
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
File: vkY_wZGbQUKyOCgTgn-3FtbukoM.mft (raw, json)
Hash identifier: LJ6KSSBALV6PmlCZ/41w+YXvG9+0IlC9J5oYS+NslJI=
Subject key identifier: 7A:ED:67:3E:15:8A:5D:AE:80:69:C3:CB:16:33:A9:54:0D:42:A5:82
Authority key identifier: BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
Certificate issuer: /CN=A91D40BF/serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
Certificate serial: 07A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
Manifest number: 079A
Signing time: Fri 24 Oct 2025 22:21:32 +0000
Manifest this update: Fri 24 Oct 2025 22:21:31 +0000
Manifest next update: Fri 31 Oct 2025 22:21:31 +0000
Files and hashes: 1: vkY_wZGbQUKyOCgTgn-3FtbukoM.crl (hash: 43ZizYPjuPUN3ka8fraFrJEv94703qhkrDC95qvvtdY=)
2: 28543AA0BABA11EB8A51C234C4F9AE02.roa (hash: tLbuywK1hQsCi3a1AqRQB3esx6wP54LrqFgdAXcaBdM=)
3: ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa (hash: XOt7bB+UgZTY8Thh+DvUt1JxAIDEDKn5j8X2t+ws97c=)
4: 2798B9A6BABA11EB8A51C234C4F9AE02.roa (hash: +zcjX2imATb1GbMG2fycsIcaiWvdU6/+K/wkiamqX6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl
rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 22:21:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1961 (0x7a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D40BF, serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
Validity
Not Before: Oct 24 22:21:31 2025 GMT
Not After : Oct 31 22:21:31 2025 GMT
Subject: CN=68fbfbeb-cfe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:be:c7:5b:bd:a2:fc:0c:b3:d1:d1:f3:48:5c:
a9:cb:a9:b5:f3:9f:5c:7b:b6:28:1b:dc:9a:22:a7:
9b:28:73:f6:1d:31:0f:36:e2:df:aa:30:59:88:c3:
e1:f5:4b:ce:76:8d:19:16:c2:3b:66:e0:43:4c:cb:
c6:4f:ad:a8:1a:1a:31:f7:73:a2:7b:92:92:4d:c2:
cb:11:9b:43:70:de:14:31:bb:eb:4b:bd:41:81:da:
23:88:c8:ef:24:57:c9:af:3c:8f:43:15:ba:76:34:
37:21:00:c1:4f:f5:c6:8b:3c:54:21:d9:65:f0:aa:
a6:cd:a1:5a:8c:6d:2a:33:8f:86:29:d0:cf:8c:50:
53:1c:c7:fa:aa:0d:b2:af:af:56:1f:e6:9d:74:b8:
7f:ae:fb:a9:51:aa:70:3a:5d:aa:f8:c2:b8:e3:12:
07:b1:dc:dc:c5:ff:99:e0:a4:05:ab:30:4a:4d:4a:
99:6b:1b:69:4c:18:fc:fc:58:11:b0:53:cf:74:53:
b1:6c:7e:6a:e4:f2:02:78:5a:1b:71:4b:a5:5e:ff:
66:b4:5f:93:a7:f5:1b:c4:d7:94:d9:2d:f0:79:e6:
95:22:45:be:36:87:f6:1a:b3:c0:ee:ac:d8:cd:18:
9c:d3:db:50:cc:74:58:2b:e3:85:da:73:e2:b0:2c:
31:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:ED:67:3E:15:8A:5D:AE:80:69:C3:CB:16:33:A9:54:0D:42:A5:82
X509v3 Authority Key Identifier:
keyid:BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ce:ad:5f:ec:93:f0:2f:01:4d:ee:73:e9:51:b1:e4:c5:bd:
29:21:a4:67:20:26:46:9d:c0:52:18:2d:ef:c7:03:1b:8e:03:
29:01:cc:6c:56:fc:df:eb:b1:f2:60:3e:a9:ba:20:0a:22:2e:
bf:93:a3:5b:e4:d9:9b:ed:4c:85:e5:66:92:1d:b2:20:9b:59:
85:91:96:40:7d:ab:85:1e:d2:b6:1d:31:0e:0c:d0:a7:48:df:
af:44:25:60:cf:2e:d3:8e:22:60:f0:8e:53:04:58:00:6c:d8:
34:18:bd:ff:16:96:5e:bc:57:f5:fb:71:d0:fc:f7:15:33:3e:
ec:5f:fa:4d:4f:cd:46:84:08:78:d6:b4:00:30:d6:87:f3:95:
ee:a2:1a:cc:94:0f:65:50:4b:14:73:0b:f6:3f:79:78:f5:f1:
ce:46:24:b9:c9:bd:3e:ee:15:5c:e8:4c:82:8d:d5:4e:f5:f8:
c5:96:6f:3c:47:6b:55:bb:48:07:54:a9:87:71:db:56:0f:ea:
42:3c:4a:16:03:d4:78:0e:2f:88:07:f3:a7:83:f9:20:3b:0c:
df:2c:98:42:19:2a:40:09:96:e3:df:00:4e:8d:02:50:b6:3e:
12:04:16:92:81:af:97:7d:2e:7a:66:13:f7:d5:67:f3:1f:a2:
17:02:e7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:09:47 2025 by rpki-client