
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft
File: GWgoqCH0FqupzswxqnGjA_QhR3g.mft (raw, json)
Hash identifier: BwxmaqhrWozJ94dhl1brqNDhvv1vAgVsNfSMqwu05OA=
Subject key identifier: 11:09:C2:7F:F6:FE:AA:9C:2B:D7:E3:FE:74:42:86:55:C2:26:89:62
Authority key identifier: 19:68:28:A8:21:F4:16:AB:A9:CE:CC:31:AA:71:A3:03:F4:21:47:78
Certificate issuer: /CN=A9197724/serialNumber=196828A821F416ABA9CECC31AA71A303F4214778
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft
Manifest number: C4
Signing time: Mon 03 Nov 2025 05:52:24 +0000
Manifest this update: Mon 03 Nov 2025 05:52:24 +0000
Manifest next update: Mon 10 Nov 2025 05:52:24 +0000
Files and hashes: 1: GWgoqCH0FqupzswxqnGjA_QhR3g.crl (hash: a8ZYIkOlr8N1XKtWLtQ6HBVbfDuvsDUpyxHxxBQMLRo=)
2: B5907D4E904E11EFA704CB22C4F9AE02.roa (hash: 5l5e+UsXvisCMP10s+0rYzrljGYf5zRzOJR/tcgke3o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.crl
rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:52:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197724, serialNumber=196828A821F416ABA9CECC31AA71A303F4214778
Validity
Not Before: Nov 3 05:52:24 2025 GMT
Not After : Nov 10 05:52:24 2025 GMT
Subject: CN=69084318-5baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:f5:c3:4d:48:f9:e9:c3:2d:4c:32:c1:95:
d2:ec:8c:9a:11:4d:8b:00:5d:6b:e2:50:46:aa:cc:
c4:a1:12:49:75:bc:39:fb:5e:b2:3b:9c:4f:13:0a:
a4:7d:6e:bd:dd:e0:a1:3f:98:f4:ca:1c:25:b8:63:
e5:1f:c0:49:5e:22:a2:d6:e5:5e:b5:1b:24:32:86:
0c:a1:06:89:20:9e:74:b2:d3:ae:ba:de:01:95:da:
7c:72:aa:29:b4:89:0a:40:36:64:e2:0a:39:b1:76:
3e:0a:10:47:a0:92:85:85:2e:cf:4f:5d:ba:f7:7b:
4a:0a:04:5d:d6:f8:aa:f2:82:ba:b9:ba:a3:fe:77:
98:90:84:8d:b9:d2:3d:22:67:39:ed:b7:b6:e9:27:
55:d1:02:81:fe:6d:87:0a:af:21:04:95:dd:a3:35:
5e:05:01:bc:b0:96:3d:64:66:e9:20:95:34:58:7f:
9b:b0:d6:a3:e8:27:f8:69:b5:2b:ac:ed:42:4b:d8:
7c:41:38:35:df:15:dd:6e:bf:7a:1e:44:b6:36:78:
f3:02:de:3c:39:48:5b:08:d9:10:9e:09:9e:de:5f:
46:1f:2c:a8:2f:f6:ea:e2:f8:2b:fb:8f:1b:76:91:
db:c5:e1:54:cb:52:f2:29:b7:b2:75:4c:76:55:c4:
20:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:09:C2:7F:F6:FE:AA:9C:2B:D7:E3:FE:74:42:86:55:C2:26:89:62
X509v3 Authority Key Identifier:
keyid:19:68:28:A8:21:F4:16:AB:A9:CE:CC:31:AA:71:A3:03:F4:21:47:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:1f:a2:56:e0:f2:09:a5:f0:dc:5a:52:19:e6:64:34:f6:d5:
d1:c3:31:58:42:6e:41:82:82:68:fd:66:fe:1a:40:2d:21:1e:
ba:17:f0:91:32:95:9f:6b:83:f4:75:97:ce:38:db:9c:25:43:
67:62:85:ca:bc:a4:95:64:6f:a1:fe:75:77:38:e0:c7:d5:0d:
c4:f3:7e:f0:68:49:f6:d5:cd:a6:74:ef:9e:ca:33:82:e2:c1:
fd:79:79:ba:be:c4:62:1b:04:f0:cc:fd:ec:0c:33:14:e8:07:
d6:3e:df:05:fc:b4:39:f8:e7:d3:76:e8:e4:41:70:bf:7f:61:
a3:59:5e:b3:d7:a5:75:a7:68:13:4e:0d:3e:1d:74:db:26:4b:
b3:6d:1c:8e:29:6b:eb:ba:a3:bb:cc:f9:5e:5d:e5:54:67:69:
14:56:85:79:1a:1b:df:e8:c1:d7:eb:46:3e:04:c3:a0:8c:d7:
48:1a:86:ae:9b:da:94:5a:8a:78:d3:8a:73:a3:eb:7b:b2:85:
2a:36:e6:07:d1:70:fa:09:70:ad:d9:ff:bd:aa:ca:a3:7b:f6:
9a:93:ce:a6:31:e1:e4:c5:82:01:54:57:27:90:23:da:c8:a0:
98:0b:ba:22:f6:dd:c4:dc:ac:f1:ea:b0:f0:8d:68:00:81:f5:
d9:c0:88:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:11:01 2025 by rpki-client