
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
File: 1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft (raw, json)
Hash identifier: VWJgWicdfl0XGQR4+tqma6rheXKHNueo5BVmHWHSR6E=
Subject key identifier: A5:80:41:BE:F5:BE:F5:80:24:04:04:1B:1D:17:EF:82:0F:4B:77:D7
Authority key identifier: D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F
Certificate issuer: /CN=A91CFFBE/serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F
Certificate serial: 05CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
Manifest number: 05C6
Signing time: Sun 19 Oct 2025 00:43:43 +0000
Manifest this update: Sun 19 Oct 2025 00:43:43 +0000
Manifest next update: Sun 26 Oct 2025 00:43:43 +0000
Files and hashes: 1: 1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl (hash: WLoMESnaZPz+6gZ86mnOTvIkFTR87DBPx14naFNlSFU=)
2: 05A2A4008FE811EEACB1296AC4F9AE02.roa (hash: OvWek+7GoTr0MOzRQOUQXIl3oHCUTRccIlCGDYFLUR0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl
rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 00:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1482 (0x5ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFBE, serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F
Validity
Not Before: Oct 19 00:43:43 2025 GMT
Not After : Oct 26 00:43:43 2025 GMT
Subject: CN=68f4343f-1a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:ad:95:da:1b:81:1a:eb:3a:b9:fb:a5:f8:
dc:60:ed:6c:d4:06:c6:13:b0:f9:ea:69:67:9f:d8:
25:51:bd:bb:2a:63:d6:55:df:14:4b:0c:a2:2b:51:
91:04:a1:8d:7b:d1:5e:28:e9:2d:c7:34:ee:53:fa:
62:cc:d6:58:32:f2:87:3c:7a:6e:bb:89:be:76:88:
e9:de:13:7f:d1:8a:e1:36:e8:05:ca:28:fb:4d:3f:
0e:32:87:dc:46:79:d5:f9:63:d6:3e:e7:06:ec:07:
e4:67:ec:5a:66:9d:03:3c:66:92:16:3d:ba:f2:c8:
bb:a3:2a:fa:04:06:13:fd:e0:ec:a8:ed:c2:10:59:
79:4a:92:ce:d7:45:32:30:c8:29:5b:b2:bd:1f:14:
e9:62:bc:3d:1e:a6:ae:c5:d1:19:20:d2:5f:5c:67:
c4:75:b5:0c:ab:c3:59:26:99:33:82:db:1d:5c:24:
a7:f7:e1:d2:cc:33:3a:c8:fc:b4:83:27:8a:e2:7c:
cd:6f:85:eb:6d:3e:c1:55:f0:2d:68:50:9f:31:2d:
fc:69:b1:35:93:07:27:bc:01:26:b8:e4:64:9c:20:
3d:b3:1c:71:ff:c6:b8:04:e7:7d:65:18:2b:5e:92:
4e:52:2e:4d:44:80:ba:fe:92:cd:23:7a:74:4c:ee:
f0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:80:41:BE:F5:BE:F5:80:24:04:04:1B:1D:17:EF:82:0F:4B:77:D7
X509v3 Authority Key Identifier:
keyid:D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:e4:fd:a3:43:26:fb:3e:2c:a9:f6:3d:08:f1:16:e0:83:66:
54:59:5e:31:d8:a1:92:fe:e5:01:02:4a:0c:f4:7e:f5:59:18:
76:7c:b5:aa:a2:a8:f6:8e:3b:36:2e:a7:dd:d8:56:27:c5:f8:
a0:c2:fd:82:be:f7:e5:2f:b3:e7:95:c5:9f:e8:45:21:44:f2:
7f:5f:ba:ef:e7:1a:ab:95:ed:ce:8d:ad:64:b4:49:94:59:9c:
74:7c:4a:4e:66:6e:23:f7:49:e3:2c:ae:91:68:60:5a:03:71:
8a:f1:5a:f3:77:88:a7:d6:df:e2:5a:b1:da:f4:34:5e:f2:40:
ef:7b:40:bc:38:7b:d2:6e:75:fe:75:d0:e5:68:af:d2:39:56:
8d:e9:48:cc:65:d7:55:a0:b4:43:ad:4f:27:fd:9c:fe:c5:bc:
a7:0c:1b:99:41:c9:88:5a:a3:02:99:36:2a:6d:dd:3c:39:dc:
44:84:25:b7:07:20:93:27:4a:78:da:a6:55:d2:7c:91:36:e8:
9a:ce:1e:ac:6e:5b:a9:03:33:ee:f7:4d:52:97:70:80:e6:12:
38:7a:4f:41:b7:9a:a6:8a:3b:37:e7:55:e5:2f:e8:b3:b7:e2:
f4:da:2d:50:c4:29:9d:de:8d:cf:96:c2:ac:ce:34:90:d6:66:
22:c2:05:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:42:17 2025 by rpki-client