
$ rpki-client -vvf rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft
File: WKIeeyP68huJ00Jw61b3RJwjmYY.mft (raw, json)
Hash identifier: dho1b5OXLMj0e2R9S8Bvtfn7691VYXorKpI56kqU1Xo=
Subject key identifier: 44:87:C7:25:CE:06:8C:A7:7A:F6:28:2C:16:8B:97:BE:91:48:36:19
Authority key identifier: 58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86
Certificate issuer: /CN=A91656C7/serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986
Certificate serial: 4A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft
Manifest number: 48
Signing time: Mon 03 Nov 2025 07:16:21 +0000
Manifest this update: Mon 03 Nov 2025 07:16:20 +0000
Manifest next update: Mon 10 Nov 2025 07:16:20 +0000
Files and hashes: 1: WKIeeyP68huJ00Jw61b3RJwjmYY.crl (hash: LBOHecTmNzK1YH1yBguMPtxcQ9DRK//2WfaWMAsMTCw=)
2: 559FC8C054F411F08DC15C53C4F9AE02.roa (hash: Bm8WKhY+hNcg+fjUuluI2/RvbnR7gkU6ugwO04YyI/s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.crl
rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91656C7, serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986
Validity
Not Before: Nov 3 07:16:20 2025 GMT
Not After : Nov 10 07:16:20 2025 GMT
Subject: CN=690856c5-60e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:84:e5:f8:96:86:83:b0:78:66:96:9d:94:
44:a8:b8:ef:5d:ce:35:87:ad:30:51:11:fc:97:30:
f7:92:2e:d6:41:5a:e3:23:25:81:14:24:06:d2:17:
a5:bb:94:8a:c2:a3:8a:9d:f5:4d:fd:ff:83:b6:31:
f4:d3:5a:81:06:f7:5c:2b:5b:d8:78:7d:5e:82:68:
5e:00:66:00:e2:8f:2d:b2:ec:c8:d5:2a:86:70:6a:
14:be:17:97:d5:3d:eb:7a:2d:d2:c6:ca:c2:4a:ab:
d2:20:96:da:04:42:8f:67:55:61:36:27:d6:9b:0b:
4f:6c:25:1f:11:39:74:35:29:78:a1:72:93:a1:67:
c5:de:b3:d7:12:30:db:e2:6c:90:4e:43:ab:f2:02:
08:6e:18:78:30:c9:b2:57:b8:0e:77:99:47:3b:51:
3e:f7:3b:40:36:b4:c0:1c:38:72:96:6c:89:98:61:
4a:1e:bc:16:aa:d4:c8:2f:d3:3c:4f:4a:68:1d:f8:
70:0e:7f:e2:10:ee:7e:fa:ab:de:e6:0c:bd:40:4b:
26:7a:48:e7:99:a6:f5:49:0a:bf:5e:85:36:85:88:
75:5c:aa:c0:aa:a2:8c:e0:78:77:39:86:9b:5e:53:
ab:33:05:ef:dc:60:e8:39:94:a9:8b:d8:bb:1b:93:
d3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:87:C7:25:CE:06:8C:A7:7A:F6:28:2C:16:8B:97:BE:91:48:36:19
X509v3 Authority Key Identifier:
keyid:58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:d3:37:8d:f9:be:3a:1d:13:14:6d:d5:b7:6e:02:31:df:4c:
