
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft
File: Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft (raw, json)
Hash identifier: HLwvnJJF52y2OFyVvrMqX5K3qCJH9DuL/lF5Q/ZM/84=
Subject key identifier: 12:76:EE:46:BA:23:6B:05:EC:D1:6C:D0:79:05:D4:7D:7C:77:6A:2B
Authority key identifier: 5A:C9:65:E5:0C:FE:BB:59:14:79:37:DC:34:D8:1F:D3:02:B6:BA:73
Certificate issuer: /CN=A913B6D5/serialNumber=5AC965E50CFEBB59147937DC34D81FD302B6BA73
Certificate serial: 06D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft
Manifest number: 06D4
Signing time: Sun 02 Nov 2025 21:59:51 +0000
Manifest this update: Sun 02 Nov 2025 21:59:51 +0000
Manifest next update: Sun 09 Nov 2025 21:59:51 +0000
Files and hashes: 1: Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl (hash: x5fq13fQJtoVFIrByc41ktyKlUNu8tzo1ISM4sGWqYE=)
2: E2B81154741B11EB83EC7A62C4F9AE02.roa (hash: SfDbv1ydo+vznwdchu/VzafMX/NegNN92VChKBq/R3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl
rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:59:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1753 (0x6d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B6D5, serialNumber=5AC965E50CFEBB59147937DC34D81FD302B6BA73
Validity
Not Before: Nov 2 21:59:51 2025 GMT
Not After : Nov 9 21:59:51 2025 GMT
Subject: CN=6907d457-533c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:2b:2e:26:16:26:b5:85:73:d1:9a:cb:a5:
23:03:9a:b4:62:bd:f6:b3:90:68:66:19:50:c9:ec:
95:eb:b0:18:30:da:7e:bd:a4:91:81:b7:8a:61:62:
6c:2b:4b:4e:e2:79:e1:73:d1:74:69:59:2d:17:6b:
23:d5:27:c3:d9:97:92:74:51:e3:cf:16:47:de:4b:
20:90:c0:82:63:33:40:e3:be:34:d0:74:04:90:4a:
41:ae:64:07:dc:01:1e:09:c8:08:e5:ee:8d:b4:05:
f7:94:90:d5:5a:16:9e:3e:57:d3:08:ab:a5:25:a0:
f2:84:4e:5f:35:ce:47:be:57:ec:0d:b0:d2:0f:a4:
b6:1c:7b:c0:55:fb:d0:15:d9:6f:8d:35:eb:0d:18:
a1:43:5f:b2:a5:54:c1:7d:02:40:12:8e:89:5a:43:
37:00:a8:8a:74:96:b1:bd:d4:5f:b6:36:00:c2:ea:
55:e7:eb:42:f0:3f:e1:5b:87:66:37:56:33:fe:4d:
17:49:4d:1a:de:ef:47:c2:6a:02:78:2e:23:09:5c:
fb:cf:d2:10:d4:90:20:78:7c:be:82:b8:ad:9f:cc:
ef:23:a8:e7:8b:1c:4f:35:39:4a:59:af:0c:75:b4:
9f:c0:b4:4f:39:ce:2a:a5:ad:f3:f0:27:16:3f:f4:
cc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:76:EE:46:BA:23:6B:05:EC:D1:6C:D0:79:05:D4:7D:7C:77:6A:2B
X509v3 Authority Key Identifier:
keyid:5A:C9:65:E5:0C:FE:BB:59:14:79:37:DC:34:D8:1F:D3:02:B6:BA:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:0e:c0:cc:fc:ae:fe:ee:7e:e0:5a:7e:b3:c3:f7:f4:39:c5:
b7:51:79:50:4e:56:b3:34:32:08:67:02:5e:8b:af:76:32:3f:
d7:48:cf:db:6d:85:81:30:fa:0e:dc:14:44:80:dc:54:f2:8b:
13:bc:18:5f:56:04:73:7a:64:af:c5:9a:5e:ef:9f:fc:d0:b5:
6f:fa:a9:14:ad:a3:5e:ea:cd:7a:3f:04:1f:fe:fa:cf:86:b2:
d9:12:2a:a6:b7:d8:f6:3f:0c:4c:9b:4f:88:b1:e6:a0:8a:78:
5a:22:d0:52:57:c6:c6:34:62:a1:2f:74:36:84:e5:07:68:f8:
05:d8:5f:10:3b:19:2d:ad:62:7a:6e:51:a8:5f:80:2f:9d:07:
b9:70:19:f2:f5:4d:ff:3e:6e:11:e9:08:d3:2f:45:12:fb:30:
c2:8b:56:79:e8:80:d6:c6:2d:d8:86:80:5e:6d:ed:03:48:d3:
a3:ac:5e:9c:fa:8c:b5:fa:9a:6a:ef:43:9c:11:5c:23:da:e2:
27:51:4f:9f:4b:92:29:7f:ef:5c:c9:c3:06:5c:da:72:2a:32:
d9:b2:b3:3b:a2:cf:51:dd:7c:58:af:05:5b:2b:c0:74:b4:bc:
38:6b:fe:33:f7:e1:b2:42:58:32:91:08:21:c3:c5:e5:82:4f:
f0:8d:a3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:37 2025 by rpki-client