
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft
File: WpjqUfgHDWcBhCEBRTothWT80ts.mft (raw, json)
Hash identifier: TkKawORRB2vpkziCYB8CGeW0dyC7y6UbSMUqDvtynNk=
Subject key identifier: 2E:30:A6:F2:49:FD:DE:0C:6F:B6:56:A7:68:93:18:B6:F3:01:AD:A9
Authority key identifier: 5A:98:EA:51:F8:07:0D:67:01:84:21:01:45:3A:2D:85:64:FC:D2:DB
Certificate issuer: /CN=A9112FE9/serialNumber=5A98EA51F8070D6701842101453A2D8564FCD2DB
Certificate serial: 07CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft
Manifest number: 07C6
Signing time: Sun 02 Nov 2025 21:14:44 +0000
Manifest this update: Sun 02 Nov 2025 21:14:44 +0000
Manifest next update: Sun 09 Nov 2025 21:14:44 +0000
Files and hashes: 1: WpjqUfgHDWcBhCEBRTothWT80ts.crl (hash: 5t4lk0naT//GtrXr5rJRbI3DXLPFp0aCdRfpdkNLO34=)
2: 27EA36484AC411EB95EE2C61C4F9AE02.roa (hash: 0MFbelavrnvkHJOZxZvDps06Vm64af2RypLjbngW5IQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.crl
rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:14:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1996 (0x7cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112FE9, serialNumber=5A98EA51F8070D6701842101453A2D8564FCD2DB
Validity
Not Before: Nov 2 21:14:44 2025 GMT
Not After : Nov 9 21:14:44 2025 GMT
Subject: CN=6907c9c4-a3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:6f:57:ca:a4:af:a3:ac:02:07:99:86:cb:
01:22:3f:01:04:c9:2d:3b:ca:69:84:26:03:0a:f5:
03:54:65:ac:04:40:b8:d1:01:b5:b2:2f:4a:53:ac:
08:54:67:02:7f:af:51:af:ef:fa:04:39:10:44:9a:
ee:fd:5b:3f:dd:57:e1:d6:5e:26:0e:34:e1:ee:4e:
37:bf:96:cc:b2:ad:a4:b3:55:42:d2:f0:10:49:e0:
40:75:96:cc:63:2a:aa:5c:d7:2d:a5:8f:c4:ff:49:
19:49:fb:20:c6:45:da:ae:10:65:98:ef:34:48:98:
40:ac:4b:b8:36:91:8c:d8:23:11:d9:09:6d:96:50:
2b:7c:ad:3c:c7:6a:5b:be:4a:08:25:94:5c:7d:cb:
84:f8:8a:8a:6e:ca:cc:84:9c:72:fc:68:3c:b6:28:
7d:4e:f0:b4:b2:be:fb:bc:49:09:e3:c2:a6:51:07:
fe:29:03:14:5e:f9:a1:08:c3:c4:93:46:20:12:9f:
9c:ef:6b:df:fd:f0:e7:00:e8:97:1b:73:f7:11:89:
d4:9b:f5:50:0e:37:1f:8d:14:79:3c:57:2f:58:31:
cc:7c:84:c3:26:90:15:6d:97:35:e6:0d:1d:a7:ec:
77:2f:f7:a5:62:ff:71:0d:d9:2e:bd:33:ce:25:02:
36:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:30:A6:F2:49:FD:DE:0C:6F:B6:56:A7:68:93:18:B6:F3:01:AD:A9
X509v3 Authority Key Identifier:
keyid:5A:98:EA:51:F8:07:0D:67:01:84:21:01:45:3A:2D:85:64:FC:D2:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:3c:a4:f2:08:9c:0c:ed:79:17:e0:57:5e:f4:51:8b:cf:50:
47:29:f8:94:72:8f:4f:33:a7:25:15:63:0e:82:49:f8:f4:7b:
23:b7:fb:44:46:60:72:bc:bd:ee:4b:46:a2:9c:ed:b8:e4:d0:
64:26:ce:7a:d5:e8:bd:a0:83:0b:23:84:2a:3a:29:0a:7a:82:
ea:b1:79:21:81:9d:ae:84:9e:84:5b:ee:40:ab:7c:9c:77:91:
f1:e5:77:ff:4f:7a:85:0b:20:4f:24:5c:32:74:67:3b:ad:6f:
bb:10:3b:98:90:90:9d:f9:2b:f2:44:69:58:e8:43:8c:48:cf:
5a:04:1c:d5:69:90:08:54:1c:72:ae:61:05:ff:f9:8d:6b:2c:
38:2e:b0:f3:64:ab:e2:d5:6f:95:78:8d:1f:73:2e:60:aa:46:
d0:d1:af:71:d4:5c:b7:2c:25:6b:b0:f5:d3:fd:05:04:cd:d2:
8d:3e:33:97:f5:4d:f4:94:42:16:ca:2e:76:a5:80:1d:4e:e7:
f4:60:92:af:56:f6:46:8f:2c:17:0e:6e:ce:de:95:08:0b:a8:
2a:a4:1c:4f:37:20:55:4e:8d:9e:b6:73:94:a7:fd:72:ec:ec:
a2:fa:bd:0a:3a:8b:fe:7c:93:54:b3:fd:a6:a3:27:e7:7e:b9:
4f:61:a0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:19 2025 by rpki-client