
$ rpki-client -vvf rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
File: vLfPRDC7mOoEhRw0BybliBUOE50.mft (raw, json)
Hash identifier: FV2RJIxRwhwM2pgMoSWp6PNd+WyAWmqm57VMdUcks8g=
Subject key identifier: DE:F1:9C:46:D4:11:FC:C5:CC:10:8E:F8:59:4D:DF:D2:BB:79:7D:72
Authority key identifier: BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D
Certificate issuer: /CN=A91993A0/serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D
Certificate serial: 0146
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
Manifest number: 012A
Signing time: Wed 05 Nov 2025 04:57:47 +0000
Manifest this update: Wed 05 Nov 2025 04:57:46 +0000
Manifest next update: Wed 12 Nov 2025 04:57:46 +0000
Files and hashes: 1: vLfPRDC7mOoEhRw0BybliBUOE50.crl (hash: lGbKTTajIFJd7jKX/EpVe2Xi26CUfJQ+KaWysoMg9yc=)
2: BD5B75800C4E11EF85EEFC1FC4F9AE02.roa (hash: yvhUjHAiX+EPlHQdcU4E7154R9m6cxsrAxWsgLI83Mw=)
3: F9393E440C4811EF97CBBC31C4F9AE02.roa (hash: MLTTfCwREUsGVfNKsAVzpfz2Sc45FONq7T/5iif0e5s=)
4: D6871FC40C5711EFBD14BD5AC4F9AE02.roa (hash: ct7HNnoVMRTu9GGbvMdnAsr99cdgOMQ5g1ojGQzID0Y=)
5: BE3E0EE00C4E11EF85EEFC1FC4F9AE02.roa (hash: VQG0WF9XSuXwWbMIIOSS0EFZqyrabhvnJP0dkdCPAVw=)
6: 8F64B3240C4B11EFACEF2C6FC4F9AE02.roa (hash: 2CtFG7HWVSfrrJnKmf+0gUAHRHN8PeRmFCcQjXhYXBE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl
rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:57:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326 (0x146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91993A0, serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D
Validity
Not Before: Nov 5 04:57:46 2025 GMT
Not After : Nov 12 04:57:46 2025 GMT
Subject: CN=690ad94a-1133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:1a:c8:e2:2d:ba:0e:c7:87:59:a4:20:0e:ff:
d4:23:65:3c:c3:43:d0:83:0e:3a:94:f1:11:5d:c6:
0c:16:6c:e7:45:ee:4f:83:22:2e:41:fc:a6:1a:dd:
01:60:6c:be:e4:43:a8:b5:89:a8:72:73:8a:66:ef:
ff:2f:95:42:ae:d9:44:ff:0f:09:f5:66:5b:39:3c:
7d:ba:52:8a:3f:61:64:36:68:ba:64:1f:d8:06:1d:
1b:aa:fd:55:2f:c1:e2:f4:8c:1a:a1:21:2c:c0:c3:
70:fd:49:7f:c3:36:85:6e:b1:3e:99:5c:5b:d2:5e:
c1:59:bd:1f:27:15:9f:a0:65:0a:90:d2:37:15:8a:
15:7a:f1:55:00:22:02:38:af:46:19:c3:b3:a4:14:
c8:a7:94:07:27:f4:9b:dd:06:14:90:01:a9:ad:ed:
14:c2:84:f5:18:ca:13:bb:9d:61:57:57:e4:02:84:
de:98:22:d8:7e:86:65:9f:91:6c:c2:45:71:16:9e:
55:e9:83:28:bf:88:79:3c:e9:72:ab:5a:24:f9:dc:
1c:3c:2b:3b:fb:4b:a7:53:59:00:46:ac:ed:40:47:
61:e8:14:23:d2:5e:2f:c2:06:ea:4e:13:a9:47:45:
87:63:bd:31:ff:78:f2:a9:cf:07:2d:8e:da:c8:6b:
73:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F1:9C:46:D4:11:FC:C5:CC:10:8E:F8:59:4D:DF:D2:BB:79:7D:72
X509v3 Authority Key Identifier:
keyid:BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:95:82:84:82:e8:7a:13:2c:dc:1b:73:8a:1f:97:c9:5f:f2:
68:e4:2b:2d:99:0c:79:16:9c:03:72:32:96:87:29:b0:36:d4:
93:ea:cb:2a:22:02:ba:8a:5a:63:46:45:44:35:07:02:e6:21:
13:8c:43:09:8d:ed:4b:51:87:10:6d:08:f6:49:1e:60:52:29:
43:59:4f:7f:b2:9e:2b:0f:24:41:16:99:d0:4c:1f:06:04:7d:
87:de:82:d2:82:39:47:94:f9:35:2e:70:5a:6d:b8:25:16:20:
1e:26:c1:4f:b1:36:0b:b1:ed:85:f8:8b:5a:cf:d4:76:1f:6a:
4f:e0:a7:1d:b3:3e:f5:e5:22:52:29:3c:a7:00:0a:6e:07:09:
da:29:16:5b:85:da:de:c4:d6:7e:b4:86:05:9a:7a:d5:d7:43:
90:24:6a:fe:2b:10:45:1f:c5:5f:fe:49:2a:e1:6e:75:4d:cd:
58:14:5d:cc:d0:b2:a0:a8:18:10:57:24:6a:ae:02:29:e7:ca:
89:bd:99:ff:bf:6b:6a:6c:39:9f:92:a7:9f:1b:db:81:e9:98:
4f:75:5e:20:54:49:69:22:32:c2:69:54:ea:43:bf:ae:52:b4:
85:ce:48:23:dd:fe:bb:47:f4:d8:ed:99:67:7d:d4:86:76:88:
b7:33:a2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:00:58 2025 by rpki-client