
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
File: Wsl8kSmaL6nIztiqxnD_78e2mhs.mft (raw, json)
Hash identifier: paHGydGb59tuvX/GNKSIQPdKJG0A4kJTBSzxdygoLdo=
Subject key identifier: 22:12:34:2C:AA:2C:B6:06:36:05:A9:FE:DE:25:2E:91:8F:4E:4F:E4
Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
Certificate issuer: /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Certificate serial: 06F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
Manifest number: 06E4
Signing time: Tue 04 Nov 2025 22:05:49 +0000
Manifest this update: Tue 04 Nov 2025 22:05:48 +0000
Manifest next update: Tue 11 Nov 2025 22:05:48 +0000
Files and hashes: 1: Wsl8kSmaL6nIztiqxnD_78e2mhs.crl (hash: 29qt75zZEcTcivp8CT5E/rM+dXaEFErYV1xObloVZQ8=)
2: 8B75957671A811EB8698AD67C4F9AE02.roa (hash: gkjZFv8+a1pInAhzOPTg4sqJj5qO4+TAvcYmCjz+nlg=)
3: 36F318D0890A11EE9F4C014DC4F9AE02.roa (hash: vTpHqcdtapOqI/Gsr+oA78H11F3thCsrtmSVIOkFq0M=)
4: C5058712A3B911EC9709462AC4F9AE02.roa (hash: tEC8bz6FGj0t4tths2MmaU0LJkI5GmyVxPNnRw1U1sM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl
rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1784 (0x6f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3260, serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Validity
Not Before: Nov 4 22:05:48 2025 GMT
Not After : Nov 11 22:05:48 2025 GMT
Subject: CN=690a78bc-b525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:f5:c3:65:e2:c2:5f:8d:ae:e3:94:ca:03:
18:b7:80:b3:63:ee:b8:fe:c2:3c:de:91:e8:c7:ad:
e2:71:6b:67:32:64:af:62:4d:a6:e8:e9:de:f1:b4:
d8:4a:28:98:36:ec:59:51:72:8d:02:3b:44:f0:bd:
82:96:d6:d8:d9:57:4b:7e:f8:15:7c:ce:27:b9:c9:
b1:8a:6c:93:dd:47:fb:08:2b:ac:f6:bd:50:31:f6:
57:4e:4e:f4:9d:b7:e9:93:7b:69:75:d6:8f:11:e9:
38:b5:d2:d3:84:21:e3:ed:d9:83:41:98:7f:3e:0d:
e3:b9:6e:52:79:e5:d8:8f:b9:6f:48:9c:ed:18:91:
2c:d5:67:af:cd:9e:48:68:7e:1e:2e:aa:28:03:f5:
b6:c0:83:cf:2e:30:14:2b:98:0f:28:cf:6c:94:60:
19:6c:af:2f:65:fa:3e:46:b1:55:7f:6c:17:5a:3e:
42:c9:b4:4e:d5:0b:9a:30:2a:ea:fc:47:b2:93:44:
3f:2e:86:f0:7f:6a:d2:96:14:dd:80:b4:c6:c5:79:
14:ad:07:7d:fd:c7:97:d0:99:41:6a:df:d3:de:f2:
f0:dd:dd:3d:f2:69:c1:a7:c4:0f:70:52:de:82:23:
67:e9:50:9f:a4:81:b9:ec:18:d8:c8:19:1c:a0:42:
b4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:12:34:2C:AA:2C:B6:06:36:05:A9:FE:DE:25:2E:91:8F:4E:4F:E4
X509v3 Authority Key Identifier:
keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a8:ed:ed:35:58:b8:e0:2f:24:46:6d:a8:33:0d:08:46:31:
89:14:a7:37:d0:a6:8a:e2:6c:04:25:dd:74:b6:cf:bf:07:7a:
85:8d:b2:86:9d:f6:d5:d0:7e:b7:6e:33:2f:23:e5:fd:78:28:
de:cc:09:a4:d7:8f:f1:db:d8:4d:5f:8e:5c:11:38:12:61:4b:
b6:80:a6:ec:78:a1:cd:4c:bd:fe:36:fb:12:a1:da:d6:a8:6b:
fb:74:41:11:99:c6:8f:9f:ab:54:a6:11:81:5d:c0:31:aa:75:
92:93:3b:d1:a2:bc:12:ee:e4:7b:94:b6:3b:dd:c2:92:8c:f9:
dc:e6:44:a9:43:30:a7:d7:05:8d:e7:35:54:dd:d0:cc:a0:51:
03:df:37:20:2a:8a:fb:49:2a:7b:73:2f:a2:41:e3:82:2d:60:
38:6d:7e:a6:97:c3:69:4b:f4:0c:39:11:c6:30:60:9c:f3:71:
3b:36:e3:7d:81:1b:e4:0a:94:bf:ea:0e:7b:99:7e:a2:45:71:
0e:31:6f:ea:05:7f:81:85:db:bf:d9:65:0c:4d:20:1d:01:cb:
9f:3b:1f:a2:75:5c:9f:94:b8:68:42:49:05:ca:5e:b2:58:d0:
48:b5:88:1d:bb:ef:6f:e9:a6:5c:62:91:e3:02:e6:3e:cb:67:
75:b6:8a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:18:42 2025 by rpki-client