
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
File: WTnpc8iL_GpBqjWondhG-w0Wi8w.mft (raw, json)
Hash identifier: 6cYreW1j7UjCy6SBDkkticTq3LPhzJEIU2VZwUdC7sQ=
Subject key identifier: A2:13:FF:C1:70:14:F0:57:CD:4F:5A:39:76:D8:29:6A:0F:C3:5D:97
Authority key identifier: 59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC
Certificate issuer: /CN=A91E6776/serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC
Certificate serial: 0F1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
Manifest number: 0F12
Signing time: Sun 02 Nov 2025 17:37:30 +0000
Manifest this update: Sun 02 Nov 2025 17:37:30 +0000
Manifest next update: Sun 09 Nov 2025 17:37:30 +0000
Files and hashes: 1: WTnpc8iL_GpBqjWondhG-w0Wi8w.crl (hash: GmBuv/ewLVhDRZlUVou9zW2vGzphF3avnkVFPjxKg8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.crl
rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 17:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3866 (0xf1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6776, serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC
Validity
Not Before: Nov 2 17:37:30 2025 GMT
Not After : Nov 9 17:37:30 2025 GMT
Subject: CN=690796da-b881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:85:a8:3d:75:a1:45:f0:2a:f2:90:2c:e3:
cf:ce:b2:3a:f5:89:23:b3:c5:a6:04:25:70:9d:27:
34:f8:7c:39:44:65:00:27:4b:66:6f:db:40:d6:c3:
3d:f6:0b:73:89:3d:aa:b7:9c:d1:95:6b:ae:49:3c:
d6:e5:02:44:4b:88:c5:44:a6:ba:f8:40:38:58:b5:
f3:e3:a3:08:d2:fc:bf:56:e1:ba:18:a3:61:ea:64:
5e:44:4f:5f:64:d9:54:e7:76:bd:bb:a9:b9:33:82:
89:d1:14:43:0a:6b:9d:51:31:42:95:cf:fd:5d:3f:
ea:6c:46:f5:7f:72:55:64:30:c0:21:01:80:c7:58:
33:5b:f1:5f:8d:65:8c:10:60:ab:00:bf:8b:de:0e:
8f:28:4b:ea:44:46:52:90:55:9b:8e:ef:f4:ec:c9:
a2:26:b1:87:57:46:19:f1:1e:50:e7:14:04:2b:50:
32:3f:67:9c:81:a9:17:70:1d:09:34:ac:1d:14:0d:
65:eb:02:a9:c7:10:49:de:06:30:42:17:b0:d9:c0:
ba:61:f8:81:d7:10:81:0c:77:17:39:58:d4:df:80:
11:ab:cc:8d:a6:b0:69:84:82:b7:ba:ea:00:a8:fb:
a6:d7:40:b0:87:1a:d4:2a:b5:5c:69:8f:3a:8b:26:
f3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:13:FF:C1:70:14:F0:57:CD:4F:5A:39:76:D8:29:6A:0F:C3:5D:97
X509v3 Authority Key Identifier:
keyid:59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:c6:a8:14:69:67:94:a5:42:85:9d:88:09:c0:d0:54:fa:0e:
fb:43:d7:26:9b:cf:f8:50:68:28:0d:b1:7c:2d:72:0a:da:1c:
fe:a1:f0:42:3e:50:63:41:00:fb:a5:00:a0:53:e6:9f:d0:85:
5c:10:7a:75:d7:d5:ee:2f:62:4a:1f:7d:1c:cf:00:88:75:a3:
29:d3:1f:b9:df:28:b4:81:a8:a6:6e:c2:65:3b:bd:1a:35:69:
43:a4:93:10:9c:1e:56:c0:1e:61:3f:fb:d9:2f:08:1c:9a:f0:
cb:65:5e:92:dd:5f:e1:e7:d1:4b:73:8f:2b:c4:ad:f1:5f:12:
c8:b3:24:f7:f9:11:cc:ca:15:c0:84:4c:22:a6:60:61:05:01:
4b:3c:79:67:06:5f:70:5b:02:41:de:23:a0:40:9d:20:d8:d1:
aa:3a:e3:94:5e:3c:fe:b4:34:51:f1:85:1d:a1:ec:09:00:59:
1e:43:0c:6b:18:6e:9b:14:3d:75:64:8b:d4:df:c0:81:1e:61:
da:61:c8:21:70:61:a3:93:40:7e:4a:0f:12:19:f9:7d:22:d8:
14:cd:f7:b4:b6:c3:9e:a0:ab:50:15:57:5f:02:58:a8:dd:1d:
1e:04:e7:90:02:5f:fc:3a:77:09:80:80:6b:55:38:bd:7e:1c:
0a:cf:fd:54
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTY3NzYxMTAvBgNVBAUTKDU5MzlFOTczQzg4QkZDNkE0MUFBMzVBODlERDg0NkZC
MEQxNjhCQ0MwHhcNMjUxMTAyMTczNzMwWhcNMjUxMTA5MTczNzMwWjAYMRYwFAYD
VQQDEw02OTA3OTZkYS1iODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr6aFqD11oUXwKvKQLOPPzrI69Ykjs8WmBCVwnSc0+Hw5RGUAJ0tmb9tA1sM9
9gtziT2qt5zRlWuuSTzW5QJES4jFRKa6+EA4WLXz46MI0vy/VuG6GKNh6mReRE9f
ZNlU53a9u6m5M4KJ0RRDCmudUTFClc/9XT/qbEb1f3JVZDDAIQGAx1gzW/FfjWWM
EGCrAL+L3g6PKEvqREZSkFWbju/07MmiJrGHV0YZ8R5Q5xQEK1AyP2ecgakXcB0J
NKwdFA1l6wKpxxBJ3gYwQhew2cC6YfiB1xCBDHcXOVjU34ARq8yNprBphIK3uuoA
qPum10CwhxrUKrVcaY86iybz8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIT/8Fw
FPBXzU9aOXbYKWoPw12XMB8GA1UdIwQYMBaAFFk56XPIi/xqQao1qJ3YRvsNFovM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjc3Ni8zRTExNzQ4NDg4
MTcxMUU5QURDNEQzMzVDNEY5QUUwMi9XVG5wYzhpTF9HcEJxaldvbmRoRy13MFdp
OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dUbnBjOGlMX0dwQnFqV29uZGhHLXcwV2k4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
Njc3Ni8zRTExNzQ4NDg4MTcxMUU5QURDNEQzMzVDNEY5QUUwMi9XVG5wYzhpTF9H
cEJxaldvbmRoRy13MFdpOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBkxqgUaWeUpUKFnYgJwNBU+g77Q9cmm8/4UGgoDbF8LXIK2hz+ofBC
PlBjQQD7pQCgU+af0IVcEHp119XuL2JKH30czwCIdaMp0x+53yi0gaimbsJlO70a
NWlDpJMQnB5WwB5hP/vZLwgcmvDLZV6S3V/h59FLc48rxK3xXxLIsyT3+RHMyhXA
hEwipmBhBQFLPHlnBl9wWwJB3iOgQJ0g2NGqOuOUXjz+tDRR8YUdoewJAFkeQwxr
GG6bFD11ZIvU38CBHmHaYcghcGGjk0B+Sg8SGfl9ItgUzfe0tsOeoKtQFVdfAlio
3R0eBOeQAl/8OncJgIBrVTi9fhwKz/1U
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:20:09 2025 by rpki-client