
$ rpki-client -vvf rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft
File: vxurTPDVSTDgAbctJPMLPtaK4rM.mft (raw, json)
Hash identifier: BV8uTDBVeylXwkUUzBotjFNaLKbwMGwqw3oRdeBbFWU=
Subject key identifier: A0:66:C6:20:3F:75:4D:FB:0F:31:63:45:56:FA:4B:3F:C6:59:95:7D
Authority key identifier: BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3
Certificate issuer: /CN=A916F95E/serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3
Certificate serial: 110A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft
Manifest number: 1101
Signing time: Tue 04 Nov 2025 17:21:59 +0000
Manifest this update: Tue 04 Nov 2025 17:21:59 +0000
Manifest next update: Tue 11 Nov 2025 17:21:59 +0000
Files and hashes: 1: vxurTPDVSTDgAbctJPMLPtaK4rM.crl (hash: VAzB0n2rAE9RmQN8dHofLP0RdT1Dfn/9Rp5QXZgrhjQ=)
2: 1BB160C225EB11E9ADD6867FC4F9AE02.roa (hash: 8YN4HjFnFIcDaShQHDoigKa3LLkHGTw5fy+IJogcxeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl
rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4362 (0x110a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916F95E, serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3
Validity
Not Before: Nov 4 17:21:59 2025 GMT
Not After : Nov 11 17:21:59 2025 GMT
Subject: CN=690a3637-8b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bf:9e:7f:55:8b:25:0c:54:12:9a:f7:c3:36:
b6:77:e9:27:60:64:ad:c9:c3:3b:e0:7a:c3:72:33:
5b:2a:4a:b6:a4:0f:70:e6:a2:c4:cc:23:a5:aa:76:
16:cb:41:7e:df:d2:c5:97:36:03:b5:3c:23:39:a1:
51:52:1e:5c:6d:16:53:54:16:5b:ff:12:c3:e3:09:
5e:f1:51:86:9b:aa:0e:75:29:73:0c:7d:d5:4f:24:
e2:50:0a:5d:d5:4c:fd:27:5c:93:b2:a9:69:24:b4:
62:33:ba:41:be:9e:9c:9e:cc:ed:79:f5:e0:0e:d8:
ca:e6:27:cf:76:de:ea:1d:3e:07:62:da:be:c3:f8:
82:69:3d:de:f7:54:b7:1d:88:5c:55:73:d7:7b:56:
4d:83:68:fc:04:5e:fd:1c:1a:d1:73:95:83:9d:c6:
ed:04:8f:55:7e:70:ae:be:54:8b:f8:44:a3:e3:11:
68:d4:cf:0f:23:99:d2:f2:6c:e8:5f:9b:d9:1a:a1:
19:87:f0:c5:ca:61:60:36:44:5c:b4:54:9e:b6:3c:
0f:2d:d9:79:3a:0e:83:d3:38:27:7f:30:16:d9:13:
a1:d8:45:57:13:ac:4c:68:9f:52:f4:1d:77:6d:32:
37:30:65:c9:a9:d2:b6:58:33:8f:66:34:7a:2f:7d:
4d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:66:C6:20:3F:75:4D:FB:0F:31:63:45:56:FA:4B:3F:C6:59:95:7D
X509v3 Authority Key Identifier:
keyid:BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6d:4c:e5:97:dc:75:42:66:ed:d4:09:e8:a4:47:da:53:d7:
4e:a4:28:fe:de:8d:08:2a:dc:02:9a:e2:16:af:d0:66:48:1f:
f0:ae:f3:02:fa:20:7f:a2:99:26:3c:41:04:60:57:8e:8a:e2:
c9:b1:fc:dc:9d:e1:5d:ea:d4:d1:f6:02:bd:34:3d:43:16:18:
4a:b6:46:4c:eb:43:ce:5a:31:fb:49:56:32:58:26:95:44:30:
c9:29:63:a1:84:cf:9c:78:fc:2b:2b:8d:b4:03:54:54:d6:c4:
07:a5:67:a4:f8:23:7e:3e:5a:dc:af:66:c9:32:e1:17:b0:2f:
13:f1:4d:6e:93:21:4a:c3:5d:53:3a:e2:22:d7:bc:46:39:2f:
e7:cf:f2:d7:7d:3b:11:b2:90:3b:aa:17:4f:89:31:ce:50:d6:
42:fc:eb:a5:a1:d9:26:ca:fa:e1:55:23:8a:cc:46:60:33:9b:
ee:ca:73:06:92:27:13:78:aa:38:6d:fc:0f:bc:aa:b9:d4:64:
03:e3:38:9e:a5:63:ed:25:78:04:dc:27:5e:76:97:dd:2e:1c:
b1:ce:cf:75:2b:d1:f5:58:8f:49:94:59:24:06:67:33:2b:fc:
28:80:c6:6d:12:19:be:ca:88:54:7e:3c:5b:0b:51:4d:aa:07:
9d:71:38:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:27:47 2025 by rpki-client