1e:58:cb:d4:34:4c:e9:ad:ea:43:85:0c:63:70:5a:6c:7b:6b:
09:67:b8:f6:56:7a:6e:0d:4a:15:fa:55:6e:a3:3a:f9:1c:5b:
45:3c:83:bb:9f:cd:69:88:1a:71:5c:fc:41:7f:06:c6:c3:cc:
30:1f:c4:12:55:cd:f2:0c:34:a5:b0:b7:84:52:7a:e1:20:67:
a0:36:f6:67:17:4b:c2:d3:4c:29:ec:9c:b1:ca:0b:70:f1:e2:
6c:7c:c8:4c:94:ca:fd:8d:35:61:53:98:76:15:05:b1:d7:69:
70:9e:ff:44:ba:06:b8:6d:6a:10:c7:90:c9:31:f8:91:1f:63:
e6:5c:f5:7b:60:22:11:eb:1d:05:5e:01:b0:bf:b0:5e:57:08:
11:17:7b:8b:9a:22:4c:36:ca:32:9f:ae:a4:b3:44:57:87:98:
c9:cc:10:45:2d:a5:29:fe:09:30:65:3f:9d:a6:5b:b8:f6:10:
cf:28:73:0c:b4:85:b0:ed:2b:83:42:95:dc:c3:7b:5b:2e:66:
06:72:08:07:cc:5d:de:0f:5d:35:67:4f:85:c7:d5:19:27:65:
b3:2d:a8:ca:f3:52:bb:4c:39:42:18:d2:27:1e:14:ef:24:2f:
e6:21:de:c7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NTZDNzExMC8GA1UEBRMoNThBMjFFN0IyM0ZBRjIxQjg5RDM0MjcwRUI1NkY3NDQ5
QzIzOTk4NjAeFw0yNTExMDMwNzE2MjBaFw0yNTExMTAwNzE2MjBaMBgxFjAUBgNV
BAMTDTY5MDg1NmM1LTYwZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxfITl+JaGg7B4ZpadlESouO9dzjWHrTBREfyXMPeSLtZBWuMjJYEUJAbSF6W7
lIrCo4qd9U39/4O2MfTTWoEG91wrW9h4fV6CaF4AZgDijy2y7MjVKoZwahS+F5fV
Pet6LdLGysJKq9IgltoEQo9nVWE2J9abC09sJR8ROXQ1KXihcpOhZ8Xes9cSMNvi
bJBOQ6vyAghuGHgwybJXuA53mUc7UT73O0A2tMAcOHKWbImYYUoevBaq1Mgv0zxP
Smgd+HAOf+IQ7n76q97mDL1ASyZ6SOeZpvVJCr9ehTaFiHVcqsCqoozgeHc5hpte
U6szBe/cYOg5lKmL2Lsbk9MNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURIfHJc4G
jKd69igsFouXvpFINhkwHwYDVR0jBBgwFoAUWKIeeyP68huJ00Jw61b3RJwjmYYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1NkM3Lzg1REVEQUQ4NTBB
NTExRjBCMkQxREU0RkM0RjlBRTAyL1dLSWVleVA2OGh1SjAwSnc2MWIzUkp3am1Z
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvV0tJZWV5UDY4aHVKMDBKdzYxYjNSSndqbVlZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1
NkM3Lzg1REVEQUQ4NTBBNTExRjBCMkQxREU0RkM0RjlBRTAyL1dLSWVleVA2OGh1
SjAwSnc2MWIzUkp3am1ZWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJbTN435vjodExRt1bduAjHfTB5Yy9Q0TOmt6kOFDGNwWmx7awlnuPZW
em4NShX6VW6jOvkcW0U8g7ufzWmIGnFc/EF/BsbDzDAfxBJVzfIMNKWwt4RSeuEg
Z6A29mcXS8LTTCnsnLHKC3Dx4mx8yEyUyv2NNWFTmHYVBbHXaXCe/0S6BrhtahDH
kMkx+JEfY+Zc9XtgIhHrHQVeAbC/sF5XCBEXe4uaIkw2yjKfrqSzRFeHmMnMEEUt
pSn+CTBlP52mW7j2EM8ocwy0hbDtK4NCldzDe1suZgZyCAfMXd4PXTVnT4XH1Rkn
ZbMtqMrzUrtMOUIY0iceFO8kL+Yh3sc=
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:59:18 2025 by rpki-client