
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
File: nL4Q18HdRLflkLUHi_xPhs-Nslo.mft (raw, json)
Hash identifier: ncDsj1pEBw2wGr8L6lKF/C44J1UhKOWtqecpR6ifono=
Subject key identifier: ED:A2:D1:B2:15:B8:73:DC:F1:90:E3:EA:B8:F6:2E:80:6A:1F:1B:99
Authority key identifier: 9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A
Certificate issuer: /CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A
Certificate serial: 017A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
Manifest number: 0176
Signing time: Wed 05 Nov 2025 03:58:23 +0000
Manifest this update: Wed 05 Nov 2025 03:58:23 +0000
Manifest next update: Wed 12 Nov 2025 03:58:23 +0000
Files and hashes: 1: nL4Q18HdRLflkLUHi_xPhs-Nslo.crl (hash: xeKHfkYofboU8p1l2oh7bGbZxwOkfya0GnZbsObMO5U=)
2: 43C5BAA282F411EE99AAAB12C4F9AE02.roa (hash: rYwGjsQBpShXvyi5oxowpgOp3gdk00xJnm3EoG1TD+c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl
rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BCAC, serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A
Validity
Not Before: Nov 5 03:58:23 2025 GMT
Not After : Nov 12 03:58:23 2025 GMT
Subject: CN=690acb5f-0cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:ed:e7:01:5c:8c:e9:f2:27:b2:fb:09:8b:
06:8c:63:49:68:18:87:d7:71:ba:d7:25:0d:41:98:
c6:8e:f2:32:78:98:e0:92:f6:f7:f5:66:dc:82:23:
73:cc:5e:e8:8f:c9:a1:30:bc:45:9f:32:7e:02:2f:
6f:14:28:a2:b8:70:17:60:38:78:b1:b3:2e:3e:93:
7e:ea:d4:70:fa:79:05:94:ba:86:ff:16:b4:bc:33:
a6:19:45:48:94:99:60:47:c9:67:2c:d4:39:3c:1e:
8c:87:02:af:b3:d6:61:5d:e5:d7:c5:46:c4:0c:e9:
73:74:15:e8:77:70:a9:cd:bd:82:4e:64:5c:7c:cb:
0a:95:8a:26:03:0b:ce:fb:6c:51:b1:14:bd:3c:b4:
58:22:ba:55:c7:e3:6e:c7:91:60:17:91:5d:86:aa:
c5:38:08:58:55:c6:06:18:67:5c:f3:1b:25:0c:9e:
52:54:bb:e7:0d:a0:5c:36:be:36:0c:36:4d:19:dd:
f0:ac:53:ab:57:65:be:cd:b0:5c:74:a2:59:ff:3a:
d2:c8:33:2f:0d:51:ff:8f:84:8f:0d:10:42:e9:47:
95:45:c9:12:5e:b6:6b:d8:2b:18:70:7a:99:b3:05:
db:7c:22:61:1b:a4:be:f7:06:09:61:bb:65:5b:7a:
5c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A2:D1:B2:15:B8:73:DC:F1:90:E3:EA:B8:F6:2E:80:6A:1F:1B:99
X509v3 Authority Key Identifier:
keyid:9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1a:0d:46:88:57:59:66:1c:b8:0f:0d:76:06:c2:90:56:e2:
3c:a8:09:0e:4c:bb:5a:4c:6e:1a:67:e8:38:a3:5b:33:88:0d:
26:17:b0:33:b9:b6:db:0f:20:34:f2:a4:a6:3b:57:a9:12:1b:
0c:aa:df:bb:7e:61:f2:da:f6:da:e8:3f:69:53:3d:f9:f4:25:
fb:5f:31:07:82:73:8a:6b:b1:b6:7d:54:9d:ba:c7:66:b4:76:
53:f1:ee:ca:ba:52:bc:28:88:4f:e7:c4:a9:7f:fe:07:1b:04:
a3:0d:c0:85:64:79:3f:9b:e8:b1:68:a4:86:c7:2c:c2:53:be:
c3:e6:df:65:8e:fb:b2:3c:bd:c7:54:28:85:e1:a8:a9:00:a8:
9b:de:b3:9e:fe:ff:e4:9d:ff:db:e6:be:15:c0:80:be:d3:61:
f4:04:ce:78:93:e4:28:79:53:56:43:56:4f:d0:aa:f4:44:48:
2d:5b:f3:2c:7f:7e:93:80:5b:41:21:58:a7:a5:45:7c:b5:70:
ba:e9:fe:3c:80:ee:5e:55:ab:d9:70:72:60:08:b4:63:b1:43:
64:bd:8a:60:40:92:a1:de:9c:a7:54:ad:07:84:a5:e9:2b:2a:
24:26:10:a7:7c:57:9c:82:47:a8:59:4c:5b:46:eb:8f:fd:9a:
82:ab:0b:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkJDQUMxMTAvBgNVBAUTKDlDQkUxMEQ3QzFERDQ0QjdFNTkwQjUwNzhCRkM0Rjg2
Q0Y4REIyNUEwHhcNMjUxMTA1MDM1ODIzWhcNMjUxMTEyMDM1ODIzWjAYMRYwFAYD
VQQDEw02OTBhY2I1Zi0wY2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvfzt5wFcjOnyJ7L7CYsGjGNJaBiH13G61yUNQZjGjvIyeJjgkvb39WbcgiNz
zF7oj8mhMLxFnzJ+Ai9vFCiiuHAXYDh4sbMuPpN+6tRw+nkFlLqG/xa0vDOmGUVI
lJlgR8lnLNQ5PB6MhwKvs9ZhXeXXxUbEDOlzdBXod3Cpzb2CTmRcfMsKlYomAwvO
+2xRsRS9PLRYIrpVx+Nux5FgF5FdhqrFOAhYVcYGGGdc8xslDJ5SVLvnDaBcNr42
DDZNGd3wrFOrV2W+zbBcdKJZ/zrSyDMvDVH/j4SPDRBC6UeVRckSXrZr2CsYcHqZ
swXbfCJhG6S+9wYJYbtlW3pciwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2i0bIV
uHPc8ZDj6rj2LoBqHxuZMB8GA1UdIwQYMBaAFJy+ENfB3US35ZC1B4v8T4bPjbJa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkNBQy8wMTUyMjU4RTgy
RjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJMZmxrTFVIaV94UGhzLU5z
bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25MNFExOEhkUkxmbGtMVUhpX3hQaHMtTnNsby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QkNBQy8wMTUyMjU4RTgyRjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJM
ZmxrTFVIaV94UGhzLU5zbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCdGg1GiFdZZhy4Dw12BsKQVuI8qAkOTLtaTG4aZ+g4o1sziA0mF7Az
ubbbDyA08qSmO1epEhsMqt+7fmHy2vba6D9pUz359CX7XzEHgnOKa7G2fVSdusdm
tHZT8e7KulK8KIhP58Spf/4HGwSjDcCFZHk/m+ixaKSGxyzCU77D5t9ljvuyPL3H
VCiF4aipAKib3rOe/v/knf/b5r4VwIC+02H0BM54k+QoeVNWQ1ZP0Kr0REgtW/Ms
f36TgFtBIVinpUV8tXC66f48gO5eVavZcHJgCLRjsUNkvYpgQJKh3pynVK0HhKXp
KyokJhCnfFecgkeoWUxbRuuP/ZqCqwu/
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:40:20 2025 by rpki-client