
$ rpki-client -vvf rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
File: VR9-hn-vN0cJR19QtJbX_YhCb7E.mft (raw, json)
Hash identifier: JAgtcWAjd+m8JDqQEJlv6qfDq0mYs1bWyK4gg2xu8SM=
Subject key identifier: 46:65:0E:84:1D:6E:51:C8:59:BF:BF:EF:E0:EE:9B:E7:C6:E6:9C:26
Authority key identifier: 55:1F:7E:86:7F:AF:37:47:09:47:5F:50:B4:96:D7:FD:88:42:6F:B1
Certificate issuer: /CN=A914417A/serialNumber=551F7E867FAF374709475F50B496D7FD88426FB1
Certificate serial: 34DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
Manifest number: 34DB
Signing time: Tue 04 Nov 2025 15:08:20 +0000
Manifest this update: Tue 04 Nov 2025 15:08:19 +0000
Manifest next update: Tue 11 Nov 2025 15:08:19 +0000
Files and hashes: 1: VR9-hn-vN0cJR19QtJbX_YhCb7E.crl (hash: OEVHMtJzdC+f6R071JmWOzl1dlN5EOvmRDFD1lwFBkw=)
2: B4FD92C42C5211EEAD14C272C4F9AE02.roa (hash: drAA/telXQDpfcXxL2SaiRluG+eukPtWVur19P+hMwk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.crl
rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13535 (0x34df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914417A, serialNumber=551F7E867FAF374709475F50B496D7FD88426FB1
Validity
Not Before: Nov 4 15:08:19 2025 GMT
Not After : Nov 11 15:08:19 2025 GMT
Subject: CN=690a16e3-e307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:17:ba:89:72:db:99:5f:a4:a5:6d:01:85:
6c:55:a2:5b:2a:11:1c:c1:e2:a9:52:7c:dd:33:99:
87:2b:a5:2c:47:bb:00:2c:9c:b1:c9:72:b1:4b:6f:
a2:d6:c8:51:90:b9:4a:8b:3f:24:d1:5b:45:9d:09:
d8:ca:c2:37:2b:e5:26:61:77:4a:49:9c:14:64:a5:
05:8a:d5:d3:e2:93:87:f9:36:7b:f5:d1:07:b6:bc:
75:c6:a0:5c:5a:99:0c:a8:19:12:f2:f8:3a:f0:40:
61:27:a1:29:8e:f8:c0:fa:71:96:80:aa:61:96:41:
df:b2:da:c2:78:4c:d1:56:2a:e7:2c:8e:f4:1f:67:
39:b9:c7:58:29:cf:40:49:55:c4:48:92:bc:60:63:
76:50:a0:e6:5b:c9:bd:e3:c5:1f:e3:8b:f7:10:1f:
33:e0:fb:44:f2:7f:1d:07:07:8f:d4:4c:33:e7:dc:
b1:67:eb:a5:c7:41:94:42:e7:5e:cc:71:84:34:79:
2a:98:94:33:75:a7:d0:87:8f:69:71:f1:d3:c6:3e:
a1:51:ed:04:15:01:3c:9e:7c:91:d8:36:bb:3c:3e:
0b:b6:68:b9:9b:60:3e:5b:cd:eb:60:df:12:2f:f1:
f5:ef:ab:ec:07:77:67:c7:69:14:6a:db:49:ea:a4:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:65:0E:84:1D:6E:51:C8:59:BF:BF:EF:E0:EE:9B:E7:C6:E6:9C:26
X509v3 Authority Key Identifier:
keyid:55:1F:7E:86:7F:AF:37:47:09:47:5F:50:B4:96:D7:FD:88:42:6F:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:81:6e:75:00:63:66:57:aa:2d:75:d4:08:0a:03:2d:2d:f9:
55:39:cb:cf:a6:2a:38:9c:5a:7f:55:6f:31:06:6b:70:ec:66:
26:a5:8f:7d:47:ba:93:a9:2f:b8:35:af:29:4c:4c:aa:42:43:
b0:d4:82:61:3e:88:6f:56:6d:9d:de:93:e6:09:9f:a6:49:82:
f0:5a:35:03:15:b9:bc:f2:6b:1d:a4:66:3d:ab:19:96:53:1f:
48:45:ef:55:a7:d0:56:4b:49:0e:3b:39:a9:e0:a5:f7:9d:35:
83:c7:91:eb:7e:25:66:22:66:b9:eb:d0:14:4c:4d:9c:1b:34:
3a:27:f9:2f:75:ff:e7:d8:77:c1:0e:e8:8a:06:b2:ad:7f:46:
e3:d9:af:af:53:79:07:ee:73:ce:07:c1:ab:35:ce:97:54:a5:
26:3c:bd:0e:c3:1a:70:2f:c8:37:66:9b:d2:ed:5b:d2:0c:7d:
4d:99:e8:57:81:fa:b0:68:d8:4c:3c:7d:76:1b:b1:31:93:d1:
66:e3:0a:46:f5:8f:eb:71:5a:c9:f7:e5:11:67:20:82:53:9e:
c2:ab:b4:7c:9c:f6:0d:a8:21:54:ca:ce:82:58:b3:25:8f:f6:
7c:6e:59:c2:da:a7:54:41:b3:92:7a:c1:3f:08:7c:bb:24:4f:
a8:6a:73:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:30:12 2025 by rpki-client