
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.mft
File: vi_5e5tTTVONpBoJtsCNAjMuhlU.mft (raw, json)
Hash identifier: p7bWoLxEBjEiZYGbTW2LYT+AHDecaL4bH+gY3WJuoCU=
Subject key identifier: 5B:09:0B:62:7D:27:E8:8F:14:63:23:29:8E:C6:6F:D9:6E:CE:97:27
Authority key identifier: BE:2F:F9:7B:9B:53:4D:53:8D:A4:1A:09:B6:C0:8D:02:33:2E:86:55
Certificate issuer: /CN=A9173D07/serialNumber=BE2FF97B9B534D538DA41A09B6C08D02332E8655
Certificate serial: 07B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vi_5e5tTTVONpBoJtsCNAjMuhlU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.mft
Manifest number: 07B3
Signing time: Tue 04 Nov 2025 21:26:22 +0000
Manifest this update: Tue 04 Nov 2025 21:26:22 +0000
Manifest next update: Tue 11 Nov 2025 21:26:22 +0000
Files and hashes: 1: vi_5e5tTTVONpBoJtsCNAjMuhlU.crl (hash: 2b1dEQp9CenGhQ9LBkMou28JMfvBG10GDaxrXnOwGPI=)
2: AD2ACD6423F411EB8FBA6A83C4F9AE02.roa (hash: zDoEmMgh0Ofm4a5TBSo1aulp2cylUWbLMdlBm8sXwCs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.crl
rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vi_5e5tTTVONpBoJtsCNAjMuhlU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1977 (0x7b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173D07, serialNumber=BE2FF97B9B534D538DA41A09B6C08D02332E8655
Validity
Not Before: Nov 4 21:26:22 2025 GMT
Not After : Nov 11 21:26:22 2025 GMT
Subject: CN=690a6f7e-7ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e0:b5:6d:fc:21:28:19:c9:af:4b:70:67:55:
fb:3e:c3:58:6b:e5:26:80:95:c7:90:96:b1:73:4f:
ed:e2:a7:39:e2:9e:6e:92:06:6d:32:ad:c2:20:66:
16:82:ff:69:a3:28:71:67:df:f3:be:cf:eb:04:f3:
6a:02:76:80:6f:43:a9:dc:04:3a:1a:b9:f0:19:b3:
c4:ef:6c:94:7a:dd:eb:f8:48:b4:57:0a:77:67:2f:
aa:6c:35:4f:4b:23:c2:93:73:3a:d2:d8:5a:2c:9b:
4e:8f:f4:67:3a:a6:19:c6:00:28:46:59:c3:b7:33:
4d:22:38:19:33:0a:f5:1c:90:d5:57:9e:cc:ee:43:
83:5e:b1:33:51:ad:42:1e:d7:0a:3a:74:ca:a9:03:
d1:64:bc:25:de:0b:35:26:4f:c0:b6:ec:fd:e2:ac:
b3:75:45:d2:5c:c5:e6:9d:6e:ed:5a:c4:90:dd:f1:
9d:3a:28:2e:85:c6:7b:32:64:42:cd:af:b9:3b:92:
fa:28:e3:ba:e2:4e:2c:ec:d1:37:7d:33:b8:b1:ae:
39:3d:f9:d1:47:0c:9b:d0:75:8b:b9:c6:55:e9:22:
ca:23:9b:e7:ad:0f:06:03:0c:dc:90:3b:ab:58:14:
04:a1:03:c9:41:61:44:44:c5:68:75:08:4a:51:a1:
5c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:09:0B:62:7D:27:E8:8F:14:63:23:29:8E:C6:6F:D9:6E:CE:97:27
X509v3 Authority Key Identifier:
keyid:BE:2F:F9:7B:9B:53:4D:53:8D:A4:1A:09:B6:C0:8D:02:33:2E:86:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vi_5e5tTTVONpBoJtsCNAjMuhlU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:77:0a:88:d7:22:51:b6:9b:31:a3:3d:cf:4f:23:f0:6c:7f:
51:b4:e4:55:39:c5:03:61:71:69:91:ff:d7:55:39:87:77:86:
0e:88:e5:04:6c:fe:d4:1a:56:21:62:7c:06:1a:d6:d1:fc:56:
7b:3b:cd:0e:24:26:e8:d8:42:1f:2d:94:27:34:ce:29:1e:78:
78:53:a0:72:00:2b:68:3e:a2:f8:36:ba:ab:27:be:ef:78:0c:
73:8f:b2:24:84:2f:0d:5b:5d:6e:0e:42:b7:db:ca:cb:0a:39:
bd:61:29:8d:d8:64:57:18:b2:86:c0:d2:19:a5:6f:42:ad:09:
2c:4c:cc:04:bc:a0:d1:db:9f:c9:53:50:aa:03:07:13:97:8b:
6a:95:d8:a9:4c:65:ed:bf:93:93:5e:e7:ec:f2:0e:1d:ee:01:
12:05:06:03:4e:73:11:f3:23:ee:68:18:a3:9e:b4:14:9e:a8:
bb:f4:79:8e:56:f2:e3:ac:ed:8c:cf:8d:07:c7:6b:56:16:4c:
53:5d:b4:b0:c0:c9:a2:b7:98:c1:3a:1e:a5:2e:88:b4:0d:55:
dc:16:90:4f:df:66:4a:e0:f8:c9:21:5a:36:c3:b8:3f:65:ce:
8e:a0:f7:28:c4:98:8e:e6:cf:8e:36:66:7f:cc:4c:81:87:b5:
77:92:45:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:29:53 2025 by rpki-client