
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
File: WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft (raw, json)
Hash identifier: IoZUPyyo1h2e/NjF80QWKz5sTkxgbsOSFw+t+iU6PBg=
Subject key identifier: 61:28:8C:BC:2A:E1:82:5C:FF:B3:63:7F:06:55:3C:19:CC:3A:82:AA
Authority key identifier: 59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
Certificate issuer: /CN=A91C7AB9/serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Certificate serial: 0165
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
Manifest number: 0162
Signing time: Mon 27 Oct 2025 06:02:15 +0000
Manifest this update: Mon 27 Oct 2025 06:02:15 +0000
Manifest next update: Mon 03 Nov 2025 06:02:15 +0000
Files and hashes: 1: WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl (hash: 96V9WST+zilaDKoZfSYXcwISj7iyd3TVQHB5RIXd1fo=)
2: 7CF0A45404DF11F0B877A115C4F9AE02.roa (hash: bc2WkbYAbuGAx2Gf2EfnLZLtMVMYcpQMrHnCADXGRJs=)
3: 5CB841E69B1411EEA456FE83C4F9AE02.roa (hash: pLOgKyFyMkYkgWZ7IaxS8IlsIuIv5okTjVaTAgIeoac=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 06:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7AB9, serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Validity
Not Before: Oct 27 06:02:15 2025 GMT
Not After : Nov 3 06:02:15 2025 GMT
Subject: CN=68ff0ae7-33ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3e:6d:13:32:f3:e5:f0:c6:7b:12:b4:fc:e5:
4c:aa:02:ba:ca:c0:86:e7:c2:25:5e:9a:0a:bf:1f:
01:a4:98:0f:e5:0c:a7:eb:cc:dc:7f:22:db:08:30:
97:c3:bb:9e:c5:70:6d:77:32:eb:29:5b:a7:0b:36:
73:f5:96:db:8a:c4:e6:ee:bc:db:58:f3:8e:20:32:
10:0e:93:89:29:f6:82:fb:9d:e3:3d:c0:dc:52:4c:
37:4e:58:24:06:4e:84:52:d1:8a:a0:5c:b1:bf:80:
c3:c4:f2:ba:61:7e:aa:1e:59:e4:79:41:f2:75:dc:
43:80:de:f5:42:1c:f3:fd:20:9a:50:74:77:bd:ca:
c4:3d:6a:36:24:3e:c4:7b:cd:58:3d:5d:33:fe:58:
d9:db:6b:7a:17:14:91:19:59:d0:2e:d6:69:3a:80:
93:94:b9:c8:d7:cc:68:7a:ad:da:19:3c:0d:36:5e:
7a:6f:74:f4:e4:dd:0a:9d:3b:a7:5c:67:8d:39:81:
f1:c8:bd:65:36:82:3f:f5:e0:36:cf:d6:79:35:59:
43:d4:7e:3f:e1:44:76:f1:c9:e3:31:02:08:44:4b:
f9:c9:54:86:55:b6:3b:2b:72:22:92:b6:d5:2a:bb:
21:10:42:f7:52:66:c4:52:d9:19:7a:f2:69:0d:a5:
17:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:28:8C:BC:2A:E1:82:5C:FF:B3:63:7F:06:55:3C:19:CC:3A:82:AA
X509v3 Authority Key Identifier:
keyid:59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:69:cb:78:ca:2e:ad:ab:0c:46:04:c6:61:fe:e7:90:9c:97:
59:61:f9:c4:10:ba:34:01:1f:62:27:70:26:18:98:6a:f3:04:
c7:36:63:f9:58:ad:18:49:2b:12:de:0f:c2:30:cc:12:ad:e9:
8f:58:b4:5e:d6:82:86:9b:06:64:7a:ed:4c:92:41:9a:1e:9a:
c6:28:c8:47:91:c5:2f:a4:ab:a8:c7:4c:f3:c2:64:82:e6:01:
2e:10:b3:4c:4b:bc:38:e2:56:4f:06:97:14:05:2a:fb:ef:0b:
8c:f8:8b:70:e7:aa:5f:7b:ad:25:9a:98:1a:b7:93:78:ab:e4:
c1:ba:41:5c:c3:d8:41:a2:fb:b7:19:01:57:6b:a0:09:b4:2b:
73:33:f3:f8:55:10:e7:d6:1a:59:da:76:b6:ad:82:55:a2:7f:
d1:e7:7f:4e:a1:b5:8a:15:2a:bf:e9:74:9e:9b:09:c0:ea:af:
38:a3:da:d8:6f:fc:6e:9f:88:a4:7b:5e:39:89:ca:11:f8:5a:
df:a8:b7:90:da:55:b3:cd:33:d0:63:0e:d2:d7:09:03:db:29:
10:df:f1:83:f1:d3:20:80:8f:c9:53:a3:66:2c:ac:21:27:e7:
47:73:ed:13:cd:70:40:67:c4:d1:72:0e:09:2e:e2:dc:6b:97:
43:8c:78:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 01:11:57 2025 by rpki-client