
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
File: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft (raw, json)
Hash identifier: HrRi2wkLjYoQx6u1s1qKz5EunHDIcBOAmNr8S8ILEb0=
Subject key identifier: E8:F0:6F:C8:D7:5B:CC:77:42:FE:63:ED:96:D8:AB:4A:FB:9A:0F:0F
Authority key identifier: 56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE
Certificate issuer: /CN=A9155001/serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE
Certificate serial: EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
Manifest number: E6
Signing time: Mon 03 Nov 2025 05:28:33 +0000
Manifest this update: Mon 03 Nov 2025 05:28:33 +0000
Manifest next update: Mon 10 Nov 2025 05:28:33 +0000
Files and hashes: 1: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl (hash: UBe+pMWlwwcbDpDqH4mdLsgYDXmNPU6y9d6uYhKJRPo=)
2: B527A9C8604111EF97252962C4F9AE02.roa (hash: 86BcjMQFenDIORukuby6K4SLuk15+UdUhQ7zU3nwZFM=)
3: 9FB99556604111EFB4652062C4F9AE02.roa (hash: NCosWXhfz0UWkuSBHKgiBpQqoUl/ccm+dyT7ONrL1+0=)
4: 18E15164604011EF82C9CE5FC4F9AE02.roa (hash: GyrcmD5udMNah9Y+c1TesKwftevuFWQB3Xej0/U4i/M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl
rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155001, serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE
Validity
Not Before: Nov 3 05:28:33 2025 GMT
Not After : Nov 10 05:28:33 2025 GMT
Subject: CN=69083d81-1ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e1:22:54:e5:d7:92:d2:be:ae:16:17:f7:7b:
b8:53:03:ce:63:2d:eb:49:44:71:36:8b:fa:0c:90:
d6:9a:71:a3:7a:db:e3:9f:e3:5d:16:fd:da:63:74:
79:bc:f9:e3:97:c6:1e:a9:ba:1f:7a:b8:0b:1d:44:
3f:36:b9:c1:15:cc:df:cd:7c:97:2f:40:e3:a2:78:
9f:5e:dd:b0:71:d3:d2:a1:87:1b:e4:7e:5e:e9:77:
32:10:1d:1e:dc:5c:78:16:d6:40:18:95:b9:db:91:
45:71:10:f3:fe:26:4e:42:04:48:2f:4e:76:8a:52:
63:f6:f8:1a:5b:c1:33:ee:ad:93:30:33:8c:dc:58:
02:6c:e1:a5:fb:eb:af:eb:ac:15:ab:1b:d1:b6:7f:
69:9f:bb:08:51:89:25:d3:e1:22:e9:ac:41:bf:14:
1d:78:31:54:84:42:dc:a2:ad:62:3b:ef:fd:c4:56:
da:1b:d7:43:ad:15:67:2e:f5:88:fc:48:9a:19:9a:
08:00:2c:66:ee:a6:18:08:f7:52:98:38:31:c2:9c:
88:5a:e6:c2:da:9a:ac:f9:b9:d2:f4:15:0b:6e:0e:
89:78:60:bc:97:ff:38:86:ea:0d:04:65:f5:d3:25:
ad:67:6d:4d:8e:27:ae:29:0f:03:23:42:ec:0c:57:
69:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F0:6F:C8:D7:5B:CC:77:42:FE:63:ED:96:D8:AB:4A:FB:9A:0F:0F
X509v3 Authority Key Identifier:
