
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft
File: WECNLJ73mVEabl1w-C7IaZbzE_Q.mft (raw, json)
Hash identifier: k051rFZ0A3CTFjg6sMiW9jYD84tNSm+fRPCciVe7z3Q=
Subject key identifier: C1:52:C2:B0:B5:B2:DD:31:F6:80:CA:87:56:AF:B8:A6:F4:29:4A:1A
Authority key identifier: 58:40:8D:2C:9E:F7:99:51:1A:6E:5D:70:F8:2E:C8:69:96:F3:13:F4
Certificate issuer: /CN=A91B85B2/serialNumber=58408D2C9EF799511A6E5D70F82EC86996F313F4
Certificate serial: 072E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft
Manifest number: 0724
Signing time: Tue 04 Nov 2025 21:55:23 +0000
Manifest this update: Tue 04 Nov 2025 21:55:22 +0000
Manifest next update: Tue 11 Nov 2025 21:55:22 +0000
Files and hashes: 1: WECNLJ73mVEabl1w-C7IaZbzE_Q.crl (hash: NVqhEH5BKHd0VZyiC9+aGGndT8AWRmUcBTEHZ1sAamM=)
2: E4A690EE5AC211EFAB8E8C16C4F9AE02.roa (hash: HLY05ebeHAtJDynZ8me2Y2C5RnqZ102UvmuTDf9sJCY=)
3: 3DD34804574A11EBB748600AC4F9AE02.roa (hash: DfemyX/xIQ4GwH9xKpPchh2dJwYny+kmeqQr/W+Rj/s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.crl
rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1838 (0x72e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B85B2, serialNumber=58408D2C9EF799511A6E5D70F82EC86996F313F4
Validity
Not Before: Nov 4 21:55:22 2025 GMT
Not After : Nov 11 21:55:22 2025 GMT
Subject: CN=690a764b-42e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:3d:92:34:90:65:c4:0b:ec:0c:b9:0d:9b:
52:e2:2b:29:18:a4:4d:d3:f7:2c:a8:a3:17:13:d8:
4e:b1:b9:f3:4b:3a:d4:fb:9d:d8:cd:fc:d8:64:1e:
63:45:28:29:8c:63:e6:5c:0a:7b:bc:46:c3:80:85:
29:63:5e:5b:07:f9:b5:ba:6b:5a:3f:5d:19:09:0e:
53:dc:2a:ac:2d:e9:d6:c0:6e:b4:89:f9:58:63:81:
5a:e0:e0:51:9d:7d:a9:0c:8d:e1:7d:21:87:3b:8b:
98:1a:ba:c8:41:88:e1:6c:65:87:9e:70:c8:41:fb:
0d:49:c0:70:43:c6:8d:11:f7:8e:98:e7:76:19:62:
c7:91:08:05:b4:27:e8:e2:de:c5:21:52:0c:27:1d:
16:03:84:f9:93:a3:a6:27:93:e7:27:84:86:89:5e:
6b:32:eb:36:e4:ed:9b:9a:a1:76:e9:9a:a6:99:f6:
53:4b:4f:3b:08:f9:5e:1b:b0:c8:11:fd:dd:b9:8a:
12:6c:aa:14:5a:a1:c4:a0:28:bd:60:9a:43:a2:ee:
aa:e8:53:95:6c:f5:70:5d:db:4e:64:46:3a:17:b7:
dc:b2:dc:42:aa:76:c0:43:e6:e6:3f:ac:55:50:77:
b7:59:78:15:f5:3b:1b:ef:83:df:3d:ce:8b:e0:65:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:52:C2:B0:B5:B2:DD:31:F6:80:CA:87:56:AF:B8:A6:F4:29:4A:1A
X509v3 Authority Key Identifier:
keyid:58:40:8D:2C:9E:F7:99:51:1A:6E:5D:70:F8:2E:C8:69:96:F3:13:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:34:57:65:92:09:09:55:bc:65:f8:dd:d1:84:b6:5f:fd:cd:
e3:12:dd:65:4e:ca:08:09:e1:2b:7d:09:b4:80:f7:f6:35:2a:
87:c0:d8:d7:de:28:3c:85:27:99:50:ed:8e:aa:a4:30:34:9e:
a6:77:af:80:de:04:ad:0e:fb:ce:8a:f3:2f:28:5f:b7:9e:4a:
9c:09:6c:cc:37:16:80:fa:1c:9f:12:4f:43:03:0a:7e:75:59:
cb:45:7a:82:bf:dc:fc:11:a3:f0:46:7b:49:54:9a:50:46:70:
bc:ee:77:38:30:4c:1d:95:c2:7d:eb:76:92:5b:a4:89:6a:ce:
a9:9b:89:ec:45:e8:48:a0:a8:e4:2c:8d:fe:4f:38:3a:60:cb:
54:77:d0:30:0c:15:2f:30:f3:00:2c:f3:50:5b:bf:0f:38:aa:
68:f6:80:20:1a:d6:c5:68:7a:f0:82:cd:ec:e7:5c:1f:d8:73:
ef:98:49:04:c4:66:22:65:0f:85:15:16:36:8b:a2:ad:5d:de:
ec:44:c9:7f:7a:97:75:3e:05:57:34:5d:31:ed:1c:64:69:95:
87:e6:e8:fa:3c:eb:37:1b:2c:b7:1b:37:ae:38:5b:ba:90:5d:
e2:bd:43:1b:16:a8:2d:c6:be:d0:c5:b3:94:33:44:b5:af:56:
22:b1:6a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:03:53 2025 by rpki-client