
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
File: Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft (raw, json)
Hash identifier: o/k0NTU9BIU5v7neZ0lkQIEzuc4oTZ9Ye2zMtALUUIM=
Subject key identifier: 1B:63:E3:19:3C:99:C6:F3:4D:35:8A:70:86:42:AB:0E:FD:2B:10:E4
Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9
Certificate issuer: /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
Certificate serial: 03D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
Manifest number: 03C0
Signing time: Wed 05 Nov 2025 00:48:20 +0000
Manifest this update: Wed 05 Nov 2025 00:48:19 +0000
Manifest next update: Wed 12 Nov 2025 00:48:19 +0000
Files and hashes: 1: Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl (hash: scQRZcwBCgOtNDuu7pdgDNuBcGY0ceLzqTuJensXG7c=)
2: 2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa (hash: nfR34cWIXlmbnxZObF117xAPX2RJTODqf4QtFwTlL+c=)
3: CC5A0854D0DD11EFB1C6656DC4F9AE02.roa (hash: uBqvI5dq8qNrDbHw4p02iYakpWTkn0S51P6ziID2+EI=)
4: C02374609D0E11EF866C8F16C4F9AE02.roa (hash: scTIVhqGYW6GoZyvhCkZ72zHa5qMbQB5MWHuWvi79lw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl
rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978 (0x3d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D90B9, serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
Validity
Not Before: Nov 5 00:48:19 2025 GMT
Not After : Nov 12 00:48:19 2025 GMT
Subject: CN=690a9ed4-ca7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:eb:7b:a7:46:00:d9:13:af:2a:d4:46:49:76:
83:91:fe:a9:fb:2d:22:b6:7c:18:c4:cd:b8:98:c1:
ca:4c:e9:8d:c5:f3:e3:73:1a:a0:e1:ab:c9:61:32:
a1:ea:47:b1:28:66:56:7b:2c:98:80:a6:41:b4:50:
2d:fd:88:3e:da:d8:a2:83:33:3a:1b:3e:11:0d:87:
91:82:2b:85:e4:8e:26:4b:6a:02:93:d4:31:9d:af:
2c:9c:1d:f9:3a:c7:fe:28:2e:8a:e1:16:e3:e3:da:
71:dc:46:75:6d:06:e6:7d:2f:98:33:87:f8:1c:20:
3a:55:fd:50:49:52:bf:a4:9b:03:0a:94:4b:10:c0:
64:dc:6d:53:3f:a9:74:9b:32:ad:b3:33:44:6b:b6:
bc:a6:5f:1e:8e:80:16:d1:ac:4c:f2:79:ac:9b:ff:
7d:b5:a4:d8:7b:42:d4:ee:51:2e:31:56:b2:a7:da:
02:36:ba:c8:77:d0:cd:db:a2:ba:23:1b:dc:26:00:
91:2c:c1:da:c3:bf:cc:72:e5:4a:f9:6b:5f:c6:ee:
7d:98:fb:c8:0b:cb:08:df:60:74:a7:ac:00:04:aa:
09:22:c5:3f:07:ed:f0:21:4a:48:68:ca:65:26:82:
95:23:c6:27:49:8b:f7:ad:24:f8:3f:4f:f6:ba:5c:
f7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:63:E3:19:3C:99:C6:F3:4D:35:8A:70:86:42:AB:0E:FD:2B:10:E4
X509v3 Authority Key Identifier:
keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d0:8f:95:cd:b6:2b:87:f8:ed:0d:fd:77:93:eb:9e:d1:10:
9a:0e:33:84:ea:8f:b3:8e:ba:de:2b:44:1c:89:54:3c:4f:14:
f8:9c:8a:19:d1:e3:a7:4f:83:bb:d6:6d:5f:ea:70:54:76:59:
c4:db:d7:09:0f:62:72:30:38:63:38:86:8c:ba:9d:19:1c:e0:
02:d4:d9:ce:02:0c:64:28:5d:46:79:92:c3:3d:f9:b2:f5:d6:
03:0d:d0:dd:1c:19:10:1c:80:82:38:5e:04:43:89:2a:75:fb:
35:93:6e:99:67:ac:29:71:e6:27:5f:c3:c9:79:f2:b5:ec:59:
4a:9a:9a:c1:ba:8c:59:d7:d3:79:d0:93:47:15:7d:16:ad:1b:
e8:4f:40:fc:3b:6e:6b:7e:c2:41:81:3d:73:d5:6d:bf:94:6e:
5d:30:8b:65:14:b8:20:6b:ed:cc:d2:30:53:1c:62:a1:1c:31:
5c:fa:72:75:ec:0a:a3:d7:1f:2a:2d:11:bc:a2:4c:7e:e9:70:
b3:64:89:4b:9c:09:64:59:ba:17:bf:18:13:37:b3:4a:f6:83:
6d:58:60:41:05:68:81:64:7d:30:05:d1:ba:04:a0:35:c1:25:
b8:12:10:46:2d:1e:c5:7b:6e:9d:b3:9f:97:c5:e5:25:c0:4c:
42:d7:78:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:54:47 2025 by rpki-client