
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
File: wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft (raw, json)
Hash identifier: RP606xWuEj9NR3qrJ6u2LQQ4BVz8OmigluildfQZSsQ=
Subject key identifier: 81:D9:BF:0B:C4:30:7F:A7:91:F1:87:73:9C:F3:A9:A7:69:85:53:8F
Authority key identifier: C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B
Certificate issuer: /CN=A91B0B65/serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B
Certificate serial: 1171
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
Manifest number: 115D
Signing time: Mon 20 Oct 2025 17:41:50 +0000
Manifest this update: Mon 20 Oct 2025 17:41:49 +0000
Manifest next update: Mon 27 Oct 2025 17:41:49 +0000
Files and hashes: 1: wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl (hash: TtFHYnG2DLKwIyDssIz2rVjFL66+j/CGepz4iOmShYw=)
2: CA7A6F1A157C11E9BB547B7AC4F9AE02.roa (hash: tE2E6js3kYa62zkqmiLT/NNljtVICethnlU6hDIPGMU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl
rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 17:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4465 (0x1171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0B65, serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B
Validity
Not Before: Oct 20 17:41:49 2025 GMT
Not After : Oct 27 17:41:49 2025 GMT
Subject: CN=68f6745d-5d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:32:62:22:4b:0a:c2:8d:92:f7:9e:fb:22:30:
f1:9f:77:4d:13:f1:08:ee:57:e9:7e:58:33:0d:99:
c1:8e:d4:ba:fe:74:1d:9c:70:ab:e9:54:04:ad:a3:
00:a6:9c:e2:99:b7:75:b5:64:2d:60:cc:98:50:00:
a8:b7:dd:55:48:c2:d8:91:c6:16:0d:0f:ab:46:93:
9f:ec:17:13:09:d1:7b:85:85:f4:50:b7:60:01:03:
40:a5:f5:cf:38:3a:f2:9f:97:06:aa:c6:d0:39:f3:
4a:c5:42:0a:40:8f:e8:a2:c4:3e:2c:7c:bc:3c:41:
78:d4:a9:23:be:92:33:1c:26:31:08:c3:5d:70:b7:
3f:be:dd:56:37:22:60:32:a9:15:06:18:8a:77:be:
04:0d:7d:2e:bf:d4:1c:da:40:52:33:28:58:18:b3:
34:aa:c2:80:4d:4f:57:fc:c7:84:c0:54:1d:6a:2f:
b9:f3:92:8f:69:35:9c:3b:11:76:1f:c2:f8:b0:36:
9e:14:f4:c1:be:50:d4:cc:84:02:fa:fe:7c:7f:b3:
02:47:7e:42:36:88:43:da:5f:de:7a:fd:47:91:27:
08:ec:0b:5f:f5:99:2f:1a:70:1e:90:c5:4c:c6:46:
88:46:b6:25:a8:ed:c5:69:f4:48:c6:44:cc:b3:ac:
62:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D9:BF:0B:C4:30:7F:A7:91:F1:87:73:9C:F3:A9:A7:69:85:53:8F
X509v3 Authority Key Identifier:
keyid:C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:ff:62:fa:a0:8e:e5:9f:ce:64:15:e6:6e:60:80:1c:81:1e:
a0:93:05:8f:87:5b:92:62:08:1e:56:85:f1:f0:6b:31:03:c3:
d2:47:46:51:c8:5b:57:2f:02:0a:8b:b8:31:24:b3:44:1d:70:
8c:e2:83:9e:2e:26:02:ae:33:6f:ca:ed:de:ce:53:95:78:79:
05:d4:bb:f7:ce:14:57:34:bb:fd:b1:52:7e:01:25:de:c7:2c:
f1:23:3a:f7:1e:88:28:ca:46:ee:6c:60:c6:16:18:57:42:c7:
6e:e9:87:b0:d4:9f:c9:81:b3:dd:43:b7:14:4e:b0:86:f5:63:
18:80:a1:5f:43:0d:06:2a:76:22:dd:d7:44:4b:98:2d:10:90:
a3:b7:8f:15:40:e2:ce:03:67:46:49:ce:c4:5a:9d:62:45:4d:
f4:3d:f3:49:49:dd:19:81:a4:bd:7d:b8:12:74:6f:c3:e2:4d:
f2:d8:3d:58:b9:b8:91:ef:db:c1:d2:79:bf:d8:e2:d1:e2:b2:
fc:f0:bb:90:2b:bc:ff:44:0b:54:07:17:d1:f8:6c:6a:ce:25:
ec:d6:19:37:8d:8e:cb:75:0f:4f:21:70:d5:e2:7d:63:3f:8d:
70:de:b2:fe:5b:9b:bc:63:db:80:bb:cc:8d:df:bd:ad:70:5b:
26:99:bf:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:42:40 2025 by rpki-client