
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
File: vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft (raw, json)
Hash identifier: P0gtbmzayzZmVPoEW6K0IjpL2XKqJyr9+UyyURoTIvA=
Subject key identifier: 75:9B:E2:46:C3:2F:9A:E5:FD:85:7F:A7:97:E1:38:4F:33:FA:4A:58
Authority key identifier: BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52
Certificate issuer: /CN=A919F06A/serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
Certificate serial: 0799
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
Manifest number: 077C
Signing time: Sun 02 Nov 2025 21:33:14 +0000
Manifest this update: Sun 02 Nov 2025 21:33:14 +0000
Manifest next update: Sun 09 Nov 2025 21:33:14 +0000
Files and hashes: 1: vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl (hash: OXopw6IKfPLPdlG3EA0iShzOR2pnA4EDmtshD6OOrdo=)
2: 0ECDB4C65E7011EC8FE5F56DC4F9AE02.roa (hash: PgsReX4a/HcM3MuEijdLXSrLd7Vlscm+5dJmyynTyh0=)
3: 7D232E6033A611EB8B013530C4F9AE02.roa (hash: hDAuX39H3T612/n8lUzzs0AUGHN/iCv7TSdpcCPJeD8=)
4: 7C82C65A33A611EB8B013530C4F9AE02.roa (hash: XdLA28efVQQSfHK5ll0cvp5Im97+KOvTKJ73pGEogRs=)
5: 7B44296E33A611EB8B013530C4F9AE02.roa (hash: oDUZAaQl3lPYyTgIw4jAYKCdROz450OeSq3jTFkHMK8=)
6: 7ABF29BC33A611EB8B013530C4F9AE02.roa (hash: DkLMEslw0c7GL3UX6ZX4tSACXhQrny6AEc7AjFls8Qg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl
rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:33:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1945 (0x799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F06A, serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
Validity
Not Before: Nov 2 21:33:14 2025 GMT
Not After : Nov 9 21:33:14 2025 GMT
Subject: CN=6907ce1a-b750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:3a:ae:cd:1b:41:07:cc:0f:75:b6:79:ba:e9:
7f:1b:a4:96:67:bf:11:e4:ba:e5:db:49:57:f8:4d:
ea:e6:44:6a:33:47:b1:27:16:cc:ba:9b:7b:ea:f3:
0f:94:38:80:8a:20:73:73:39:0d:62:1a:f1:3d:28:
19:f6:aa:65:37:66:84:e4:58:ac:0a:79:55:5b:e0:
30:a8:8e:93:4d:29:94:28:dd:18:eb:b9:48:6f:0e:
6e:1a:78:f6:f2:b1:96:18:13:e9:15:3a:ca:02:bc:
05:14:8e:dd:db:0e:68:02:d7:5f:94:d6:36:07:e0:
c7:25:4d:5b:fa:92:7f:82:c7:50:fd:1a:89:56:ac:
fd:2e:9a:8e:64:3a:f7:3f:b1:9b:82:2b:74:90:96:
cd:7a:8c:f3:1b:c5:77:54:32:de:34:d2:e8:58:4b:
5c:4c:89:5b:05:7f:ef:d3:e0:f8:b5:8b:fa:22:b8:
49:37:1b:e2:69:74:7c:5e:d1:89:5e:e7:b4:85:95:
46:1d:53:11:16:d4:c9:50:59:5e:b2:80:41:7d:60:
b9:53:d9:60:b2:d6:c8:11:63:17:20:68:44:35:c7:
80:43:ed:16:4e:01:30:16:5d:b3:a8:ca:75:7f:89:
49:88:4c:b7:f8:5d:94:80:66:93:3d:bd:84:74:e4:
8f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9B:E2:46:C3:2F:9A:E5:FD:85:7F:A7:97:E1:38:4F:33:FA:4A:58
X509v3 Authority Key Identifier:
keyid:BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:d5:1b:29:bc:dd:ef:21:9b:f3:c0:ab:fe:c1:10:12:46:ff:
ae:c2:6d:2e:04:9f:b2:69:1a:ba:ba:37:ea:0d:8b:e6:4f:02:
fc:8c:86:1b:28:4c:67:77:a1:8f:67:1f:46:31:80:07:31:27:
00:dc:d8:d9:dd:8d:0e:88:a7:89:fd:9c:7a:1e:4b:a5:f7:7d:
ed:63:8a:56:a4:3f:0e:0f:7a:0e:7f:25:a2:4c:f1:32:33:5f:
1d:95:c5:8a:11:78:bd:8e:3c:75:3b:35:89:b3:9b:f5:c9:cc:
fa:4d:2a:ae:95:0b:65:55:10:34:85:7c:59:07:ec:48:2d:62:
8b:ba:ad:e2:2a:a7:b9:40:84:3f:53:4c:6a:1d:7f:d8:a9:e1:
cb:56:16:7d:dd:d2:57:6a:02:4d:c8:04:7f:f1:41:19:2e:aa:
49:ce:5e:b7:2b:85:d4:4d:17:7a:ef:80:8b:21:e3:1f:6d:66:
30:9a:7e:94:20:fe:ef:4b:37:3d:77:45:5b:de:8d:e2:81:10:
bd:37:96:01:6c:f3:4d:74:1e:f0:79:08:19:fb:4e:83:7f:0b:
44:7b:ad:74:a4:00:9b:71:c1:54:83:c3:73:74:9b:f8:dd:38:
bb:04:03:cd:e3:d6:82:be:0d:6a:df:05:b0:66:2b:45:2c:cf:
e2:ad:e9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:05:57 2025 by rpki-client