
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
File: WKGWp78G8uFukJ0ncUG6RJEfH08.mft (raw, json)
Hash identifier: CVz64uuIAvMtlHZW6Cy4eKgwQouatIdALq0vL12yChc=
Subject key identifier: BE:52:DC:7D:89:62:D6:F5:14:D1:72:6E:19:8D:02:7D:FD:D2:4C:98
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 3660
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
Manifest number: 3571
Signing time: Tue 04 Nov 2025 14:52:07 +0000
Manifest this update: Tue 04 Nov 2025 14:52:07 +0000
Manifest next update: Tue 11 Nov 2025 14:52:07 +0000
Files and hashes: 1: WKGWp78G8uFukJ0ncUG6RJEfH08.crl (hash: tS35YpRc8M7PCTpYNqDMGAClHsw1/sybyJ47zaIFBxI=)
2: 92B41AACB17B11F0A5D78E54C4F9AE02.roa (hash: bdFFvc6eNQU1+yjsu6zdGpd9HjnTWxx0y+6B+LSnliU=)
3: EFF618B85C7311EF9CC47281C4F9AE02.roa (hash: lIANGK6Kn2MugRFq01BJgGhUwBHYhGPRL+AhDQBA5Do=)
4: AC8A67CA100311F085EE3D29C4F9AE02.roa (hash: T/rcx/oBePx/fFY5liuYl1FWNJgd5CikRWxOV60Eb+s=)
5: 493BCC24BC6911EFBA2E5C78C4F9AE02.roa (hash: ED0l+M3XW8yfiIKv/qBb5H5Y5anJhlkDWFxpGJ+C/jc=)
6: 5553B5FEE90E11EA998F5735C4F9AE02.roa (hash: 7Y+BMS/66rPoGcFQGfUmmEmIY/lvqgpMP8T/jWrEFog=)
7: E0342C7AACF811EDA84F9711C4F9AE02.roa (hash: JW9VEUpPQX6Yip1p8OuIfJey2xwoc83kLB7ewV443Q0=)
8: 5D001D76932811E8BC93865BC4F9AE02.roa (hash: pHntxFpGcz85fh4g8wJJV0K9ZMyE2AlZpDPCheVdfGE=)
9: 183E52D8224711EB9EC51D58C4F9AE02.roa (hash: ZGq5JFpnBl6F/9RJYSzWIqvoJrxf/ut9GoB7c3G4b0w=)
10: 5C5998765AD611EFA2E29C7BC4F9AE02.roa (hash: I3gilpNI/WjtxsTD/w6Z3Y+IRfSXnYHa5irJjXL586Y=)
11: F1120B125C7311EF9CC47281C4F9AE02.roa (hash: lWRvTuPg6LzSZBPd+6lJM0jAzSYZ9gW7/FAk9bnrczc=)
12: 0E9272DA768611F08998521AC4F9AE02.roa (hash: bGBXDK+xcvHyPNZ/oI+s2EN0dL3EuzSCaA64bObOVdg=)
13: 2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa (hash: pC+fVhWZhAlHI54GzrYegWShgGirXMUII/btkAhefI4=)
14: 309268DCBB7E11E9AFB49C42C4F9AE02.roa (hash: vkdEUpa0uX2LdRNKslgCoqxAxrazYilRXx4dGIkC7ss=)
15: 312AAAD4BB7E11E9AFB49C42C4F9AE02.roa (hash: tm6lZWT2jSaQ2mTovYZkiilxmKWiSUYMcY5Ywr80DlM=)
16: EF706AC45C7311EF9CC47281C4F9AE02.roa (hash: KFqiJvZSOQ4AGYSeiVNs4qK0DY9PSIDgrHR+mxW9KOs=)
17: 5C3F2BB6932811E8BC93865BC4F9AE02.roa (hash: tZHLP6nM/PTOaw/rmeUMVa1wU4QqlWqKu6p2vcEjWm8=)
18: F097E10C5C7311EF9CC47281C4F9AE02.roa (hash: 7CjS9ffPyOrzJz1ZAktWX3KaOjOKC/5jGyfAIJ4BJyo=)
19: 184CBE58768B11EFAF7A8C68C4F9AE02.roa (hash: LT9r+sRto5ZOYudi5sFYiwbtxYl/cY+w1R+R7OKpEeI=)
