
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
File: WKmVh9VjjYaIwliQx4QfMlG0ltc.mft (raw, json)
Hash identifier: RDspvW9t/ToSp1ijYOFkaNZDLiseYUaPeTPpkkc7rgY=
Subject key identifier: 74:27:EF:53:79:07:21:1F:8E:B2:BC:A8:E6:C7:31:3D:F0:05:35:6E
Authority key identifier: 58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7
Certificate issuer: /CN=A91AB740/serialNumber=58A99587D5638D8688C25890C7841F3251B496D7
Certificate serial: 070F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
Manifest number: 2CED
Signing time: Sun 02 Nov 2025 15:42:52 +0000
Manifest this update: Sun 02 Nov 2025 15:42:51 +0000
Manifest next update: Sun 09 Nov 2025 15:42:51 +0000
Files and hashes: 1: WKmVh9VjjYaIwliQx4QfMlG0ltc.crl (hash: vd0329sbA2BcTnmDgEiU+hqid3CZZDOOT+LfsVvPgVU=)
2: 182057F63ACE11EC8987F871C4F9AE02.roa (hash: yv4yXxdZSOzS3VJoLoyhG//bnrtF6VAnh10WOZtqxtY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl
rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 15:42:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1807 (0x70f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB740, serialNumber=58A99587D5638D8688C25890C7841F3251B496D7
Validity
Not Before: Nov 2 15:42:51 2025 GMT
Not After : Nov 9 15:42:51 2025 GMT
Subject: CN=69077bfc-7f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:af:de:0e:19:4d:e7:d1:c8:b9:79:73:f3:
23:a7:d3:de:9d:72:2c:f5:53:56:dd:c9:42:3b:40:
f1:7a:aa:55:15:34:3c:ec:02:b6:9e:ff:6e:de:1d:
0d:62:26:e0:59:5d:af:5d:f5:c1:c3:1e:59:d1:a4:
8e:e1:7d:c2:1e:8c:0e:44:99:b5:d7:07:80:ea:ae:
4b:78:9b:e5:07:84:e3:a8:20:f9:c4:69:df:cb:8d:
d1:d4:34:5b:90:6a:9f:8d:d5:1d:2e:6a:92:98:f6:
70:06:35:52:2c:71:55:6a:c3:04:94:81:f2:0c:4e:
7d:5f:98:c0:a7:9b:00:0a:6e:83:f6:35:e9:67:db:
12:6b:c1:b8:07:7b:5e:02:eb:4d:91:22:13:03:a3:
8a:e0:8e:85:81:fd:c0:45:12:32:a8:28:3a:66:9d:
33:ff:a8:8a:f6:bb:cf:b4:5f:2e:fe:1a:4f:c1:08:
cb:cf:ab:c0:f9:e0:84:8b:8a:fe:bf:91:f8:6c:a4:
b0:19:58:af:b6:d0:d0:39:b7:68:2a:c5:10:b7:99:
e5:73:e3:51:f4:26:ed:c6:ea:08:15:b5:70:cc:e0:
e4:d3:df:9d:71:40:91:a1:19:4f:12:72:50:30:83:
c6:ec:e0:e4:0e:49:6f:4c:7f:5c:a9:b2:ef:ce:59:
a0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:27:EF:53:79:07:21:1F:8E:B2:BC:A8:E6:C7:31:3D:F0:05:35:6E
X509v3 Authority Key Identifier:
keyid:58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d3:b2:89:75:b8:49:1a:c0:18:51:e7:fa:97:6d:38:2b:33:
37:99:73:f8:3a:51:3f:5a:20:4c:54:3c:2c:9e:0f:f1:70:11:
6b:92:92:7a:a8:8f:43:1b:15:3b:b4:57:d6:1d:b7:6c:54:3b:
fd:51:4c:5f:6c:4b:9e:e0:2d:85:58:56:0c:8a:78:f1:06:a9:
6f:fc:41:9c:87:b7:5d:25:49:b2:5c:b4:71:59:19:c8:0f:86:
a0:89:79:b4:9d:75:b5:06:7f:2e:d9:1d:2f:60:b7:43:56:55:
7e:16:05:7e:3c:79:8b:80:d7:7a:c7:52:7c:1c:d1:20:87:ab:
d7:1f:0d:68:c3:c5:4d:a5:13:97:15:db:81:dd:93:fb:47:71:
0e:93:af:f7:f5:ab:62:bf:17:b6:5b:3b:a6:97:cd:50:ca:1c:
87:50:56:89:3c:8e:8e:84:eb:7d:e6:e9:42:36:83:e4:14:4f:
0b:90:08:aa:c9:64:a7:20:57:8b:03:c8:f9:3f:e5:50:ff:a9:
64:3e:07:a7:d7:f2:9c:fd:3b:3b:c4:9f:c6:56:d9:10:e3:c9:
4c:7e:39:b7:9c:e1:2d:3a:12:79:00:b5:bf:f8:bb:7c:fd:93:
02:1e:d4:82:79:e4:49:78:47:1c:43:48:bb:da:f9:ed:63:d3:
38:a4:41:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:11:10 2025 by rpki-client