
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
File: w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft (raw, json)
Hash identifier: y5Unit12A9arZTiSKANoQwQAKo1fTiNn3S14lUzqqMQ=
Subject key identifier: EC:80:0A:6B:69:7D:8E:CF:90:24:45:9F:C0:CE:AC:29:32:32:EE:5A
Authority key identifier: C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43
Certificate issuer: /CN=A9150080/serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643
Certificate serial: 042C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
Manifest number: 0426
Signing time: Sat 25 Oct 2025 02:50:08 +0000
Manifest this update: Sat 25 Oct 2025 02:50:08 +0000
Manifest next update: Sat 01 Nov 2025 02:50:08 +0000
Files and hashes: 1: w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl (hash: NU4tyjBha5NxZBTAVUwbQYdp0pDFbw19S1348v6Mi9U=)
2: 9904EDFA857E11ECA6A4FB59C4F9AE02.roa (hash: uXNN93KPpMh1sC/GxXfk7rupN3sWo7udXfCSk3ZQb8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl
rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 02:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1068 (0x42c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150080, serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643
Validity
Not Before: Oct 25 02:50:08 2025 GMT
Not After : Nov 1 02:50:08 2025 GMT
Subject: CN=68fc3ae0-66ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a9:6d:89:03:11:1a:9f:d4:09:df:f7:c3:ae:
08:ca:5c:46:f8:62:16:9f:97:13:b1:d8:0e:f0:aa:
dd:a2:c1:83:51:bb:22:41:6d:25:66:50:b1:5a:ac:
fa:d8:98:d9:de:3b:dd:b6:56:ed:13:f6:47:6c:a9:
e0:64:75:6a:92:57:2c:6e:04:4c:b7:f7:f6:04:df:
56:36:41:1f:c4:45:3f:a4:a3:62:2b:04:99:3f:bf:
cc:2a:ec:b5:9f:39:89:92:a5:f4:4c:39:68:37:2a:
fa:5a:8d:b0:17:e3:41:02:93:05:3d:de:d1:01:96:
94:1f:8f:c7:47:8c:6b:7c:76:40:ad:97:9b:ad:2d:
99:42:ad:29:c3:da:36:ba:61:d2:1a:41:18:0a:24:
84:ad:3d:57:e3:3f:8f:3f:9a:98:6a:f5:2b:8d:b1:
16:8e:7d:5f:22:e7:5e:93:76:70:98:5b:33:9b:5b:
ad:92:04:b2:89:b6:31:61:02:eb:16:d3:a6:2c:01:
37:33:69:87:b4:2e:62:60:31:48:0a:6f:46:b1:fb:
d0:a9:c0:50:b7:d8:84:a4:fb:72:db:7c:c5:5d:54:
b6:41:65:c7:1e:f7:dc:61:27:37:af:a6:b2:c3:c9:
da:7b:09:75:ad:49:d7:c6:23:9d:46:9d:50:15:9a:
ac:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:80:0A:6B:69:7D:8E:CF:90:24:45:9F:C0:CE:AC:29:32:32:EE:5A
X509v3 Authority Key Identifier:
keyid:C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:30:48:23:57:f5:73:ea:04:fb:d3:31:6b:b7:d3:c6:94:52:
c1:5e:ed:ec:ba:3b:3d:53:64:9e:81:5b:5f:c9:af:09:aa:be:
41:8d:ea:07:5f:e4:23:12:ac:b0:f6:12:df:ed:06:d3:5e:b5:
a8:9d:e0:64:74:be:74:0b:21:bc:5e:c3:59:5c:28:be:f7:8d:
7f:ff:e1:57:bf:11:91:d9:c0:cc:c0:61:d4:00:f1:dd:7c:d5:
dc:d7:63:dd:0f:0a:c4:5f:1b:2b:4a:70:dc:b0:89:01:df:eb:
ff:a3:4f:23:8b:f9:7b:7a:d8:fb:5b:e9:f6:0c:93:c9:7a:c4:
3b:2d:ec:6b:72:8f:30:94:cc:08:4e:d5:27:26:b7:ba:31:b9:
4b:b7:7f:9b:a9:50:e9:fa:67:92:ab:7a:4c:fc:d6:29:35:a2:
8f:14:df:39:5f:41:59:d8:3b:92:b3:8f:91:02:4e:1e:65:56:
73:71:c4:5b:58:07:de:1c:56:b5:c3:61:b3:2d:79:cf:26:05:
7b:5a:56:9d:8e:9e:29:73:81:fc:be:09:fe:48:e7:1b:8f:b0:
3e:f3:f6:ce:79:2e:5b:86:13:41:6e:84:0b:ce:c1:b3:c3:43:
c7:79:ba:c7:38:4e:35:16:29:4b:ca:5a:0c:47:5c:fd:e2:db:
f3:f5:47:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 00:50:43 2025 by rpki-client