
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
File: _Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft (raw, json)
Hash identifier: U3IL5LhwvDK3aUiq4VWQKG0fTil23IsFunJI4ZyNMIE=
Subject key identifier: BE:3E:06:09:CA:4C:A1:F7:DB:F6:2D:AB:71:92:27:BE:66:E9:39:E5
Authority key identifier: FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F
Certificate issuer: /CN=A916ACF5/serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
Manifest number: E0
Signing time: Wed 05 Nov 2025 05:46:11 +0000
Manifest this update: Wed 05 Nov 2025 05:46:11 +0000
Manifest next update: Wed 12 Nov 2025 05:46:11 +0000
Files and hashes: 1: _Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl (hash: I/WTq9z8qS2uPMLcZn8W1d4qUy++hWT+vCW51P+Zvts=)
2: B538B552701211EFB6868329C4F9AE02.roa (hash: 5dSL8DOy/WJ/deJlqUIkaVszqeWmawzFbSAiDop9ztg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl
rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ACF5, serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
Validity
Not Before: Nov 5 05:46:11 2025 GMT
Not After : Nov 12 05:46:11 2025 GMT
Subject: CN=690ae4a3-cf81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:8e:56:e0:b2:63:98:ab:e5:9b:7a:91:fb:
86:d4:64:8c:37:10:82:b6:ac:61:ad:55:5f:4e:c1:
db:96:ed:47:98:ca:1d:c9:99:16:6c:6b:66:50:f6:
9e:95:77:d8:eb:9a:8b:69:91:cc:ca:13:5e:9a:48:
cb:d5:37:04:0e:1b:7e:4c:31:5e:42:7a:ed:06:56:
6e:ed:55:4f:94:a2:14:ca:62:d5:08:c3:4d:c6:c0:
28:94:12:15:0c:97:68:ca:82:37:f5:35:e9:2f:3a:
36:f1:31:83:e5:e0:43:87:e3:76:34:0e:11:69:60:
49:03:60:b1:9e:1d:05:cd:7d:62:65:2a:3f:0a:ff:
9f:4b:36:c6:aa:03:4b:8a:f8:3f:d3:9a:e0:69:82:
92:ef:76:bb:a5:e1:bb:5a:36:91:1d:d6:ba:d7:ee:
13:89:5c:67:53:56:6b:62:f5:5e:72:44:88:ad:3e:
36:42:40:8d:22:79:11:e8:99:42:23:8f:35:db:8a:
d7:fc:13:75:e9:f7:b6:5b:43:3d:97:dc:b4:ba:16:
a7:5c:48:b3:0d:bb:26:b8:14:69:90:e8:99:9b:3b:
60:98:c9:06:f0:99:40:fe:39:95:fc:da:27:e9:02:
fa:a7:d3:41:09:22:a0:62:e1:a7:b8:df:f2:b1:43:
87:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3E:06:09:CA:4C:A1:F7:DB:F6:2D:AB:71:92:27:BE:66:E9:39:E5
X509v3 Authority Key Identifier:
keyid:FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:1e:ca:09:14:16:cb:30:79:df:a2:55:91:58:53:23:1b:7f:
75:2d:4b:12:35:d4:9b:1f:6e:7a:84:7b:d4:db:13:dd:d9:4c:
ac:49:8d:a9:53:32:38:7f:5a:2d:5e:be:74:ba:4c:10:d1:83:
8d:df:b6:30:c4:4f:99:4b:eb:3e:68:11:04:29:8d:44:8e:ea:
a3:68:32:c7:b4:08:18:f7:3a:71:85:5c:20:48:03:08:61:7b:
a9:26:b7:72:8e:90:3d:ae:77:18:4a:74:35:b8:d5:59:7e:c8:
60:73:91:c8:0f:fe:fe:e2:51:53:27:d0:cc:ee:59:f5:98:cf:
72:11:ae:19:d5:71:29:e2:cf:e8:d7:7f:ca:92:12:2e:e6:a2:
ac:a4:a3:d4:1c:c7:8e:b4:64:5e:25:2c:c8:e4:90:e9:3c:4b:
91:f7:52:68:cf:72:86:76:84:95:da:09:42:c6:f4:16:fc:98:
6a:51:ac:4a:fb:de:57:b9:61:f1:32:8e:12:bc:0d:97:8e:f6:
cc:c6:4e:07:d0:85:01:97:4f:d1:be:64:83:ed:b0:a8:40:5c:
19:39:63:c8:4e:7d:60:0a:b3:36:9a:bd:ca:90:df:22:ca:e6:
6c:b7:52:50:b5:e4:d6:fe:21:3f:f4:77:b3:a2:32:91:8b:ac:
41:b6:d7:97
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkFDRjUxMTAvBgNVBAUTKEZENUEzRjVBMUYzMzU3NDRDMEMxNDJBQzQyMTdFQ0JD
M0QyMENBMEYwHhcNMjUxMTA1MDU0NjExWhcNMjUxMTEyMDU0NjExWjAYMRYwFAYD
VQQDEw02OTBhZTRhMy1jZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtl6OVuCyY5ir5Zt6kfuG1GSMNxCCtqxhrVVfTsHblu1HmModyZkWbGtmUPae
lXfY65qLaZHMyhNemkjL1TcEDht+TDFeQnrtBlZu7VVPlKIUymLVCMNNxsAolBIV
DJdoyoI39TXpLzo28TGD5eBDh+N2NA4RaWBJA2Cxnh0FzX1iZSo/Cv+fSzbGqgNL
ivg/05rgaYKS73a7peG7WjaRHda61+4TiVxnU1ZrYvVeckSIrT42QkCNInkR6JlC
I48124rX/BN16fe2W0M9l9y0uhanXEizDbsmuBRpkOiZmztgmMkG8JlA/jmV/Non
6QL6p9NBCSKgYuGnuN/ysUOH2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4+BgnK
TKH32/Ytq3GSJ75m6TnlMB8GA1UdIwQYMBaAFP1aP1ofM1dEwMFCrEIX7Lw9IMoP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUNGNS81QjMwQzQ5QTZG
M0MxMUVGQjU4OTk2MTJDNEY5QUUwMi9fVm9fV2g4elYwVEF3VUtzUWhmc3ZEMGd5
ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19Wb19XaDh6VjBUQXdVS3NRaGZzdkQwZ3lnOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QUNGNS81QjMwQzQ5QTZGM0MxMUVGQjU4OTk2MTJDNEY5QUUwMi9fVm9fV2g4elYw
VEF3VUtzUWhmc3ZEMGd5ZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCmHsoJFBbLMHnfolWRWFMjG391LUsSNdSbH256hHvU2xPd2UysSY2p
UzI4f1otXr50ukwQ0YON37YwxE+ZS+s+aBEEKY1EjuqjaDLHtAgY9zpxhVwgSAMI
YXupJrdyjpA9rncYSnQ1uNVZfshgc5HID/7+4lFTJ9DM7ln1mM9yEa4Z1XEp4s/o
13/KkhIu5qKspKPUHMeOtGReJSzI5JDpPEuR91Joz3KGdoSV2glCxvQW/JhqUaxK
+95XuWHxMo4SvA2XjvbMxk4H0IUBl0/RvmSD7bCoQFwZOWPITn1gCrM2mr3KkN8i
yuZst1JQteTW/iE/9HezojKRi6xBtteX
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:51:24 2025 by rpki-client