
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
File: WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft (raw, json)
Hash identifier: 5z2ee+rHdR2z8FMvCEnE7Mojptd9fnA+6U1jaOmoupE=
Subject key identifier: 71:F9:FA:38:25:A6:13:0E:CA:25:97:82:89:A6:D0:00:AB:45:51:38
Authority key identifier: 59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
Certificate issuer: /CN=A91C7AB9/serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Certificate serial: 0169
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
Manifest number: 0166
Signing time: Mon 03 Nov 2025 04:02:23 +0000
Manifest this update: Mon 03 Nov 2025 04:02:22 +0000
Manifest next update: Mon 10 Nov 2025 04:02:22 +0000
Files and hashes: 1: WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl (hash: iWYsRQP3u359X6LG7hwB4puYIP2nJuhDUdFbEmnbI5s=)
2: 7CF0A45404DF11F0B877A115C4F9AE02.roa (hash: bc2WkbYAbuGAx2Gf2EfnLZLtMVMYcpQMrHnCADXGRJs=)
3: 5CB841E69B1411EEA456FE83C4F9AE02.roa (hash: pLOgKyFyMkYkgWZ7IaxS8IlsIuIv5okTjVaTAgIeoac=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 04:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7AB9, serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Validity
Not Before: Nov 3 04:02:22 2025 GMT
Not After : Nov 10 04:02:22 2025 GMT
Subject: CN=6908294f-592f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:e1:8c:06:d0:67:d6:ff:aa:16:a8:84:b9:
4c:cb:ef:86:c0:4c:27:19:ee:0c:a7:00:a0:fc:02:
cd:2d:d9:72:0d:0f:15:0b:1e:0d:6e:e0:ff:8a:18:
02:97:49:cf:fb:50:58:7a:62:b4:54:b3:b7:08:5a:
07:07:fe:c4:c1:ae:82:85:db:98:02:9c:b8:e1:1b:
35:a3:9f:59:16:bf:79:37:f1:fd:04:40:41:4d:79:
5e:02:a0:3a:af:08:1c:30:6b:a4:c7:aa:0f:3f:82:
8a:e6:d6:97:88:96:d0:4c:a7:79:92:6c:a0:87:63:
31:07:d0:8b:cf:e9:0d:92:62:e9:b4:c7:65:a3:7c:
e5:29:c7:14:8c:d6:19:40:7a:e6:68:12:b5:3a:ec:
cb:db:1d:8e:ed:93:13:c3:73:9e:64:dc:9e:00:3a:
c6:aa:f8:30:c6:06:72:a0:a0:85:68:e6:15:f9:51:
b0:d7:cf:e4:f6:e1:bd:c7:e3:86:80:f7:7a:2a:c6:
43:9c:cc:3b:cb:ed:f6:40:f6:30:3d:b3:4c:87:a3:
35:fd:db:39:32:f9:32:03:c0:68:54:9a:2c:47:1c:
29:9b:ae:de:88:0f:ab:bc:3a:ed:33:2c:56:58:06:
ad:d3:cf:a1:76:33:5d:7b:d4:39:9a:af:02:48:4c:
a2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F9:FA:38:25:A6:13:0E:CA:25:97:82:89:A6:D0:00:AB:45:51:38
X509v3 Authority Key Identifier:
keyid:59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b0:3d:a0:61:03:9f:5b:96:c4:95:d3:53:ab:f4:e7:f8:6a:
6c:16:63:5e:19:e7:8e:dd:bb:5d:f1:63:f8:f1:de:88:44:b8:
c4:99:c9:ac:e5:6e:a1:e6:29:2e:96:d7:0f:64:de:16:72:6e:
c3:69:60:cb:45:64:8b:4f:1d:8f:c0:c2:13:24:cb:41:c8:68:
a6:e5:e4:61:a7:8e:ac:93:45:5e:4e:19:6d:aa:97:b4:d9:e8:
14:33:fd:6f:e2:2e:20:f3:69:a9:7a:d2:63:6c:15:17:6d:ad:
78:72:2b:1b:88:ad:66:bf:22:db:0e:d7:05:e6:6f:0e:b9:06:
80:60:92:8b:2b:77:03:46:4e:5f:92:f5:32:6f:b1:e1:0d:4f:
ec:8f:94:0d:36:1f:1c:e7:3a:a1:06:1e:45:e9:4f:65:3c:ec:
e7:e5:08:77:87:83:1a:dd:56:26:1b:ef:20:75:d9:72:c6:0c:
c0:2a:40:8c:77:99:b1:7d:56:88:b3:ab:c3:84:d7:cb:b8:85:
4c:a4:ce:0e:1a:fd:fb:d1:36:f5:ba:3d:3c:85:f2:1a:3c:df:
5a:af:f2:48:3e:f6:06:a0:51:21:f0:f2:ed:29:1f:98:2a:30:
c0:89:3c:7d:43:ec:9e:e3:a3:8f:5d:47:fb:72:c0:58:1c:52:
6e:d5:68:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:11:10 2025 by rpki-client