
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft
File: VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft (raw, json)
Hash identifier: ctHAI3kVUAIXqURJ0mJov+wrMHJFFlxd3bO/QHb04Ro=
Subject key identifier: 84:97:D0:15:8F:8A:A5:25:E6:24:00:D3:6C:25:07:10:FB:59:91:E6
Authority key identifier: 56:B6:5B:80:9F:5D:AB:3A:5A:B1:57:CA:05:79:FD:8E:16:ED:CF:B3
Certificate issuer: /CN=A91DB782/serialNumber=56B65B809F5DAB3A5AB157CA0579FD8E16EDCFB3
Certificate serial: 0169
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft
Manifest number: 0165
Signing time: Mon 03 Nov 2025 04:00:33 +0000
Manifest this update: Mon 03 Nov 2025 04:00:32 +0000
Manifest next update: Mon 10 Nov 2025 04:00:32 +0000
Files and hashes: 1: VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl (hash: cOd9Nmq6Yhucgn4dHJT0xhLNwYAW8g99kn7jYIL+yEI=)
2: F4DE3470979B11EE901E210BC4F9AE02.roa (hash: fdTip7KBE0W3pKG2131dWHPNYEedkvXm8McPxmdQVeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl
rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB782, serialNumber=56B65B809F5DAB3A5AB157CA0579FD8E16EDCFB3
Validity
Not Before: Nov 3 04:00:32 2025 GMT
Not After : Nov 10 04:00:32 2025 GMT
Subject: CN=690828e0-8b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e3:5a:49:88:c2:76:71:d0:bf:93:44:38:b2:
58:21:bb:c7:85:54:32:4b:e6:12:1b:c5:3f:04:9b:
b2:e8:9f:ff:98:6a:8e:62:13:cc:a0:c3:ee:83:d5:
4a:5f:2d:66:3e:97:5d:47:0b:6c:aa:06:4f:39:7f:
a1:58:c5:ca:25:97:78:63:1d:69:e9:6b:d6:f7:bb:
b1:3e:90:52:d3:af:35:97:be:01:8c:46:11:bd:10:
7b:1f:8c:58:65:0e:60:f2:aa:61:c1:39:96:80:0c:
41:ba:d1:41:c9:54:d0:cb:2b:7b:b6:09:b6:62:bd:
73:ef:b5:4e:0c:ab:7f:29:93:2e:85:0f:c3:9e:71:
ad:65:3a:9a:86:02:f5:36:73:d0:34:49:a4:4e:ca:
70:87:6c:98:96:1a:fb:9a:53:9f:2d:11:b0:b5:5f:
62:7c:a4:c7:79:ef:95:4c:60:c2:d6:c5:a8:00:11:
aa:ba:f3:72:ae:ca:65:6b:8b:bc:8e:a1:25:a2:16:
83:33:89:8d:3a:0c:7c:4b:d2:87:fd:4e:79:d7:11:
21:ec:24:40:c2:f0:02:86:d6:50:db:14:49:94:e0:
03:e7:e5:58:a5:f4:8a:66:b0:30:6c:2f:82:e7:c0:
83:49:d4:e6:fd:4c:a4:f8:c8:9f:1d:17:c7:54:c1:
59:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:97:D0:15:8F:8A:A5:25:E6:24:00:D3:6C:25:07:10:FB:59:91:E6
X509v3 Authority Key Identifier:
keyid:56:B6:5B:80:9F:5D:AB:3A:5A:B1:57:CA:05:79:FD:8E:16:ED:CF:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b4:d3:38:ac:19:d6:e4:f3:3f:30:e1:12:6e:a3:05:6e:a2:
