
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
File: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft (raw, json)
Hash identifier: BbqbefWOi7R/2N45rSaEx3UGOljxMGPJAsvwEkYefAA=
Subject key identifier: 1A:83:B9:42:17:BE:CB:1F:31:5E:88:CB:76:90:01:A9:52:ED:75:44
Authority key identifier: C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD
Certificate issuer: /CN=A91E2176/serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD
Certificate serial: 08B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
Manifest number: 08B4
Signing time: Thu 06 Nov 2025 19:03:29 +0000
Manifest this update: Thu 06 Nov 2025 19:03:29 +0000
Manifest next update: Thu 13 Nov 2025 19:03:29 +0000
Files and hashes: 1: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl (hash: W6kcpoQf8X4zLWTUBZOuQqnmagQTB6HlU+Va2y2cndo=)
2: 4A9F953EE29611EF8E06890AC4F9AE02.roa (hash: 5xxVenqDrTtB+LAX8MyCpAEyaZJVl5DXQjRG3qyTajU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl
rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Nov 2025 19:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2233 (0x8b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2176, serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD
Validity
Not Before: Nov 6 19:03:29 2025 GMT
Not After : Nov 13 19:03:29 2025 GMT
Subject: CN=690cf101-11b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:dc:72:1d:7b:d5:ab:17:8d:b8:6e:a9:39:26:
f0:0d:b9:f2:0f:2b:d7:48:9d:ce:c1:42:26:3f:51:
b0:98:b5:54:91:7e:af:9f:43:e6:f4:ae:90:f4:ba:
a5:2e:d0:3b:b4:ee:e4:2d:a4:4c:77:17:88:e5:ac:
ed:82:7a:cb:86:69:b9:c4:76:2e:3c:f4:49:0b:97:
9a:37:b3:c6:02:bd:a6:03:8b:ea:ba:0f:fd:cf:dc:
b9:8f:ce:e6:de:a6:e4:60:5c:4e:11:5b:49:4c:f6:
e1:40:07:a9:57:46:e7:e5:43:0e:8e:44:56:ee:f5:
4b:ab:67:8e:c0:c4:35:d7:97:3a:9b:c8:59:0b:bc:
d4:fd:75:f6:af:26:e0:dd:ef:d9:9d:38:3e:46:ce:
52:8e:5b:b3:ed:17:09:71:b9:c7:dd:e1:85:a1:59:
ca:80:df:6b:c0:ee:3e:26:c3:9a:e8:b2:ba:fd:73:
91:9f:67:fc:e4:e6:89:4f:41:5b:ab:55:3d:d5:7a:
67:ba:bb:0f:c7:96:aa:5c:31:ab:a2:95:76:ab:07:
14:22:5b:09:cd:fe:0a:7d:0b:14:86:6e:c3:f8:03:
fd:e6:e2:59:ab:38:94:bc:17:ba:ae:d1:f6:e3:75:
2e:09:4e:cd:79:35:8a:2a:78:d0:23:a5:40:f6:ff:
ac:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:83:B9:42:17:BE:CB:1F:31:5E:88:CB:76:90:01:A9:52:ED:75:44
X509v3 Authority Key Identifier:
keyid:C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:58:fd:2f:81:e5:42:95:04:50:74:fd:0b:c1:9d:eb:7a:f9:
50:c6:7b:35:0c:d5:47:8a:d4:ee:e6:03:0b:af:d0:da:46:2c:
53:c6:5f:f5:12:c7:6c:41:f6:c2:42:6a:77:c5:54:f5:6a:50:
81:e2:85:9f:f0:fd:2c:c6:12:ed:40:7b:67:47:9b:6e:68:f3:
74:05:e3:9d:e7:07:65:63:c4:2a:12:af:ef:1c:e5:45:7a:77:
e1:c4:9b:f6:55:4f:e7:95:39:65:a9:78:c3:5e:36:cf:4a:be:
b7:07:a2:f3:fb:e4:43:30:ce:6e:09:e4:9d:fe:96:84:08:a7:
4f:c9:dd:23:30:fc:d0:41:64:29:87:a0:f5:27:9e:e4:d9:20:
69:40:1a:e4:58:af:22:df:8b:f7:a9:11:31:7e:99:6d:f0:9b:
62:c7:e0:7f:eb:72:8c:4d:2e:e2:df:71:a7:e1:a3:b2:18:9d:
6a:08:2d:91:be:2f:73:01:86:ff:cb:1a:7c:14:65:bc:8b:e3:
92:dd:4a:4b:d6:65:c3:71:81:6d:65:ab:7a:02:7e:15:8c:95:
2b:f7:9a:60:82:df:d4:57:8b:17:5f:bc:dd:0e:2f:29:a8:a1:
31:7c:59:54:86:8b:87:8d:27:43:59:41:89:c9:05:e5:c0:f3:
89:6d:95:99
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTIxNzYxMTAvBgNVBAUTKEMwOUQxMkM3Q0EyRUI0RDM1Q0E1MEE5MzlEM0Q5Q0JF
ODE3RTM5QUQwHhcNMjUxMTA2MTkwMzI5WhcNMjUxMTEzMTkwMzI5WjAYMRYwFAYD
VQQDEw02OTBjZjEwMS0xMWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8NxyHXvVqxeNuG6pOSbwDbnyDyvXSJ3OwUImP1GwmLVUkX6vn0Pm9K6Q9Lql
LtA7tO7kLaRMdxeI5aztgnrLhmm5xHYuPPRJC5eaN7PGAr2mA4vqug/9z9y5j87m
3qbkYFxOEVtJTPbhQAepV0bn5UMOjkRW7vVLq2eOwMQ115c6m8hZC7zU/XX2rybg
3e/ZnTg+Rs5Sjluz7RcJcbnH3eGFoVnKgN9rwO4+JsOa6LK6/XORn2f85OaJT0Fb
q1U91XpnursPx5aqXDGropV2qwcUIlsJzf4KfQsUhm7D+AP95uJZqziUvBe6rtH2
43UuCU7NeTWKKnjQI6VA9v+s7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqDuUIX
vssfMV6Iy3aQAalS7XVEMB8GA1UdIwQYMBaAFMCdEsfKLrTTXKUKk509nL6Bfjmt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjE3Ni84OEFCOEU5NEM2
RkYxMUVBODI1MkUxMDlDNEY5QUUwMi93SjBTeDhvdXROTmNwUXFUblQyY3ZvRi1P
YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dKMFN4OG91dE5OY3BRcVRuVDJjdm9GLU9hMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjE3Ni84OEFCOEU5NEM2RkYxMUVBODI1MkUxMDlDNEY5QUUwMi93SjBTeDhvdXRO
TmNwUXFUblQyY3ZvRi1PYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBIWP0vgeVClQRQdP0LwZ3revlQxns1DNVHitTu5gMLr9DaRixTxl/1
EsdsQfbCQmp3xVT1alCB4oWf8P0sxhLtQHtnR5tuaPN0BeOd5wdlY8QqEq/vHOVF
enfhxJv2VU/nlTllqXjDXjbPSr63B6Lz++RDMM5uCeSd/paECKdPyd0jMPzQQWQp
h6D1J57k2SBpQBrkWK8i34v3qRExfplt8Jtix+B/63KMTS7i33Gn4aOyGJ1qCC2R
vi9zAYb/yxp8FGW8i+OS3UpL1mXDcYFtZat6An4VjJUr95pggt/UV4sXX7zdDi8p
qKExfFlUhouHjSdDWUGJyQXlwPOJbZWZ
-----END CERTIFICATE-----
Generated at Fri Nov 7 15:53:38 2025 by rpki-client