
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
File: vv---O_FAnw03_cEx5-ygSpxMx4.mft (raw, json)
Hash identifier: dwz3AzOCfOLDSeNuXPynjp+NxYR1/rCCk3gRbs+t9HQ=
Subject key identifier: B8:44:D0:7A:82:CB:FF:D2:F8:53:E8:C7:72:EA:A5:F6:05:3C:54:8E
Authority key identifier: BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E
Certificate issuer: /CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
Certificate serial: 0195
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
Manifest number: 017B
Signing time: Thu 06 Nov 2025 23:48:35 +0000
Manifest this update: Thu 06 Nov 2025 23:48:34 +0000
Manifest next update: Thu 13 Nov 2025 23:48:34 +0000
Files and hashes: 1: vv---O_FAnw03_cEx5-ygSpxMx4.crl (hash: b0tN+SYgQ7Ql9lDXRfQGxZDYxUPENK7SYOUcEOJegH0=)
2: A17BA30CA6D111F08493B238C4F9AE02.roa (hash: R6Wh09KVezBOlWQFZnxiJwo0eP+rAmGW4XX5Y3hH8zo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl
rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Nov 2025 23:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B39, serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
Validity
Not Before: Nov 6 23:48:34 2025 GMT
Not After : Nov 13 23:48:34 2025 GMT
Subject: CN=690d33d3-b38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:01:14:0d:69:4b:01:84:12:96:2f:4b:41:
93:36:56:26:d4:6e:6e:7a:08:b3:4c:cc:6b:fe:60:
e9:95:ae:fa:c7:9e:d5:09:72:f5:67:67:ee:b7:51:
31:39:5c:24:df:44:e8:56:c4:4c:82:b3:09:f8:7e:
68:1d:84:c2:c9:6f:19:4c:a7:91:70:87:31:50:80:
e8:2c:dd:7c:27:87:e1:a1:2a:63:70:6e:24:24:73:
4a:7e:a2:a2:4f:bb:5e:56:88:cc:13:85:dd:8d:1d:
65:b2:cf:b9:48:84:fa:ce:81:e9:15:18:96:45:0a:
7c:b9:70:a3:b1:53:aa:e7:a1:e0:f2:f7:6f:af:f5:
04:ad:8b:90:98:21:da:96:3a:bf:9e:a7:52:9b:fd:
5c:1c:99:c1:88:52:0e:88:3c:23:96:56:d0:9d:6f:
f6:5b:c5:dd:78:c2:3f:f5:c9:e6:25:b5:91:c6:8d:
18:72:eb:b2:b1:e8:02:83:66:71:49:88:88:e2:f4:
a2:c8:8c:2a:67:b8:0e:26:68:31:03:c9:44:43:06:
7a:f5:57:15:1f:57:f3:97:22:2f:1b:6f:1a:7d:80:
09:37:64:93:b4:fb:87:89:7f:37:1a:7a:43:8b:8d:
01:32:b3:5a:86:54:01:ec:fe:f3:36:c7:b7:ae:cf:
61:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:44:D0:7A:82:CB:FF:D2:F8:53:E8:C7:72:EA:A5:F6:05:3C:54:8E
X509v3 Authority Key Identifier:
keyid:BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:c8:35:7a:f5:84:d2:86:7a:c1:24:f4:9c:de:04:30:6e:da:
e2:63:d4:70:98:97:82:b9:1a:53:0b:65:57:9c:ad:a0:88:e6:
07:5c:ad:59:0e:39:81:f5:54:94:bf:89:fa:e6:73:e0:e3:06:
50:56:28:a2:0f:ca:8d:cf:92:cc:dc:57:c0:7b:3c:e8:1d:a5:
59:c1:ff:13:e9:cd:3b:46:89:ec:0f:6d:31:ab:2e:7a:11:b5:
02:81:3c:1d:2a:54:3c:df:05:18:79:3a:31:d0:1c:31:16:e7:
ce:e5:86:d6:b6:22:cf:80:63:71:17:8c:90:eb:e7:e1:11:dc:
ba:67:b7:b4:30:30:88:17:e1:0b:c3:34:5f:3c:c4:73:98:8d:
75:27:c4:16:ac:99:17:3d:da:37:ec:4f:56:5b:9e:b1:c2:aa:
a7:a5:da:d9:95:f2:53:b7:34:ca:00:5d:b9:7f:71:2b:fd:b1:
78:d6:22:c9:62:5d:6b:e1:3b:d7:97:c3:d5:19:78:d2:bb:3c:
ab:60:5f:26:25:23:9b:e5:13:3d:6c:e7:5f:8f:a1:a5:87:d9:
48:fb:2e:5e:a8:78:25:1c:6b:8a:ee:e6:15:92:cd:0a:3b:7d:
e9:18:c3:89:a9:45:c6:fe:1d:02:c5:10:4a:fe:2b:81:26:0d:
55:ed:df:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 12:44:42 2025 by rpki-client