
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft
File: v_WBURjDvN2NWsIxfbvPo5l-NfY.mft (raw, json)
Hash identifier: jjQH4zPF6NOnpLegPF1fehDZX/PvcmqCSfQ2BLi5SuI=
Subject key identifier: C2:A0:84:41:97:70:06:5D:66:35:B3:92:88:63:72:B1:72:B3:3D:66
Authority key identifier: BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6
Certificate issuer: /CN=A916DAC0/serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6
Certificate serial: 0136
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft
Manifest number: 0134
Signing time: Mon 03 Nov 2025 04:29:51 +0000
Manifest this update: Mon 03 Nov 2025 04:29:51 +0000
Manifest next update: Mon 10 Nov 2025 04:29:51 +0000
Files and hashes: 1: v_WBURjDvN2NWsIxfbvPo5l-NfY.crl (hash: UVWvCaYNt5NqBLYQ9s6py07UXhGd8/gMpipw9VRnW98=)
2: 489B8430DE8911EEB21B9B45C4F9AE02.roa (hash: SDPNisnSYRGvj5gVjzP5feJ+X0hwI7v9EIoicUEp2e0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.crl
rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 04:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DAC0, serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6
Validity
Not Before: Nov 3 04:29:51 2025 GMT
Not After : Nov 10 04:29:51 2025 GMT
Subject: CN=69082fbf-40fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9c:24:70:92:d9:ae:3d:65:d7:96:3a:bf:0f:
c5:26:e4:cf:56:ca:a5:18:8e:5a:d3:12:98:1b:77:
cf:a7:ac:de:bc:5e:bb:3a:4a:27:96:72:67:87:3c:
45:47:aa:53:64:6d:b1:9c:53:0c:fa:a0:23:92:b3:
8f:4e:fb:c1:5a:fe:be:ca:c3:59:69:ad:e4:33:f8:
1c:7f:96:ca:06:dc:41:8d:5e:66:97:34:3c:20:d3:
29:e8:69:9b:a6:9a:bd:bb:4c:01:e7:38:16:96:68:
6d:6d:91:76:2d:01:c3:a7:40:1f:63:9b:5a:57:ff:
9c:93:d0:8e:a1:19:f9:a6:9a:4e:6d:c2:4e:6d:89:
1a:fd:3f:a7:d3:b8:3c:9a:d4:8f:10:47:cf:f0:08:
56:2e:06:47:7d:46:9f:38:b2:51:22:ce:cb:27:6d:
94:8e:ec:64:26:2e:ee:f2:94:d6:b3:59:ae:0e:97:
7e:1f:c0:99:58:9f:99:96:05:df:6a:bb:b4:f4:90:
32:e4:bb:19:66:fa:0c:71:b4:80:b9:c8:83:ad:77:
7e:35:3e:3b:5e:a1:87:bc:ce:25:55:ba:43:17:19:
38:02:35:e5:ed:01:f7:2c:13:09:a5:65:a1:92:5f:
4a:30:54:3f:76:c2:2a:81:b6:5a:fa:b2:9b:7a:d9:
dd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A0:84:41:97:70:06:5D:66:35:B3:92:88:63:72:B1:72:B3:3D:66
X509v3 Authority Key Identifier:
keyid:BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8e:7f:10:19:78:64:51:b1:cb:bb:c1:5a:bc:c2:b4:f2:94:
7d:a1:c5:51:17:35:de:bc:6f:68:2e:1d:66:23:12:30:24:db:
08:03:09:60:b5:5d:17:43:ee:0c:54:6a:12:7c:bd:57:29:d8:
45:d7:43:c3:61:39:ed:34:2a:3f:56:fa:30:c3:23:e7:67:f2:
3e:bb:b4:23:f4:14:61:d6:53:fc:e9:fc:f6:ad:2b:64:9b:f4:
6d:6d:f7:7c:70:e1:0a:10:c3:4c:76:47:1a:81:6d:86:e0:09:
6c:73:f9:fe:47:c8:fa:33:01:28:01:e3:7c:fa:2f:b1:9b:d4:
d0:f3:05:87:29:90:79:21:ca:f2:36:02:c6:fd:4c:15:33:61:
8e:bf:79:44:b7:9b:01:a3:cf:9a:05:a8:92:a3:92:b4:aa:5e:
95:ce:e4:79:55:be:95:c7:4f:e3:13:ac:26:4d:6f:d4:21:ca:
cc:05:b7:9f:da:ff:e6:8a:4a:0f:89:be:89:fd:ce:f2:b1:5b:
47:cc:61:3f:d6:98:f8:98:af:ea:cb:6c:84:54:ec:49:e0:45:
a3:bd:13:38:21:82:b6:38:a4:91:7d:ed:c9:ba:cf:be:cd:96:
c0:15:1a:49:82:f8:10:d6:2d:79:99:96:40:70:3e:1d:06:de:
5e:32:07:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkRBQzAxMTAvBgNVBAUTKEJGRjU4MTUxMThDM0JDREQ4RDVBQzIzMTdEQkJDRkEz
OTk3RTM1RjYwHhcNMjUxMTAzMDQyOTUxWhcNMjUxMTEwMDQyOTUxWjAYMRYwFAYD
VQQDEw02OTA4MmZiZi00MGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzZwkcJLZrj1l15Y6vw/FJuTPVsqlGI5a0xKYG3fPp6zevF67OkonlnJnhzxF
R6pTZG2xnFMM+qAjkrOPTvvBWv6+ysNZaa3kM/gcf5bKBtxBjV5mlzQ8INMp6Gmb
ppq9u0wB5zgWlmhtbZF2LQHDp0AfY5taV/+ck9COoRn5pppObcJObYka/T+n07g8
mtSPEEfP8AhWLgZHfUafOLJRIs7LJ22UjuxkJi7u8pTWs1muDpd+H8CZWJ+ZlgXf
aru09JAy5LsZZvoMcbSAuciDrXd+NT47XqGHvM4lVbpDFxk4AjXl7QH3LBMJpWWh
kl9KMFQ/dsIqgbZa+rKbetnd1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKghEGX
cAZdZjWzkohjcrFysz1mMB8GA1UdIwQYMBaAFL/1gVEYw7zdjVrCMX27z6OZfjX2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REFDMC9EREM5NDJBQURF
ODgxMUVFOTNEOUE3NDRDNEY5QUUwMi92X1dCVVJqRHZOMk5Xc0l4ZmJ2UG81bC1O
ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZfV0JVUmpEdk4yTldzSXhmYnZQbzVsLU5mWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
REFDMC9EREM5NDJBQURFODgxMUVFOTNEOUE3NDRDNEY5QUUwMi92X1dCVVJqRHZO
Mk5Xc0l4ZmJ2UG81bC1OZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCajn8QGXhkUbHLu8FavMK08pR9ocVRFzXevG9oLh1mIxIwJNsIAwlg
tV0XQ+4MVGoSfL1XKdhF10PDYTntNCo/VvowwyPnZ/I+u7Qj9BRh1lP86fz2rStk
m/Rtbfd8cOEKEMNMdkcagW2G4Alsc/n+R8j6MwEoAeN8+i+xm9TQ8wWHKZB5Icry
NgLG/UwVM2GOv3lEt5sBo8+aBaiSo5K0ql6VzuR5Vb6Vx0/jE6wmTW/UIcrMBbef
2v/mikoPib6J/c7ysVtHzGE/1pj4mK/qy2yEVOxJ4EWjvRM4IYK2OKSRfe3Jus++
zZbAFRpJgvgQ1i15mZZAcD4dBt5eMgdZ
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:13:29 2025 by rpki-client