
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
File: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft (raw, json)
Hash identifier: 57L0MSyPXh4mOCBxqkmMGNoJVBJXd9hh0Jlq9//0ZTE=
Subject key identifier: 60:0B:D9:44:76:AE:48:CC:37:CE:15:6C:06:69:F5:43:21:83:AC:B4
Authority key identifier: BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B
Certificate issuer: /CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B
Certificate serial: 017B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
Manifest number: 0177
Signing time: Wed 05 Nov 2025 03:55:48 +0000
Manifest this update: Wed 05 Nov 2025 03:55:47 +0000
Manifest next update: Wed 12 Nov 2025 03:55:47 +0000
Files and hashes: 1: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl (hash: /JgSuVbpgaEaBRzhsK1j2lw0N0DIdwSw1sFU9zowYFs=)
2: 453686A272BA11F09A607433C4F9AE02.roa (hash: q2MSp4Q8sWvUE8k/uBLa7fJOiAjxmo9DC7/S2PYD4Tw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl
rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:55:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379 (0x17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9E9D, serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B
Validity
Not Before: Nov 5 03:55:47 2025 GMT
Not After : Nov 12 03:55:47 2025 GMT
Subject: CN=690acac4-ad83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:30:0a:aa:94:65:d1:2c:69:ab:6c:3f:9d:
f5:1a:7d:48:34:3c:6a:5c:32:36:f2:0d:14:2d:aa:
f9:42:cb:c7:b5:f9:b1:d9:7a:73:bb:07:8c:ad:7f:
f0:54:f2:b4:e0:d6:62:3a:64:be:1a:98:07:43:4a:
26:ea:8a:be:a3:25:87:bd:c6:94:bf:5d:7b:13:e2:
39:e0:42:62:e9:66:a4:54:9c:3f:87:0a:77:92:e8:
58:2d:88:65:15:a5:a3:b4:97:3e:1d:99:1d:9f:b5:
1a:13:34:d2:2f:03:18:9c:9a:d9:7d:58:fc:f7:29:
03:30:42:4f:c1:be:31:d8:90:9d:c2:37:b3:c2:b0:
07:43:84:fd:86:4a:64:00:47:c6:a1:a4:80:0d:6e:
ba:9e:e7:d1:fb:3e:77:97:73:9c:45:a8:d0:17:13:
84:16:2e:ce:0b:ce:b2:57:0e:d8:6e:cc:c5:3b:ba:
9c:82:d1:73:7c:ea:02:19:83:23:1c:97:73:b2:c6:
00:14:b3:42:c8:b1:41:b5:f9:d6:78:1c:48:55:2c:
6a:33:60:2a:39:bc:b3:26:52:d0:b8:1d:1c:b1:d4:
a2:8c:9a:b9:30:a5:21:a5:33:20:99:ef:f9:6e:32:
a9:b2:8e:b2:9e:19:de:42:5f:5d:a9:85:cd:7d:a1:
d6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0B:D9:44:76:AE:48:CC:37:CE:15:6C:06:69:F5:43:21:83:AC:B4
X509v3 Authority Key Identifier:
keyid:BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:ec:38:79:c6:04:dd:40:ee:33:30:53:a3:04:c5:1b:e1:00:
a4:2d:a0:15:c1:9b:8f:15:fe:a8:b1:56:38:ab:f1:3a:3a:07:
4f:2e:e7:e9:af:0e:29:ba:44:23:c6:5e:5e:4d:b3:bf:dc:2d:
7a:62:40:ca:2c:d6:8d:fd:08:64:6e:59:f8:3d:e1:b8:6d:23:
cb:17:53:4b:ee:0e:c3:9a:91:5a:6d:d8:57:de:64:8d:26:6b:
ae:05:2c:b3:13:7b:4f:ff:e0:0b:06:a0:43:cc:22:d6:02:f3:
c0:fc:54:3b:5a:e5:a7:e3:19:9e:b7:65:fc:d7:ae:3d:98:3e:
3a:85:29:53:f1:90:cd:b9:e1:fe:de:37:fe:c8:71:84:5f:52:
25:60:a4:73:f3:4a:b9:3c:b4:0d:32:8d:b6:df:17:77:b7:37:
fa:89:6f:42:7e:9e:8e:c8:83:cd:32:86:68:24:86:cb:3a:62:
3c:8c:b7:cd:df:98:40:5a:33:32:f7:ee:47:e8:2f:36:64:3c:
a6:d5:0f:c0:26:08:86:a2:48:cd:08:9b:6e:0a:69:6c:3f:c4:
ba:5e:7d:d8:cd:48:e9:bf:83:34:e8:63:10:62:bb:6a:8e:cc:
f9:f5:a8:16:c0:60:00:80:c2:98:ef:c0:d3:39:8c:d4:5e:a7:
89:6c:b1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:55:38 2025 by rpki-client