
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
File: vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft (raw, json)
Hash identifier: Begot9/HG7RQ3oP8dGPPlr78h6NK8+m4YSKKOYm4Q2M=
Subject key identifier: 74:BB:DA:6E:EE:A3:90:0B:BC:09:52:D6:C2:29:84:91:FB:C4:75:09
Authority key identifier: BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8
Certificate issuer: /CN=A91B36DC/serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8
Certificate serial: 07DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
Manifest number: 07C5
Signing time: Sun 02 Nov 2025 21:18:17 +0000
Manifest this update: Sun 02 Nov 2025 21:18:16 +0000
Manifest next update: Sun 09 Nov 2025 21:18:16 +0000
Files and hashes: 1: vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl (hash: 8Y53egVjYW+Ycs1Tw1FE80h/AMhO5WsOVMUD00heH2A=)
2: 1714A7D489BD11EC9550C184C4F9AE02.roa (hash: 17PUaNinV45JUoeDuEzM2gIqTYacZZ8Nc7vPAw8wlsY=)
3: FEA1EB7219FA11EBA0F82851C4F9AE02.roa (hash: Wckb8TWjJLJRdDl4+GoL8AkidPynBfPxz8z2YoV99xc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl
rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:18:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2010 (0x7da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B36DC, serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8
Validity
Not Before: Nov 2 21:18:16 2025 GMT
Not After : Nov 9 21:18:16 2025 GMT
Subject: CN=6907ca99-a96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:09:1e:b6:e6:97:42:5c:4e:08:5a:59:ac:
3b:c1:d2:0d:cb:95:9b:b1:38:1f:77:d2:12:a9:d9:
44:29:cf:d1:57:bc:e1:02:98:a6:ef:d9:3c:3d:f0:
8a:d4:9e:a4:6e:2f:c7:6b:20:8f:f4:55:05:84:5d:
22:6d:f0:86:2e:90:cf:e5:ac:12:4a:44:50:11:14:
35:74:09:61:08:34:70:0d:0c:2e:c0:f7:a6:a7:17:
43:f1:b7:61:8f:87:4f:d6:03:d2:59:db:13:27:0d:
4b:d5:ab:d3:6d:69:35:84:8a:83:78:68:4a:ae:b1:
11:a0:db:c4:4f:44:59:2c:13:ef:77:ff:e1:08:57:
2c:00:f2:eb:04:db:58:79:66:f5:af:1c:52:f2:85:
d4:81:61:1c:bb:94:7a:be:4a:8c:46:76:4f:5b:b7:
df:61:d3:a5:04:8d:b0:4d:8b:4a:10:7e:64:fc:d6:
5f:b5:77:51:1a:ce:51:9b:dd:75:1e:c2:6f:0b:6d:
af:78:cf:40:b1:0c:35:42:c5:13:39:b8:3d:83:d5:
6b:46:75:a6:b3:b7:fd:98:4e:7d:0f:25:0b:0f:7e:
50:fe:59:ca:10:95:e8:17:1e:9d:93:29:2e:64:f7:
82:0d:95:d5:ec:fa:bc:ca:ef:50:e0:0d:09:75:36:
a7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BB:DA:6E:EE:A3:90:0B:BC:09:52:D6:C2:29:84:91:FB:C4:75:09
X509v3 Authority Key Identifier:
keyid:BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:b2:bc:ad:1a:9d:4e:8a:f5:ca:fc:eb:30:fd:2a:00:15:cd:
f4:7d:af:32:66:5e:30:e4:c5:0d:7c:0d:b5:b8:39:50:bb:56:
83:b9:f6:6c:d6:70:d1:d3:0a:9f:31:4d:b8:b0:eb:4a:d1:22:
cf:a5:e5:90:5f:48:42:f9:7e:5c:bc:e6:e3:ce:ff:35:94:57:
b7:3b:ff:fd:dd:eb:10:43:74:13:5e:ef:9b:7d:68:c9:31:32:
0e:7a:90:c9:49:24:71:ca:1c:25:e0:30:35:8a:04:31:d9:53:
3d:4d:7e:09:88:76:68:b0:77:6a:cd:38:bc:8d:c1:92:78:02:
91:9e:90:fb:df:33:90:fb:26:46:8f:47:ca:43:65:bf:cd:bc:
98:80:73:cc:4a:71:b6:19:23:85:a7:61:14:65:96:55:cd:9c:
20:48:d0:eb:0f:08:86:e9:60:c8:6f:d8:08:dd:ad:a4:3e:ee:
46:43:24:cc:42:2f:fb:07:fb:76:3f:9a:00:3c:0b:9b:29:7b:
b2:9c:2a:dc:36:d7:f1:18:a0:41:05:82:f9:84:b5:53:0e:fc:
02:84:a2:01:68:ea:74:4e:3f:2c:6b:64:c0:fd:80:f5:6f:a2:
83:fe:e2:90:66:f3:4a:f5:f5:d9:83:2d:02:f0:ed:88:22:b7:
bd:8a:b3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:11:04 2025 by rpki-client