
$ rpki-client -vvf rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
File: VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft (raw, json)
Hash identifier: tIqkFVaGr3AqUv55XZIjEqR/Ed8lxqwgSoip+kC5RkY=
Subject key identifier: AA:8D:E5:10:CF:5A:B6:E8:9E:53:59:B4:E8:F0:AB:AB:1E:F7:4A:67
Authority key identifier: 55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA
Certificate issuer: /CN=A917928F/serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA
Certificate serial: EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
Manifest number: E7
Signing time: Mon 27 Oct 2025 07:38:08 +0000
Manifest this update: Mon 27 Oct 2025 07:38:07 +0000
Manifest next update: Mon 03 Nov 2025 07:38:07 +0000
Files and hashes: 1: VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl (hash: 8XVRZojnMjWBkuRsLcEEfT7PNFvRITvfC6oud+IJWfc=)
2: CEF77C10FB3811EF8D87CD5DC4F9AE02.roa (hash: XlrGroWLq2F8K9TNvUILoHbQClBvuar5myCI5h2ZPFM=)
3: C4C5449EABD111F0A9879016C4F9AE02.roa (hash: 27GDWRqexIzZCkZxT6vxP5UiZyDTasoUQCay0EB/G5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl
rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 07:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917928F, serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA
Validity
Not Before: Oct 27 07:38:07 2025 GMT
Not After : Nov 3 07:38:07 2025 GMT
Subject: CN=68ff215f-6d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:76:af:9c:99:43:bb:da:b9:c2:cc:5a:19:31:
71:3c:45:de:45:1a:0e:53:02:c8:ce:de:a6:af:ca:
78:e2:a2:c0:b8:2f:cf:50:a3:c4:a2:17:99:ae:84:
ea:fb:35:28:6e:5d:9e:ac:ae:ea:3c:c2:dd:3f:6c:
ff:89:54:c2:fa:13:04:09:48:76:68:b7:95:1d:9d:
c8:81:3a:c8:ef:0c:87:ef:b0:aa:61:40:40:ff:49:
ae:0f:3f:8f:6f:50:9a:1f:ef:7a:4d:70:71:e8:61:
e7:d9:9d:a9:c8:8a:f5:cd:bc:99:83:64:02:6e:86:
b2:89:d7:43:a0:e7:c2:64:22:b4:ec:b5:61:18:1f:
4a:ff:87:6e:33:b2:96:35:07:29:ce:d3:42:b7:7e:
f7:0a:8c:4f:90:7f:22:c4:c9:01:22:69:86:0a:d0:
6d:2f:65:7d:e5:9d:0b:1a:36:67:5f:4b:a7:8e:57:
82:0a:de:24:45:a7:37:d6:1a:3b:b3:94:ef:46:7a:
43:75:b1:c6:ed:33:f8:55:c4:76:44:73:51:f8:ca:
f1:8a:3e:25:05:c1:62:f5:54:9b:0f:8f:bf:d6:6e:
8e:e6:9e:e4:92:93:82:a5:b6:2a:75:5b:89:5a:3a:
16:3a:0e:ec:d1:14:3f:5c:12:15:3e:17:a4:b1:b4:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8D:E5:10:CF:5A:B6:E8:9E:53:59:B4:E8:F0:AB:AB:1E:F7:4A:67
X509v3 Authority Key Identifier:
keyid:55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:0a:1b:e6:4c:de:00:39:2d:6a:2d:a2:60:85:45:fa:be:63:
49:b1:d8:53:b1:c4:71:4a:2a:fe:e0:69:c0:2c:d0:a9:13:2b:
a7:37:e4:9e:66:69:c4:7e:84:3f:61:b0:9e:f9:17:dc:4c:fd:
39:f3:26:05:5f:3f:4f:f6:d2:5f:72:2d:71:ce:c8:99:76:0c:
3f:f1:32:94:f7:5d:19:52:c9:f5:1d:08:2f:a4:df:81:be:49:
10:e8:46:7e:c0:cb:9d:d1:12:70:15:bc:e9:66:58:1e:34:96:
e0:54:50:c7:7c:13:ad:19:90:90:d8:b7:ad:de:2a:71:5d:15:
ca:b5:82:77:e1:bd:df:4f:fd:08:ae:f8:c8:15:03:e5:97:92:
84:c2:55:d3:ee:73:45:90:21:0b:60:e8:3e:20:87:eb:6e:68:
a5:ff:2c:e2:f8:1a:ac:5f:d0:5e:f0:ba:c8:53:88:d1:3d:85:
30:31:be:7b:68:4b:e1:3e:15:dd:ac:8d:1e:2b:0d:77:9e:4a:
98:c5:66:f5:6a:31:12:b6:ae:91:0d:0b:c4:29:cf:9f:4b:7c:
3e:cc:bf:ae:11:35:ef:3b:6e:cd:f2:d6:d5:f4:8b:b9:81:6a:
92:94:c4:ab:94:95:7f:a4:23:dd:5e:c3:03:45:a8:22:1e:62:
f7:15:d0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:39:59 2025 by rpki-client