
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
File: WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft (raw, json)
Hash identifier: guiiLlStwrT70HHV3Ea048sMSah8txfr31aaMdpNChs=
Subject key identifier: 8F:8A:08:0B:BE:27:26:65:B7:C5:6D:AB:5C:55:16:9D:34:FA:01:25
Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
Certificate issuer: /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Certificate serial: 05EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
Manifest number: 05E5
Signing time: Sun 02 Nov 2025 22:58:07 +0000
Manifest this update: Sun 02 Nov 2025 22:58:06 +0000
Manifest next update: Sun 09 Nov 2025 22:58:06 +0000
Files and hashes: 1: WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl (hash: uwhM+8xJyxEzUhl0VBmNEIIjYGbqwTBNbOgiAVfgB5Y=)
2: 92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (hash: 1L+jLLrprvKBkFZBr/XRqOG/ctfBn+soIRnPIIukpBY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 22:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1515 (0x5eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5F25, serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Validity
Not Before: Nov 2 22:58:06 2025 GMT
Not After : Nov 9 22:58:06 2025 GMT
Subject: CN=6907e1ff-e318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:ae:4b:32:c3:c4:42:ce:0d:b0:61:69:53:
8f:34:e4:33:5f:7c:69:2e:19:2b:bb:c1:4e:42:9f:
77:14:96:16:b5:01:50:a1:9a:85:79:c6:7b:a7:d3:
6d:25:ff:e6:9d:1c:15:74:30:13:e9:6a:4c:5f:1f:
db:54:a8:4d:1d:81:89:53:97:d8:89:eb:c6:89:0e:
55:5b:37:35:26:f5:20:0f:7f:8b:55:37:85:ad:56:
06:24:86:a6:ce:4b:45:14:e0:b4:2e:c6:fa:21:9b:
22:b4:03:23:03:95:af:3a:9c:3b:1b:e3:01:e6:8e:
a6:95:14:c6:14:f2:14:46:fb:55:70:cc:2f:36:e2:
82:9c:c3:46:ff:da:99:18:d9:e6:c5:9e:c5:32:fb:
30:9a:c2:31:97:b8:b3:35:45:0d:61:df:0c:6a:a4:
b2:e1:0c:0d:cf:14:af:8a:85:cc:e9:fd:a2:19:89:
5a:69:98:a2:24:a9:79:ea:7e:f4:41:12:83:51:de:
53:b7:63:df:c9:4a:4d:91:ba:b4:c2:40:59:20:b6:
1f:d2:ed:28:e5:c0:12:ec:45:62:17:df:7e:d6:4a:
19:0c:db:92:b1:83:b8:88:84:22:60:85:04:ff:ef:
71:7c:0c:5a:fb:31:3c:4d:e6:b4:a0:ff:6f:86:2b:
66:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8A:08:0B:BE:27:26:65:B7:C5:6D:AB:5C:55:16:9D:34:FA:01:25
X509v3 Authority Key Identifier:
keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c7:57:6b:17:11:a8:0a:70:78:a5:c1:e0:60:4e:29:ba:55:
50:0d:ec:6a:9d:d3:a9:da:d2:38:2f:79:02:f3:64:a1:60:3f:
93:fb:6b:1c:7d:b1:0e:c2:81:2e:a7:c9:2c:cb:e4:90:97:3a:
1d:22:ca:15:59:76:24:bb:58:55:dd:4a:99:6e:e3:ac:57:a6:
76:c4:a1:d6:f9:ac:57:00:68:e2:54:54:bd:12:e2:e6:b6:b3:
86:86:0f:fc:0b:04:42:f3:88:3e:bb:45:91:d2:89:67:f9:d2:
e1:3b:e9:50:0d:50:0a:f5:32:d8:29:eb:e7:98:34:8e:ef:09:
23:91:c4:ea:a6:9e:b0:19:17:85:72:3c:18:86:91:14:bb:e1:
01:af:3d:f7:3f:87:92:a5:92:9e:a6:58:bf:49:66:30:33:d2:
a4:15:cb:44:8e:6f:ac:40:d9:1a:6d:10:27:f1:53:f0:d4:5a:
8e:79:06:d2:b5:0d:88:75:42:66:6f:e6:b9:bf:fb:5e:73:74:
25:56:2c:07:93:67:bd:7d:86:27:98:b6:fb:9b:b5:a5:a6:e8:
b4:72:4e:23:e0:a8:24:8f:29:76:51:ac:15:34:ab:97:77:5e:
5c:33:76:7a:51:4d:e5:70:c2:7d:9a:a0:20:bf:1e:e4:0a:fb:
cc:25:f6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:06:59 2025 by rpki-client