
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
File: uwO40kR--BOjepWHdmoB9zWd10A.mft (raw, json)
Hash identifier: HRO1IZ+hpAEbvQnnjfZDVtvI26hOTlpckq4dvCBwkV8=
Subject key identifier: 57:CB:9B:84:FB:AC:BF:BF:34:E6:6B:0F:00:69:EC:1D:DC:1B:55:B3
Authority key identifier: BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40
Certificate issuer: /CN=A91D2779/serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
Certificate serial: 07E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
Manifest number: 07C8
Signing time: Wed 22 Oct 2025 22:09:19 +0000
Manifest this update: Wed 22 Oct 2025 22:09:18 +0000
Manifest next update: Wed 29 Oct 2025 22:09:18 +0000
Files and hashes: 1: uwO40kR--BOjepWHdmoB9zWd10A.crl (hash: GMkX33f/HgzSLaIelCz5s6YSmAP18nlCJTa/LNNjb2k=)
2: 33284BD019C311EBB9C1D063C4F9AE02.roa (hash: TqtodbfH2773RSeSZS8HBt7Fg3MhzGZkdJHAeKBdxNI=)
3: 99DF3B20183A11EBB9F78E80C4F9AE02.roa (hash: E+nOxjyrsiWeh2pSdTI7eBtCxdY2UG5bXebW7kl/SNQ=)
4: 991F1FE8183A11EBB9F78E80C4F9AE02.roa (hash: WdQW9sjBymvB0klEN4W168ArFaUHAakmSi85CGroy+U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl
rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 22:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2023 (0x7e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2779, serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
Validity
Not Before: Oct 22 22:09:18 2025 GMT
Not After : Oct 29 22:09:18 2025 GMT
Subject: CN=68f9560e-3d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:f1:28:46:a2:ba:2e:04:b2:37:11:19:0b:
f8:4b:43:49:41:e2:2d:03:0d:f4:14:62:2b:0d:ae:
4c:a3:f5:eb:02:a0:15:4a:6c:59:f6:2d:9b:33:4f:
bb:8f:55:d9:13:13:6f:33:c0:01:66:c6:56:f3:d0:
7e:7d:c0:5f:43:6b:32:37:17:39:6f:e9:5a:75:f4:
b4:7e:9b:2b:f8:25:a8:82:79:a0:9b:d8:25:79:3d:
eb:ea:84:9c:5d:3c:7d:26:de:81:64:07:dc:b6:cf:
d9:8c:3e:22:b7:87:9c:26:90:5f:19:d6:a7:7c:85:
f6:bd:b8:57:9b:25:26:38:1f:95:f2:5b:f2:7a:cb:
78:09:fc:02:6d:d7:0b:02:4c:b9:6b:d5:ab:f9:6c:
cd:9e:f8:19:ad:ad:bc:7e:47:a9:12:b7:ba:34:85:
f8:ac:2f:23:b2:65:e6:e9:b2:fa:e4:fa:af:49:f1:
9d:09:54:ab:db:1b:09:c1:fd:a2:ce:b0:16:7b:1c:
6c:6e:73:90:0f:4a:d5:ad:de:70:9e:1c:34:d1:96:
4e:7c:bb:ea:e2:75:4b:eb:d4:b0:0b:42:0f:d9:a3:
99:1a:7b:ce:81:4b:74:d7:a3:fd:41:09:8b:9a:c7:
2b:c1:82:a5:d9:ca:05:c1:65:d8:55:6b:fa:8d:98:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CB:9B:84:FB:AC:BF:BF:34:E6:6B:0F:00:69:EC:1D:DC:1B:55:B3
X509v3 Authority Key Identifier:
keyid:BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:49:99:da:7a:3b:92:85:16:6b:dc:19:43:78:8d:cc:e9:0e:
a4:c5:e8:f3:89:66:e7:f8:e6:46:5f:34:01:8d:44:a6:5d:f4:
07:96:b0:8d:64:44:76:32:db:71:73:50:77:63:2b:71:99:30:
f1:5e:8d:53:07:a1:33:c0:b6:81:2a:c0:0f:7a:5a:74:dc:1a:
e1:35:b6:3c:b4:f1:ff:f3:f3:37:00:8c:29:43:26:26:9a:2c:
23:97:3c:10:4c:3f:a9:07:9f:b9:56:b2:c2:e7:ad:2c:af:52:
13:36:3a:f0:cf:09:21:d1:3b:1a:ed:5f:b2:35:7a:1a:ce:29:
f1:2c:d1:51:19:b8:62:0d:d3:2e:5f:81:98:16:e9:88:b5:f6:
b1:ad:13:e3:ca:a7:f6:fb:91:7e:16:68:d9:1a:ae:e7:55:77:
05:8d:93:78:c9:17:bb:02:1f:18:ec:49:05:e7:9a:e2:0c:eb:
e5:ba:19:02:04:ed:3e:22:82:9c:f9:c2:dd:50:41:0d:1c:5a:
0c:48:47:4f:2d:40:1a:5f:54:2d:ba:10:31:0e:f5:2f:3e:1a:
09:5d:81:73:69:57:a8:c6:96:79:f6:fd:bc:b3:22:30:b3:c9:
28:be:3e:7d:19:03:9a:5e:10:85:3b:64:dc:40:fa:d2:16:d6:
86:a2:2a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 13:38:51 2025 by rpki-client