
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.mft
File: uWfS7oK3russVByppRA7Wgym5xI.mft (raw, json)
Hash identifier: bLzJTVLiNGFA5DVysIms/eccyEky7TsQSze1LT/ZslU=
Subject key identifier: 8C:41:C9:B8:69:9E:1A:99:AE:D6:D6:52:B7:44:4A:C6:2A:7A:F2:9F
Authority key identifier: B9:67:D2:EE:82:B7:AE:EB:2C:54:1C:A9:A5:10:3B:5A:0C:A6:E7:12
Certificate issuer: /CN=A9166E07/serialNumber=B967D2EE82B7AEEB2C541CA9A5103B5A0CA6E712
Certificate serial: 64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uWfS7oK3russVByppRA7Wgym5xI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.mft
Manifest number: 62
Signing time: Mon 03 Nov 2025 07:03:58 +0000
Manifest this update: Mon 03 Nov 2025 07:03:58 +0000
Manifest next update: Mon 10 Nov 2025 07:03:58 +0000
Files and hashes: 1: uWfS7oK3russVByppRA7Wgym5xI.crl (hash: WhcTkmA0qM7TPgaCXe+JTwvoU6XTSxeWUeAW+Smw5mg=)
2: D7D79C92241A11F0A9D27045C4F9AE02.roa (hash: //G4AwnQA0nMb3DeflcQ+SQx5LkYQDI/08bvYQspQs0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.crl
rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uWfS7oK3russVByppRA7Wgym5xI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166E07, serialNumber=B967D2EE82B7AEEB2C541CA9A5103B5A0CA6E712
Validity
Not Before: Nov 3 07:03:58 2025 GMT
Not After : Nov 10 07:03:58 2025 GMT
Subject: CN=690853de-3631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:4c:8b:22:f6:4b:88:bb:b6:f8:f4:2a:63:
01:f8:6e:82:a4:92:aa:99:dd:98:a8:70:f4:e2:64:
de:17:9b:47:29:49:af:5f:db:ed:e5:c7:53:6f:3a:
4b:06:66:97:14:63:32:10:6e:53:1f:00:ed:b0:e0:
da:8e:9c:0a:bd:37:7c:63:45:f8:38:6a:26:9b:72:
0f:6c:a9:6a:35:4d:e5:f9:6a:44:76:d5:3f:b6:a0:
be:d2:6b:f9:37:44:b9:e0:7d:7b:af:df:86:d2:60:
4f:46:81:20:0f:7c:94:83:e2:ce:d9:25:2f:2e:90:
c6:99:84:45:a7:47:c8:7c:a4:0c:45:75:24:65:14:
51:00:6f:7f:88:7d:cb:7f:34:9e:e2:f1:d2:6c:23:
72:07:1d:45:ef:fb:cf:34:18:61:6e:46:83:14:86:
8a:3e:ee:b9:75:2b:af:c3:3a:0e:db:7b:29:f4:bb:
13:21:c5:f0:c5:6a:ea:48:c0:f9:dc:dd:35:14:0e:
70:b3:c9:a3:08:01:62:70:9c:d0:f7:c1:13:29:c2:
c9:d0:25:c7:eb:7d:11:42:4b:ac:e4:ad:6b:42:0e:
2e:c6:df:4d:94:cb:44:b1:1d:43:b8:ba:06:cf:42:
05:25:c0:64:28:2a:db:d2:b4:68:d8:01:b1:d6:6d:
60:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:41:C9:B8:69:9E:1A:99:AE:D6:D6:52:B7:44:4A:C6:2A:7A:F2:9F
X509v3 Authority Key Identifier:
keyid:B9:67:D2:EE:82:B7:AE:EB:2C:54:1C:A9:A5:10:3B:5A:0C:A6:E7:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uWfS7oK3russVByppRA7Wgym5xI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:d9:f9:79:c5:e8:08:47:f0:24:a9:dd:fd:5f:b2:33:d1:eb:
89:9d:05:89:c6:0d:76:03:65:99:6a:13:4a:3b:2d:f3:bd:cb:
ba:e3:e3:94:88:4b:c5:8e:99:fa:9f:12:e3:ef:cd:b4:15:2d:
f7:39:a0:03:7f:49:ba:57:3a:c4:43:74:cc:2d:45:55:9e:11:
24:ae:58:f1:23:a9:8d:39:25:e7:92:73:ff:0b:8d:8b:fa:a0:
10:96:77:a5:60:12:9e:c2:e7:f2:d9:58:ea:00:fe:07:64:1e:
bf:f3:b0:f7:40:23:fb:b4:ed:7e:2f:2b:4e:f3:95:0e:ce:ba:
90:66:32:7b:ac:01:83:14:f2:93:d3:6f:93:b8:cf:fe:ba:57:
62:08:4b:69:f8:52:73:49:e0:2e:63:a9:09:82:5e:20:7d:33:
45:c6:fc:72:06:79:72:01:89:ed:fa:e0:0a:f1:fc:d9:b6:9a:
47:bf:fe:87:28:58:5e:2e:22:f3:e1:99:7e:f3:8a:25:fe:4b:
98:eb:8c:7a:0c:d7:d2:56:1b:0f:be:2f:ea:a5:d8:bd:25:43:
6e:ab:82:21:87:57:c2:6f:c8:9a:53:60:65:26:d8:81:4b:09:
8f:7a:71:4e:3c:f2:04:40:ae:02:9f:35:26:63:06:55:43:da:
5b:8c:4f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:26:23 2025 by rpki-client