
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
File: dwOm1WxxgCG9nInrPEvtgX7VauU.mft (raw, json)
Hash identifier: CTRYcrKtao6bAkmEOAE9cS8IC2MD5l3uEnlH8a2OYn4=
Subject key identifier: 66:F0:87:62:EB:A3:91:80:D2:32:22:4A:AE:4C:3B:54:4C:5C:BD:00
Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
Certificate issuer: /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Certificate serial: 0409
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
Manifest number: 03F9
Signing time: Mon 27 Oct 2025 01:41:51 +0000
Manifest this update: Mon 27 Oct 2025 01:41:51 +0000
Manifest next update: Mon 03 Nov 2025 01:41:51 +0000
Files and hashes: 1: dwOm1WxxgCG9nInrPEvtgX7VauU.crl (hash: s87oDvRlCYspaUABPQ5wJlo57r4V1i0rLHy3MnU4dLg=)
2: D9AD698C961211ECB515C474C4F9AE02.roa (hash: 0Y4nA/Aph2MoTUodk+O6k9Ce17owZ/QgLBqclqJBZ7I=)
3: B56F2E9697B811ECA8AA4230C4F9AE02.roa (hash: qLefOo7dvmrLJXMQn53EKJf0jFwExcla3oAdVHf5x9E=)
4: FC5AFF000BE011ED9E3AA135C4F9AE02.roa (hash: FkNOr2OAvQ+/2fjoQ+ttW/rGycCdH0fNwqceJH3qGXA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 01:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1033 (0x409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F20B, serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Validity
Not Before: Oct 27 01:41:51 2025 GMT
Not After : Nov 3 01:41:51 2025 GMT
Subject: CN=68fecddf-e5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a8:c3:89:d5:31:63:0a:07:cc:b3:2a:b4:ff:
8f:7b:52:61:af:1f:d5:39:d5:f5:19:8f:e9:d3:1b:
a4:4f:26:a0:8d:5c:ad:b5:66:b4:d3:63:39:00:f0:
bc:f9:bb:82:74:2f:c6:33:1d:60:38:47:4a:c2:35:
73:ef:98:74:e8:64:6a:0b:67:61:da:0a:f8:c2:2e:
8c:0e:32:63:a9:36:49:4c:fb:02:32:62:df:70:f7:
1c:16:ff:a0:bc:f3:9e:7d:fe:0f:35:6e:40:e7:c2:
5f:08:af:4f:c7:92:5f:4e:2e:2c:db:36:a0:71:b1:
d8:11:b6:08:fa:1e:2f:11:2f:f4:6e:27:70:f4:15:
2f:0a:6d:63:0a:7e:bd:c8:f2:0b:2a:40:e9:24:b6:
02:10:ee:c4:0e:b1:a0:0b:58:65:aa:3b:fd:11:06:
d4:d3:5e:81:71:1d:28:ea:93:55:7f:9d:05:f5:ed:
dd:16:66:45:66:71:53:b8:ca:5d:bc:5f:69:27:5f:
05:2f:31:47:34:fe:b2:08:f9:d9:0c:c7:3c:bd:1a:
36:60:a1:ce:22:95:b9:8d:84:0a:c8:4d:9d:4a:87:
4e:d3:5a:40:63:53:e5:bc:94:d8:46:23:82:27:4f:
0f:59:f8:c4:43:40:8a:a8:39:73:3a:0d:f4:26:fe:
f7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F0:87:62:EB:A3:91:80:D2:32:22:4A:AE:4C:3B:54:4C:5C:BD:00
X509v3 Authority Key Identifier:
keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0d:99:aa:47:71:2f:d2:50:59:61:2f:77:8b:33:d1:b6:07:
56:b3:2d:db:6f:b8:e1:51:ed:e8:2a:3d:53:9a:5f:98:b4:0d:
14:e3:08:45:8e:ef:78:9d:c1:b5:2d:8c:b8:f6:5d:db:76:0e:
52:68:a4:8b:89:5f:47:d3:5e:76:47:fc:e4:f3:7a:d0:c2:04:
b7:12:31:58:3a:09:25:b8:06:b2:79:d3:6b:76:f1:1f:06:84:
0a:46:10:fa:63:6c:60:95:5c:1f:d1:fb:ee:39:e4:42:97:1b:
b4:cb:5a:2e:85:ca:64:40:ed:86:64:53:d4:f8:1e:30:bd:af:
af:8d:2d:a3:12:5e:81:48:00:26:3b:b0:8e:74:66:14:06:80:
94:9d:26:98:62:3a:f4:ad:4b:80:cf:b5:01:ba:ae:16:c4:10:
cf:3d:ad:ef:fa:e5:a1:1a:4f:1a:68:cc:ca:f4:58:fd:c2:4f:
de:f5:db:c5:10:28:0a:ee:0b:a9:f5:34:21:a7:48:17:4c:56:
fb:20:48:88:b1:a7:cb:57:27:5c:b5:3e:79:50:74:73:ac:41:
d9:d3:c9:8c:51:39:a8:47:f5:51:ff:f7:81:1c:18:50:5c:09:
e3:02:2e:0f:b2:4a:81:9b:52:87:aa:d9:4a:c3:cf:c7:cf:9d:
53:8d:04:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 05:21:17 2025 by rpki-client