
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
File: wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft (raw, json)
Hash identifier: m/rSFv9EVi8Qa6yhVseje00SLGaN27H2Dczrp58Wdx4=
Subject key identifier: 1F:32:1B:E7:FF:73:71:B9:B4:DC:6D:CD:A5:D8:5C:69:3C:64:04:FE
Authority key identifier: C2:AC:94:54:15:8A:37:C1:A1:18:9D:46:A2:EE:14:53:75:0D:A9:AF
Certificate issuer: /CN=A912FF31/serialNumber=C2AC9454158A37C1A1189D46A2EE1453750DA9AF
Certificate serial: 07D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
Manifest number: 07CB
Signing time: Tue 04 Nov 2025 21:19:57 +0000
Manifest this update: Tue 04 Nov 2025 21:19:56 +0000
Manifest next update: Tue 11 Nov 2025 21:19:56 +0000
Files and hashes: 1: wqyUVBWKN8GhGJ1Gou4UU3UNqa8.crl (hash: 6w/6ambA8mpkh7APJfBd4QxnN7QIwbIWbPlbriEnhHI=)
2: 575CFFB013BE11EB943B905BC4F9AE02.roa (hash: q3e1SxYN4gO4HKEGgzyUKFkCIiem6r+fmpGDRyBSWN8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.crl
rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2001 (0x7d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FF31, serialNumber=C2AC9454158A37C1A1189D46A2EE1453750DA9AF
Validity
Not Before: Nov 4 21:19:56 2025 GMT
Not After : Nov 11 21:19:56 2025 GMT
Subject: CN=690a6dfd-8262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fd:22:4b:3d:0b:b1:29:0c:3a:11:e6:e6:ac:
e9:54:3e:18:4c:1a:37:bc:8b:ae:80:03:3f:76:31:
80:3b:9a:59:a0:98:d8:8e:67:f2:a6:11:5b:a4:d4:
ce:45:be:6c:dc:69:67:be:b8:76:6e:d5:17:8d:d3:
d3:a5:47:ff:3f:90:ed:40:ec:6d:bb:c2:94:de:ac:
8e:e4:f0:71:59:65:6f:55:83:d1:b5:3b:67:a3:61:
44:e7:70:67:98:d2:41:d4:39:1a:08:33:8a:11:97:
61:56:49:a2:06:f8:87:1b:27:fc:a2:4d:ed:b1:81:
00:30:7b:e7:ef:0d:90:53:c2:4f:d1:aa:41:74:d3:
59:47:58:e9:5b:0d:ba:ca:0a:4d:62:57:ec:37:95:
47:8f:c4:23:fe:d8:fb:5d:95:58:b3:e2:69:de:8b:
97:fa:73:5c:2c:3a:f8:44:ed:1a:9e:3a:38:83:61:
3f:de:58:1e:77:c8:6d:52:99:d3:d7:07:1a:24:41:
a6:88:68:d6:a0:bf:b7:0c:d3:b1:1d:62:6b:1e:f0:
ca:10:2a:15:27:f1:1d:2f:8e:eb:9c:1e:ee:58:66:
56:ca:a3:58:ee:dc:95:94:3d:55:cc:6e:17:0a:e7:
e9:c0:b9:80:15:6d:da:fe:ad:c8:a7:c4:3d:ca:de:
dc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:32:1B:E7:FF:73:71:B9:B4:DC:6D:CD:A5:D8:5C:69:3C:64:04:FE
X509v3 Authority Key Identifier:
keyid:C2:AC:94:54:15:8A:37:C1:A1:18:9D:46:A2:EE:14:53:75:0D:A9:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:57:b0:56:7a:33:9e:80:2b:0f:0b:52:a8:53:51:17:b4:39:
4c:54:0d:bf:c5:8f:1e:f6:8b:f4:03:57:a8:92:05:b3:e5:fe:
22:23:18:ec:d7:0a:93:38:0f:4f:66:e6:03:03:65:25:c7:74:
b8:e1:f5:9c:78:cc:ec:c1:32:ad:a3:2f:75:25:91:a5:ec:58:
7f:7b:d5:3f:b5:51:5c:5d:0f:62:8c:3b:16:6b:9d:11:15:94:
ff:c5:31:b5:db:04:e8:f0:7b:67:10:85:c8:27:2e:1f:df:eb:
bf:34:aa:2c:48:60:54:81:53:35:aa:39:65:ea:7a:2d:b7:01:
96:d2:44:9a:7c:9e:9c:10:9d:e2:20:78:d7:47:88:b5:10:69:
79:6e:ea:b6:e3:41:79:c0:e5:3d:98:f2:0a:aa:d9:79:7a:9e:
6d:d7:bb:b1:c0:d7:69:51:d8:eb:02:1c:ba:30:29:c6:e0:50:
a7:ef:5b:b4:ea:cd:00:95:44:76:fe:a1:4d:2e:63:d2:2a:5e:
f5:51:f5:b7:3e:09:5c:50:0b:d8:6c:f6:b5:2c:64:4a:b2:63:
ed:e8:11:ff:09:5d:f9:1e:b8:65:92:8a:a3:a7:8e:4c:67:b7:
35:f9:73:26:39:cd:9a:e1:ab:c3:1b:d7:56:49:24:4e:8b:90:
ab:f8:03:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:10:08 2025 by rpki-client