
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
File: vkY_wZGbQUKyOCgTgn-3FtbukoM.mft (raw, json)
Hash identifier: dcaEt8sNuaZnn40EOM6CEtc58Pn9sluMzjaNBlaYZ30=
Subject key identifier: 52:3F:A4:FA:44:19:9D:E4:6D:B6:07:4D:F0:15:E5:AE:1A:18:B3:01
Authority key identifier: BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
Certificate issuer: /CN=A91D40BF/serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
Certificate serial: 07B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
Manifest number: 07A0
Signing time: Sun 02 Nov 2025 21:24:09 +0000
Manifest this update: Sun 02 Nov 2025 21:24:09 +0000
Manifest next update: Sun 09 Nov 2025 21:24:09 +0000
Files and hashes: 1: vkY_wZGbQUKyOCgTgn-3FtbukoM.crl (hash: Lhh70a7z2/OXPjAnaPLPn/FSok5zaKiWnP105LnVG7o=)
2: 28543AA0BABA11EB8A51C234C4F9AE02.roa (hash: tLbuywK1hQsCi3a1AqRQB3esx6wP54LrqFgdAXcaBdM=)
3: ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa (hash: XOt7bB+UgZTY8Thh+DvUt1JxAIDEDKn5j8X2t+ws97c=)
4: 2798B9A6BABA11EB8A51C234C4F9AE02.roa (hash: +zcjX2imATb1GbMG2fycsIcaiWvdU6/+K/wkiamqX6U=)
5: 58E4A6E8B60811F0AF40B71EC4F9AE02.roa (hash: 726+J+96Tj+HjEIghhxWecanICxHywnH4M9SjhljsVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl
rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1968 (0x7b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D40BF, serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
Validity
Not Before: Nov 2 21:24:09 2025 GMT
Not After : Nov 9 21:24:09 2025 GMT
Subject: CN=6907cbf9-eae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:7c:b3:a4:e3:25:36:28:7f:05:8e:a2:e9:
7b:70:76:30:f5:94:f5:6a:9d:da:9e:34:cb:88:27:
14:a3:4b:93:76:8f:1f:c7:f3:54:41:d2:ac:7a:05:
9c:58:1d:5d:14:2e:e0:05:70:df:67:fe:bd:80:dc:
5c:8f:87:ee:a0:18:1b:96:78:7d:57:b5:47:87:0c:
5c:1b:f2:17:32:4f:64:0c:bb:44:f5:d1:7d:13:b6:
9e:68:6b:5d:02:53:d5:09:42:ce:6f:63:4c:ec:29:
2d:f9:59:db:6c:71:fd:07:70:cc:29:4e:97:fc:5d:
2c:8c:19:28:cd:3c:36:74:cb:b8:ed:70:fb:5f:8f:
cd:eb:7f:d6:83:d6:8f:38:df:2e:c2:17:89:b3:9c:
43:55:ce:43:00:ce:d8:f2:61:eb:05:e3:9b:ff:89:
22:d7:f7:e0:94:5c:26:84:c9:c9:99:af:f9:5d:82:
9e:dd:29:4a:9e:1d:10:b9:21:80:8f:c8:0c:81:05:
58:e8:e5:79:05:65:84:a3:41:b2:fb:c4:48:8f:76:
55:ef:3c:4f:22:61:a9:14:04:f1:aa:bd:49:c1:57:
f1:68:9a:c4:68:09:6d:60:d7:06:64:0a:29:50:d7:
0c:c1:64:92:5a:fb:73:2d:46:cc:95:cf:03:7e:3b:
9b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3F:A4:FA:44:19:9D:E4:6D:B6:07:4D:F0:15:E5:AE:1A:18:B3:01
X509v3 Authority Key Identifier:
keyid:BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:0c:eb:4f:d0:33:99:23:5c:64:e2:b0:3a:03:56:ab:0c:be:
44:e4:e0:6f:9b:ac:7c:c5:c3:3f:ce:6a:3b:a5:37:a7:96:25:
85:4b:ef:d3:14:b6:b0:83:f3:63:4f:9b:2c:81:3c:35:bc:c5:
85:26:02:c1:35:a6:08:10:ac:e9:d4:cc:91:74:43:0e:89:70:
84:fc:5b:11:2e:a9:ee:5a:79:52:5b:4a:08:d2:f4:17:1b:43:
d5:4a:1e:f5:08:79:e8:8d:3a:c2:dc:8b:37:8c:b5:b2:b7:67:
62:16:14:2a:c5:53:b4:76:b5:8c:9b:1d:39:28:53:11:88:c5:
61:2a:15:d5:9b:6f:26:6a:b1:07:1c:e7:f4:18:70:a7:22:9a:
91:28:e1:3b:4a:4f:64:d8:fc:ed:23:fc:a1:c4:3b:4e:c2:a7:
4b:ea:9f:00:a5:f8:40:46:b5:50:6e:01:a2:3a:d0:bb:8c:39:
4c:b1:15:fe:a0:2c:67:4e:81:12:a6:08:dd:d4:49:aa:82:d9:
de:f2:37:ee:27:d4:cb:68:77:80:f9:62:9d:35:fa:5b:73:b6:
92:43:ab:b4:49:09:71:13:bf:6c:6a:c0:3f:d8:17:1a:6f:54:
8f:63:32:a0:76:d4:62:7d:40:1d:5e:ef:25:5b:d9:a3:a4:7e:
2d:70:81:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:35:48 2025 by rpki-client