
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
File: iX4CzNjrQDmng9AjecVf7p8M7lk.mft (raw, json)
Hash identifier: l4+Xktd7zI1ufQ+cGVWbu7jwi9z6A3wP1Ve4CwQYQ+M=
Subject key identifier: E3:2B:11:70:40:04:8D:F0:9C:0D:8F:84:2F:55:46:70:DE:22:D1:CD
Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
Certificate issuer: /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Certificate serial: 0863
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
Manifest number: 083C
Signing time: Tue 04 Nov 2025 16:02:39 +0000
Manifest this update: Tue 04 Nov 2025 16:02:39 +0000
Manifest next update: Tue 11 Nov 2025 16:02:39 +0000
Files and hashes: 1: iX4CzNjrQDmng9AjecVf7p8M7lk.crl (hash: 26+/PQvuh/BsCo5GxVG3wFka9yy7L3lCgPSUrlY7HXk=)
2: E19826A0EAA511EBA4C1F32CC4F9AE02.roa (hash: tG1HGaU5DUimsEMDFRA50jlq68FCzHx0C3arFNqcuaY=)
3: 0CC38EEC80E711EBB8CFF825C4F9AE02.roa (hash: MfRtvCwn59famvfu05RMk6NPUwzQW1gti+aq8XhNzyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2147 (0x863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Validity
Not Before: Nov 4 16:02:39 2025 GMT
Not After : Nov 11 16:02:39 2025 GMT
Subject: CN=690a239f-0b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:40:b5:7e:23:05:05:8d:e8:39:1c:bd:35:
03:c2:b6:3a:0b:6a:39:0d:dd:d6:3b:21:40:4f:14:
67:e7:31:22:ec:64:62:92:f1:ea:90:be:f0:67:3e:
f0:1f:f0:6f:3a:1d:36:4a:e7:67:4d:e4:42:63:0c:
08:48:0f:2a:bf:30:c4:a3:22:bc:30:8c:0a:4b:50:
6c:c2:c3:a9:3e:b6:db:85:ab:5e:5e:60:a4:f8:27:
68:11:a8:e8:50:fe:de:57:6a:bc:b9:dd:17:2e:09:
6f:a6:ee:0e:f4:6a:37:74:78:c1:a8:b5:65:6e:ed:
81:44:9a:46:67:7b:cd:73:f2:14:98:04:45:6e:e8:
5c:6c:20:1b:ad:ef:05:59:3b:47:47:a1:ea:0f:6d:
47:37:7d:b4:06:eb:f9:ad:10:4c:f1:9e:fb:16:e2:
bb:94:e5:9e:4f:9e:5b:ef:bd:ee:71:cf:00:0c:45:
87:ac:99:72:cc:a5:cf:32:4e:e6:2d:e9:3c:6b:f1:
7d:f0:2a:50:77:01:de:12:99:a6:31:55:a1:3e:76:
45:44:98:ec:2b:4c:bd:98:b4:d6:2d:94:0c:05:aa:
cb:15:75:84:91:ce:9c:c7:92:0a:a4:6e:84:ed:1e:
d4:eb:65:1a:61:e9:b5:2e:f0:4a:4d:0a:58:31:28:
5f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2B:11:70:40:04:8D:F0:9C:0D:8F:84:2F:55:46:70:DE:22:D1:CD
X509v3 Authority Key Identifier:
keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:65:e6:74:af:46:40:cf:b8:b9:97:63:d9:7b:af:8d:24:31:
97:f8:ff:85:9b:7a:6f:ad:c2:7b:68:75:79:b2:68:5c:47:17:
99:6d:5e:51:40:d4:e3:3a:e6:05:ae:23:5b:44:a2:8b:ec:02:
ea:6e:50:2a:a3:14:52:fa:81:14:33:55:fa:c7:05:eb:b2:16:
97:4c:9e:53:18:4f:f8:ba:5e:48:28:bb:a7:1b:55:8d:c7:5d:
3a:8c:42:32:42:a0:e5:b0:05:51:f4:b6:29:20:9e:65:b0:7e:
2d:1e:b1:a9:94:6a:e9:06:48:33:c1:b3:25:62:52:4d:83:96:
17:fc:be:a1:54:97:7e:76:09:09:d2:4b:f5:92:95:8f:62:ad:
88:de:31:e4:47:d6:5e:f5:2e:e6:0a:55:73:38:95:b1:29:86:
58:8c:d2:17:9c:cc:77:e3:cf:02:17:fe:19:fe:6a:7e:c6:85:
23:20:d1:21:88:b5:36:89:49:a5:18:a8:93:c6:b9:2f:cc:0c:
1a:f6:ef:9e:46:52:66:49:6a:63:3b:f9:61:87:5a:07:e3:17:
85:ab:8c:5c:08:fb:0a:37:3d:cd:c5:7c:cb:c2:76:06:c9:5c:
ef:5c:e6:8c:77:62:d6:10:6e:6b:57:51:66:57:67:cc:2d:f5:
d4:5d:bc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:13:15 2025 by rpki-client