
$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
File: wpWXslitZgzgunl1gwnrjFeVlDU.mft (raw, json)
Hash identifier: SP+4LhvY0qnOxrG+7SumgVzHbM5ZFFnUAyAQte0yx44=
Subject key identifier: 49:BB:02:EA:AC:02:A8:6E:29:B3:5A:9C:C2:F5:F2:A2:C5:FD:D4:09
Authority key identifier: C2:95:97:B2:58:AD:66:0C:E0:BA:79:75:83:09:EB:8C:57:95:94:35
Certificate issuer: /CN=A91813ED/serialNumber=C29597B258AD660CE0BA79758309EB8C57959435
Certificate serial: E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
Manifest number: E3
Signing time: Wed 05 Nov 2025 05:37:30 +0000
Manifest this update: Wed 05 Nov 2025 05:37:29 +0000
Manifest next update: Wed 12 Nov 2025 05:37:29 +0000
Files and hashes: 1: wpWXslitZgzgunl1gwnrjFeVlDU.crl (hash: gQmbEb9GDkgqXPMI309OYzvZe5iwDXdSV4AV1kAABzE=)
2: B28CA9F85F3711EFA108CA0CC4F9AE02.roa (hash: hNKZg5U6CuduqjU9m9FE6idsp6kIvYIqECKnhkzHT9Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.crl
rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229 (0xe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91813ED, serialNumber=C29597B258AD660CE0BA79758309EB8C57959435
Validity
Not Before: Nov 5 05:37:29 2025 GMT
Not After : Nov 12 05:37:29 2025 GMT
Subject: CN=690ae29a-46f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:b1:2b:41:ab:38:e2:55:8d:59:36:8a:f0:
b3:d6:01:76:b4:b5:72:69:d9:09:a0:66:6a:88:e5:
71:04:52:6b:dc:b3:3d:7f:30:f4:61:4d:a8:0f:37:
01:cc:eb:c9:d9:30:3b:98:9e:d9:3d:de:07:ba:fe:
c6:a6:87:0d:d8:45:20:7f:eb:9d:4a:8c:46:57:9e:
0a:10:dc:46:f1:fc:e0:d0:4b:4c:11:a9:03:50:00:
e1:1a:13:59:61:d6:90:9e:91:12:29:2a:58:78:a5:
bd:b1:ee:b4:38:33:00:ef:de:fa:26:fd:c8:3a:89:
93:00:f5:ae:c6:1a:92:59:ab:ba:20:55:ee:49:6a:
f5:d1:2c:ae:14:b8:82:06:fc:d9:dc:d9:82:6c:37:
d1:98:cf:79:e0:32:36:9b:85:6c:54:a8:3b:c8:6e:
ee:71:61:c0:fb:53:cc:e5:6c:17:87:f8:a1:58:84:
db:ca:3f:8d:5a:de:b8:72:9e:b8:5d:d7:57:11:49:
1a:13:06:36:25:86:c8:02:a7:f4:8b:63:6f:c6:04:
ec:a9:1e:f4:70:f0:a6:96:da:34:d3:55:96:b7:5c:
ce:f8:09:05:81:d5:3b:bd:a7:2e:52:e2:e8:da:e3:
79:3b:2f:c8:28:4f:62:66:7c:3c:42:cc:eb:4b:c9:
5f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BB:02:EA:AC:02:A8:6E:29:B3:5A:9C:C2:F5:F2:A2:C5:FD:D4:09
X509v3 Authority Key Identifier:
keyid:C2:95:97:B2:58:AD:66:0C:E0:BA:79:75:83:09:EB:8C:57:95:94:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:40:e9:25:75:23:c2:1c:a8:d5:e2:e2:d3:d7:77:69:3c:3e:
de:e0:ac:69:e2:c0:5b:08:31:38:c4:4b:f8:3f:e4:69:20:3d:
35:d0:35:f8:32:18:c1:8b:81:9d:54:76:91:9c:dc:b2:da:65:
06:37:db:8e:58:2d:10:a8:d5:6c:d7:3b:08:d5:ce:47:52:86:
6e:2e:ba:4b:74:1e:a9:16:e6:1c:14:b1:eb:1c:12:10:ae:b9:
50:a9:68:5c:f7:f8:4d:89:a3:d1:a0:d8:d6:df:cf:a6:59:54:
80:ac:72:39:23:3d:61:1f:e6:48:a4:db:32:1f:6c:25:88:23:
d7:b7:86:6f:93:9b:60:8c:22:59:09:51:bf:ff:58:6b:6a:d5:
2c:7c:08:9b:14:77:69:40:7c:4a:a6:ff:02:0d:e1:28:db:ff:
49:19:e9:5a:c1:63:a6:26:5d:70:76:cf:6e:52:15:6b:b8:b2:
b0:71:3d:44:bc:73:fa:1a:a6:3b:f7:f9:e8:65:07:e0:16:ec:
74:00:01:9a:15:3c:b8:18:c8:c8:85:2d:c8:2c:64:74:00:b6:
1b:bd:56:c7:16:15:04:e6:4f:c5:74:fd:11:ed:64:6d:db:4b:
89:f0:da:47:7d:b0:91:81:78:d9:dd:f7:a9:a7:4c:a7:3d:23:
5a:13:8d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:49:44 2025 by rpki-client