keyid:56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:16:68:0e:98:91:6c:06:6c:f4:b0:f3:c8:a0:a7:a7:a3:23:
b8:30:99:d5:64:c9:3f:ae:f4:e5:e8:4c:1c:a9:ba:f9:4c:13:
8b:46:9a:67:c5:b8:86:2a:c7:1d:57:20:0e:de:cc:bf:a1:a7:
b5:56:72:a7:eb:0f:ef:34:3d:c0:fe:df:c9:26:a8:ed:85:c2:
a6:51:e1:77:7b:10:a1:d8:2d:d6:5c:1c:b2:7f:31:77:90:58:
04:28:76:bb:ef:81:54:9e:29:03:e8:f9:47:03:9a:4d:9d:61:
8e:e0:ed:7f:f5:04:9b:67:4e:12:84:6e:06:0c:75:e4:75:41:
b0:ca:af:99:97:51:78:c6:97:cf:e3:48:6c:b4:3c:e3:46:7c:
15:75:9e:50:28:e3:b8:df:d0:ae:40:de:f1:2c:78:d6:db:41:
a0:c1:e1:19:7e:2a:a4:c4:bd:96:d3:95:1e:ac:fa:14:47:d2:
99:1a:89:53:7e:0f:a7:f0:6a:1d:e6:6d:5f:1d:02:87:e2:d3:
e2:40:81:ee:96:a0:11:c4:b8:7d:23:21:78:0b:89:a1:1a:b6:
09:e3:89:93:ac:6d:01:94:97:11:9b:d5:e1:72:22:27:ec:30:
0a:ae:3c:3a:71:47:ec:e9:14:94:dc:a3:bf:1c:0e:59:1a:df:
47:cd:c7:9a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTUwMDExMTAvBgNVBAUTKDU2NUM4RUM0RTgzNDQ3RUNGRkE2OUUxREVFMTYzN0Mx
NUY0NUEzRkUwHhcNMjUxMTAzMDUyODMzWhcNMjUxMTEwMDUyODMzWjAYMRYwFAYD
VQQDEw02OTA4M2Q4MS0xYWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4eEiVOXXktK+rhYX93u4UwPOYy3rSURxNov6DJDWmnGjetvjn+NdFv3aY3R5
vPnjl8YeqbofergLHUQ/NrnBFczfzXyXL0DjonifXt2wcdPSoYcb5H5e6XcyEB0e
3Fx4FtZAGJW525FFcRDz/iZOQgRIL052ilJj9vgaW8Ez7q2TMDOM3FgCbOGl++uv
66wVqxvRtn9pn7sIUYkl0+Ei6axBvxQdeDFUhELcoq1iO+/9xFbaG9dDrRVnLvWI
/EiaGZoIACxm7qYYCPdSmDgxwpyIWubC2pqs+bnS9BULbg6JeGC8l/84huoNBGX1
0yWtZ21NjieuKQ8DI0LsDFdphQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjwb8jX
W8x3Qv5j7ZbYq0r7mg8PMB8GA1UdIwQYMBaAFFZcjsToNEfs/6aeHe4WN8FfRaP+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTAwMS9ERDFDQkQ3MjYw
M0UxMUVGODY2RkU4M0VDNEY5QUUwMi9WbHlPeE9nMFItel9wcDRkN2hZM3dWOUZv
XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZseU94T2cwUi16X3BwNGQ3aFkzd1Y5Rm9fNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTAwMS9ERDFDQkQ3MjYwM0UxMUVGODY2RkU4M0VDNEY5QUUwMi9WbHlPeE9nMFIt
el9wcDRkN2hZM3dWOUZvXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA4FmgOmJFsBmz0sPPIoKenoyO4MJnVZMk/rvTl6Ewcqbr5TBOLRppn
xbiGKscdVyAO3sy/oae1VnKn6w/vND3A/t/JJqjthcKmUeF3exCh2C3WXByyfzF3
kFgEKHa774FUnikD6PlHA5pNnWGO4O1/9QSbZ04ShG4GDHXkdUGwyq+Zl1F4xpfP
40hstDzjRnwVdZ5QKOO439CuQN7xLHjW20GgweEZfiqkxL2W05UerPoUR9KZGolT
fg+n8God5m1fHQKH4tPiQIHulqARxLh9IyF4C4mhGrYJ44mTrG0BlJcRm9XhciIn
7DAKrjw6cUfs6RSU3KO/HA5ZGt9Hzcea
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:41:12 2025 by rpki-client