
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
File: vKs-dvhO1DdC8qCBJCcI55nOG18.mft (raw, json)
Hash identifier: uP9LFpTFXvFGs0RInsl1i3L7iJCpyBdwBOqZy1EcuQE=
Subject key identifier: 83:CE:89:24:B1:E8:6A:7A:51:6E:F1:F1:CB:0C:33:3C:76:4D:A0:C3
Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
Certificate issuer: /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Certificate serial: 0146
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
Manifest number: 0130
Signing time: Wed 05 Nov 2025 04:54:59 +0000
Manifest this update: Wed 05 Nov 2025 04:54:59 +0000
Manifest next update: Wed 12 Nov 2025 04:54:59 +0000
Files and hashes: 1: vKs-dvhO1DdC8qCBJCcI55nOG18.crl (hash: LSxuoJhBfXRst35c+w8Psv/64GxCCfJcrQBGb/gBSQU=)
2: E08658208D2D11F09327643FC4F9AE02.roa (hash: 41FC6Qh9FHv4UtlaWBSLbf5ObxYVTSL2scuznbl1Qds=)
3: 222F2952038511EFAF036327C4F9AE02.roa (hash: 0POds3yRjM0RD6yJRDt5kjZrzEVN1RcsA2tdedecI4c=)
4: A0AD48EA083011EF82AFFD44C4F9AE02.roa (hash: E2oXK+nP7XuyH0hDSL1uq1DEWcq+1W48Rez3w3+1ppw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl
rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326 (0x146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC532, serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Validity
Not Before: Nov 5 04:54:59 2025 GMT
Not After : Nov 12 04:54:59 2025 GMT
Subject: CN=690ad8a3-36a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b0:77:b6:85:e9:8d:c4:61:91:62:57:a8:dc:
73:9d:64:5c:80:8b:6d:2b:ed:4a:6d:f8:21:36:32:
cd:a8:4f:6c:c3:7c:53:e6:83:c8:29:f9:89:94:74:
39:32:8e:e3:6c:a5:14:6f:7e:f1:eb:d4:f2:9a:4c:
e6:b4:60:d7:a6:ef:a2:08:53:d7:9e:b2:30:d6:cc:
b7:4d:27:b9:dd:94:64:bb:4e:bb:32:3f:2a:dd:8e:
9d:8b:2a:9c:36:51:43:a0:a6:c2:19:21:21:a3:7a:
3d:38:33:2e:30:30:56:3e:d2:a6:e1:b8:a9:b8:7f:
94:b0:f5:2f:90:21:75:dc:38:a5:fb:e2:d7:b9:bc:
cc:d2:38:0e:7f:c2:dd:6c:5e:57:3a:3b:e7:29:e9:
57:cc:e6:d7:10:52:f1:6c:4b:e9:82:94:fc:6c:fe:
cd:af:03:5a:a7:3b:a9:d3:21:a1:d3:7d:26:b8:48:
e8:bc:fe:8c:a7:bc:15:3c:e5:70:1d:45:98:fa:15:
83:52:a7:7c:24:40:36:4a:49:12:02:58:64:fe:12:
21:53:ab:ab:9d:75:5c:15:98:ec:2a:bd:ae:e2:ea:
c9:7b:9d:88:60:c2:de:33:cb:be:0c:96:cc:6a:3c:
32:03:4a:1d:d4:32:54:da:53:1a:1a:e7:d7:b7:fb:
f2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CE:89:24:B1:E8:6A:7A:51:6E:F1:F1:CB:0C:33:3C:76:4D:A0:C3
X509v3 Authority Key Identifier:
keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:5d:43:56:39:57:3d:5e:04:52:50:02:41:63:8b:55:3f:4b:
4c:9f:13:38:43:80:2c:eb:c0:8e:d3:53:83:c4:9d:72:c5:3d:
ae:dd:ad:4b:62:ec:98:8f:08:50:9d:28:19:b0:08:d2:d6:c4:
a6:c9:d8:92:60:71:cf:7c:2a:fa:a7:c4:61:63:c2:f8:c8:59:
e4:dc:50:fb:ca:fb:94:2d:17:3c:0a:3b:d8:a7:e4:7f:8a:90:
e8:fa:16:4d:d6:c0:ea:ac:b0:be:76:87:2a:b5:d7:52:9b:43:
e0:b2:3f:48:28:26:36:ab:42:a5:52:35:2b:17:62:f4:dc:30:
8f:5b:b1:f7:f7:a0:03:03:26:88:97:b7:eb:0d:85:04:c7:78:
be:d9:48:72:8b:bd:8c:1f:3c:81:87:44:f8:ee:1b:55:bb:28:
d3:bd:5e:98:49:c3:c7:f0:38:6a:67:ed:de:76:bf:99:b7:21:
c3:38:5d:1a:2c:cc:d1:0b:9b:d3:00:19:2e:68:37:3a:0c:2f:
9c:f8:83:c4:b8:b2:4c:51:6e:67:25:33:8a:bf:cf:da:a6:1d:
94:ab:e7:d3:71:6f:2a:92:ff:5a:41:17:9a:43:b6:7c:e0:3a:
9b:15:2d:1c:80:cb:52:22:82:38:12:88:60:c7:97:fa:9e:36:
30:2d:f1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:47:35 2025 by rpki-client