
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
File: vxobyMAsIDYtD9n5K8AGoolejIA.mft (raw, json)
Hash identifier: 6+GPVynYXwImtVG4eEg/xrlRQOXEFE/tPZIlYhVmyko=
Subject key identifier: 3B:84:23:7A:17:2D:D2:C3:C2:3C:7E:6B:83:5F:83:37:62:B3:C7:07
Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80
Certificate issuer: /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
Certificate serial: 07F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
Manifest number: 07EA
Signing time: Tue 04 Nov 2025 21:11:11 +0000
Manifest this update: Tue 04 Nov 2025 21:11:11 +0000
Manifest next update: Tue 11 Nov 2025 21:11:11 +0000
Files and hashes: 1: vxobyMAsIDYtD9n5K8AGoolejIA.crl (hash: 9B/Fz7wp8R6sbf/BqF86WAcyJFQgoX8Pa8o64IBOjxk=)
2: ABD5003E079C11EBA7C04832C4F9AE02.roa (hash: gudUHLzJpmvIi7qROWYt11jIMMWxAxmreMkdOGwLNhI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl
rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2032 (0x7f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A423B, serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
Validity
Not Before: Nov 4 21:11:11 2025 GMT
Not After : Nov 11 21:11:11 2025 GMT
Subject: CN=690a6bef-8019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:4b:b5:c2:9d:75:a1:dc:35:d7:15:89:c0:
4f:7f:fa:71:00:39:49:07:41:86:e1:f1:aa:fc:41:
11:f4:52:fc:6a:cf:e7:cb:19:f5:68:b1:21:47:83:
93:b1:d4:98:45:3d:c9:0f:1e:8b:44:cb:7d:4e:61:
63:43:59:af:ec:89:de:9e:f4:b5:3b:04:91:d2:a6:
4b:f1:50:51:7d:76:a0:36:16:19:e9:d4:23:6f:01:
eb:38:bf:e1:19:7d:c4:a8:43:f2:7c:81:38:ab:55:
5c:09:1c:d3:8c:a4:5f:61:7b:0e:ec:f6:03:9b:60:
a2:ff:94:4d:b1:75:91:45:78:6e:b2:e4:21:a6:87:
96:64:d4:e4:ee:35:19:f1:f7:bb:84:97:59:7a:c8:
70:a1:35:de:1e:f8:e7:52:ce:54:0e:c2:52:fd:08:
3d:92:a3:2b:52:29:e2:35:ce:be:11:90:34:04:c4:
e6:96:dc:d2:83:c3:b7:95:53:95:64:8d:26:ae:7f:
e0:92:67:05:33:61:60:25:6f:a5:4c:47:2a:5e:14:
8f:81:96:3d:9f:7b:8c:e1:2b:1a:68:f2:c2:18:d2:
76:1f:7a:2e:c8:10:78:8d:76:93:12:75:ab:d9:66:
8e:ce:8e:27:71:83:83:ba:9d:0c:71:60:d7:79:4c:
e0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:84:23:7A:17:2D:D2:C3:C2:3C:7E:6B:83:5F:83:37:62:B3:C7:07
X509v3 Authority Key Identifier:
keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:dc:26:8d:c2:7b:34:66:80:66:6a:d9:66:ba:59:96:87:62:
6d:77:aa:f1:09:a1:f3:fb:32:18:b0:f9:3f:a5:4f:15:d8:44:
e8:8e:f3:16:2f:24:ef:29:df:2e:4f:f4:b0:09:91:fd:d8:99:
e2:e0:3d:3b:05:87:0a:65:22:7a:1d:97:84:3b:ee:48:5a:a6:
d4:65:f7:87:9e:0a:79:db:29:dd:54:6a:72:22:d0:8a:53:17:
e5:8b:ed:65:c7:92:c2:f2:21:f3:0e:0f:48:dd:19:03:79:7d:
d6:5f:35:49:49:5f:58:65:a6:ce:8e:77:c6:2c:0b:cd:2d:b0:
39:48:8e:d8:d6:02:bf:07:f9:ac:f3:6f:36:e0:3c:93:db:40:
cb:60:ef:74:37:9d:bc:e8:3c:a4:d4:ef:68:c3:f0:c4:1b:c3:
85:65:47:39:24:2d:07:e3:75:a2:f2:dd:5d:cf:12:6f:e6:5f:
ea:bf:c0:62:34:96:38:40:8d:69:0b:d5:56:bd:5f:f7:10:50:
e8:5c:a3:87:41:0d:c5:c8:37:03:bf:ad:04:24:6c:9f:7a:5f:
44:57:d5:36:72:12:a4:d4:b7:bd:05:0b:76:78:eb:b2:ef:1f:
c9:e0:3b:18:e1:66:11:56:6a:99:a2:af:27:c7:71:4b:21:29:
09:0b:1e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:25:29 2025 by rpki-client