
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
File: VQiKMVvLUJi-72Zaqcvf0yogWCA.mft (raw, json)
Hash identifier: rxaEn73bBfJMeopLn7LWDVeDdayTPjUOV9HR5vObVDw=
Subject key identifier: 6E:85:DB:5B:D4:36:85:63:59:23:B4:5D:57:2E:7D:64:3E:E6:51:74
Authority key identifier: 55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20
Certificate issuer: /CN=A9119F89/serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820
Certificate serial: 06F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
Manifest number: 06E1
Signing time: Tue 04 Nov 2025 22:11:07 +0000
Manifest this update: Tue 04 Nov 2025 22:11:07 +0000
Manifest next update: Tue 11 Nov 2025 22:11:07 +0000
Files and hashes: 1: VQiKMVvLUJi-72Zaqcvf0yogWCA.crl (hash: K/CSOn3/N/eF8hBMb0TBUJJhqQJDhsdMjLni7NWrPIE=)
2: 4AC85EBC8E1511F083A5EB46C4F9AE02.roa (hash: HpSbnGJEafe0Cwqy3fqQEE7tGOKywS9PLDhr9ZIWw18=)
3: A9B5CDC4B97111F089BA4733C4F9AE02.roa (hash: e7NB/rZJ7soW34sGauamE9L/Mh5Ro39SnWUlgmJO+4o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl
rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1785 (0x6f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119F89, serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820
Validity
Not Before: Nov 4 22:11:07 2025 GMT
Not After : Nov 11 22:11:07 2025 GMT
Subject: CN=690a79fb-3ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:97:67:55:68:75:88:13:de:fd:1e:15:f7:c1:
5e:27:64:0b:90:d9:33:e9:3a:cf:d2:8e:0f:43:fd:
5e:e8:bd:5e:20:05:15:38:b1:23:c9:38:5f:d7:12:
d3:9c:9c:ba:8c:f7:6f:82:32:29:a0:35:47:00:0c:
88:9a:bd:82:43:bc:9e:08:b5:64:0f:6b:9e:89:8d:
ce:fb:16:94:bf:b2:f0:46:4a:7e:65:c8:0e:7d:9b:
50:24:00:1d:2b:b4:bf:30:d7:4d:58:5b:18:f7:1c:
67:e4:ac:28:99:96:27:70:aa:9e:b4:ed:7a:d8:22:
2e:f1:81:af:0a:1b:b5:48:22:47:a9:26:43:70:14:
06:83:57:07:87:3f:7b:a5:cb:41:bc:84:15:c0:0f:
64:dc:ba:55:33:66:fc:47:fc:a8:98:89:5a:3d:ec:
f3:54:52:f3:d8:5b:62:02:12:f4:43:cc:fd:bc:f3:
c8:4a:c3:27:60:28:44:12:1e:04:d4:60:f3:41:07:
59:b0:18:db:8a:a5:d6:cf:8a:0c:52:5e:83:65:ea:
41:8b:ea:39:c5:d5:2e:a1:6b:d8:f7:c6:dd:06:c6:
55:a3:d9:31:d3:bf:30:60:24:b6:ba:ea:a8:cf:1b:
cc:4b:79:9a:de:db:ad:b4:8a:78:34:19:49:7e:15:
84:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:85:DB:5B:D4:36:85:63:59:23:B4:5D:57:2E:7D:64:3E:E6:51:74
X509v3 Authority Key Identifier:
keyid:55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e7:cd:f8:b4:58:a3:57:22:f3:a3:07:a7:9b:8e:18:30:eb:
95:db:89:b7:70:7c:fe:4d:4b:35:45:02:39:ac:04:7e:b9:6f:
32:41:35:32:14:73:83:19:a6:14:cc:38:c4:69:08:90:4c:7f:
4f:32:50:6d:5e:b2:63:ee:aa:c9:ae:90:47:16:72:e5:2e:83:
e3:1d:a1:35:8d:d4:b6:5a:06:18:58:29:e2:52:2a:e8:ad:f3:
ab:96:33:4e:73:50:60:3a:95:8e:c7:93:eb:6e:85:9e:50:aa:
17:22:1a:75:aa:49:7e:ef:de:42:2d:31:ac:66:87:19:78:4e:
cc:05:4e:38:71:15:3c:34:c8:52:31:53:f4:54:4f:8a:cf:15:
6e:7a:53:4e:a5:7a:0b:67:56:23:3f:bd:ae:1f:e0:67:1e:cc:
9b:f3:6f:c7:eb:e2:c2:a8:4e:5f:ae:25:92:91:2c:7d:bc:b1:
37:69:e0:92:0e:86:0c:5f:ea:72:7e:86:48:1b:4e:9d:43:58:
d8:2a:68:e9:4c:b7:bb:41:83:a6:0f:d8:77:62:e9:47:b5:5a:
a3:22:ed:0a:6f:cb:f2:fd:7b:89:19:22:1b:ac:67:b0:a7:b7:
bd:ba:89:fd:f8:6f:a9:68:07:cc:8e:d5:f9:1c:86:8e:82:57:
d6:b0:ce:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:27:26 2025 by rpki-client