
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
File: WRGN11PwUw7cK4w74mO-2wzOvA4.mft (raw, json)
Hash identifier: z+65dkxVOhiVRhAT63aIGAheo9NlNhe/Ut59rvaGqQA=
Subject key identifier: A7:6F:98:4C:F8:79:CD:80:AA:33:EC:EC:22:8E:8E:5B:64:FD:39:8D
Authority key identifier: 59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E
Certificate issuer: /CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
Certificate serial: 0333
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
Manifest number: 0324
Signing time: Wed 05 Nov 2025 01:11:40 +0000
Manifest this update: Wed 05 Nov 2025 01:11:40 +0000
Manifest next update: Wed 12 Nov 2025 01:11:40 +0000
Files and hashes: 1: WRGN11PwUw7cK4w74mO-2wzOvA4.crl (hash: 0TwFSU91+aKwt2MmZbvvtSHgvCGRWo/LgYyByIin3E0=)
2: 6967C1F494F711EF905E5F13C4F9AE02.roa (hash: 7fAydexKXPdZvEhVXyfnP9N5MybcBu9GtBprbPNnugw=)
3: E15780AA32E111EFB163924BC4F9AE02.roa (hash: dvzhA8SmNiPJaXBGb4hu0iK1TSWFRqrP4dxIxnPOkaQ=)
4: 8409527078B011EE8D737723C4F9AE02.roa (hash: Smslgu7rJqUTUi4Mp8vBgW1QUKGuNL2tLBKb/4Rsvdg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl
rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:11:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 819 (0x333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B12FB, serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
Validity
Not Before: Nov 5 01:11:40 2025 GMT
Not After : Nov 12 01:11:40 2025 GMT
Subject: CN=690aa44c-5f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:c0:b6:db:e2:38:c1:00:e9:7d:f5:bd:22:
d2:16:2b:a7:8b:9c:b4:00:2a:f8:60:d4:eb:f5:d9:
9e:70:14:0f:9f:b6:5e:6a:b8:90:f3:fa:82:af:8f:
81:74:ba:fb:65:f5:b5:32:0e:40:06:86:59:b5:65:
09:9d:59:51:70:42:74:ce:73:a8:3b:05:fa:c3:8d:
02:86:65:67:7d:e7:94:37:75:e3:75:c8:52:2f:a3:
3a:fc:31:f8:ac:f1:31:8c:4d:51:a7:f1:05:bf:00:
4e:e1:1b:64:e2:b4:68:f8:91:84:9b:86:87:de:78:
f1:b1:54:42:e8:2b:4a:29:4c:19:2a:16:98:34:1c:
f8:0a:cb:18:32:d8:6d:c9:c7:25:22:46:34:45:89:
9b:3b:7e:54:81:e1:f7:50:db:25:b3:7d:f5:39:30:
d2:f5:57:3f:28:c6:4e:59:ac:0b:5c:17:de:cf:7e:
a0:d3:61:d3:9a:5b:a1:f5:b0:2f:03:76:85:fc:7f:
0a:75:a6:44:7a:85:08:9a:ea:9c:2d:97:e3:9c:55:
48:7a:f2:d8:a7:ef:62:3f:02:22:31:91:a1:68:21:
d9:14:1a:6d:29:8e:36:b1:73:34:d6:db:31:f7:f1:
f9:5b:f6:c2:f3:10:f8:a9:74:f4:4a:cd:54:d0:cc:
49:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6F:98:4C:F8:79:CD:80:AA:33:EC:EC:22:8E:8E:5B:64:FD:39:8D
X509v3 Authority Key Identifier:
keyid:59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:f6:00:22:26:6f:64:a4:9e:37:4d:39:47:ba:6e:b2:38:5a:
a0:a7:bd:18:8b:0d:d7:19:95:62:01:45:3d:10:fc:5c:1e:ba:
51:b7:a1:18:13:c4:88:a8:41:26:c0:f3:5e:61:97:e5:4a:d7:
8c:4a:47:38:80:22:18:69:90:18:89:22:c4:44:7e:28:58:5d:
08:4f:e1:02:ad:16:82:ea:43:83:f6:12:bf:46:c0:a7:d4:b1:
ae:6e:8f:3c:76:84:ad:ae:ee:56:f6:00:3e:47:7a:1a:56:71:
30:f0:7e:61:00:36:64:14:0e:28:fa:ce:16:cf:8a:74:2a:ac:
22:7c:9e:59:cf:2e:a9:7e:16:e6:8f:f7:bf:97:23:ec:ae:3d:
2f:b0:de:7a:a2:d9:1b:1c:c2:55:ac:b2:44:10:97:c7:bd:7f:
0a:56:cc:8b:06:80:8c:a5:60:c7:e6:6c:a9:46:0f:54:b9:0a:
2a:a7:ec:ef:ff:50:73:c0:9f:ee:fd:2d:b9:e6:60:55:e0:d4:
79:5b:f2:97:1c:a6:9d:c5:2d:c7:18:56:36:51:92:1c:e9:09:
ae:20:67:73:22:4f:2a:2f:c2:b0:d5:61:dd:38:f3:14:b9:9f:
21:90:8f:de:76:d6:05:d4:4c:b9:cb:d8:9d:6d:2b:9e:d2:84:
b5:47:20:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:46:41 2025 by rpki-client