
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
File: WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft (raw, json)
Hash identifier: mz0GHgYS9rR0HQrXJrKkRAqxmYtm2gOQ6R7JF3dyyjo=
Subject key identifier: A0:59:8D:FD:29:06:2E:A8:4C:1C:6A:F6:6B:07:DE:5C:F9:99:7D:22
Authority key identifier: 58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B
Certificate issuer: /CN=A912C72C/serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B
Certificate serial: 0635
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
Manifest number: 061C
Signing time: Tue 04 Nov 2025 22:56:40 +0000
Manifest this update: Tue 04 Nov 2025 22:56:40 +0000
Manifest next update: Tue 11 Nov 2025 22:56:40 +0000
Files and hashes: 1: WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl (hash: yUK6WJ2uf8IVY2gMo7vhFLopBOSv5OmnBT+jUrv7Y3Q=)
2: D756DF180BF411ECB17CCF3AC4F9AE02.roa (hash: Ta4xFyi9glY4xr2WHsXG6St6wnwO3U134/DYeOjCkmc=)
3: C2BDF91086EE11EFB5A6B352C4F9AE02.roa (hash: vOnw1zBAg2FFcl8sBOmkESgReB8BHoF4g3tKhlo/818=)
4: 101150200BF211ECB242D930C4F9AE02.roa (hash: Za8+PUGR68jxs9Nmg2MCsdR8AdTWP/IWaW3QjpYveqc=)
5: D84424F80BF411ECB17CCF3AC4F9AE02.roa (hash: YdIu03zU60AoY5wUNSEkgrpdE4J72FH7Era61OXixIQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl
rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:56:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1589 (0x635)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C72C, serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B
Validity
Not Before: Nov 4 22:56:40 2025 GMT
Not After : Nov 11 22:56:40 2025 GMT
Subject: CN=690a84a8-f081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bb:06:8b:3b:a7:52:e2:11:2b:1d:b3:cb:7f:
92:8c:7c:0b:3d:70:97:72:4d:f2:a7:11:0a:f9:4f:
b5:ce:59:ea:29:08:b1:72:a7:56:f3:71:4f:a3:1d:
cb:b7:92:bb:34:f8:88:06:75:7f:8e:2e:dc:95:64:
61:05:6a:74:88:89:c2:3f:69:dd:b9:73:ec:d4:a4:
87:64:02:85:e8:f9:73:21:7c:13:1f:0d:98:94:d7:
ae:9b:f2:4d:f1:e4:13:e8:0d:95:48:54:f5:3f:f7:
b9:4f:30:90:07:cb:43:2f:bc:8a:3c:3f:ec:52:f0:
9d:0d:b4:ac:c8:bb:7a:33:f3:c3:a8:3c:88:d9:8d:
1d:1f:8b:d9:d7:e6:f4:9f:07:d5:b0:4f:24:05:7d:
1d:bc:9c:75:5e:3d:67:04:64:aa:f1:57:1e:cc:bf:
63:72:e6:1a:da:b1:84:98:6e:bf:e8:79:ed:bc:cf:
47:c2:e2:bd:bf:2b:ed:34:c3:69:79:09:6b:3b:3c:
91:f1:ac:73:28:74:21:0c:03:37:2f:7c:f0:b2:30:
c2:fd:b4:36:ab:83:76:ff:5e:65:59:fa:2e:32:36:
2d:be:28:07:89:b4:a8:3a:ad:3d:9d:fd:fe:73:5a:
15:a5:9b:8b:65:7e:d8:28:97:eb:9a:c4:4a:41:9a:
ac:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:59:8D:FD:29:06:2E:A8:4C:1C:6A:F6:6B:07:DE:5C:F9:99:7D:22
X509v3 Authority Key Identifier:
keyid:58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:1a:a8:85:34:01:23:87:f7:de:fc:8f:00:88:ab:4f:ca:fd:
4a:a9:04:9b:32:cc:9a:b9:50:b3:ed:1a:3d:30:75:cc:c3:a5:
f2:1e:3d:73:5f:fa:a8:75:b4:5a:8f:e2:80:fb:c7:08:c6:ed:
fc:3c:b9:4f:34:a6:38:a5:12:5b:1c:14:1f:76:2f:19:48:67:
22:84:69:f4:98:74:c2:c3:9e:2c:55:58:f6:de:26:fd:f0:e1:
14:68:f8:33:1e:40:82:1c:44:91:1c:0b:05:cc:73:56:ed:ab:
2d:d0:98:c1:96:4d:6c:7f:c2:49:9c:07:23:f1:57:26:2d:9e:
1a:8b:1b:10:a5:54:7f:95:3d:04:a3:81:9c:74:e9:da:a1:cb:
b2:3e:a6:df:d1:8a:b7:ca:54:16:71:ad:86:48:71:1e:69:80:
bf:b4:75:19:f2:67:0f:89:c7:36:a8:58:7c:bb:b6:25:3e:94:
d2:b8:11:fd:88:28:e5:3b:64:93:5b:43:0f:0d:45:9a:65:85:
7c:15:01:34:50:d1:4d:76:80:f5:9b:33:7f:34:28:83:5f:d3:
1d:e3:3f:c5:25:70:13:ce:60:97:7c:6f:9a:00:0b:95:9e:b8:
8f:e2:6a:fc:1c:7f:0a:28:e9:62:69:79:90:03:8d:65:ec:d6:
d6:b9:b4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:23:37 2025 by rpki-client