
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.mft
File: Wooi55jo9JLh-FhQOV63mFXso-U.mft (raw, json)
Hash identifier: 7k962lCW+aqxWLNQXGlY10tWb36rGzxvcPNa4vXNc5o=
Subject key identifier: 28:27:C3:F0:C8:EE:AE:76:BD:08:6B:16:27:AF:C2:D8:66:67:5F:EF
Authority key identifier: 5A:8A:22:E7:98:E8:F4:92:E1:F8:58:50:39:5E:B7:98:55:EC:A3:E5
Certificate issuer: /CN=A9152A4E/serialNumber=5A8A22E798E8F492E1F85850395EB79855ECA3E5
Certificate serial: 067D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Wooi55jo9JLh-FhQOV63mFXso-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.mft
Manifest number: 067C
Signing time: Sun 02 Nov 2025 22:26:12 +0000
Manifest this update: Sun 02 Nov 2025 22:26:11 +0000
Manifest next update: Sun 09 Nov 2025 22:26:11 +0000
Files and hashes: 1: Wooi55jo9JLh-FhQOV63mFXso-U.crl (hash: 3N9tIiUb4QQr3F3A1ZOBgIaWiCHnGx7yvCW8DJs572g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.crl
rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Wooi55jo9JLh-FhQOV63mFXso-U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 22:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1661 (0x67d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152A4E, serialNumber=5A8A22E798E8F492E1F85850395EB79855ECA3E5
Validity
Not Before: Nov 2 22:26:11 2025 GMT
Not After : Nov 9 22:26:11 2025 GMT
Subject: CN=6907da84-35c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ae:82:d1:d1:0e:b2:6a:aa:40:bc:14:4c:92:
4e:52:23:c9:68:3c:57:fa:63:2f:ca:d0:ab:7c:06:
f8:d8:80:1d:0a:69:81:31:c2:8e:ab:0b:f1:e9:74:
93:ac:4b:1f:0b:1b:94:6f:44:a7:18:d5:9a:76:f5:
94:93:82:27:f3:14:b9:0b:25:f8:98:98:6a:27:67:
41:97:ac:12:0e:9e:89:7f:26:ab:1e:73:16:1c:b9:
7c:0e:3a:2f:af:60:c9:9b:7b:b7:a6:d5:4e:d7:a8:
aa:e4:e5:43:5c:a2:14:a1:45:49:1b:75:6c:9a:a5:
c2:bb:95:43:5c:1f:89:65:2a:c4:fb:02:65:6c:a7:
ae:49:f8:2b:d4:0a:7a:69:47:21:af:d3:83:bb:cb:
4e:9e:f4:ec:35:ed:2c:3e:fc:0d:a1:a4:fc:dd:0c:
df:96:63:56:5b:f1:8e:72:01:5b:5f:4a:ca:cd:90:
75:91:0e:4f:e6:b9:4e:65:55:de:3a:56:55:8e:9e:
df:bf:f5:70:83:d4:bd:ee:7f:ce:52:1e:af:2c:22:
0f:da:b9:2b:0d:be:22:db:0e:a7:94:ad:a0:93:ac:
b7:d5:7d:dc:fe:bd:71:46:22:36:69:b4:51:f1:ca:
2f:1e:74:1d:62:52:56:34:6e:15:a6:0c:54:01:de:
bc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:27:C3:F0:C8:EE:AE:76:BD:08:6B:16:27:AF:C2:D8:66:67:5F:EF
X509v3 Authority Key Identifier:
keyid:5A:8A:22:E7:98:E8:F4:92:E1:F8:58:50:39:5E:B7:98:55:EC:A3:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Wooi55jo9JLh-FhQOV63mFXso-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:fb:05:2a:60:2f:d8:88:d4:b2:38:d6:32:dd:02:d6:61:8c:
18:ad:6d:46:2b:93:e8:68:5e:5d:2b:2d:fa:80:72:4e:8c:f2:
3f:42:ff:0c:6b:c6:e5:14:d4:90:42:3a:1a:99:5a:67:54:5b:
84:9b:27:fa:62:c2:aa:49:1e:da:26:c1:c6:be:30:75:2f:8e:
e6:51:d2:d6:dd:3d:58:8a:37:63:75:f9:c9:12:54:7b:ea:09:
cb:f6:6b:37:42:12:77:8e:be:12:03:f7:56:53:6c:e3:e9:c9:
87:33:79:57:71:3f:41:5b:0d:3f:87:99:14:12:8b:89:bd:b0:
96:cb:13:dc:b8:96:19:09:92:54:52:2e:49:1b:fb:2b:39:a7:
64:27:65:32:1b:2c:84:a4:cc:12:09:e6:0a:16:21:ce:96:79:
b3:56:01:8a:84:d0:28:7a:86:d7:6d:ae:e2:e0:c8:14:7a:6b:
27:af:68:83:b4:6d:15:3e:77:cd:6c:1c:b2:29:c7:26:72:12:
9d:39:f3:f1:a3:9a:62:f2:57:97:87:34:60:da:eb:84:83:98:
b1:56:86:66:49:30:f8:0a:ef:98:ac:05:4c:ac:11:3a:ab:7a:
41:f3:ed:23:c6:69:2c:61:d0:1e:1f:dd:ce:51:e2:59:04:8f:
ef:1d:27:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:35:18 2025 by rpki-client