
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft
File: Wnot3qYsiQ6QHx3NQEb814zAtBw.mft (raw, json)
Hash identifier: S+u9z4DvaNpPU5GEKFxb8hCuc91h3e3ViwRlEXYYZeg=
Subject key identifier: 49:B4:B7:6C:0C:58:62:33:43:08:84:CB:A9:B2:6A:2F:E1:13:07:A3
Authority key identifier: 5A:7A:2D:DE:A6:2C:89:0E:90:1F:1D:CD:40:46:FC:D7:8C:C0:B4:1C
Certificate issuer: /CN=A91E89AF/serialNumber=5A7A2DDEA62C890E901F1DCD4046FCD78CC0B41C
Certificate serial: 06E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft
Manifest number: 06DF
Signing time: Tue 04 Nov 2025 22:05:10 +0000
Manifest this update: Tue 04 Nov 2025 22:05:09 +0000
Manifest next update: Tue 11 Nov 2025 22:05:09 +0000
Files and hashes: 1: Wnot3qYsiQ6QHx3NQEb814zAtBw.crl (hash: YeRr+BeQyYVsbrVvrxFqtFVM28muThIAsDnaierxHd8=)
2: 7C7FDC646FF711EBA7506161C4F9AE02.roa (hash: +n5J+qx7tpV2H+mHVC6O7TSh7QMWtrt2mfYoCJ9j4Ho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.crl
rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:05:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1764 (0x6e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E89AF, serialNumber=5A7A2DDEA62C890E901F1DCD4046FCD78CC0B41C
Validity
Not Before: Nov 4 22:05:09 2025 GMT
Not After : Nov 11 22:05:09 2025 GMT
Subject: CN=690a7896-ad24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8d:ea:83:c1:fe:97:07:80:fb:9a:ae:47:e0:
a1:56:64:fe:d2:70:33:1b:e9:5f:95:02:db:b2:26:
eb:a4:c0:05:35:d3:e4:e2:dd:d2:16:70:dc:2f:c7:
c8:65:06:79:45:be:d1:e4:03:d4:b3:52:8d:31:0e:
2c:9b:11:bc:de:a2:27:e9:af:74:54:7d:0e:4a:75:
f3:0b:3b:4b:5d:99:12:f4:1e:df:7b:ce:70:8f:e9:
df:3d:98:c6:af:2c:e0:b6:7c:84:93:c8:74:54:cf:
e5:f6:f6:5f:b0:4f:7d:43:e9:4e:0f:2d:1e:aa:63:
8a:d7:e1:b5:83:06:bc:93:41:a3:08:5c:4c:53:79:
f4:2f:d2:ad:61:d1:59:0c:e4:d4:d4:61:65:93:07:
a4:a3:78:5a:89:62:50:7f:c7:4e:ec:eb:3a:b5:58:
25:36:e1:4a:aa:05:99:f9:63:54:cc:3f:0d:a1:f3:
59:cb:a7:31:61:b9:54:b8:5a:df:6e:32:e7:e0:2d:
ac:d6:57:2c:d1:cf:ea:7d:ca:9a:6e:07:97:93:c9:
f6:b2:da:df:b7:57:10:49:b4:f9:57:4c:7d:c8:1f:
67:01:b5:c5:ed:23:b1:e2:2b:c9:4f:e8:15:dd:2c:
0d:a5:ff:fd:a9:77:15:58:83:e9:8c:80:79:80:7b:
59:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B4:B7:6C:0C:58:62:33:43:08:84:CB:A9:B2:6A:2F:E1:13:07:A3
X509v3 Authority Key Identifier:
keyid:5A:7A:2D:DE:A6:2C:89:0E:90:1F:1D:CD:40:46:FC:D7:8C:C0:B4:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fa:6e:40:e3:49:bb:c0:21:47:fa:97:84:f8:2a:1a:25:a3:
30:f7:0f:b8:74:b5:11:10:13:97:0a:12:ba:9c:6b:f6:01:4d:
0b:7d:f4:f6:51:fa:ff:02:ce:5f:de:34:f7:2b:96:c3:5f:59:
f9:cd:a8:57:3a:b7:53:7e:22:99:d9:27:f1:5d:c6:d3:8b:22:
28:13:33:41:04:cc:75:df:e1:cd:1d:bd:10:96:49:da:3d:e8:
81:6c:62:8a:f7:01:6b:e2:5c:4a:6a:f8:c8:29:28:d3:fa:24:
94:41:19:74:0f:d2:04:2b:71:3d:3d:6c:d2:cf:9c:1e:5b:52:
30:62:4d:95:7e:21:f2:cd:97:57:c5:50:ca:e3:50:7a:cf:7c:
87:e9:f4:78:90:5e:5b:98:ef:df:b7:fb:a5:40:45:b8:5a:ab:
92:64:ba:a2:de:d5:8b:9e:5a:69:2c:55:73:8f:3e:b9:cc:79:
1e:89:03:5e:86:4c:c8:b5:09:13:4a:65:57:c0:b2:a1:d5:6d:
d8:f0:c4:3d:16:b3:fb:87:ee:39:26:9f:e9:9b:da:c5:72:1d:
61:93:cd:85:06:29:a2:73:70:2e:e0:7f:a2:03:9e:1d:0b:f9:
1b:ba:34:18:39:c4:b9:5b:c5:25:32:8f:fa:7e:6a:f5:39:c6:
77:c0:ba:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:23:04 2025 by rpki-client