
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
File: pwfo7Wx0uvNh3UByccajTUQCIqw.mft (raw, json)
Hash identifier: UYXIorw7pVJARcyDVg2yXDzm/oSSctZl5Zg4NbPnqWQ=
Subject key identifier: F3:6F:54:E2:0E:5C:A3:B9:59:77:31:B7:40:F7:90:5A:47:16:DF:AD
Authority key identifier: A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC
Certificate issuer: /CN=A91D0C14/serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC
Certificate serial: 0247
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
Manifest number: 0242
Signing time: Mon 03 Nov 2025 01:47:10 +0000
Manifest this update: Mon 03 Nov 2025 01:47:10 +0000
Manifest next update: Mon 10 Nov 2025 01:47:10 +0000
Files and hashes: 1: pwfo7Wx0uvNh3UByccajTUQCIqw.crl (hash: f2J+ga9UcbqaQQHatMxNz3XMltQYRYfUpEHUN2bGgD4=)
2: 111C77744E1811EDADB36913C4F9AE02.roa (hash: AKQfVSoyvedil4fBrswJw8Fk2im5oq9KA2WJlwXE+SY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl
rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 01:47:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 583 (0x247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C14, serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC
Validity
Not Before: Nov 3 01:47:10 2025 GMT
Not After : Nov 10 01:47:10 2025 GMT
Subject: CN=6908099e-1183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:a9:92:a4:d2:f8:b8:ab:16:4c:75:b5:f9:85:
e2:e9:a7:59:06:c5:9d:11:ee:cd:ac:55:1e:8c:c4:
a2:de:b0:a6:10:20:35:03:17:90:21:8f:95:8c:82:
d6:f2:e0:ac:e1:dd:11:e3:c5:23:80:b6:21:3d:d6:
df:1f:3f:54:a0:18:b0:1a:eb:a9:1e:98:91:0f:c0:
5c:d2:93:e5:db:b9:a0:67:7b:9c:df:f2:b2:30:00:
21:d5:0b:06:45:fe:8f:85:ce:52:9b:a9:bc:d2:97:
df:be:d6:d5:a2:1f:b6:32:b0:8e:93:ec:73:a1:9b:
c4:8f:db:f8:04:33:82:e8:80:4a:b4:24:69:3a:4f:
9a:dd:9e:55:3e:15:65:1a:af:d0:9e:80:40:81:7b:
f4:a8:3f:0a:8f:b8:1f:c4:e5:3a:66:58:ee:fa:ce:
f0:ee:8d:b2:49:5d:5b:66:16:71:95:aa:48:5c:58:
42:49:5e:c5:02:f6:45:57:38:8b:01:ff:64:72:55:
95:58:63:34:40:d1:86:d4:dd:b0:cc:19:dc:ce:65:
07:fd:98:d0:22:49:13:8c:34:2b:da:d1:3e:79:d8:
a5:4f:0b:76:0c:18:38:d4:d7:41:c1:07:be:14:6c:
5b:ba:31:28:c2:eb:12:62:1f:ee:4a:82:52:59:8e:
92:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6F:54:E2:0E:5C:A3:B9:59:77:31:B7:40:F7:90:5A:47:16:DF:AD
X509v3 Authority Key Identifier:
keyid:A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:9a:15:a8:44:61:48:12:a8:ee:e1:10:a6:4c:30:73:c1:d0:
1d:59:f9:2d:f0:f0:0d:af:d9:dc:3e:09:2f:d6:fa:3d:f3:0e:
3c:17:16:f7:b9:76:ac:6a:47:91:e3:a5:56:fc:08:1c:dc:d9:
42:26:07:68:58:fa:4a:0e:69:5b:34:15:32:84:8f:16:c7:87:
6b:13:b7:c8:cf:a7:80:5b:2a:fe:50:b4:f2:ff:80:28:76:08:
06:e5:f5:52:dc:67:dd:33:9e:53:3c:24:8a:1c:79:f4:55:45:
ed:b8:fd:0c:fc:57:cd:2f:2a:d0:75:6a:09:aa:cc:38:40:47:
3c:be:c7:4e:7e:8a:d5:84:a8:93:1c:c8:f3:e3:72:b9:95:37:
53:96:05:a9:c2:ca:87:ef:7a:1c:6b:7b:e1:86:1a:f4:17:40:
cd:0e:20:cb:8c:3d:e7:a3:c3:cc:ca:b5:92:e5:47:c5:91:0a:
83:38:f5:3e:39:55:c8:8d:3e:76:77:44:28:22:03:fb:31:d6:
06:a8:e0:68:80:5c:6a:fc:4e:1f:23:75:d8:a3:60:ee:d1:fb:
11:09:15:cb:9f:76:17:3b:b4:68:50:48:e7:b6:37:34:01:ff:
93:6b:da:f4:d6:dc:3f:61:94:ab:04:5b:bc:da:80:3e:b4:4a:
72:7d:e0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:06:48 2025 by rpki-client