
$ rpki-client -vvf rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
File: VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft (raw, json)
Hash identifier: iHoxXfG7lBvygcJ4VIMI1v0puIMBr8b517+Eocaburg=
Subject key identifier: 46:7E:45:27:7F:8C:E2:BE:74:B9:0D:D4:B4:B7:CF:22:1A:18:A8:2E
Authority key identifier: 54:24:14:FB:E3:FF:23:2A:AC:C6:2E:73:DD:C3:7E:27:52:82:ED:4A
Certificate issuer: /CN=A917295C/serialNumber=542414FBE3FF232AACC62E73DDC37E275282ED4A
Certificate serial: 068A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
Manifest number: 0683
Signing time: Tue 04 Nov 2025 22:33:19 +0000
Manifest this update: Tue 04 Nov 2025 22:33:18 +0000
Manifest next update: Tue 11 Nov 2025 22:33:18 +0000
Files and hashes: 1: VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl (hash: AhS+PouS1ZIX0Wac4INkIilu3yrQs4peGzsPkNJ870A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl
rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1674 (0x68a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917295C, serialNumber=542414FBE3FF232AACC62E73DDC37E275282ED4A
Validity
Not Before: Nov 4 22:33:18 2025 GMT
Not After : Nov 11 22:33:18 2025 GMT
Subject: CN=690a7f2e-0d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:80:1f:9e:9f:18:52:97:7b:26:1d:76:3a:
bd:e5:2b:17:47:28:01:8c:d3:a3:f3:ed:b7:a1:03:
14:bc:97:45:bb:8e:52:89:fe:f4:ba:d3:70:a3:a4:
c7:e9:6e:dd:aa:df:4e:f1:29:13:5d:78:82:9b:2a:
8e:95:83:d3:6f:be:f9:0f:70:92:08:82:6c:3c:4c:
3a:12:9e:5d:f4:cc:32:c8:8b:1e:86:9e:d3:0e:d9:
fe:fa:44:ab:08:19:3a:4d:dd:17:00:f8:ff:46:66:
7e:e5:17:40:38:f8:7a:4d:3e:1f:d9:1b:76:a7:99:
79:3a:66:1c:2b:48:ad:bd:3c:a2:54:b2:23:da:ff:
14:be:f5:6d:76:68:0f:bc:6b:fe:e3:10:5b:7a:17:
0d:9a:19:aa:1d:33:a1:e0:e4:71:72:0d:f0:da:67:
67:0e:d3:ee:e6:97:73:89:e7:ec:45:14:93:40:a0:
76:ef:8c:c5:d5:d3:be:db:0a:6f:0f:d0:11:14:bb:
c8:85:bf:e1:6f:ac:19:c7:e9:8c:2b:a4:4d:fd:d1:
50:34:aa:df:73:9a:05:40:86:6e:b7:10:3f:4c:67:
d3:93:6e:0f:70:07:7a:11:25:07:20:da:0c:40:a6:
4b:71:06:48:10:c3:b4:85:a6:66:ee:54:29:97:0e:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7E:45:27:7F:8C:E2:BE:74:B9:0D:D4:B4:B7:CF:22:1A:18:A8:2E
X509v3 Authority Key Identifier:
keyid:54:24:14:FB:E3:FF:23:2A:AC:C6:2E:73:DD:C3:7E:27:52:82:ED:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ba:d2:c9:ba:62:17:a4:08:ec:7e:00:57:f8:40:4f:d3:99:
39:b1:b2:7d:2a:3f:ef:c1:08:ad:f6:33:af:3a:65:0b:09:14:
4c:58:4f:a0:11:ae:bd:05:88:7c:2a:02:68:91:b6:f9:48:ab:
a8:37:a3:85:49:7a:42:b0:39:3a:ce:3f:99:9c:3c:30:81:9c:
f8:23:ea:f5:7b:a7:c0:a5:69:ca:4e:f2:4f:c4:71:28:84:ec:
ab:e6:88:ed:e9:dc:c7:b5:45:80:b0:40:d3:5f:82:3a:ba:df:
83:6b:7a:2a:1a:98:08:6f:b9:e5:69:77:8c:e1:72:82:36:f2:
d4:07:48:62:3c:aa:ab:bc:b8:0b:e3:d5:ab:57:10:d5:a6:a7:
5a:b9:91:5f:ed:0c:fd:40:e2:a5:16:70:0d:4a:ae:ae:c2:09:
07:ef:31:49:de:68:27:51:5c:a2:69:ef:53:40:57:60:fe:b9:
6d:f1:dd:5e:97:30:5e:87:a8:de:9e:f6:6f:88:36:e0:3d:39:
b7:1a:39:50:4c:ae:7d:15:8d:06:b1:68:06:11:2e:6a:12:af:
c8:9e:6f:8e:94:44:44:43:72:da:24:7a:d3:89:11:3d:6f:79:
bf:1f:f2:a0:a3:46:e7:f1:29:ee:49:d3:8e:1a:87:ff:6e:44:
73:f3:d1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:17:12 2025 by rpki-client