
$ rpki-client -vvf rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
File: W9l8Mex4xvFX13LBu1drgCSCtyg.mft (raw, json)
Hash identifier: y4da00EnEqPqBx+pKhTx7GCm1ZRg8NdLFF4+MyzdJzc=
Subject key identifier: 79:04:B6:51:F0:20:54:B2:7B:5F:A6:D8:3C:03:0C:EF:57:4E:2D:0E
Authority key identifier: 5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28
Certificate issuer: /CN=A91764A1/serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728
Certificate serial: 0CA6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
Manifest number: 0C9B
Signing time: Tue 04 Nov 2025 18:22:39 +0000
Manifest this update: Tue 04 Nov 2025 18:22:39 +0000
Manifest next update: Tue 11 Nov 2025 18:22:39 +0000
Files and hashes: 1: W9l8Mex4xvFX13LBu1drgCSCtyg.crl (hash: immRUvPaG8+fLqipyXcE5hzHZegpK3+LD+SWQ/kFqN4=)
2: 753703FE045C11EAB8BF0932C4F9AE02.roa (hash: iEFdnNUSTVmlnEmHIkSfOkDzcc3pJG72lpQKbTvUl98=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl
rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3238 (0xca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91764A1, serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728
Validity
Not Before: Nov 4 18:22:39 2025 GMT
Not After : Nov 11 18:22:39 2025 GMT
Subject: CN=690a446f-5122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:92:01:2d:e8:bc:f6:a8:d4:1b:1d:55:4a:bd:
3a:af:31:96:09:64:75:16:b0:9b:88:78:15:de:a0:
5a:51:49:a2:6e:3e:83:fa:a6:ee:b8:31:42:86:ee:
17:ee:ed:ff:e5:54:2b:b9:ed:fa:f1:fe:4a:0d:0a:
d5:24:c9:1f:d5:81:58:cf:c9:82:9e:49:fc:11:52:
2c:81:52:24:c2:15:90:a4:d0:3e:e4:af:df:a7:59:
29:2f:66:99:c0:78:15:94:85:7f:49:c1:7f:76:bc:
75:4c:07:39:32:66:af:60:7f:57:c6:a1:1d:62:15:
a6:ad:e5:9d:d1:a3:79:e1:2a:45:8d:c6:d3:28:22:
6e:a6:de:2c:2c:fc:83:cc:1a:ec:40:a3:35:2f:bc:
da:40:75:6d:e7:0e:41:c9:b0:82:54:db:11:89:4c:
3e:62:b3:ab:f2:4e:05:3c:54:20:02:a5:e1:86:a1:
28:d7:5c:58:d1:50:8b:09:36:66:0a:80:7b:60:d5:
91:ab:4b:57:0b:86:a8:58:11:af:61:8b:ae:a3:94:
c5:ef:57:05:de:ad:a0:91:43:1d:92:55:24:b8:7d:
66:57:89:18:7a:4c:0c:cd:be:11:ed:b2:58:02:eb:
ed:88:7a:ec:d1:e4:f8:cf:ee:fa:fc:b4:42:c4:eb:
ed:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:04:B6:51:F0:20:54:B2:7B:5F:A6:D8:3C:03:0C:EF:57:4E:2D:0E
X509v3 Authority Key Identifier:
keyid:5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:e4:b3:11:d0:43:4e:be:6a:9a:0d:81:57:aa:45:6a:df:e1:
