
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.mft
File: wUoOYILw6SLK_iKWlSPoZMeo8dw.mft (raw, json)
Hash identifier: Ee1OVbM4CN6hCQfCB8VDv3bwnLfyLfXwLP59bIsnZCw=
Subject key identifier: 6F:01:9A:8E:53:3A:63:D1:1E:81:33:B0:CA:46:6B:FE:8F:10:80:CD
Authority key identifier: C1:4A:0E:60:82:F0:E9:22:CA:FE:22:96:95:23:E8:64:C7:A8:F1:DC
Certificate issuer: /CN=A91C62B6/serialNumber=C14A0E6082F0E922CAFE22969523E864C7A8F1DC
Certificate serial: 0145
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUoOYILw6SLK_iKWlSPoZMeo8dw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.mft
Manifest number: 0131
Signing time: Sat 25 Oct 2025 08:24:15 +0000
Manifest this update: Sat 25 Oct 2025 08:24:15 +0000
Manifest next update: Sat 01 Nov 2025 08:24:15 +0000
Files and hashes: 1: wUoOYILw6SLK_iKWlSPoZMeo8dw.crl (hash: CRmkxeB4B/GnJUnvqJTlRbgkFaRuWMv7FdXuJjoxmgo=)
2: DF79CCF45FF211F09950C36DC4F9AE02.roa (hash: kzFBhyv4+J38LiXini28KhoGCZEFn2uAqbOVTdVmDDA=)
3: 8E1DCEDA013B11EF86588545C4F9AE02.roa (hash: D1DqZOLN1DAWGayGfbLeSFqiB6D8xEIaGywMh12xMLU=)
4: 37EA495A6BBE11F0A43ABA75C4F9AE02.roa (hash: 6+PEXmYS+XWvFFKO5VznCQNqqgpSkmNGFYxtrPC2kpA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.crl
rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUoOYILw6SLK_iKWlSPoZMeo8dw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 08:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325 (0x145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C62B6, serialNumber=C14A0E6082F0E922CAFE22969523E864C7A8F1DC
Validity
Not Before: Oct 25 08:24:15 2025 GMT
Not After : Nov 1 08:24:15 2025 GMT
Subject: CN=68fc892f-e41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:10:58:59:31:c5:e0:6a:c9:75:68:4f:1b:
96:07:85:3b:e3:0c:ce:4f:35:f8:ab:0f:b1:5a:37:
6e:7a:c7:e8:8d:d5:eb:31:f5:99:db:e7:f3:56:2d:
93:a6:88:83:82:8c:1b:a7:8a:93:3c:81:2c:a7:d3:
e2:00:42:19:be:cd:a7:f5:6d:c5:27:4d:47:d0:13:
65:81:43:67:b5:f2:57:79:a9:4f:5e:33:e0:4f:fd:
3d:ee:1a:f8:32:d0:34:35:26:a8:7b:5d:3a:0b:ae:
60:1f:b1:c7:a6:2a:4d:73:f3:02:9f:cb:1d:c1:82:
18:25:2e:4d:a9:eb:dc:2a:f4:eb:9a:13:aa:f7:5f:
a1:5a:ab:55:0d:9f:98:8a:83:e0:f7:0a:9c:8c:f2:
c4:f4:66:a2:07:a6:1e:35:3c:1a:f0:7a:43:47:e6:
60:85:d0:21:2b:68:fe:6e:bd:8d:56:17:8f:a5:a6:
ff:6e:2a:ac:23:63:85:aa:a9:93:b7:fb:36:ff:6c:
73:a6:56:73:81:58:82:39:db:ba:83:e6:06:6a:53:
dc:b9:3e:c0:3c:d4:75:82:c9:15:36:c6:ec:de:61:
2f:c3:6b:77:27:2b:09:20:04:9f:f2:f0:dc:b7:1e:
e8:1d:ef:bd:58:7a:66:bc:15:0e:80:ce:cb:13:35:
ca:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:01:9A:8E:53:3A:63:D1:1E:81:33:B0:CA:46:6B:FE:8F:10:80:CD
X509v3 Authority Key Identifier:
keyid:C1:4A:0E:60:82:F0:E9:22:CA:FE:22:96:95:23:E8:64:C7:A8:F1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUoOYILw6SLK_iKWlSPoZMeo8dw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8b:3b:9e:55:7b:5f:df:51:8a:0b:a4:e7:d7:ad:d4:f2:8f:
07:05:05:ce:39:5f:58:66:c1:10:b7:77:85:b3:56:e1:31:a1:
8d:82:9e:cf:46:e0:27:a1:aa:ee:a8:ff:cd:36:b5:ac:07:d6:
56:a7:54:a8:d1:a7:32:d4:19:7e:c3:17:04:e7:ae:78:5d:00:
de:60:a9:e6:45:2c:ab:cd:bf:75:8a:00:e8:db:d2:fc:21:d8:
7d:5b:fc:19:51:0e:ad:96:42:c5:df:19:22:4b:62:45:06:d9:
6e:3d:4d:c9:21:85:5c:86:f0:50:1e:78:40:a5:29:66:7f:68:
a8:63:3f:06:c4:8f:c5:a9:36:d2:93:7a:44:8e:c0:88:35:06:
69:b6:0b:71:6d:db:8e:e6:f9:62:72:d0:5b:a3:94:82:53:06:
6f:89:d6:ee:af:0c:75:90:88:b7:cc:91:bb:2b:be:6f:da:bc:
70:75:9d:74:97:73:ba:5f:76:bb:a2:8e:18:4e:09:0e:48:f6:
a7:aa:70:3f:a3:94:02:e4:53:ff:b2:b0:e6:db:05:0c:4d:a1:
e8:83:3e:42:ea:1c:e3:7a:73:0a:c6:bf:8c:07:56:ba:93:3c:
bf:f4:b5:58:6d:ce:d7:07:99:34:8d:32:2b:54:95:eb:00:4c:
00:b2:cc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:41:07 2025 by rpki-client