
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
File: wm9G_ZlSs686fXFd4b86YeJceYo.mft (raw, json)
Hash identifier: vfC5J6/1pp8DrnwsniwuK+0uiXSgaq9/s3eFvn0EMbU=
Subject key identifier: 7C:B9:D8:A8:27:94:AF:F8:6F:78:24:EF:F3:12:43:7F:0D:F1:C3:09
Authority key identifier: C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A
Certificate issuer: /CN=A9117CE3/serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
Manifest number: 0107
Signing time: Mon 03 Nov 2025 05:06:34 +0000
Manifest this update: Mon 03 Nov 2025 05:06:33 +0000
Manifest next update: Mon 10 Nov 2025 05:06:33 +0000
Files and hashes: 1: wm9G_ZlSs686fXFd4b86YeJceYo.crl (hash: 07UPt41zmjY4Njc3D1GlWxYdaMW8zQv8h1UYdhb4hb8=)
2: D2F65B3E2D3C11F089979B7CC4F9AE02.roa (hash: 6J9kztjsMZWsG1YwYpd9mAhESyWByZnQbhLzb1Wj+fo=)
3: BD956DA243A811F0B2160F4CC4F9AE02.roa (hash: DPMo9JSOcY0Ad4D94vkT1qT0OK/brrqmASVUw6EiS9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl
rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117CE3, serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A
Validity
Not Before: Nov 3 05:06:33 2025 GMT
Not After : Nov 10 05:06:33 2025 GMT
Subject: CN=6908385a-0b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a7:81:21:46:dd:34:b0:cf:ef:09:fa:65:2b:
e5:ee:e5:2b:68:ce:78:57:e6:e6:05:11:10:c3:4f:
5b:e7:22:ec:8b:ca:58:3c:be:c8:75:ef:d7:e4:a0:
22:c1:e2:ad:a0:6e:26:db:62:df:54:02:7a:3f:c9:
69:27:2e:79:01:e2:14:63:e8:de:59:03:8e:50:20:
56:64:39:5b:39:31:9f:24:3c:e4:c7:d1:48:e0:f5:
36:81:19:a0:95:96:3a:65:56:03:bd:2a:b9:56:af:
16:e4:be:51:13:4f:06:05:ae:d0:07:4a:88:f8:b5:
5b:aa:b9:50:b2:22:84:ad:2b:0f:f8:a9:b1:e7:b5:
4e:11:ab:d8:b9:cd:f6:7d:e9:58:36:eb:61:b3:55:
03:e3:da:84:ae:1e:99:7f:a7:7a:da:b7:c7:79:08:
13:00:dd:09:97:81:4d:88:b6:60:4a:ed:77:23:a4:
df:64:1b:00:97:bb:c5:aa:ba:7c:b3:13:30:bd:2f:
fa:4b:7f:c3:22:1a:88:db:eb:3f:d1:34:de:48:d3:
4d:62:9b:9b:1d:75:ae:af:ae:5f:d4:16:dd:ef:6d:
0f:07:fe:fe:2d:2b:ae:b2:1c:52:71:11:81:fe:ad:
4e:72:15:2c:d5:b4:9b:a9:20:4c:ef:68:30:2f:47:
46:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B9:D8:A8:27:94:AF:F8:6F:78:24:EF:F3:12:43:7F:0D:F1:C3:09
X509v3 Authority Key Identifier:
keyid:C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:52:a6:42:5d:9a:01:e6:16:18:1d:ce:49:2b:c7:2f:0c:7a:
36:dc:b4:32:6b:90:7d:15:7d:e9:2d:2a:2f:2d:fe:58:d8:d4:
95:9b:58:c8:42:89:bb:4b:e3:5b:29:74:a8:0f:2b:96:f7:ea:
75:e7:b0:ef:f5:ed:e6:48:41:6d:eb:db:0c:3a:2e:cd:e0:71:
14:a2:ad:e4:fb:1f:23:27:8a:db:5a:cd:fb:94:cd:2b:fd:a5:
f3:80:b4:29:57:dd:6a:8d:c1:a1:81:f7:94:7d:93:5c:02:de:
07:f9:35:b4:a0:0e:30:f4:47:7b:1f:7d:1e:26:8e:01:6b:ce:
8b:92:2f:42:3d:49:74:d0:7b:a9:bd:fd:cf:20:85:99:fc:51:
6e:58:c8:bf:d3:44:8b:db:2e:26:ee:a5:3d:24:cc:8c:1e:a6:
c6:3a:40:6d:1f:2e:a5:5d:46:65:26:ff:e1:6d:3b:2e:82:fc:
5b:9a:01:8f:6f:b7:bb:30:90:d9:d1:2a:2b:ae:fb:fc:09:fd:
7b:95:6f:b4:4e:51:9e:fb:68:da:a1:f1:80:0f:66:89:29:a7:
00:92:47:e8:77:1e:c1:fc:9a:ba:01:b6:c8:7a:0d:cc:81:74:
f1:66:f1:66:68:f0:99:65:de:bd:43:85:50:e9:c6:97:cd:f6:
5b:47:c4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:01:06 2025 by rpki-client