
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft
File: vWukX_AnbCxgSgM7B82k5MDfFdc.mft (raw, json)
Hash identifier: y7gXYAPQHZaihI2vcNtMRrXw0QSRZ8bxbeDvTXtq7NU=
Subject key identifier: D8:80:D7:5C:1C:4D:DA:EA:42:DD:EF:69:49:C1:D5:F8:C5:78:B6:6C
Authority key identifier: BD:6B:A4:5F:F0:27:6C:2C:60:4A:03:3B:07:CD:A4:E4:C0:DF:15:D7
Certificate issuer: /CN=A9159B6F/serialNumber=BD6BA45FF0276C2C604A033B07CDA4E4C0DF15D7
Certificate serial: 013E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWukX_AnbCxgSgM7B82k5MDfFdc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft
Manifest number: 013C
Signing time: Mon 03 Nov 2025 04:25:21 +0000
Manifest this update: Mon 03 Nov 2025 04:25:20 +0000
Manifest next update: Mon 10 Nov 2025 04:25:20 +0000
Files and hashes: 1: vWukX_AnbCxgSgM7B82k5MDfFdc.crl (hash: D8OkJA9GvKdEsXZmR1l8QG8/5EUmDZW5HvXSkr9DIvQ=)
2: F56322CCD09C11EE94431F80C4F9AE02.roa (hash: VBkLC1Ug6+V5ASssgia7rSJZ2O30hfTWr/78uTsbXl8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.crl
rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWukX_AnbCxgSgM7B82k5MDfFdc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 04:25:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318 (0x13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159B6F, serialNumber=BD6BA45FF0276C2C604A033B07CDA4E4C0DF15D7
Validity
Not Before: Nov 3 04:25:20 2025 GMT
Not After : Nov 10 04:25:20 2025 GMT
Subject: CN=69082eb1-0cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4a:5f:7b:c7:1f:32:e2:53:93:b5:4b:9f:8a:
fe:50:cd:ac:be:9f:45:3e:5b:8b:e4:3a:da:2a:72:
57:91:74:b4:2e:9c:84:ed:8f:f2:3e:fd:99:6c:66:
c4:13:2a:15:d7:26:ab:56:76:c2:14:cc:03:af:3f:
c7:5b:1c:2e:ef:61:b5:4c:3a:e1:67:cd:2b:ea:d4:
e7:9b:aa:29:d9:15:84:49:74:b4:2d:dc:a5:36:a7:
1a:96:85:df:9a:fe:9f:e8:8e:47:71:ba:40:7d:3b:
20:f9:71:44:7a:f1:0d:eb:69:e1:44:17:ed:29:6e:
04:0e:0e:6e:a7:66:ab:c2:e4:bb:2a:f7:a0:b6:01:
07:0d:cf:df:e1:c1:e9:b6:93:1b:61:54:18:b8:ae:
b2:3c:12:64:83:b1:e9:e4:7b:8e:8a:3b:c4:87:c3:
3b:65:96:ff:4b:85:4e:cf:6c:07:ed:48:cb:35:c0:
81:9b:23:ea:f3:e2:1d:ab:5b:f1:c1:b9:6a:45:bc:
c0:5f:1a:c0:81:13:c2:a2:cc:b6:16:77:d9:f1:64:
0a:f3:8a:7a:a0:6f:6f:13:4c:12:38:a5:86:05:e3:
0a:c3:5f:cb:fd:6f:9c:2d:58:52:80:d5:b8:7d:ec:
c3:c0:2f:18:0f:c8:0c:b8:91:61:bd:01:a7:2f:0f:
e4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:80:D7:5C:1C:4D:DA:EA:42:DD:EF:69:49:C1:D5:F8:C5:78:B6:6C
X509v3 Authority Key Identifier:
keyid:BD:6B:A4:5F:F0:27:6C:2C:60:4A:03:3B:07:CD:A4:E4:C0:DF:15:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWukX_AnbCxgSgM7B82k5MDfFdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:c1:b8:72:19:9c:91:a8:56:c2:15:71:d1:14:b0:ce:c3:63:
9d:d3:32:2f:4c:ea:0f:94:9d:ae:60:f4:73:17:e3:dd:9a:4c:
85:32:33:e6:5a:0c:24:fd:c2:50:04:2c:3f:ff:73:ba:7e:23:
01:97:3b:d3:41:0a:b6:cb:5d:5e:43:8c:7d:8f:f4:46:13:13:
86:2f:e1:6a:95:a4:fe:9d:ff:35:ac:24:dc:41:3a:48:80:3c:
58:bc:5e:7f:09:f7:87:5d:a4:a8:a1:93:5f:89:b9:00:df:eb:
6f:55:22:c9:3d:66:bc:5f:32:8f:9a:2f:7c:95:bf:7d:60:39:
32:0f:ec:21:9b:71:a1:17:c7:e2:a3:90:35:6f:af:f0:2f:c1:
ee:c1:d9:8e:4c:b6:55:6f:19:61:5b:7f:c6:e3:f1:4d:38:84:
d4:16:31:12:20:c0:4b:40:14:6a:c6:ce:6d:90:55:bb:0b:36:
08:03:68:39:15:4e:18:f7:33:c9:a4:9a:4e:31:e8:1d:46:1d:
66:fe:e0:d1:79:c6:ea:50:91:5d:96:69:61:83:4e:4d:3c:8a:
4e:c1:6a:30:d6:52:d8:d0:14:6e:d4:6d:bf:fc:a3:cd:7d:03:
f9:45:8c:5d:4e:41:2d:af:e1:66:2b:8c:c6:f4:db:f4:96:bd:
56:33:cc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:19 2025 by rpki-client