20: 97DFFA2AD39E11EF9395C676C4F9AE02.roa (hash: P6z1l/i5fCMa+njXzS/IVZH5AnBAQ64cA+kn7DDOLo0=)
21: 81ACB3888C9611EE88DE0726C4F9AE02.roa (hash: SGgawQJ8e+bc7GkpKZMh+cEtFBap2rFAVcln1BmNOkI=)
22: 8987F942335911E8A1642A7FC4F9AE02.roa (hash: bo4+lqzgHx9mwwzNsiPnPqvLCTaS+zSdlr02VCrtbuY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:52:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13920 (0x3660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Nov 4 14:52:07 2025 GMT
Not After : Nov 11 14:52:07 2025 GMT
Subject: CN=690a1317-2d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:d7:33:c7:27:fc:c8:f7:8f:68:f1:ab:3c:
c1:45:e9:9c:d7:80:35:61:de:c7:04:a3:d6:2b:b0:
40:41:1b:a9:7e:4c:64:54:32:87:07:47:d7:4a:94:
fb:13:c5:61:bb:a2:15:60:ba:28:05:fe:a5:09:fe:
19:93:09:1e:b4:0f:c7:2c:14:25:6c:fb:c0:cb:35:
dd:67:49:d5:6b:20:c4:98:6f:6c:b5:38:88:f5:95:
e8:f6:e9:cf:0d:59:75:7b:ab:b1:ca:50:91:1e:ab:
41:b6:97:15:13:44:02:b3:5f:28:40:f9:05:58:32:
1e:2e:71:8c:6c:62:aa:f3:ee:f7:68:6b:19:f8:9a:
7b:b5:31:68:e9:bd:a1:36:85:1d:a8:9c:06:7a:e3:
9a:f0:77:42:71:98:b1:ed:d5:fb:c9:f0:ca:c3:b3:
6a:90:78:8c:cf:61:bd:dc:b0:1c:a5:a8:73:ca:e4:
1c:a2:42:1e:c7:6b:2e:3f:58:94:b9:66:ae:a7:c7:
9c:c6:6d:27:5e:35:4b:d0:53:7f:12:44:af:aa:a1:
69:71:50:a3:0a:1a:d4:3d:84:f5:85:93:67:32:a9:
ab:bd:8e:c2:87:42:68:0f:fd:40:a9:fa:08:ec:d6:
25:5a:b1:75:cd:6c:c6:63:0d:bb:04:ac:f9:e0:e3:
d9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:52:DC:7D:89:62:D6:F5:14:D1:72:6E:19:8D:02:7D:FD:D2:4C:98
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:5d:30:33:4b:9c:ac:5d:bf:a8:0e:ed:21:21:9f:bc:9c:19:
54:0c:e7:5f:f9:c7:e5:6d:68:3e:76:84:f2:5f:83:2f:96:b9:
66:0e:71:3f:48:61:7f:00:e3:e9:cb:e6:82:8e:c7:8c:4e:fe:
49:31:8f:55:6a:13:62:5a:8d:a3:82:85:c9:87:13:6c:98:10:
30:08:c9:50:5d:af:d9:ae:24:4d:9f:58:00:f5:4e:24:99:bb:
cb:4c:4f:6a:a8:50:43:8d:ad:a9:6a:f8:73:ff:aa:91:4f:34:
e5:96:6c:bb:d5:5b:42:d6:e1:77:68:61:d9:ba:93:1f:8d:e4:
05:41:83:d0:d8:fe:37:6e:fd:9b:b3:d5:83:f0:74:6c:bb:60:
4d:72:a4:a8:77:10:ce:f3:fa:24:61:e9:b4:4a:cb:1c:06:de:
da:93:3d:2f:2e:44:f2:06:03:b1:81:30:22:8c:ac:a8:cf:7b:
4b:90:7a:06:05:75:37:0e:cb:8a:38:c7:e8:c0:b5:be:d8:2d:
c8:13:7a:a1:32:63:e7:2b:c3:97:90:86:a0:06:dc:1b:21:29:
ae:97:f6:de:88:ee:d3:0f:bf:97:a8:30:5d:14:de:3c:18:37:
60:67:ec:12:6e:cc:ae:29:fd:5b:2a:81:08:47:b2:68:0d:ee:
99:c5:7f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:38:38 2025 by rpki-client