
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
File: wso-IoSMqAhkgVrBFxhWCJY6SW0.mft (raw, json)
Hash identifier: 9F1kaTQE3AvcjEPNhJXEpXniphL7WTp+Sg6/WVwd0nw=
Subject key identifier: FC:A3:1B:CD:40:6B:F7:77:22:07:CD:8E:72:71:CA:74:54:7E:9E:0D
Authority key identifier: C2:CA:3E:22:84:8C:A8:08:64:81:5A:C1:17:18:56:08:96:3A:49:6D
Certificate issuer: /CN=A912D9B5/serialNumber=C2CA3E22848CA80864815AC117185608963A496D
Certificate serial: 078D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
Manifest number: 0787
Signing time: Sun 02 Nov 2025 21:29:41 +0000
Manifest this update: Sun 02 Nov 2025 21:29:40 +0000
Manifest next update: Sun 09 Nov 2025 21:29:40 +0000
Files and hashes: 1: wso-IoSMqAhkgVrBFxhWCJY6SW0.crl (hash: qj018HjdCes5A7Z9mf6kObbF/KnON5e0kAW7K/DNuLg=)
2: 5FE8E1B42E1F11EBA5577457C4F9AE02.roa (hash: 1rB8wjfujUH34y0bYE/i/m37F3UP1B3bzE3MrCEyty0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.crl
rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1933 (0x78d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D9B5, serialNumber=C2CA3E22848CA80864815AC117185608963A496D
Validity
Not Before: Nov 2 21:29:40 2025 GMT
Not After : Nov 9 21:29:40 2025 GMT
Subject: CN=6907cd44-c6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:8a:26:a3:3e:aa:e1:b2:b8:e5:46:d4:04:
da:f9:a5:2e:57:6c:9a:a9:1f:82:a6:29:f2:cc:04:
64:41:32:db:01:38:7d:b1:86:fb:94:ef:4a:05:10:
4a:f5:ae:01:d6:d7:38:05:a1:b6:02:6f:b9:57:75:
21:85:1b:5e:89:6c:1e:11:5e:c2:3b:c4:ea:a4:86:
24:be:0c:fa:13:a1:05:b9:a4:ee:93:7a:d7:d3:c1:
05:60:c7:08:75:a9:02:f6:e2:02:09:0e:ff:0c:e1:
13:ed:ac:34:95:3b:e1:67:f9:fa:7c:71:70:96:60:
30:67:99:d2:1f:4a:c8:21:a9:84:2f:17:ed:61:11:
62:2e:8a:67:1e:3e:9a:43:7d:db:16:03:33:4c:48:
23:1f:b7:55:d0:20:c6:12:77:d8:03:cb:a9:f2:50:
e7:97:f9:cc:a1:6c:df:b5:f0:08:8a:06:8e:9f:f5:
c1:69:de:5d:10:4f:a9:fc:d7:6a:13:5a:4f:0e:35:
ea:24:98:d8:1b:54:92:d5:73:42:20:11:ff:4a:c7:
e2:8a:a5:7a:fc:49:58:7e:62:4e:11:9f:84:a9:d8:
2f:eb:bb:69:0a:e4:3f:59:ae:c0:05:06:d3:4f:60:
60:fa:4b:a6:19:8d:a9:38:de:02:eb:8b:ec:4f:2f:
1e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A3:1B:CD:40:6B:F7:77:22:07:CD:8E:72:71:CA:74:54:7E:9E:0D
X509v3 Authority Key Identifier:
keyid:C2:CA:3E:22:84:8C:A8:08:64:81:5A:C1:17:18:56:08:96:3A:49:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:69:80:96:cb:e7:ad:6b:36:b5:16:d5:1d:62:25:97:db:eb:
c7:04:20:46:56:d8:cf:e0:19:0d:4f:ca:9c:01:c9:34:07:6e:
92:68:ae:88:17:18:da:91:d2:06:5e:72:c6:e2:d8:4c:6a:f2:
de:8e:2f:f2:62:d7:5c:2e:5f:de:a2:f6:3b:ff:a8:d2:4c:d2:
10:a4:21:75:51:61:b1:c2:7f:d7:50:cb:d8:b8:cb:1b:82:3b:
0a:4d:e2:b4:3f:6f:0f:30:bf:1f:5a:ae:19:e5:58:7d:38:cb:
5a:07:3c:28:8a:d9:15:70:f1:b7:ad:d1:89:6e:77:44:1f:25:
02:74:c9:4d:92:5a:ff:db:40:c9:8b:f4:88:0a:7d:6b:a7:b4:
70:cf:29:09:c1:dc:21:f7:d9:83:01:56:fb:fb:8d:57:35:9d:
c5:6b:5a:55:ba:62:f6:45:b8:7c:c1:f5:f3:11:8f:d5:b9:2a:
45:15:5a:5d:55:c2:a5:a9:f3:3d:f2:0c:dd:50:9f:ee:44:92:
d2:2d:d0:f8:72:6b:9a:b7:bd:93:9d:b1:c3:fd:27:54:ed:a9:
41:9d:02:f1:58:bc:8a:55:c8:30:10:ef:36:8f:d2:99:1f:ad:
eb:c3:d5:9a:c1:c6:3c:a1:e7:83:29:cb:1a:e9:89:c4:51:f9:
3f:5a:58:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQ5QjUxMTAvBgNVBAUTKEMyQ0EzRTIyODQ4Q0E4MDg2NDgxNUFDMTE3MTg1NjA4
OTYzQTQ5NkQwHhcNMjUxMTAyMjEyOTQwWhcNMjUxMTA5MjEyOTQwWjAYMRYwFAYD
VQQDEw02OTA3Y2Q0NC1jNmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvkmKJqM+quGyuOVG1ATa+aUuV2yaqR+CpinyzARkQTLbATh9sYb7lO9KBRBK
9a4B1tc4BaG2Am+5V3UhhRteiWweEV7CO8TqpIYkvgz6E6EFuaTuk3rX08EFYMcI
dakC9uICCQ7/DOET7aw0lTvhZ/n6fHFwlmAwZ5nSH0rIIamELxftYRFiLopnHj6a
Q33bFgMzTEgjH7dV0CDGEnfYA8up8lDnl/nMoWzftfAIigaOn/XBad5dEE+p/Ndq
E1pPDjXqJJjYG1SS1XNCIBH/SsfiiqV6/ElYfmJOEZ+Eqdgv67tpCuQ/Wa7ABQbT
T2Bg+kumGY2pON4C64vsTy8esQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyjG81A
a/d3IgfNjnJxynRUfp4NMB8GA1UdIwQYMBaAFMLKPiKEjKgIZIFawRcYVgiWOklt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDlCNS9DMkJCQjExMDJF
MUQxMUVCOUQ4RDJDNTRDNEY5QUUwMi93c28tSW9TTXFBaGtnVnJCRnhoV0NKWTZT
VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dzby1Jb1NNcUFoa2dWckJGeGhXQ0pZNlNXMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDlCNS9DMkJCQjExMDJFMUQxMUVCOUQ4RDJDNTRDNEY5QUUwMi93c28tSW9TTXFB
aGtnVnJCRnhoV0NKWTZTVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCQaYCWy+etaza1FtUdYiWX2+vHBCBGVtjP4BkNT8qcAck0B26SaK6I
FxjakdIGXnLG4thMavLeji/yYtdcLl/eovY7/6jSTNIQpCF1UWGxwn/XUMvYuMsb
gjsKTeK0P28PML8fWq4Z5Vh9OMtaBzwoitkVcPG3rdGJbndEHyUCdMlNklr/20DJ
i/SICn1rp7RwzykJwdwh99mDAVb7+41XNZ3Fa1pVumL2Rbh8wfXzEY/VuSpFFVpd
VcKlqfM98gzdUJ/uRJLSLdD4cmuat72TnbHD/SdU7alBnQLxWLyKVcgwEO82j9KZ
H63rw9WawcY8oeeDKcsa6YnEUfk/Wli7
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:19:26 2025 by rpki-client