
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
File: wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft (raw, json)
Hash identifier: pciqOEbEWXzgbw6e2a7ohrGo9hW1AvT8X6IwzNNsI8Y=
Subject key identifier: 88:C5:F1:A0:D1:85:0E:E5:CA:76:89:E7:33:0E:4D:BE:E5:70:EC:47
Authority key identifier: C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF
Certificate issuer: /CN=A911EB2D/serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF
Certificate serial: 0908
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
Manifest number: 09C1
Signing time: Tue 04 Nov 2025 20:28:57 +0000
Manifest this update: Tue 04 Nov 2025 20:28:57 +0000
Manifest next update: Tue 11 Nov 2025 20:28:57 +0000
Files and hashes: 1: wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl (hash: jhlAxacnbD7ZiV2vwLT73vS2r0vUx4IVz9oDBSYo7AA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl
rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:28:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2312 (0x908)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EB2D, serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF
Validity
Not Before: Nov 4 20:28:57 2025 GMT
Not After : Nov 11 20:28:57 2025 GMT
Subject: CN=690a6209-953e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a8:34:f7:f0:d9:31:56:d6:93:d5:2d:da:5a:
f8:81:17:1f:ad:db:6f:70:b1:fc:fc:0f:82:d2:4e:
a4:15:ee:c1:c8:64:37:30:8d:39:0a:eb:3c:9f:f9:
96:06:bc:08:39:ab:e8:f6:d8:39:13:a1:de:eb:b1:
ea:fe:b6:a5:dc:44:cb:97:87:a6:11:d5:02:f8:dc:
ff:b0:a4:bc:bb:a4:b6:5d:4b:a7:3e:04:0f:9c:6c:
6d:96:29:50:f4:f1:ff:ea:be:50:c4:ff:04:a8:ab:
53:f0:af:1e:ba:98:61:bc:2a:99:ef:1d:9a:12:da:
68:3f:01:52:16:90:86:33:35:73:23:e5:b0:6e:8a:
9a:65:c6:c2:af:b4:ab:5b:3e:4d:40:6c:3a:98:94:
8d:22:7c:1d:72:fa:67:66:11:e7:ef:92:29:cd:98:
6b:2d:b4:e9:e3:a1:15:4b:66:f7:c9:2f:b4:a3:e0:
b1:b7:4a:31:21:1b:94:d7:7d:72:44:5f:22:30:19:
9e:60:0b:30:57:f0:e5:9c:e0:a7:89:eb:b3:e9:92:
6f:23:d7:a0:f6:ff:de:1b:1d:7a:f0:67:00:9e:a6:
ca:bb:8b:8a:3e:91:e0:27:d8:e6:53:a5:ac:e4:8a:
7e:45:80:21:75:4a:40:eb:a9:ee:38:2d:f7:d3:38:
07:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C5:F1:A0:D1:85:0E:E5:CA:76:89:E7:33:0E:4D:BE:E5:70:EC:47
X509v3 Authority Key Identifier:
keyid:C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:ca:e3:50:1e:e0:df:e0:0e:ce:ca:1c:ac:b9:07:7a:80:40:
a1:a9:35:23:f8:e6:86:74:68:e4:f8:dd:d0:66:95:d4:35:1b:
31:17:3d:43:99:41:ac:5d:d5:f2:e1:0c:e1:09:7b:c3:02:08:
d7:fd:9f:4b:7d:d8:20:38:e4:21:8e:07:15:1b:68:db:80:fb:
e3:fc:6b:d1:1d:17:6e:13:69:4f:b0:f2:06:1e:c8:ab:bd:b4:
dc:d8:9f:da:ea:a7:b2:60:cd:39:53:ba:e5:90:07:88:27:81:
9a:ac:27:55:cb:51:d7:e7:83:e1:a3:8f:b6:ff:7f:4d:e9:d6:
2d:62:15:0a:5b:f0:e4:44:36:cc:43:b6:b1:04:be:19:e6:a0:
7a:f5:be:77:d9:59:1a:d6:42:3a:39:31:a5:8a:50:9a:e1:6c:
83:c4:b2:de:38:3f:96:8c:75:1c:82:61:37:b9:22:ad:77:3c:
60:7b:a4:1f:9d:b7:67:61:c6:bc:c8:27:40:60:ae:d9:0b:46:
72:68:89:64:bb:8e:b8:df:a3:f9:07:a0:8a:3c:30:54:51:9b:
0d:d9:ec:b7:cd:97:24:fb:19:bf:99:b3:d2:12:11:bd:ea:ef:
08:7a:30:5b:e1:17:9a:67:c0:ad:1d:e1:e9:f2:97:21:20:9e:
74:bb:a7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:23:41 2025 by rpki-client