
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.mft
File: WFTG2IaugFcOzmJHTVQZnE6CnKs.mft (raw, json)
Hash identifier: sSUs6j8AEa+grpSgkqsjH1S1V4v0n0lchS8djgAQyrA=
Subject key identifier: F5:5B:5F:91:74:08:E4:50:94:FE:9F:5A:A3:64:17:A1:6D:9C:B8:F3
Authority key identifier: 58:54:C6:D8:86:AE:80:57:0E:CE:62:47:4D:54:19:9C:4E:82:9C:AB
Certificate issuer: /CN=A9110AD1/serialNumber=5854C6D886AE80570ECE62474D54199C4E829CAB
Certificate serial: 06B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFTG2IaugFcOzmJHTVQZnE6CnKs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.mft
Manifest number: 06B0
Signing time: Sun 02 Nov 2025 22:12:45 +0000
Manifest this update: Sun 02 Nov 2025 22:12:45 +0000
Manifest next update: Sun 09 Nov 2025 22:12:45 +0000
Files and hashes: 1: WFTG2IaugFcOzmJHTVQZnE6CnKs.crl (hash: 811svW9ZCbkrHBBvdgqw9mbPgqaCu5ZLZMZllS7ijDg=)
2: 5F38A4F082D611EB802C1A55C4F9AE02.roa (hash: 2g+AtJOcqM3v8sCGPb20uEjt/EFg/UdlgUuuLVPXSl0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.crl
rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFTG2IaugFcOzmJHTVQZnE6CnKs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 22:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1718 (0x6b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110AD1, serialNumber=5854C6D886AE80570ECE62474D54199C4E829CAB
Validity
Not Before: Nov 2 22:12:45 2025 GMT
Not After : Nov 9 22:12:45 2025 GMT
Subject: CN=6907d75d-0ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:8f:6b:2c:25:1d:af:e7:17:17:20:82:27:
70:9f:de:d8:71:92:70:9e:22:49:b5:61:16:b5:86:
1a:b9:af:8c:06:ef:07:ed:08:be:ef:9b:7a:bc:30:
80:96:95:cd:54:b2:8e:89:e5:ae:88:bf:ae:76:c0:
12:9f:68:31:6f:08:dc:29:77:95:a8:8c:4f:49:a5:
ed:82:22:3a:10:7d:9d:24:3d:c5:54:b5:03:8c:ea:
3a:f1:e9:68:2f:e8:a4:a2:8a:3f:a7:27:f1:eb:bb:
2e:bd:5c:a1:32:f1:59:b4:55:d4:72:76:28:a7:15:
d3:58:79:29:f5:5f:c4:54:1e:91:74:69:1c:cc:ae:
a9:1b:d1:5d:fa:39:99:19:ba:b9:2a:bd:55:f5:08:
35:3c:bc:9c:1a:d4:66:4a:ec:dc:fe:d6:30:4d:10:
ba:03:c0:d3:35:0c:fc:4a:1e:75:c8:ff:66:f8:56:
6b:86:d8:84:a6:82:e8:2e:86:ce:8c:04:f7:f9:8e:
e9:f0:a2:ac:a9:f6:2e:a3:70:23:52:6d:cf:be:4c:
01:82:73:2c:8b:94:33:e2:51:26:d7:6a:66:2b:2f:
4a:2a:35:82:33:86:cf:d3:23:32:83:10:15:28:45:
95:4f:71:74:ab:96:2f:f3:f5:de:8e:8c:19:42:cb:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5B:5F:91:74:08:E4:50:94:FE:9F:5A:A3:64:17:A1:6D:9C:B8:F3
X509v3 Authority Key Identifier:
keyid:58:54:C6:D8:86:AE:80:57:0E:CE:62:47:4D:54:19:9C:4E:82:9C:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFTG2IaugFcOzmJHTVQZnE6CnKs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7a:e4:96:8a:b1:9e:f2:fe:00:6f:3f:33:61:04:f2:5d:90:
79:ab:fe:8b:f7:6c:4e:7a:94:7f:56:67:40:98:a9:a2:0a:6d:
eb:77:6c:8d:6f:26:1d:fc:9d:dd:6f:8e:b9:b1:36:0c:df:a3:
60:bb:89:28:4d:42:b0:ea:4d:21:79:d4:f5:97:cf:ec:3a:06:
02:12:34:46:3c:41:9e:86:24:c2:4b:cc:0d:a6:94:bf:57:ff:
e3:1c:b4:df:50:f3:af:2f:0f:62:12:06:5f:71:cf:15:af:16:
04:1d:4d:21:27:01:61:ac:8e:02:d3:bb:b9:f5:4e:b6:de:bf:
31:30:2e:25:6f:4c:2c:d4:d3:9b:61:7c:5f:83:fe:1c:84:8f:
3f:e9:ab:5e:c3:c5:a5:12:af:84:02:ec:36:e7:14:77:77:1d:
fb:1a:a3:67:3b:9c:be:c1:61:09:91:30:90:92:93:1b:eb:13:
b6:d8:92:49:de:61:d9:33:45:b3:64:f3:27:93:4f:84:0d:a7:
06:b1:b5:13:26:14:72:7e:33:79:aa:74:2a:7d:67:78:53:1c:
fd:ab:8e:7d:ed:f9:26:d6:bb:79:f4:2b:e1:c9:ef:6a:7f:36:
ec:cf:c6:44:d8:30:00:3a:1c:7b:38:f3:dc:5f:ee:d0:fd:2c:
22:3b:67:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:17:07 2025 by rpki-client