
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
File: oWw_hyQag9GqVIDUKnT099HOXS4.mft (raw, json)
Hash identifier: DLnfx7E0V+jbh7bXDxmFWnaFY1vSb5xAwW1NXWAf8vo=
Subject key identifier: 53:01:72:A3:D1:3F:59:F0:2C:76:9E:E7:C4:EA:16:C2:65:C8:F7:F7
Authority key identifier: A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E
Certificate issuer: /CN=A91CE620/serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E
Certificate serial: 0160
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
Manifest number: 015E
Signing time: Sun 19 Oct 2025 06:43:14 +0000
Manifest this update: Sun 19 Oct 2025 06:43:13 +0000
Manifest next update: Sun 26 Oct 2025 06:43:13 +0000
Files and hashes: 1: oWw_hyQag9GqVIDUKnT099HOXS4.crl (hash: +gtA8de/egouCS2XIX5AIpw9aTuuIkTx2R5bNYnXU6E=)
2: 1960E628919111EE9A03A712C4F9AE02.roa (hash: 9Znpr7cUcbnkoOK/tzYENSEz+mUbSse0tP+On0Rl+NI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl
rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 06:43:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE620, serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E
Validity
Not Before: Oct 19 06:43:13 2025 GMT
Not After : Oct 26 06:43:13 2025 GMT
Subject: CN=68f48881-9254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:86:65:95:1b:3e:0f:14:e8:0d:17:d7:4e:5a:
fe:0e:d2:8b:06:6c:6c:20:8f:dd:1e:0f:dc:c3:e6:
60:f0:cf:2a:79:25:7a:4a:f1:b0:42:14:7a:1b:8e:
9d:79:35:66:d3:61:1e:2b:22:0a:66:3c:82:fb:e6:
a1:1f:6f:99:2f:75:e6:2b:48:7e:ec:bb:43:ef:b7:
ce:60:a6:70:10:07:31:89:1b:47:15:cd:8f:67:3e:
ca:3a:cc:4c:ad:21:e3:af:dd:d8:6d:25:3a:b5:1f:
e6:4a:8a:9c:1d:09:06:07:76:8d:28:19:e7:7e:16:
55:26:9d:67:e9:6d:be:c3:5e:cb:61:64:76:18:16:
e6:7f:5d:2d:58:fa:44:d8:55:3b:97:b9:e7:26:08:
d5:40:4a:7f:1b:8c:b6:0b:17:c4:d9:8e:bd:71:f0:
27:0b:d6:ac:c4:4b:f6:e2:b0:52:77:0c:8f:ca:a8:
27:f5:7b:27:90:8f:e0:3d:6f:d6:44:4b:53:59:f9:
2f:08:87:08:d5:64:0b:2b:27:13:ef:ca:87:f4:2c:
7a:82:f3:02:4c:4f:0b:cb:bf:f4:63:42:b1:17:39:
76:5f:a6:07:24:c6:b5:4f:6b:31:d7:0f:52:fc:e8:
fd:b9:22:bf:23:a6:38:18:b6:7f:93:40:69:a8:01:
f5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:01:72:A3:D1:3F:59:F0:2C:76:9E:E7:C4:EA:16:C2:65:C8:F7:F7
X509v3 Authority Key Identifier:
keyid:A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:8d:5b:05:f5:ec:a1:c6:6b:dd:1d:33:53:52:14:9c:aa:56:
d1:65:ff:db:1f:62:47:97:69:b8:c1:db:cf:38:8a:69:63:90:
ba:f1:d5:57:6b:ef:1f:f9:16:29:d9:8e:84:45:4a:34:56:c5:
29:a8:1f:4c:9c:26:44:af:21:d2:da:20:3d:f6:f1:c0:14:cc:
e8:d5:f6:48:c4:5b:32:e0:c9:d9:b5:f4:24:2f:f7:fe:de:b6:
50:bc:4d:88:fe:c4:8a:04:e0:c0:9b:1d:91:e7:9c:96:19:5f:
cd:9f:62:e0:ff:98:56:2d:c7:f0:91:b5:7d:78:8e:8e:1e:60:
0c:77:63:26:18:72:9a:11:89:a3:a5:c1:b0:1f:53:27:23:84:
97:e5:61:76:5d:bc:f9:2d:26:21:06:99:f9:8e:0f:9f:5e:a4:
4e:e6:f3:a5:5c:08:c4:0f:ad:fd:f1:11:3c:5f:a5:43:48:a2:
35:37:59:7b:0c:96:21:ac:10:2d:5e:f8:f3:6e:75:68:0c:02:
32:3f:a5:7e:8a:d0:30:88:0b:aa:5c:f7:28:34:c7:4e:43:6c:
9b:15:ba:e2:47:9c:2f:b5:83:3f:76:dc:27:d7:05:88:95:2a:
27:fa:63:a8:20:4c:aa:fd:f3:2c:a8:27:22:b9:17:f6:47:ae:
58:9e:34:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:26:02 2025 by rpki-client