
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft
File: VWyosJdH0HtvaiekBVKNOfpbgkw.mft (raw, json)
Hash identifier: JdQXFdzXwXJxa0HJaA8ZH9cu/uboLqrtROTehy0eZgo=
Subject key identifier: 1B:E1:42:3A:7A:BE:B0:C9:DF:BC:96:78:E8:42:87:39:35:36:D7:11
Authority key identifier: 55:6C:A8:B0:97:47:D0:7B:6F:6A:27:A4:05:52:8D:39:FA:5B:82:4C
Certificate issuer: /CN=A912A4D7/serialNumber=556CA8B09747D07B6F6A27A405528D39FA5B824C
Certificate serial: 08E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft
Manifest number: 08D8
Signing time: Tue 04 Nov 2025 20:29:47 +0000
Manifest this update: Tue 04 Nov 2025 20:29:47 +0000
Manifest next update: Tue 11 Nov 2025 20:29:47 +0000
Files and hashes: 1: VWyosJdH0HtvaiekBVKNOfpbgkw.crl (hash: rc4ge4z7qZGkuGZogDoc+ILA3VK5MPM2LgkOj5vtr30=)
2: 3C24D492BF6911EAA877B317C4F9AE02.roa (hash: NZkd996OCXD4hErR3DmhrfGKjBgYP///vRBLCCwugg0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.crl
rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2272 (0x8e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A4D7, serialNumber=556CA8B09747D07B6F6A27A405528D39FA5B824C
Validity
Not Before: Nov 4 20:29:47 2025 GMT
Not After : Nov 11 20:29:47 2025 GMT
Subject: CN=690a623b-ac63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:c8:c1:42:76:11:95:5e:01:0c:43:90:95:
85:53:ab:e4:f4:0b:64:3d:b9:f5:25:3b:d0:3e:21:
65:d7:13:c3:41:ed:ee:78:08:fd:15:94:46:c8:4d:
2a:b9:ae:0e:62:1c:fe:36:c6:6f:e1:f4:dd:64:17:
59:33:c0:7e:23:9f:ce:8d:8d:77:64:b3:93:8f:84:
4c:4e:4e:02:19:19:60:8c:2a:31:48:16:4b:45:9c:
bc:f0:0c:91:58:06:ad:29:2d:eb:89:0a:90:99:4a:
ec:44:cc:7a:36:7e:39:4d:21:a0:71:34:6b:d3:66:
63:00:46:d4:cc:a9:88:ce:e1:ed:47:55:c5:c1:63:
54:18:00:95:d2:4b:4b:cd:d2:8f:fe:68:24:5a:a2:
96:08:06:89:76:a3:56:a6:36:d3:16:66:a9:b9:1e:
9e:f1:4f:c4:1a:4a:c6:1a:0e:ba:54:70:18:bc:8a:
56:e2:d0:b1:1d:05:2e:57:ef:0c:c0:1f:f0:4b:75:
2c:04:19:91:18:4a:2d:e4:7b:11:73:16:58:0a:d8:
0a:5f:a7:74:92:82:eb:74:b7:19:48:ec:f4:b6:29:
95:fc:d5:37:a5:5f:70:41:51:db:4c:9d:af:87:9d:
a9:d0:96:ca:c7:6c:41:77:92:c6:e3:d8:bb:5b:d7:
a8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E1:42:3A:7A:BE:B0:C9:DF:BC:96:78:E8:42:87:39:35:36:D7:11
X509v3 Authority Key Identifier:
keyid:55:6C:A8:B0:97:47:D0:7B:6F:6A:27:A4:05:52:8D:39:FA:5B:82:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:40:8c:bc:c6:c0:3d:73:cb:a3:c8:72:a9:48:0e:71:57:2c:
75:d7:e2:3c:03:e3:24:3e:cb:6b:a8:e4:e5:2c:c2:39:f6:bf:
87:f5:2f:26:eb:40:08:b3:cb:fd:20:eb:fc:85:1c:73:52:c6:
fb:0d:72:d9:88:7e:a0:0a:2d:fc:e5:31:53:29:46:9d:58:95:
32:82:32:60:6e:ee:a3:3e:82:ec:79:57:d1:c4:07:35:77:e9:
85:23:37:1c:ca:35:6a:b6:44:bf:46:e1:1f:f6:75:26:e5:7d:
9f:88:60:7c:92:ac:ce:ba:42:99:b0:40:70:f9:13:f7:b6:69:
3b:31:9e:0d:c3:5d:38:e8:d2:eb:bf:72:1c:d9:16:eb:ee:ba:
66:e0:c4:a8:f6:a1:ca:d8:f9:1d:17:02:bb:09:98:ed:7b:67:
2f:b8:4f:b9:6f:2e:28:cf:ef:40:c0:a1:15:58:5f:18:96:d7:
c4:63:e9:a6:a5:ca:b6:5e:91:44:47:31:d9:86:e1:cc:66:6b:
a8:fb:1e:47:34:f0:dd:0e:21:a7:2d:e4:66:db:65:c5:b9:cc:
4c:38:e0:12:5c:de:c4:c7:eb:67:d6:12:6e:dc:a1:06:98:eb:
66:07:3c:f4:ec:52:a8:3f:26:fa:25:74:b2:a0:cb:1c:09:f8:
7d:d4:8a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:27:05 2025 by rpki-client