
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft
File: vpHAXiGMfmbqb5T50kV3cEGRveI.mft (raw, json)
Hash identifier: dvampKoMPyPMs8f9NEj4Baa4JXhhIpzel63r4GB7Lbg=
Subject key identifier: 87:CC:15:C8:34:0E:3E:F4:DA:B3:A9:00:96:FD:90:8A:0F:82:8C:A3
Authority key identifier: BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2
Certificate issuer: /CN=A912FCBB/serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft
Manifest number: EC
Signing time: Mon 03 Nov 2025 05:19:06 +0000
Manifest this update: Mon 03 Nov 2025 05:19:05 +0000
Manifest next update: Mon 10 Nov 2025 05:19:05 +0000
Files and hashes: 1: vpHAXiGMfmbqb5T50kV3cEGRveI.crl (hash: ITtZ3XcP7fQRzSe/DILxWaty6h5gxud0Tbyvaa1NE6A=)
2: 8F80C48E531211EFAB0B8726C4F9AE02.roa (hash: qqwKlPG3HHIO/Ni46rjsjHo2nk3zj0h/n5n+UQCKPlo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl
rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FCBB, serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2
Validity
Not Before: Nov 3 05:19:05 2025 GMT
Not After : Nov 10 05:19:05 2025 GMT
Subject: CN=69083b49-c9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:68:5e:31:4c:e3:18:26:c5:99:a5:ec:e7:
37:58:5a:24:e3:c9:1b:9b:06:cf:e5:7e:ea:d5:1d:
74:eb:8b:93:b6:63:5a:77:4c:da:90:81:23:10:66:
27:a5:b4:a9:9e:80:63:da:6f:45:0f:19:61:c1:f3:
f2:bb:28:8c:6c:e1:5d:dd:16:c9:a7:f5:af:7d:3e:
e5:fe:fd:92:d6:c9:c4:6f:ab:8b:1e:df:73:65:59:
7e:20:c8:c2:bd:39:68:b3:7c:0f:3d:01:52:78:ee:
e7:e8:91:82:75:98:0b:8e:bb:22:7f:e6:b9:b1:eb:
ef:db:53:bb:f0:58:11:a5:93:c6:9f:aa:9a:50:3e:
0a:3a:b0:bd:61:3a:a9:4a:b8:6c:92:b6:d9:b2:61:
a1:db:c2:56:20:db:a3:b8:0e:31:26:f2:e7:61:75:
fb:cc:3c:76:27:b9:18:c8:78:45:e3:2d:eb:de:a1:
da:43:5c:e8:e3:97:eb:a4:ea:79:4f:19:b9:af:be:
6d:ce:f5:ea:77:c9:ed:81:af:a0:95:58:4d:ce:41:
f2:d5:d5:54:98:6a:0c:53:e5:4b:dd:d0:56:cd:74:
64:d3:a5:37:4a:1f:b8:5d:ce:ee:c7:ad:04:ab:6d:
4e:89:a2:5a:99:1a:94:29:a9:a0:be:2f:7a:45:02:
ba:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CC:15:C8:34:0E:3E:F4:DA:B3:A9:00:96:FD:90:8A:0F:82:8C:A3
X509v3 Authority Key Identifier:
keyid:BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:1c:89:40:8e:98:de:cc:9f:82:fe:b9:d9:c2:f5:82:ef:25:
85:58:ae:b1:79:61:7b:1f:c9:00:76:87:e0:97:17:b5:78:ba:
cb:8e:f3:99:fc:6b:35:97:c0:77:5f:fb:e6:18:85:96:bd:50:
8c:8d:de:67:df:e1:69:ba:cf:1c:81:fa:e6:76:53:2c:c2:88:
be:75:db:8f:a7:98:68:56:09:dc:02:be:68:e0:93:12:1d:ef:
b5:d3:e8:2a:b2:37:98:98:9e:25:21:62:1b:f2:c2:1d:d6:79:
b2:1f:13:a0:81:0f:a5:41:2e:b0:a2:4d:fe:f2:29:d8:c8:43:
00:cf:d4:bc:15:e3:4c:34:6b:cf:8a:2b:af:d7:cc:88:20:74:
5c:39:c1:52:f1:a3:42:61:2b:e2:70:42:02:c2:ae:fa:a8:56:
7d:5e:81:2d:0a:1d:b8:fd:83:01:d6:4a:9b:7b:8d:26:c5:1b:
ba:91:ab:cd:e9:33:63:4a:6b:ec:b9:ca:36:23:be:79:ed:a6:
5b:52:d6:1f:98:f0:50:f4:78:dd:5d:e2:9a:b0:89:66:3e:0d:
68:a2:38:f0:ff:76:66:54:d6:ae:98:5e:57:9e:53:b0:18:fc:
de:a4:ff:b9:f4:1f:ae:ff:06:fa:6a:cb:28:51:57:e1:e2:aa:
40:64:8d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:46 2025 by rpki-client