
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
File: Wr7NjqrTfqV665OfLAsUKXSEH4o.mft (raw, json)
Hash identifier: h/18fpJ84LtyUTGUYKAwsLc0ihB+7KNoRPmrfBykyY4=
Subject key identifier: 7C:0E:38:99:7B:C8:04:84:E7:AA:F8:8A:87:FB:EC:6F:8B:67:29:06
Authority key identifier: 5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A
Certificate issuer: /CN=A91A5A82/serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A
Certificate serial: 73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
Manifest number: 72
Signing time: Mon 03 Nov 2025 06:53:03 +0000
Manifest this update: Mon 03 Nov 2025 06:53:03 +0000
Manifest next update: Mon 10 Nov 2025 06:53:03 +0000
Files and hashes: 1: Wr7NjqrTfqV665OfLAsUKXSEH4o.crl (hash: T1GM3rG5T74kBI7G3GHrME3mlEWqx2cowlSHWu9kQDQ=)
2: D0B32912090911F0A5348F26C4F9AE02.roa (hash: uW1VF7Kvr3qqb0xY8fd0nDeotf3CK4ccwfdt9+YehUk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl
rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:53:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5A82, serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A
Validity
Not Before: Nov 3 06:53:03 2025 GMT
Not After : Nov 10 06:53:03 2025 GMT
Subject: CN=6908514f-a5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:53:69:93:7d:b9:06:d6:fc:6a:3d:0e:35:7f:
1b:57:d9:d4:a5:da:d3:9e:f7:da:e7:b1:75:49:28:
07:86:5b:ca:49:bd:e7:20:1a:98:a8:17:bd:f9:a7:
42:ea:5f:ea:22:00:17:1b:1e:53:2d:1f:65:3e:88:
0a:5c:8f:21:7d:23:a0:a0:9f:e1:7e:46:22:4f:3a:
c8:02:da:bd:7a:c2:0a:ae:e7:2a:54:92:24:c8:ab:
19:f1:2c:57:9e:f6:d3:2b:a5:fc:37:27:b8:f9:21:
3d:b2:f3:25:5d:6b:3f:a6:fe:34:8d:d8:5e:90:32:
53:61:47:3c:b8:7a:cb:47:08:5b:d6:b5:19:c1:d3:
44:4a:16:6d:e3:16:15:e3:3c:e6:41:c6:a8:47:23:
17:be:f0:88:cc:66:62:f5:de:f0:71:8a:c0:af:0e:
3c:89:26:e5:bf:62:a8:9c:fd:06:b2:96:1a:db:39:
d4:eb:7c:bd:eb:57:85:f2:2a:21:ad:11:fe:37:4f:
cb:9f:76:34:e8:a5:a1:82:81:02:47:93:18:cc:da:
e0:ed:3d:ff:76:f6:88:31:17:a9:9a:66:ab:39:1d:
8a:a6:3e:76:f2:2d:59:7c:d8:9e:64:21:23:f9:89:
51:ce:1f:a0:b0:eb:c5:d2:02:4d:b1:04:04:78:f5:
cf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0E:38:99:7B:C8:04:84:E7:AA:F8:8A:87:FB:EC:6F:8B:67:29:06
X509v3 Authority Key Identifier:
keyid:5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ad:23:81:68:2b:03:c0:01:2d:14:b5:55:72:ce:c0:cc:be:
46:da:5d:2a:0c:70:27:8d:23:b6:6d:f3:91:5a:6b:bb:e5:bb:
93:59:e6:44:d2:77:ed:78:29:92:3a:6a:66:56:22:70:ba:ec:
b2:fe:e5:dd:74:92:7c:b7:0f:78:9a:ad:82:18:f6:48:01:fa:
ee:05:51:3b:e3:b7:5b:fa:06:3a:14:67:88:ee:3e:d6:61:d9:
e0:bc:79:ed:1d:f3:2c:15:4d:07:02:60:0c:27:9f:99:17:36:
88:d9:26:41:2c:43:d6:35:d9:05:8d:d9:9d:30:7f:42:7e:bc:
dc:68:35:b5:5c:88:99:59:10:d5:66:ea:cd:80:40:a6:f7:3b:
23:86:64:a0:7f:56:23:88:c9:67:79:6f:ca:d9:38:53:f4:87:
ee:41:f9:49:8d:25:a6:16:61:55:60:bf:5d:6a:13:af:49:2a:
fe:75:83:c8:0c:99:b6:c8:c0:de:de:99:fd:8d:60:40:34:c1:
b4:ef:df:76:0c:bf:15:38:bc:21:a5:c2:73:3a:44:b7:fd:76:
57:c6:b3:8f:1d:42:23:1b:b0:32:78:16:3c:3b:8d:02:e5:26:
e5:31:dc:82:19:78:96:38:3c:2a:c6:09:8e:ff:b0:8b:68:95:
af:09:01:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:19:17 2025 by rpki-client