
$ rpki-client -vvf rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft
File: Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft (raw, json)
Hash identifier: Ohu65fsZdJjA41/v0QTK5ONrA2KR9fZWoJv7/dwd/iA=
Subject key identifier: D3:F8:61:11:7F:E6:7B:0C:7F:A1:48:7E:8E:17:C8:D9:81:56:6C:2C
Authority key identifier: 5A:FB:B9:CB:BC:65:46:BD:55:1D:17:26:30:19:0A:E8:1A:9A:F1:27
Certificate issuer: /CN=A91425C3/serialNumber=5AFBB9CBBC6546BD551D172630190AE81A9AF127
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft
Manifest number: 37
Signing time: Mon 03 Nov 2025 07:33:43 +0000
Manifest this update: Mon 03 Nov 2025 07:33:42 +0000
Manifest next update: Mon 10 Nov 2025 07:33:42 +0000
Files and hashes: 1: Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.crl (hash: ue92ThBNvaEm2fuNXjC6jn+R1FbTmYIGq1ZAu4YKb6s=)
2: 44E524C6660611F0AC01FC4FC4F9AE02.roa (hash: bHIMWlurNqBIRWjjG4aQFJYKcLjVhjX4C0j7SqX+rCQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.crl
rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91425C3, serialNumber=5AFBB9CBBC6546BD551D172630190AE81A9AF127
Validity
Not Before: Nov 3 07:33:42 2025 GMT
Not After : Nov 10 07:33:42 2025 GMT
Subject: CN=69085ad6-1ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:fa:15:68:f8:2e:5d:f9:03:d9:bc:3e:45:
29:89:c6:96:c1:b9:65:77:3a:31:4d:44:63:35:1a:
6b:7c:94:12:ac:30:c5:f3:96:e3:c7:7a:92:fd:2c:
26:ff:59:25:21:d3:a5:1e:de:dc:49:68:9b:98:0a:
ea:4e:42:e3:60:68:ca:ad:ce:e1:6c:c0:81:ff:2e:
21:34:5c:a7:ff:a3:fd:7f:6e:97:44:51:52:85:0e:
c7:b4:bf:56:62:0c:37:0e:c1:44:b0:cc:19:be:25:
27:eb:da:50:e2:1c:2a:29:1d:d2:1c:e6:d4:3b:09:
9e:68:85:8d:99:fa:9f:1a:f9:fe:6e:36:2e:af:78:
0d:67:75:06:e3:fc:c7:44:3f:d6:b5:c0:91:f6:3a:
63:da:a6:10:db:96:22:68:b9:d9:e3:d1:42:15:20:
7f:07:08:11:0a:cf:f2:d0:b6:99:c0:a4:4a:2b:ad:
74:b3:80:d9:94:b7:8a:03:47:07:3a:71:4f:50:4b:
31:0a:fb:99:f9:ed:68:66:ee:01:ce:94:85:de:51:
31:2e:f2:f4:12:b5:0a:03:2b:d6:d3:66:85:fe:f2:
83:b2:c9:18:57:0c:c6:0c:ba:6f:c1:e9:fd:f9:a6:
67:8e:80:5c:be:dc:87:96:ed:77:a4:ac:3c:bd:37:
f1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F8:61:11:7F:E6:7B:0C:7F:A1:48:7E:8E:17:C8:D9:81:56:6C:2C
X509v3 Authority Key Identifier:
keyid:5A:FB:B9:CB:BC:65:46:BD:55:1D:17:26:30:19:0A:E8:1A:9A:F1:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:e6:20:49:17:1d:0d:79:80:3c:46:fa:29:2a:f1:d8:2f:6f:
83:c2:56:bc:ba:dd:e2:be:f5:55:60:af:59:60:e6:3e:e6:82:
98:58:28:41:fe:9a:48:d6:c0:7a:0a:cd:fd:08:a0:68:b2:6f:
2c:5c:1f:6c:ba:f0:c1:59:92:6a:ed:21:a9:54:e6:17:d1:d9:
e6:35:9f:e0:10:5d:bd:23:02:9b:59:e7:f2:67:21:f7:ce:4f:
ed:6c:c9:3a:d2:d8:34:b9:a8:50:3d:2d:60:75:99:89:bf:94:
dd:cb:00:79:26:a4:ce:bd:87:5b:d0:57:be:6c:8a:13:db:f7:
48:c4:60:56:19:e0:04:2e:f6:0c:1c:3a:e6:02:1d:85:d7:b6:
6c:02:60:c6:1c:30:66:16:b7:97:08:27:90:88:8a:1b:ce:db:
3b:e3:1e:93:62:59:68:4a:b7:84:e9:29:8c:93:fd:f7:44:09:
67:b1:d8:df:6b:4a:fd:61:70:75:01:ad:0d:7e:0c:f0:0e:01:
af:9e:3d:fc:ef:79:2a:de:4c:c2:32:4a:06:18:b4:ca:8f:61:
e6:7e:5d:0f:f2:46:46:49:28:df:f4:b2:98:a5:93:ec:bf:d6:
1c:b2:5d:66:8b:fe:1d:08:16:67:5c:dd:f2:cd:11:cb:f3:eb:
7e:9f:57:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:26 2025 by rpki-client