
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft
File: 8wm0k6ku58YpXgCQYwolGh0TZRc.mft (raw, json)
Hash identifier: gmFRyUGhZ2MLufB58Z2KLIik32wsrIJ/zGxcjPhXDoY=
Subject key identifier: D7:5C:AD:51:B5:AC:59:24:0C:46:65:56:96:F1:16:51:EE:6D:6E:2F
Authority key identifier: F3:09:B4:93:A9:2E:E7:C6:29:5E:00:90:63:0A:25:1A:1D:13:65:17
Certificate issuer: /CN=A913D756/serialNumber=F309B493A92EE7C6295E0090630A251A1D136517
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft
Manifest number: AC
Signing time: Mon 03 Nov 2025 06:09:37 +0000
Manifest this update: Mon 03 Nov 2025 06:09:37 +0000
Manifest next update: Mon 10 Nov 2025 06:09:37 +0000
Files and hashes: 1: 8wm0k6ku58YpXgCQYwolGh0TZRc.crl (hash: sdNFj4G53NqqtSlbPLiE/5BVhqmZSIaHlb1igsUo/Ng=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.crl
rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:09:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D756, serialNumber=F309B493A92EE7C6295E0090630A251A1D136517
Validity
Not Before: Nov 3 06:09:37 2025 GMT
Not After : Nov 10 06:09:37 2025 GMT
Subject: CN=69084721-e24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:0c:3c:86:b6:ea:59:7a:01:bf:6e:91:93:
e5:c0:58:75:fa:42:5d:e6:08:6b:f8:a3:41:47:3f:
79:1e:a9:d9:aa:22:c4:af:e3:11:0b:6f:da:6b:d5:
f7:45:b0:92:b8:02:8a:d7:33:dc:64:8c:76:09:57:
10:ae:b6:6b:44:1e:97:92:5d:b1:08:53:04:fa:33:
6b:66:33:fc:7c:5c:c7:6b:e3:a5:67:a3:e9:0e:ce:
c9:91:d6:7f:41:b0:6f:56:13:69:05:3a:7e:8c:c9:
dc:0e:23:81:57:fe:31:61:f9:39:af:51:e1:25:2c:
8a:fa:3d:6b:f3:43:f7:40:ac:57:79:66:69:c5:33:
ae:23:66:bf:45:dc:7b:be:e0:51:ca:8c:26:d3:47:
22:b8:b1:c6:45:1e:77:44:df:9c:e8:9c:99:44:a5:
10:cd:39:16:72:39:db:11:12:56:4b:60:6d:13:e0:
16:59:5a:d1:6a:9a:cb:5e:7e:86:7c:c3:92:92:76:
5a:7c:8b:45:7d:49:a7:bd:53:a9:84:2a:5d:f1:35:
79:9a:2f:d7:af:c3:05:82:b8:b4:81:63:b0:58:22:
6c:43:4a:67:4b:7f:60:f4:dd:7e:bd:dd:4e:08:1c:
38:fd:d4:75:fa:bd:52:6e:82:fb:ba:cb:1e:fd:b1:
13:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5C:AD:51:B5:AC:59:24:0C:46:65:56:96:F1:16:51:EE:6D:6E:2F
X509v3 Authority Key Identifier:
keyid:F3:09:B4:93:A9:2E:E7:C6:29:5E:00:90:63:0A:25:1A:1D:13:65:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:a4:d2:e0:56:c0:2c:48:1b:51:82:07:7d:24:2e:95:80:db:
bb:90:d2:08:8f:1c:3a:f2:c9:68:6e:0a:a5:f7:1b:8d:72:bf:
60:df:b4:7c:5c:17:3b:ca:84:16:8f:42:26:ea:57:c9:a0:33:
69:30:af:8c:b2:fa:27:4e:9c:b8:6e:d5:f4:ff:11:0b:6f:1d:
34:03:d5:11:c0:df:32:b4:ed:a4:ae:94:85:cb:a1:ec:6f:81:
63:68:53:1f:32:f2:41:7c:4a:d1:ed:ac:6c:91:02:c6:b4:17:
14:2e:ac:c7:51:bc:ae:7d:d8:7e:d0:78:9a:cd:06:df:18:a6:
49:c6:04:63:ae:17:f8:74:3a:9f:82:9e:bb:32:38:b4:1d:4d:
a0:ac:a7:2c:3d:4a:fe:aa:9d:12:63:10:b5:86:5a:e6:d8:e9:
2d:33:d8:66:8c:80:b6:49:56:8d:10:60:17:46:45:c1:8a:42:
77:05:7a:18:cd:cd:b3:6c:fe:c9:4e:c5:d1:9c:f4:5e:e0:89:
ee:aa:a6:31:7a:50:65:76:00:ad:a3:f3:62:6d:4f:da:8f:90:
8b:a1:33:df:c1:62:ca:a3:a3:2d:34:86:62:f1:96:f5:6d:11:
c2:44:c8:9d:ef:03:b0:88:b2:41:40:03:84:7a:f0:21:c6:a5:
4f:3b:f0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:14:34 2025 by rpki-client