:BE:78
X509v3 Authority Key Identifier:
keyid:D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:79:c6:72:fd:48:87:aa:e4:c6:99:73:74:35:11:42:79:a6:
51:85:40:bc:55:08:ad:85:f7:8e:4b:b5:b9:98:b7:4b:44:34:
a2:5f:b2:0b:ad:24:59:b0:0a:da:90:6b:50:05:ba:fd:c1:40:
9b:ff:b3:a7:37:4d:2c:be:71:90:38:7a:ac:f0:8b:16:d2:04:
7c:9a:47:4c:b6:f9:b6:bc:41:65:a2:3b:04:5e:f6:59:3b:24:
0e:23:78:76:8a:61:a0:69:8b:0c:e8:5d:ee:db:7b:59:34:11:
06:1a:c1:73:d2:6d:fe:22:01:33:6a:c5:42:99:03:a4:4f:45:
58:5f:78:6b:95:a5:2b:c9:c7:68:c0:d8:f3:87:69:ba:0d:55:
d5:7c:e4:51:0b:80:43:e2:6e:fb:d1:ea:50:34:75:fa:19:6c:
ae:6f:c2:39:30:a0:4f:f7:0a:98:6b:f1:4a:fb:30:2b:52:29:
b0:f3:2e:ac:a4:2f:71:af:32:b2:3a:70:57:7f:0e:25:81:24:
5d:0f:ed:f6:35:53:47:87:ae:2e:08:f6:64:40:7c:b9:2c:6e:
f6:cb:34:51:b2:6e:c4:fc:87:86:6e:c5:ba:b9:3a:38:98:fd:
e8:e0:79:a0:f3:04:87:b0:82:0b:c2:0b:f7:b2:a4:eb:5f:df:
81:e3:cd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:26:38 2025 by rpki-client