
$ rpki-client -vvf rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft
File: WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft (raw, json)
Hash identifier: wDDn1R596gKXug2TaP6Y9883a78h2VlE9Xt8lfBJ1kc=
Subject key identifier: B2:EA:BC:DD:1F:97:ED:5C:7A:25:56:75:6B:1E:D8:37:46:3B:51:3E
Authority key identifier: 59:0D:27:85:F3:06:E8:91:4A:1D:FE:9B:27:D5:7C:6B:89:FC:DA:93
Certificate issuer: /CN=A91376D4/serialNumber=590D2785F306E8914A1DFE9B27D57C6B89FCDA93
Certificate serial: 073C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft
Manifest number: 0734
Signing time: Sun 02 Nov 2025 21:43:38 +0000
Manifest this update: Sun 02 Nov 2025 21:43:37 +0000
Manifest next update: Sun 09 Nov 2025 21:43:37 +0000
Files and hashes: 1: WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl (hash: feD+PavLJtN2+emJDxHi4iJ2q7mcxSfwMKIFPiv4FSk=)
2: ACD87DA66C4811EBB9A7CF73C4F9AE02.roa (hash: 4SDVk60SWQl2vTJ1K6rzs+mQCqAItGWRRGu4kfUeRwQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl
rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1852 (0x73c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91376D4, serialNumber=590D2785F306E8914A1DFE9B27D57C6B89FCDA93
Validity
Not Before: Nov 2 21:43:37 2025 GMT
Not After : Nov 9 21:43:37 2025 GMT
Subject: CN=6907d08a-b751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1c:02:3a:71:e2:97:a3:d4:42:9c:25:d8:19:
ec:96:8e:ed:06:5e:5b:20:e8:29:52:a9:5c:d8:5b:
1f:34:65:5e:43:cd:01:d0:2e:df:49:4e:09:42:ff:
28:da:0a:bf:c4:c7:e3:f5:6a:5f:e2:db:1c:24:9f:
e0:82:b7:29:35:8c:e1:ce:d0:be:07:4a:bd:6f:ba:
4f:d1:4a:aa:d3:73:fd:18:fd:5b:ef:b4:6a:eb:2a:
92:c0:49:c4:45:d2:0b:af:6a:bb:f8:ad:69:94:0d:
5a:98:8b:af:0e:86:ba:cf:77:dd:7a:b9:83:e0:b3:
8f:a5:c0:fe:12:f5:85:91:e4:43:4b:ca:e4:99:46:
31:80:91:c0:9d:35:c5:ce:38:88:a4:0e:4e:98:14:
18:0a:09:ff:59:ce:59:5d:d2:90:a7:d6:0f:65:c0:
77:c6:3a:b7:bb:bb:b8:f6:00:64:9d:81:7d:fb:4b:
c1:f0:f9:be:59:10:dd:6c:ba:32:b2:1e:b1:3c:7d:
10:ed:8b:d2:c8:97:1b:66:1d:2f:d5:a5:7e:56:a0:
4a:12:8c:64:44:05:29:fa:57:63:a1:e4:7d:86:a6:
76:4a:6b:64:8e:c3:3a:13:29:f5:a8:bc:93:bc:b7:
c0:4a:67:72:79:ee:a0:b8:69:40:d9:9c:2a:52:cf:
61:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EA:BC:DD:1F:97:ED:5C:7A:25:56:75:6B:1E:D8:37:46:3B:51:3E
X509v3 Authority Key Identifier:
keyid:59:0D:27:85:F3:06:E8:91:4A:1D:FE:9B:27:D5:7C:6B:89:FC:DA:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:2c:f0:78:65:cc:2b:f3:a0:56:de:cf:13:6e:ed:47:31:d4:
5c:49:8d:88:91:11:75:9e:fe:4c:1f:42:45:ce:41:b7:d2:2e:
7b:f8:2d:35:a4:7c:df:7f:f4:86:70:7b:fa:cb:a3:53:65:3b:
38:85:01:b9:0b:90:de:46:3b:67:02:a5:de:bf:87:1a:d8:13:
65:27:b7:2c:8e:b7:81:4a:c2:7d:68:d1:ef:55:d1:7d:e8:f2:
83:ae:f3:04:c6:33:dc:b0:48:a4:ec:1a:ee:51:12:d4:09:d8:
36:b6:65:1c:25:c9:1e:83:30:d2:a6:ae:80:35:4b:ed:a6:e8:
fc:b7:9c:00:4e:73:1d:94:34:24:be:0c:4b:fc:ab:f2:cf:1f:
6f:e3:15:fe:e3:43:e9:bd:c4:ca:5e:43:7f:03:b2:6c:9d:1e:
2b:7a:e0:c4:35:29:ec:bd:f4:3b:17:28:43:85:b8:15:2b:80:
2e:cf:de:f6:b6:4a:bb:03:a3:b5:a2:e7:38:b3:da:ac:e4:5c:
22:7a:fa:db:e3:22:7e:30:fa:26:84:f1:ed:29:81:ea:bf:fa:
02:33:c9:89:db:77:76:9b:d3:cc:3e:99:d2:c2:ed:ef:dd:f9:
59:c7:67:92:ef:87:d8:b8:c1:9b:3f:0b:e5:c6:77:14:68:22:
43:3f:7a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:19:12 2025 by rpki-client