23:98:59:bb:02:42:e9:9a:be:9f:ec:87:29:5c:01:98:62:43:
83:df:db:07:c4:ab:99:69:3e:e0:81:e4:bd:76:be:42:75:1a:
4f:6f:84:7d:aa:81:24:31:aa:65:b2:29:b7:14:d6:9c:a0:f1:
bc:7e:03:e0:39:90:f4:a0:a7:53:26:51:b9:1e:67:22:c5:fd:
cc:bf:a8:05:7e:e2:8b:83:b8:44:92:a1:57:e1:9d:38:4e:80:
91:99:74:8d:1f:fe:f2:71:55:81:34:dd:8d:f5:82:9c:dc:3d:
df:ae:af:3d:dc:b4:ea:34:8e:bf:8c:5a:15:fc:24:dd:98:1a:
07:91:92:d7:f8:a7:7f:56:33:11:72:48:43:d1:82:fa:3d:bf:
4b:08:72:fb:8f:de:69:1c:8b:ef:83:13:97:de:1c:49:2c:5e:
f8:c7:e8:b2:2a:65:e9:a3:1d:5f:42:78:0b:2a:d2:49:a0:c4:
69:c7:52:10:ab:f8:2a:5e:65:bd:16:f6:1b:e9:9c:5b:4f:00:
02:97:65:f2:5f:2a:4f:09:d5:68:f3:8d:aa:a4:69:6e:08:c3:
1f:99:f2:d0:ef:de:56:37:a0:89:3d:2c:b8:c5:47:46:56:0b:
61:37:40:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI3ODIxMTAvBgNVBAUTKDU2QjY1QjgwOUY1REFCM0E1QUIxNTdDQTA1NzlGRDhF
MTZFRENGQjMwHhcNMjUxMTAzMDQwMDMyWhcNMjUxMTEwMDQwMDMyWjAYMRYwFAYD
VQQDEw02OTA4MjhlMC04YjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ONaSYjCdnHQv5NEOLJYIbvHhVQyS+YSG8U/BJuy6J//mGqOYhPMoMPug9VK
Xy1mPpddRwtsqgZPOX+hWMXKJZd4Yx1p6WvW97uxPpBS0681l74BjEYRvRB7H4xY
ZQ5g8qphwTmWgAxButFByVTQyyt7tgm2Yr1z77VODKt/KZMuhQ/DnnGtZTqahgL1
NnPQNEmkTspwh2yYlhr7mlOfLRGwtV9ifKTHee+VTGDC1sWoABGquvNyrspla4u8
jqElohaDM4mNOgx8S9KH/U551xEh7CRAwvAChtZQ2xRJlOAD5+VYpfSKZrAwbC+C
58CDSdTm/Uyk+MifHRfHVMFZZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISX0BWP
iqUl5iQA02wlBxD7WZHmMB8GA1UdIwQYMBaAFFa2W4CfXas6WrFXygV5/Y4W7c+z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjc4Mi85RkVEQ0Y1Qzk3
OUIxMUVFOTg5RTYwMEFDNEY5QUUwMi9WclpiZ0o5ZHF6cGFzVmZLQlhuOWpoYnR6
N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZyWmJnSjlkcXpwYXNWZktCWG45amhidHo3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Qjc4Mi85RkVEQ0Y1Qzk3OUIxMUVFOTg5RTYwMEFDNEY5QUUwMi9WclpiZ0o5ZHF6
cGFzVmZLQlhuOWpoYnR6N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQActNM4rBnW5PM/MOESbqMFbqIjmFm7AkLpmr6f7IcpXAGYYkOD39sH
xKuZaT7ggeS9dr5CdRpPb4R9qoEkMaplsim3FNacoPG8fgPgOZD0oKdTJlG5Hmci
xf3Mv6gFfuKLg7hEkqFX4Z04ToCRmXSNH/7ycVWBNN2N9YKc3D3frq893LTqNI6/
jFoV/CTdmBoHkZLX+Kd/VjMRckhD0YL6Pb9LCHL7j95pHIvvgxOX3hxJLF74x+iy
KmXpox1fQngLKtJJoMRpx1IQq/gqXmW9FvYb6ZxbTwACl2XyXypPCdVo842qpGlu
CMMfmfLQ795WN6CJPSy4xUdGVgthN0BP
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:17:58 2025 by rpki-client