
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
File: whEvRNRFjxhc25rZqRr4KQZInMY.mft (raw, json)
Hash identifier: uyIDv9pq5JjeKf7QnPRP7g2S24bUA9QkpI8evyy6/dA=
Subject key identifier: D7:7B:13:26:BA:27:60:37:C0:37:A1:75:9E:7E:12:30:07:DA:58:53
Authority key identifier: C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6
Certificate issuer: /CN=A91C167F/serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6
Certificate serial: 0146
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
Manifest number: 0144
Signing time: Mon 27 Oct 2025 06:22:51 +0000
Manifest this update: Mon 27 Oct 2025 06:22:50 +0000
Manifest next update: Mon 03 Nov 2025 06:22:50 +0000
Files and hashes: 1: whEvRNRFjxhc25rZqRr4KQZInMY.crl (hash: m3C8hD0mafPIOVQvE7u8W76VsBupjYtbYVGcfMxFY9Y=)
2: 7FC75E34C4B211EEB684BF7FC4F9AE02.roa (hash: ENR1qEuttVnNRROdOyzWRsQ7bm7evUlkAyBRhI4KcO0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl
rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 06:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326 (0x146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C167F, serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6
Validity
Not Before: Oct 27 06:22:50 2025 GMT
Not After : Nov 3 06:22:50 2025 GMT
Subject: CN=68ff0fbb-49cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:aa:ba:bd:41:8b:d4:04:f0:3d:24:23:02:
19:2d:44:b5:e7:ef:2f:64:64:44:b0:3b:36:b6:b5:
5b:93:2f:81:32:b2:e0:f2:77:19:3a:8b:5c:e8:64:
99:57:80:cc:2e:10:bc:27:0c:09:19:d5:e0:04:63:
80:06:34:14:89:68:45:7f:a3:8b:82:db:39:52:5a:
aa:d3:aa:e5:b9:5b:44:3b:76:d2:d0:f4:c4:3f:d9:
3a:aa:f6:b2:0e:a8:2c:96:f3:40:2a:5d:43:d1:89:
4b:a1:1e:83:26:4b:7f:b4:11:c2:bf:6c:1d:ee:65:
c2:e1:0e:c3:d9:35:70:18:80:90:ac:38:c7:4e:55:
1a:b6:a0:9c:da:24:48:aa:ec:22:68:79:d1:42:ec:
5b:4d:50:d0:71:84:92:74:ba:0e:d2:ba:2d:35:14:
ca:46:fb:43:34:24:fb:9f:36:1b:9d:38:44:98:11:
fc:34:57:8b:f2:46:2d:15:30:f3:41:07:4f:87:0a:
36:1d:f8:19:7b:87:60:6d:f0:6a:16:46:76:b5:5e:
32:af:12:26:c9:0e:c0:17:0f:ac:d7:5f:6e:7f:79:
5e:f7:05:86:22:3a:f7:5c:7e:7c:34:b0:4d:20:69:
0c:3a:8c:5f:a4:fc:29:65:42:9e:9f:0b:7e:55:e8:
34:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7B:13:26:BA:27:60:37:C0:37:A1:75:9E:7E:12:30:07:DA:58:53
X509v3 Authority Key Identifier:
keyid:C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:81:8c:7d:27:76:36:28:13:98:8e:59:7b:fe:6c:d4:b8:9a:
1f:8a:c2:08:89:bc:2e:05:73:f5:40:54:17:d2:b4:b7:98:70:
21:61:ae:c5:83:91:db:5b:49:9e:f6:18:31:2b:ef:1c:8f:40:
3a:4e:80:b2:2d:7d:38:86:30:3f:a8:23:25:60:21:44:12:60:
9a:8e:b1:6a:6e:1d:a1:f7:e0:0f:20:61:93:55:be:dc:80:f1:
f6:b2:00:1b:39:80:60:a3:a1:12:16:7b:60:06:4e:a0:b9:e4:
f9:0e:d2:d9:66:53:cb:64:78:82:8d:c9:52:6d:42:88:5e:c6:
f3:1a:ff:94:73:70:4b:f5:9e:13:2c:7b:e4:8b:91:0e:d4:73:
56:76:da:15:9f:fe:9e:a5:98:1d:44:9f:7a:a9:75:34:21:25:
d1:9d:8e:80:21:32:3f:a7:17:4b:56:fc:ad:5b:fd:86:75:5c:
94:b5:59:3d:3c:d1:88:c9:25:73:1a:ea:6a:98:eb:01:48:6c:
6d:f1:79:a3:78:13:c7:ba:67:d7:9a:d5:97:74:e8:97:73:5b:
2b:a7:86:9b:2d:b8:b8:d7:0a:85:99:ef:ba:b1:ec:f1:92:f3:
07:bb:6c:c7:44:45:b2:45:f1:cb:21:3d:3b:d0:64:8b:8d:d4:
93:11:5c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 09:30:00 2025 by rpki-client