
$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
File: wLnBGxsWDzIbiuxM_N3a2JX8R94.mft (raw, json)
Hash identifier: 1gxHb5NTMXIrgtiaheHg/jEucof89A6/n/OX9UkpPGU=
Subject key identifier: 50:E1:45:8F:66:4E:79:88:BF:FB:AA:D7:C7:11:3B:C9:A7:BD:6D:91
Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
Certificate issuer: /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Certificate serial: 0ED2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
Manifest number: 0EB3
Signing time: Wed 22 Oct 2025 18:07:12 +0000
Manifest this update: Wed 22 Oct 2025 18:07:11 +0000
Manifest next update: Wed 29 Oct 2025 18:07:11 +0000
Files and hashes: 1: wLnBGxsWDzIbiuxM_N3a2JX8R94.crl (hash: GE4BLABY3G+ouiZ0JGUqzgCrfQin5s2ksBEIm5y99Aw=)
2: 247099D084C611F09EBC052BC4F9AE02.roa (hash: LjL6siy8mS8KnL6NQqX66YEFFKmRPoJ1dR18D6pEQ04=)
3: A2369FBA595F11EF8C3B3D31C4F9AE02.roa (hash: 1zS8XWzZTz7+tGBFQYN1Yj55+aHf93rbvK5YUu69PHI=)
4: DC185D0CB0A111EE8C78834EC4F9AE02.roa (hash: m0l23vJryclykCD48Z3CE8U9M7wFbCoJly5IlJCZMlg=)
5: E54A88DE595F11EFB2BAB431C4F9AE02.roa (hash: SEuSI2XPVxN+1pVxedn+P+yPZW6RvN2NRh14bu8L37Y=)
6: A2E6430C595F11EF8C3B3D31C4F9AE02.roa (hash: rsXfvz54a2T+jOGss3629AVS3vLaxkP1937oobR11UI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 18:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3794 (0xed2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912698E, serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Validity
Not Before: Oct 22 18:07:11 2025 GMT
Not After : Oct 29 18:07:11 2025 GMT
Subject: CN=68f91d4f-9557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:d7:94:1b:66:64:32:35:68:83:c6:7c:63:
b2:77:a3:46:d6:bf:4a:4a:7c:e7:b4:bd:26:35:30:
ce:9e:75:f1:46:30:ec:d7:f9:cb:b0:98:e7:f2:4b:
8a:cf:0a:29:4d:f1:41:61:93:5e:83:0c:4c:54:a5:
0d:85:4c:18:6c:38:ed:b6:0b:ab:fc:af:d6:88:24:
44:c8:f3:bd:e0:1f:1d:4b:f9:97:d7:5b:b3:8b:7c:
56:ee:96:3c:92:95:a2:eb:07:4b:bc:4b:0d:26:16:
9f:b4:f5:e5:d4:9f:cb:9f:e0:ab:62:e4:14:ce:a2:
0b:bc:f6:79:13:c8:98:83:77:23:e7:f8:91:f1:c4:
16:b3:9b:a0:1c:74:38:06:01:a4:b5:e5:98:60:4a:
8c:de:c9:1c:9e:a8:5a:af:be:e2:ed:ea:30:b5:59:
9f:db:bb:c3:49:b0:25:9b:3c:f7:40:9b:48:b2:02:
1f:55:67:1e:8e:db:4c:88:97:94:93:d2:ea:92:98:
b5:09:cd:3b:5f:7f:92:05:8d:28:8f:af:0b:b0:1c:
0c:ce:a5:90:2b:52:37:e0:3a:74:ac:15:e1:51:c5:
3b:c8:ce:62:ab:da:e3:38:5c:cd:a1:09:17:d4:28:
a9:03:95:fa:c1:16:54:5d:f3:16:08:66:9d:dc:f8:
be:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E1:45:8F:66:4E:79:88:BF:FB:AA:D7:C7:11:3B:C9:A7:BD:6D:91
X509v3 Authority Key Identifier:
keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:00:17:04:b6:a1:0f:18:c2:00:8e:ef:af:27:cc:ba:03:8f:
b0:b8:13:ba:2a:b6:eb:f4:6d:23:9e:71:ca:22:09:29:dd:64:
73:a4:80:73:cb:9d:a2:f5:76:be:b0:f6:ae:65:1e:ff:2b:1a:
bb:a0:59:d5:11:80:9e:9a:94:c6:2b:c0:40:ad:29:72:99:bd:
ad:0e:e7:3a:21:d3:57:4d:53:05:a7:d7:6b:0f:95:d7:1b:7d:
d3:f9:c9:f0:5f:a4:8c:5d:08:06:31:6d:76:36:99:ee:eb:bf:
a7:8f:56:c4:9e:76:4e:41:f9:56:cd:5c:58:17:83:65:40:2b:
65:82:35:a5:a2:5b:e3:79:12:29:a7:cb:2e:43:77:d4:6c:cc:
84:db:20:a6:93:99:01:43:73:ac:38:aa:79:4f:e4:1f:9b:f5:
df:3a:c4:21:5f:b1:c8:de:22:09:6a:33:bd:e0:1b:88:4c:83:
3a:38:7d:ae:51:61:9c:5f:7d:39:db:26:cb:ce:ae:1b:08:32:
8e:72:1e:fa:5f:72:d9:3d:9e:2f:e5:99:8d:28:55:9e:06:05:
ef:87:b5:76:3e:4b:60:2b:1e:dd:b3:68:0f:ba:76:19:c2:8f:
10:d2:94:ba:8c:2b:c0:bd:f9:3d:e6:40:59:69:4b:96:e8:99:
aa:e1:c4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 00:15:13 2025 by rpki-client