
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft
File: vYeFXLaB4jNZv-waNPGZK2ceXu4.mft (raw, json)
Hash identifier: QhY+wAwBMnyce1mGP/EYtSHXhpJcgc2oJfYPdAz0s8A=
Subject key identifier: 2E:5C:80:FF:A0:8B:67:32:75:35:85:FD:0F:4E:5C:2A:5A:61:D5:4A
Authority key identifier: BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE
Certificate issuer: /CN=A9127726/serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE
Certificate serial: 3541
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft
Manifest number: 3507
Signing time: Sun 02 Nov 2025 15:14:49 +0000
Manifest this update: Sun 02 Nov 2025 15:14:48 +0000
Manifest next update: Sun 09 Nov 2025 15:14:48 +0000
Files and hashes: 1: vYeFXLaB4jNZv-waNPGZK2ceXu4.crl (hash: pheqT5/rvWfoLiGxkiQ85wU6l5XVZtgpKdEFSNAL/hA=)
2: 264A19E27A3D11E99D212E62C4F9AE02.roa (hash: kaUlqr3b8A7no1oe3E82H4SD9C+VUB4JZZk+4clJWRg=)
3: AF976FA2023311ED945EBE12C4F9AE02.roa (hash: VG6uEFBAKDNWG5jrp+h5u5H00t+QV3JS7QeUIT589uA=)
4: 9D03023EA86E11EDABA1FA2AC4F9AE02.roa (hash: LAU2JxX8T47cr50yu6tjbJf0N73aEylHsaRmxgaBsa8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl
rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 15:14:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13633 (0x3541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127726, serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE
Validity
Not Before: Nov 2 15:14:48 2025 GMT
Not After : Nov 9 15:14:48 2025 GMT
Subject: CN=69077568-d8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:3e:4c:9a:c2:cc:c7:80:a5:a7:ff:77:eb:
ac:35:67:b2:b1:03:4e:fa:7f:0c:df:cd:40:5a:ee:
32:b7:8e:ed:2b:8a:11:df:ce:21:90:16:e0:94:03:
0e:b7:e8:6a:e9:a6:17:50:fa:f6:d1:6a:1e:11:34:
00:f0:52:32:b2:34:2d:4e:74:51:bd:8b:57:ad:99:
12:21:9e:0a:05:4c:33:de:46:92:2e:a3:a1:ff:b8:
63:fd:1d:29:a6:ea:63:e7:25:48:68:f8:b0:8a:9a:
d1:4c:18:0a:2c:60:99:9f:55:7d:e4:f0:5f:06:5c:
3c:70:b9:17:5f:8f:58:db:a7:75:2f:7d:d6:12:51:
e5:f3:5d:5e:19:e6:2b:23:fb:77:6a:84:52:66:d8:
cd:29:cc:55:1a:e2:5b:9c:80:7c:cd:5c:28:ca:7c:
5f:4d:06:77:3d:54:5a:56:94:88:e9:40:ec:bf:9b:
fa:45:71:1b:94:bb:b6:40:97:6f:7c:51:b5:58:88:
82:2a:0c:bc:f8:4e:e7:47:5e:fa:96:44:2a:4d:c3:
17:39:17:b3:94:0a:7b:3d:29:4d:c4:b8:29:3f:6b:
90:c1:56:fa:f1:cb:12:7a:5b:70:f6:ca:c5:f9:98:
53:2d:3d:3e:16:8e:66:56:ec:5d:dd:40:e7:ed:6b:
eb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5C:80:FF:A0:8B:67:32:75:35:85:FD:0F:4E:5C:2A:5A:61:D5:4A
X509v3 Authority Key Identifier:
keyid:BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:f5:cc:04:fa:31:33:a5:7d:6e:ac:c9:73:13:e3:14:83:c1:
fd:0f:3e:f3:ba:35:8d:c5:71:c8:f7:69:45:b6:a1:b7:ea:d5:
d8:c4:3c:eb:2b:40:23:1f:d2:af:3e:a5:8a:b7:03:d5:3f:d5:
cc:30:8f:00:15:74:da:67:62:c7:ec:0f:81:6a:a6:7f:99:29:
39:c6:b4:45:d8:85:34:ad:cc:76:7e:f5:51:dd:d0:79:a6:af:
25:36:ff:88:3f:61:8d:cd:02:b1:be:bb:05:54:f2:b9:0c:37:
46:79:0c:75:27:e5:2b:40:95:22:11:e6:b4:c8:3c:6f:61:9a:
bc:b7:3a:f9:dc:da:c1:e7:69:a8:46:a4:ec:08:0c:11:3b:a2:
4b:8a:da:ad:d0:c1:ff:79:f4:f3:d6:e2:5a:77:bb:31:00:de:
56:a0:eb:24:ca:a3:97:92:95:7a:e0:42:15:eb:ca:d6:d1:d6:
72:75:2a:6a:b5:9a:ba:ab:02:f1:6f:4d:2e:37:1a:fb:bc:0b:
2b:51:a1:56:52:ff:c7:3a:f6:d3:78:ee:20:91:ee:03:e9:f2:
b3:0b:6d:55:b7:8c:e0:77:8d:47:8c:e0:57:59:d6:95:1f:a8:
15:08:43:79:d5:66:fc:b6:2d:0f:94:c5:23:4d:6e:d1:7d:8c:
79:6b:84:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:13:15 2025 by rpki-client