
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
File: gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft (raw, json)
Hash identifier: tf/dWpdENtexbaGmjawIJv5nBQkO+DUXCfuUQM7EC/k=
Subject key identifier: 03:6F:53:8D:2A:9A:32:73:75:C0:77:68:B1:67:A2:3B:06:DC:96:41
Authority key identifier: 81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE
Certificate issuer: /CN=A919D08A/serialNumber=816A478D86E7E21BF3178510B8585325583430EE
Certificate serial: 0174
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
Manifest number: 0173
Signing time: Mon 03 Nov 2025 03:46:39 +0000
Manifest this update: Mon 03 Nov 2025 03:46:39 +0000
Manifest next update: Mon 10 Nov 2025 03:46:39 +0000
Files and hashes: 1: gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl (hash: vfDmdW+O1h0g4QrqVJTbStR2499EZ0uki3dsxdeFKpc=)
2: 2DBBD9E2788D11EEA502B350C4F9AE02.roa (hash: OAmPRTah7XdC92cyaOL1VT2tDGpsaJQwQAJo+nqjJlo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl
rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D08A, serialNumber=816A478D86E7E21BF3178510B8585325583430EE
Validity
Not Before: Nov 3 03:46:39 2025 GMT
Not After : Nov 10 03:46:39 2025 GMT
Subject: CN=6908259f-61d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:68:d6:b2:14:e2:0f:72:df:79:33:5c:e0:a0:
26:4f:1c:6d:46:c2:72:98:3d:d2:86:61:36:42:da:
1b:3f:11:69:3b:15:8a:5a:7f:9d:c2:8b:01:c4:a8:
fe:aa:83:39:a5:7b:b6:f8:5a:17:d8:41:70:d6:ec:
36:27:51:12:47:bd:4a:05:3f:e3:c8:02:f2:f0:cf:
84:32:87:a5:02:e7:d0:c9:ef:0a:54:dd:38:f2:e2:
74:1f:e0:37:63:e7:12:49:7d:73:76:7d:58:26:77:
92:bc:f7:f3:10:ec:73:2b:59:f3:ef:48:dd:ea:9b:
b5:8c:83:67:a1:2e:d1:c1:5a:50:31:e6:af:8b:45:
10:cf:36:bb:06:c5:7c:73:2f:27:31:31:0f:e0:fa:
14:d9:1a:08:94:99:cb:df:04:f6:0e:fd:17:13:31:
9b:ba:95:eb:1a:fa:25:93:b6:a4:dd:4f:69:dc:78:
7f:53:21:ec:08:a6:5c:06:70:a4:59:3a:8f:40:ac:
ef:b1:cb:4e:14:de:1b:79:37:f6:1a:28:68:f3:5a:
8d:fe:42:73:1c:2f:f9:b4:76:b3:9f:fe:8f:c6:f5:
91:00:27:5d:16:0c:c5:86:60:75:78:b7:95:b1:b6:
09:da:16:47:2a:78:8f:11:f9:08:57:9c:03:79:74:
bb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6F:53:8D:2A:9A:32:73:75:C0:77:68:B1:67:A2:3B:06:DC:96:41
X509v3 Authority Key Identifier:
keyid:81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:d8:81:b6:ad:31:2b:71:ba:95:f9:79:ec:18:1f:d2:cd:4e:
81:c6:3c:4b:46:43:ad:85:ba:e9:fa:b4:aa:d9:fd:58:9d:b3:
c4:38:b4:bd:fb:9e:ee:81:77:fc:48:10:4a:6a:d0:99:16:80:
70:78:22:94:83:2b:0e:cb:7f:9e:d5:c9:ae:3d:ec:05:5b:de:
bd:dd:1f:90:b7:a7:9c:6a:c5:87:19:31:5a:de:cb:df:a8:01:
0c:07:a4:10:66:a9:16:7d:d8:81:33:28:51:5d:09:97:6a:51:
1a:21:23:33:f1:d4:83:1f:c2:f6:7c:e2:22:2b:4e:3e:e7:44:
09:6a:57:e0:cf:79:18:c9:63:66:58:c9:a2:cb:c1:bb:8b:3f:
61:d1:a6:df:c6:8f:42:48:8e:0a:48:f7:99:2f:23:03:d7:9f:
4d:b8:82:e4:a7:2b:f0:9e:1f:5b:39:e8:4c:3d:34:0a:d9:ad:
24:9e:91:57:8e:56:08:0c:c4:3c:c1:c4:54:14:44:d2:79:4c:
7f:78:a0:28:d4:60:77:5a:fd:1a:9f:3a:4f:d2:11:51:f1:03:
02:56:72:ac:51:2a:bc:03:38:f4:a1:5b:3b:25:2e:d1:e9:a1:
16:a8:8f:06:23:66:ff:81:cd:df:79:33:29:3e:a5:6f:b5:7f:
96:76:86:ab
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQwOEExMTAvBgNVBAUTKDgxNkE0NzhEODZFN0UyMUJGMzE3ODUxMEI4NTg1MzI1
NTgzNDMwRUUwHhcNMjUxMTAzMDM0NjM5WhcNMjUxMTEwMDM0NjM5WjAYMRYwFAYD
VQQDEw02OTA4MjU5Zi02MWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0WjWshTiD3LfeTNc4KAmTxxtRsJymD3ShmE2QtobPxFpOxWKWn+dwosBxKj+
qoM5pXu2+FoX2EFw1uw2J1ESR71KBT/jyALy8M+EMoelAufQye8KVN048uJ0H+A3
Y+cSSX1zdn1YJneSvPfzEOxzK1nz70jd6pu1jINnoS7RwVpQMeavi0UQzza7BsV8
cy8nMTEP4PoU2RoIlJnL3wT2Dv0XEzGbupXrGvolk7ak3U9p3Hh/UyHsCKZcBnCk
WTqPQKzvsctOFN4beTf2Giho81qN/kJzHC/5tHazn/6PxvWRACddFgzFhmB1eLeV
sbYJ2hZHKniPEfkIV5wDeXS7cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANvU40q
mjJzdcB3aLFnojsG3JZBMB8GA1UdIwQYMBaAFIFqR42G5+Ib8xeFELhYUyVYNDDu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDA4QS9DMEY0RTg2NDc4
OEExMUVFQjA2OTI0NjFDNEY5QUUwMi9nV3BIallibjRodnpGNFVRdUZoVEpWZzBN
TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dXcEhqWWJuNGh2ekY0VVF1RmhUSlZnME1PNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDA4QS9DMEY0RTg2NDc4OEExMUVFQjA2OTI0NjFDNEY5QUUwMi9nV3BIallibjRo
dnpGNFVRdUZoVEpWZzBNTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCI2IG2rTErcbqV+XnsGB/SzU6BxjxLRkOthbrp+rSq2f1YnbPEOLS9
+57ugXf8SBBKatCZFoBweCKUgysOy3+e1cmuPewFW9693R+Qt6ecasWHGTFa3svf
qAEMB6QQZqkWfdiBMyhRXQmXalEaISMz8dSDH8L2fOIiK04+50QJalfgz3kYyWNm
WMmiy8G7iz9h0abfxo9CSI4KSPeZLyMD159NuILkpyvwnh9bOehMPTQK2a0knpFX
jlYIDMQ8wcRUFETSeUx/eKAo1GB3Wv0anzpP0hFR8QMCVnKsUSq8Azj0oVs7JS7R
6aEWqI8GI2b/gc3feTMpPqVvtX+Wdoar
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:34 2025 by rpki-client