
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.mft
File: wwhUyZUfLYZr_6nE1T05k3nYD6w.mft (raw, json)
Hash identifier: Ee3JEgmxogUjyxjQW6SXdyq7hec3zZvDsAG6ku3XEFg=
Subject key identifier: 84:30:C6:CC:83:4D:BE:F7:26:72:9B:32:52:58:F1:90:63:C5:E3:DB
Authority key identifier: C3:08:54:C9:95:1F:2D:86:6B:FF:A9:C4:D5:3D:39:93:79:D8:0F:AC
Certificate issuer: /CN=A91C89A2/serialNumber=C30854C9951F2D866BFFA9C4D53D399379D80FAC
Certificate serial: 0347
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wwhUyZUfLYZr_6nE1T05k3nYD6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.mft
Manifest number: 0341
Signing time: Wed 05 Nov 2025 01:07:10 +0000
Manifest this update: Wed 05 Nov 2025 01:07:10 +0000
Manifest next update: Wed 12 Nov 2025 01:07:10 +0000
Files and hashes: 1: wwhUyZUfLYZr_6nE1T05k3nYD6w.crl (hash: c1VzQwu9wogJG0Ya9H4APc5Z8EAoiD7lwnc2XDd3d7k=)
2: 2E5E44C40D7311ED90DA6411C4F9AE02.roa (hash: r8Uh9OTBqfw/i4pkMudB8AOPP/913biDEHnrkKOogok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.crl
rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wwhUyZUfLYZr_6nE1T05k3nYD6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 839 (0x347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C89A2, serialNumber=C30854C9951F2D866BFFA9C4D53D399379D80FAC
Validity
Not Before: Nov 5 01:07:10 2025 GMT
Not After : Nov 12 01:07:10 2025 GMT
Subject: CN=690aa33e-feda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b0:7e:b5:79:2a:0f:2d:83:58:af:1b:32:12:
9d:c0:dc:f2:3e:3b:fd:f0:4a:80:24:55:27:14:f6:
6f:29:fe:37:77:8e:be:7b:28:6e:3f:d3:4f:7c:0a:
3c:bf:a1:72:20:9f:74:fe:58:58:2c:47:0f:68:45:
d3:b5:62:26:33:f4:d1:a2:5d:16:d2:19:ca:d5:e2:
d5:b7:9d:25:50:14:33:e9:54:aa:ad:5c:2d:d8:b4:
59:34:84:62:41:a2:98:ec:ec:46:06:eb:1e:31:36:
a1:bc:cd:bf:b8:be:d2:cb:8f:94:43:21:76:e3:66:
27:1a:ef:6e:bd:05:1f:0a:30:13:b7:44:45:88:4f:
7d:46:35:57:09:4b:e5:11:9a:6b:62:d4:56:62:a2:
e9:2d:a6:9a:c0:c3:4d:bd:fd:9a:98:9b:c1:03:a5:
bc:be:23:5f:be:b5:22:2a:b9:9a:57:9e:51:a5:2d:
1f:f0:3b:3f:55:de:06:81:2a:72:42:bb:34:29:f3:
80:9d:8f:ba:5b:07:cc:99:16:37:5e:49:0d:6b:b7:
95:2e:da:f8:92:9b:fa:8a:21:84:35:fe:19:56:2f:
f1:cc:97:2f:97:7e:b4:0b:72:a7:6e:a7:70:ff:66:
16:3a:9c:53:3d:2f:a6:ab:2c:29:77:9b:98:05:8f:
fe:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:30:C6:CC:83:4D:BE:F7:26:72:9B:32:52:58:F1:90:63:C5:E3:DB
X509v3 Authority Key Identifier:
keyid:C3:08:54:C9:95:1F:2D:86:6B:FF:A9:C4:D5:3D:39:93:79:D8:0F:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wwhUyZUfLYZr_6nE1T05k3nYD6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:ae:85:dd:b1:09:a2:f8:98:bb:71:5d:f8:e7:1b:24:0a:2b:
83:e0:db:f8:4c:5d:d1:e3:5d:e7:86:c0:24:66:dc:94:fe:6a:
fe:b8:84:70:51:06:1c:93:ab:08:f5:b5:a2:57:79:da:9c:ab:
74:1b:54:1b:40:45:7a:75:36:53:15:8b:75:d7:ca:d8:91:26:
91:31:f9:cb:65:dc:6a:02:39:4e:96:15:9d:39:54:b1:e4:2d:
25:fd:72:c9:19:71:41:4d:d4:9b:5a:02:f8:1b:de:1a:27:33:
97:3b:44:eb:7d:0d:79:c2:92:1c:ff:01:73:28:bb:75:68:8a:
f2:67:19:b1:8c:02:e2:75:4d:a1:35:20:99:a5:0d:93:bf:19:
5a:4f:c2:40:05:a0:30:f1:99:13:e6:e4:0b:c3:23:ed:23:5b:
dd:fd:c6:a2:a2:ae:49:23:7f:d0:d4:0b:b1:d0:fb:aa:66:04:
a0:10:bb:87:a5:04:62:4c:0a:19:d3:e7:53:67:65:5c:82:48:
70:83:2b:1a:6d:1e:df:2a:6e:30:83:f9:23:44:2d:63:5b:27:
65:ef:c3:2c:ca:d0:da:ef:60:e6:a6:fc:cd:cd:03:00:83:45:
1f:92:0f:ac:df:6b:51:97:9d:76:3e:9b:e3:b6:93:4f:b2:79:
06:9b:5a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:26:07 2025 by rpki-client