
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.mft
File: k_rViPOepYxliN36F70Nb856YGo.mft (raw, json)
Hash identifier: j4BskgM8mxh/n0Mn943A8lfRJ5vvFtIIMwQqjyZt0j4=
Subject key identifier: 32:3D:2A:A1:79:0C:6B:A4:72:89:F2:5A:9E:07:8B:52:C8:48:BF:E9
Authority key identifier: 93:FA:D5:88:F3:9E:A5:8C:65:88:DD:FA:17:BD:0D:6F:CE:7A:60:6A
Certificate issuer: /CN=A917F5F0/serialNumber=93FAD588F39EA58C6588DDFA17BD0D6FCE7A606A
Certificate serial: 0860
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_rViPOepYxliN36F70Nb856YGo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.mft
Manifest number: 085A
Signing time: Tue 04 Nov 2025 20:45:09 +0000
Manifest this update: Tue 04 Nov 2025 20:45:09 +0000
Manifest next update: Tue 11 Nov 2025 20:45:09 +0000
Files and hashes: 1: k_rViPOepYxliN36F70Nb856YGo.crl (hash: IXIBV4tLMNywYDn9CgAJSoNslCcs9HnNE3haOZ4oYTg=)
2: 4C89E536DC6311EA8C998087C4F9AE02.roa (hash: nq8qpRsk9rXbJOHGglWhSt6QeR+0FuC7rTR0xPKJN7E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.crl
rsync://rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_rViPOepYxliN36F70Nb856YGo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2144 (0x860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F5F0, serialNumber=93FAD588F39EA58C6588DDFA17BD0D6FCE7A606A
Validity
Not Before: Nov 4 20:45:09 2025 GMT
Not After : Nov 11 20:45:09 2025 GMT
Subject: CN=690a65d5-0b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:b7:29:53:6d:65:dd:8a:b6:1b:d0:51:66:
a6:78:8e:c8:af:91:f4:f8:9e:2b:09:2c:1e:a0:16:
e3:b1:69:fb:dc:18:0b:e7:07:72:b4:0f:f8:2b:67:
7d:75:74:30:7e:39:10:32:cb:a5:b6:a0:ae:a9:50:
0a:c6:57:7b:88:98:83:35:51:9d:cb:d2:5d:89:d9:
2e:f2:9d:55:96:a1:dc:d5:c1:c9:21:f0:86:df:95:
c4:1d:b3:5d:3d:2f:9c:14:03:92:30:cc:c3:4b:83:
42:bb:34:d5:76:26:42:ee:d3:21:f2:a7:b5:f6:5c:
4f:8c:1a:11:db:8c:4f:fa:f4:78:49:2a:fd:b2:8b:
c8:e6:bb:11:d9:fe:53:fd:5f:aa:ea:e9:8d:87:44:
d1:25:46:b4:4f:13:c8:76:74:e2:58:f7:76:e6:f8:
b0:3a:bb:96:e9:c2:2a:37:59:ca:82:18:93:a7:7a:
69:42:08:c0:aa:a3:93:0a:37:95:2d:cc:10:4f:99:
ee:47:ba:f2:8d:10:19:67:dc:19:66:48:19:e6:18:
80:6a:38:24:f4:bb:25:d0:cf:8b:aa:07:95:db:27:
f4:e4:95:42:76:f2:4a:e4:66:81:5e:f8:7d:5d:a3:
e0:70:e8:a3:62:6d:f7:3d:e9:b5:ce:23:b3:e2:4f:
81:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3D:2A:A1:79:0C:6B:A4:72:89:F2:5A:9E:07:8B:52:C8:48:BF:E9
X509v3 Authority Key Identifier:
keyid:93:FA:D5:88:F3:9E:A5:8C:65:88:DD:FA:17:BD:0D:6F:CE:7A:60:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_rViPOepYxliN36F70Nb856YGo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1e:2f:b7:62:70:80:35:88:05:0c:f6:47:84:5c:01:e2:d1:
29:23:81:06:c1:c2:b2:70:9f:f1:67:77:f5:9a:86:eb:7b:86:
45:09:0e:2d:5f:d5:b3:2c:c6:f0:ca:9e:3c:44:11:52:2a:dc:
ae:2c:93:34:ee:24:f4:77:27:02:f6:65:9d:5e:4e:24:ee:e4:
96:aa:36:5e:fd:99:8f:02:3a:a0:65:3c:be:d4:a1:11:3b:15:
88:83:04:2f:8b:0c:88:60:cf:62:1e:27:88:0e:a1:3d:eb:8c:
46:59:fd:9a:53:ba:13:d5:7f:d2:42:fe:fc:45:88:05:c9:2e:
1f:4f:ae:d0:dd:ec:29:c0:ce:86:53:06:e3:4c:ad:68:20:ed:
fb:39:31:c7:a8:c7:86:72:73:3e:31:86:42:97:db:f3:db:96:
d3:9f:db:a0:91:1a:50:70:b0:4b:a6:f3:2b:44:7e:a6:04:6e:
b1:f6:e7:25:59:88:69:42:18:f8:5f:3c:5f:0d:29:2f:64:c1:
74:b7:79:62:fe:c3:4c:88:33:19:75:d0:37:18:19:dc:fa:9a:
82:6f:49:d9:4b:f8:d1:17:66:34:7a:68:49:11:98:9f:cb:6c:
b8:cc:2e:90:de:86:83:d9:02:e5:14:29:bb:2f:a4:73:4b:d7:
7e:5f:f8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:28:18 2025 by rpki-client