
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
File: pWEUadKee9PIXTGAtycy6qt6-5Y.mft (raw, json)
Hash identifier: lv22x5WPwYsT4HeFWE8M9nDFG2XJf2LfKaxfilOtE2E=
Subject key identifier: B3:4D:8C:44:91:4D:77:A6:63:B1:49:41:2E:E4:D2:24:76:03:46:CC
Authority key identifier: A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96
Certificate issuer: /CN=A9146BA1/serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96
Certificate serial: 040E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
Manifest number: 0408
Signing time: Mon 03 Nov 2025 00:24:13 +0000
Manifest this update: Mon 03 Nov 2025 00:24:12 +0000
Manifest next update: Mon 10 Nov 2025 00:24:12 +0000
Files and hashes: 1: pWEUadKee9PIXTGAtycy6qt6-5Y.crl (hash: UnFBVSOxVm0i8iAFuyMivzgyqGv1D+YpYBDybvQpwnw=)
2: F67BB6E890AB11ECAB81252FC4F9AE02.roa (hash: 2seh0qxAc2BF9PqaOJpWiLsBwQeqToRGwKWIaD/PtHs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl
rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 00:24:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1038 (0x40e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146BA1, serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96
Validity
Not Before: Nov 3 00:24:12 2025 GMT
Not After : Nov 10 00:24:12 2025 GMT
Subject: CN=6907f62d-4586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:67:bb:6d:a0:ea:88:1a:68:6a:34:bc:36:e0:
98:ee:da:20:75:21:f7:52:6f:b4:0b:f2:29:1a:9e:
6e:b1:79:07:21:17:93:39:08:f6:0e:be:53:9b:b5:
86:fb:61:b8:0e:a1:75:8d:4c:98:b6:27:05:50:86:
26:c0:27:b6:d6:74:9e:79:59:fb:5d:f3:2c:2d:69:
7e:99:b0:43:ca:18:6d:f3:f4:3c:24:60:68:f8:b6:
b8:4e:b9:6a:93:92:e0:26:ec:43:59:b4:8e:ad:78:
8e:de:d6:ea:96:0f:17:65:ac:e6:2a:c3:3c:62:61:
89:ec:46:fe:2e:1a:a9:45:f6:5f:c0:d8:7b:9b:ed:
02:9c:76:5b:de:7a:a0:a5:2b:42:87:82:ee:84:fb:
c8:33:0c:6c:ba:53:b8:e2:2e:e1:6f:23:ac:71:09:
62:40:50:21:25:5b:ff:eb:a5:f7:fb:e6:b3:d8:37:
51:cb:09:ce:2a:ec:b1:d0:31:b2:2f:ce:7c:2b:5e:
1c:e9:de:db:59:c2:2e:8e:98:27:4e:86:3c:a1:f3:
14:52:22:7f:c2:b0:85:78:ce:ae:55:d6:12:ef:ef:
f6:93:ab:d4:1b:e1:11:60:2c:ba:da:69:26:10:e4:
28:f8:44:5c:71:ab:cb:80:54:ad:9d:07:ce:a5:82:
59:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4D:8C:44:91:4D:77:A6:63:B1:49:41:2E:E4:D2:24:76:03:46:CC
X509v3 Authority Key Identifier:
keyid:A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:1d:75:09:8c:56:4d:0b:92:07:4d:f0:99:c4:c9:4f:5a:38:
c2:ce:c9:a7:c7:a6:59:27:53:94:cb:25:68:d0:ef:cf:69:66:
66:ff:a6:b1:e3:51:26:c7:bb:de:f9:17:09:f3:b3:b1:b4:99:
2c:fb:2e:05:27:ca:ff:6a:59:01:4b:eb:9a:c9:02:19:70:da:
9c:56:61:55:1a:19:96:28:3f:61:29:e9:ec:89:69:fc:58:da:
0d:46:88:7c:1f:23:84:c4:6c:7c:34:76:82:e1:e7:98:14:f8:
d5:ec:83:7b:41:a1:53:c3:79:da:a4:eb:3c:03:4f:be:d9:97:
3e:af:6b:dc:ea:47:4a:81:64:32:77:a1:f6:58:a3:05:ca:62:
5f:61:08:d1:d9:cd:e1:b9:d0:0b:3a:60:96:1b:77:94:0a:57:
04:e7:67:4e:8d:74:6e:28:ec:a8:46:13:63:ad:18:03:66:0b:
4e:92:13:7d:9a:6a:d0:fc:09:14:ea:54:a5:27:40:6f:75:ee:
92:39:07:6f:3c:9f:4a:7b:97:c4:e4:f9:84:8e:90:89:72:9a:
17:82:76:78:14:04:cd:47:d3:d2:3f:39:eb:a0:ca:54:61:7f:
a9:63:92:19:d3:16:c3:51:fc:cb:b6:1b:07:a2:f1:be:92:16:
c5:99:81:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:14 2025 by rpki-client