48:2f:f6:3f:88:b2:48:0f:e3:15:39:82:a1:8e:c9:ed:bf:1f:
ea:8c:b7:85:ba:f5:87:c7:5e:5f:b1:5a:9a:87:4b:bd:6c:d0:
8b:2f:24:69:62:0d:4f:31:5c:05:b0:16:02:b0:2e:bf:4c:39:
78:0a:0d:8d:e0:65:ae:e7:e9:1b:cf:cf:93:4b:63:71:28:f3:
fd:c6:77:f7:04:42:89:22:49:29:7d:75:a4:44:5e:f4:16:15:
a8:25:5e:93:01:d0:a6:a6:86:82:c6:9d:cc:67:2b:ae:f5:9c:
b4:2e:4a:76:e5:72:62:b9:61:16:59:06:56:6b:bf:32:34:51:
cf:c1:7f:f7:cf:bd:5b:d4:ff:41:db:04:aa:9a:ee:d9:b9:35:
bf:8b:19:e7:48:ab:f6:c8:af:f3:70:3f:41:5e:6e:ff:56:b1:
89:da:e1:e2:32:61:b0:67:a2:c2:2b:43:26:d4:d9:59:b1:2c:
52:df:17:49:3d:d4:d6:2a:67:5c:a2:c1:16:77:a7:b1:1d:a4:
58:7e:76:6e:e6:c5:6d:b6:b2:e9:b3:cb:81:2a:28:7f:3a:76:
4f:c5:43:9a:9e:4c:86:52:9b:25:b3:dc:90:28:de:70:7e:b0:
fb:63:2b:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzY0QTExMTAvBgNVBAUTKDVCRDk3QzMxRUM3OEM2RjE1N0Q3NzJDMUJCNTc2Qjgw
MjQ4MkI3MjgwHhcNMjUxMTA0MTgyMjM5WhcNMjUxMTExMTgyMjM5WjAYMRYwFAYD
VQQDEw02OTBhNDQ2Zi01MTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ZIBLei89qjUGx1VSr06rzGWCWR1FrCbiHgV3qBaUUmibj6D+qbuuDFChu4X
7u3/5VQrue368f5KDQrVJMkf1YFYz8mCnkn8EVIsgVIkwhWQpNA+5K/fp1kpL2aZ
wHgVlIV/ScF/drx1TAc5MmavYH9XxqEdYhWmreWd0aN54SpFjcbTKCJupt4sLPyD
zBrsQKM1L7zaQHVt5w5BybCCVNsRiUw+YrOr8k4FPFQgAqXhhqEo11xY0VCLCTZm
CoB7YNWRq0tXC4aoWBGvYYuuo5TF71cF3q2gkUMdklUkuH1mV4kYekwMzb4R7bJY
AuvtiHrs0eT4z+76/LRCxOvt7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkEtlHw
IFSye1+m2DwDDO9XTi0OMB8GA1UdIwQYMBaAFFvZfDHseMbxV9dywbtXa4Akgrco
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRBMS82QjdENjlBNjA0
NTMxMUVBQThGOEVDMURDNEY5QUUwMi9XOWw4TWV4NHh2RlgxM0xCdTFkcmdDU0N0
eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1c5bDhNZXg0eHZGWDEzTEJ1MWRyZ0NTQ3R5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjRBMS82QjdENjlBNjA0NTMxMUVBQThGOEVDMURDNEY5QUUwMi9XOWw4TWV4NHh2
RlgxM0xCdTFkcmdDU0N0eWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCZ5LMR0ENOvmqaDYFXqkVq3+FIL/Y/iLJID+MVOYKhjsntvx/qjLeF
uvWHx15fsVqah0u9bNCLLyRpYg1PMVwFsBYCsC6/TDl4Cg2N4GWu5+kbz8+TS2Nx
KPP9xnf3BEKJIkkpfXWkRF70FhWoJV6TAdCmpoaCxp3MZyuu9Zy0Lkp25XJiuWEW
WQZWa78yNFHPwX/3z71b1P9B2wSqmu7ZuTW/ixnnSKv2yK/zcD9BXm7/VrGJ2uHi
MmGwZ6LCK0Mm1NlZsSxS3xdJPdTWKmdcosEWd6exHaRYfnZu5sVttrLps8uBKih/
OnZPxUOankyGUpsls9yQKN5wfrD7Yyuv
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:21:24 2025 by rpki-client