
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
File: vLFqiHOxvhMm61zbkLGGEV2nTWc.mft (raw, json)
Hash identifier: TuzT9Lf9a8caWnE/MwWSLYlmjmZZrfhoGFAQlyNaVF0=
Subject key identifier: 6B:35:CA:46:3E:8D:B5:26:28:D2:25:E5:8B:BF:25:22:51:80:C3:DA
Authority key identifier: BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67
Certificate issuer: /CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
Certificate serial: 0245
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
Manifest number: 0241
Signing time: Mon 03 Nov 2025 01:42:47 +0000
Manifest this update: Mon 03 Nov 2025 01:42:46 +0000
Manifest next update: Mon 10 Nov 2025 01:42:46 +0000
Files and hashes: 1: vLFqiHOxvhMm61zbkLGGEV2nTWc.crl (hash: UliU3KUYOjegttHJbaUjPZB592zQUg50MVw4mHQh9TY=)
2: A8A940C6429811EDBB392C35C4F9AE02.roa (hash: L4gwhY7icNtGh4Pw0dLfgymKZ1S0Ut+p6qHkiovinK4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl
rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 01:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194715, serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
Validity
Not Before: Nov 3 01:42:46 2025 GMT
Not After : Nov 10 01:42:46 2025 GMT
Subject: CN=69080896-f4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:09:43:b9:5e:63:0c:05:d4:15:01:0c:34:
71:b1:df:28:b7:2f:b6:fe:e3:68:54:71:e6:5b:28:
22:d2:e2:19:74:70:18:6d:73:9e:1b:5f:c6:97:34:
9a:ab:8c:5b:ca:7a:24:59:a1:cd:12:7b:ac:24:91:
ab:83:84:58:8f:7d:24:5b:6b:7e:d1:27:4e:a3:d1:
90:7b:5f:7d:7f:b4:53:ee:d7:54:2e:a8:07:42:b5:
8f:75:75:35:1c:97:94:35:17:d2:a5:0d:03:2c:03:
4c:30:82:2e:34:15:53:48:b7:cc:00:6d:4c:39:e0:
58:38:f6:0f:0a:19:50:4e:b4:2c:d0:3b:0c:c8:c2:
68:81:48:f2:05:f4:6d:c1:c8:0f:ba:4d:a6:e3:fc:
f0:34:98:d4:5d:5b:5f:ae:26:a4:f7:34:e1:4e:5d:
50:8a:ad:c2:a1:20:ad:dc:27:34:b4:74:d5:ad:05:
28:73:29:6a:6e:a8:e2:42:51:35:78:f5:7c:6d:f8:
88:3f:9b:16:a7:81:5e:fe:d3:0d:05:6d:4e:72:05:
b6:6b:3a:21:dd:88:a4:1d:ff:05:9e:9d:54:74:a4:
b0:21:82:d0:9f:e5:ca:41:88:88:15:4f:d4:dd:61:
02:16:dd:59:19:dd:b5:f0:27:99:fd:76:cb:c9:f2:
4d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:35:CA:46:3E:8D:B5:26:28:D2:25:E5:8B:BF:25:22:51:80:C3:DA
X509v3 Authority Key Identifier:
keyid:BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:2d:48:86:c8:76:4f:3c:93:83:35:89:5c:68:b6:e3:16:c5:
3b:7b:79:ff:b5:26:8b:67:84:4c:0a:dc:e5:b3:42:ed:03:47:
61:bc:f9:a3:eb:83:67:77:82:24:e5:52:5f:59:87:10:76:1b:
08:7b:36:2f:5a:d2:78:5b:02:e1:c5:18:09:77:8a:87:82:bf:
1c:56:1e:1d:ba:18:28:2e:fe:e9:43:d4:20:b0:80:e7:8f:5b:
cd:f0:81:9b:be:b0:b8:e6:ed:1f:36:8c:da:70:cb:0a:07:c2:
42:30:88:15:d6:0d:71:e8:22:cc:f5:5c:59:2b:53:78:be:0f:
91:df:55:65:59:2c:61:9b:b3:1e:01:22:5b:9e:77:d7:d9:b5:
76:c7:96:08:b0:99:11:85:93:ba:84:1d:58:05:ef:3d:7d:41:
4a:e7:74:57:23:96:93:1d:0d:d6:68:16:18:e8:0c:10:f8:26:
c7:20:4a:cc:71:fd:be:f8:e7:1b:ae:d5:92:58:c0:43:a4:0b:
46:e2:9b:9c:4a:fe:be:c6:1e:0a:ba:55:d0:53:b3:53:02:ac:
f7:45:0b:de:28:7f:41:c0:77:4a:98:d8:97:9d:2c:a7:62:23:
f8:d4:3b:22:85:33:74:d3:16:64:ad:e5:8b:95:b3:8a:39:be:
fc:a2:aa:72
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQ3MTUxMTAvBgNVBAUTKEJDQjE2QTg4NzNCMUJFMTMyNkVCNUNEQjkwQjE4NjEx
NURBNzRENjcwHhcNMjUxMTAzMDE0MjQ2WhcNMjUxMTEwMDE0MjQ2WjAYMRYwFAYD
VQQDEw02OTA4MDg5Ni1mNGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArVoJQ7leYwwF1BUBDDRxsd8oty+2/uNoVHHmWygi0uIZdHAYbXOeG1/GlzSa
q4xbynokWaHNEnusJJGrg4RYj30kW2t+0SdOo9GQe199f7RT7tdULqgHQrWPdXU1
HJeUNRfSpQ0DLANMMIIuNBVTSLfMAG1MOeBYOPYPChlQTrQs0DsMyMJogUjyBfRt
wcgPuk2m4/zwNJjUXVtfriak9zThTl1Qiq3CoSCt3Cc0tHTVrQUocylqbqjiQlE1
ePV8bfiIP5sWp4Fe/tMNBW1OcgW2azoh3YikHf8Fnp1UdKSwIYLQn+XKQYiIFU/U
3WECFt1ZGd218CeZ/XbLyfJNIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGs1ykY+
jbUmKNIl5Yu/JSJRgMPaMB8GA1UdIwQYMBaAFLyxaohzsb4TJutc25CxhhFdp01n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDcxNS82OThCOTYzQTQy
OTUxMUVEQkREOTc4ODFDNEY5QUUwMi92TEZxaUhPeHZoTW02MXpia0xHR0VWMm5U
V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZMRnFpSE94dmhNbTYxemJrTEdHRVYyblRXYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NDcxNS82OThCOTYzQTQyOTUxMUVEQkREOTc4ODFDNEY5QUUwMi92TEZxaUhPeHZo
TW02MXpia0xHR0VWMm5UV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBiLUiGyHZPPJODNYlcaLbjFsU7e3n/tSaLZ4RMCtzls0LtA0dhvPmj
64Nnd4Ik5VJfWYcQdhsIezYvWtJ4WwLhxRgJd4qHgr8cVh4duhgoLv7pQ9QgsIDn
j1vN8IGbvrC45u0fNozacMsKB8JCMIgV1g1x6CLM9VxZK1N4vg+R31VlWSxhm7Me
ASJbnnfX2bV2x5YIsJkRhZO6hB1YBe89fUFK53RXI5aTHQ3WaBYY6AwQ+CbHIErM
cf2++OcbrtWSWMBDpAtG4pucSv6+xh4KulXQU7NTAqz3RQveKH9BwHdKmNiXnSyn
YiP41DsihTN00xZkreWLlbOKOb78oqpy
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:19 2025 by rpki-client