
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft
File: vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft (raw, json)
Hash identifier: Zg+OtAFippnXfykVArlfOQuBwubFeHbAa0Dkkc00/u4=
Subject key identifier: E2:D0:E2:54:D5:AE:7D:63:31:48:F5:C5:82:BD:2D:47:48:F5:2B:57
Authority key identifier: BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A
Certificate issuer: /CN=A9157861/serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A
Certificate serial: 1EB3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft
Manifest number: 1E8A
Signing time: Tue 04 Nov 2025 16:09:23 +0000
Manifest this update: Tue 04 Nov 2025 16:09:23 +0000
Manifest next update: Tue 11 Nov 2025 16:09:23 +0000
Files and hashes: 1: vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl (hash: 6tKzaOmW4XezCdIF0EosejqfwSy33ZsCPC+qIUI825M=)
2: C22F80E4D1F011EEB68A503EC4F9AE02.roa (hash: Kjjm0gZskFT6tVxY5Ur25GzEYJIZngsq5sGod6YlbMM=)
3: BE047E02DBA411EAAF00CC6CC4F9AE02.roa (hash: w99/DAXuJPeoejD7jO/GwyxzGwiaUuCijwIrsTGlFkY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl
rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7859 (0x1eb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157861, serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A
Validity
Not Before: Nov 4 16:09:23 2025 GMT
Not After : Nov 11 16:09:23 2025 GMT
Subject: CN=690a2533-c3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6e:97:7c:e8:3f:94:60:fc:5e:3c:64:55:b1:
a9:ad:19:77:a8:a3:00:3f:b7:bd:7e:56:90:76:68:
36:7a:14:86:f5:7f:c4:94:d7:3e:43:e9:e3:7f:f7:
41:1e:ac:43:4a:6a:66:ee:29:0d:37:cb:f1:af:82:
85:af:15:21:d4:55:50:f9:dd:d2:db:be:8d:24:b4:
d0:7e:46:44:e9:87:6f:78:78:7d:a9:54:e6:dc:e5:
30:aa:e5:44:37:8c:75:73:6f:7b:eb:07:0b:77:12:
96:65:f7:da:80:1f:8c:f5:a0:ca:a0:fe:ce:c0:d8:
f5:13:d4:63:25:be:85:83:30:c4:af:47:34:1d:7c:
b3:b9:af:2e:a2:89:b0:6c:b4:2e:ad:bc:c6:2f:34:
c5:28:bc:47:dd:c9:ce:6c:4c:2e:2e:8e:bc:9b:e1:
6c:ed:80:98:5e:b5:34:23:c7:bd:95:1c:c9:8e:ac:
b6:91:b9:93:7b:34:01:c9:94:ea:fa:8c:f1:45:4b:
00:15:86:f7:e3:b6:e6:9c:ab:40:a5:63:ce:50:cd:
cb:63:86:6e:c7:cb:82:b2:ef:ef:9b:05:f3:dd:79:
be:4d:65:6d:90:36:aa:62:33:e1:39:42:d6:2e:39:
2d:ee:6d:a9:17:50:b2:7c:6c:93:1b:c5:d6:ed:b0:
22:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D0:E2:54:D5:AE:7D:63:31:48:F5:C5:82:BD:2D:47:48:F5:2B:57
X509v3 Authority Key Identifier:
keyid:BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:32:7c:5a:a0:55:f2:a5:8d:90:ba:56:54:3c:18:df:58:5f:
cc:da:96:20:ee:b8:7d:32:1d:63:d9:08:e9:16:c1:8d:1e:83:
76:ef:0e:78:1d:08:25:27:b0:c1:2e:7d:83:9c:b4:fd:77:00:
0d:65:4a:fb:58:7a:3f:47:c6:66:2b:b5:2b:1c:e6:09:b8:c7:
93:4c:97:00:07:95:41:0c:51:b0:f8:30:cc:39:6f:34:69:2c:
c1:d3:72:cc:ee:b2:6b:af:69:9b:50:d4:27:17:de:bb:2a:4f:
49:8c:40:1e:09:fb:f2:80:fe:39:d5:12:4d:54:45:11:c8:f6:
2a:cd:1b:5f:ab:34:d0:ca:4d:cf:f9:d2:29:5f:d3:b1:f4:b2:
e4:a8:71:cd:a3:73:01:b1:db:12:6b:a9:46:d7:c4:fa:5b:b8:
8d:e7:8f:19:a4:9b:e0:70:5d:a4:04:81:a4:9e:60:a8:f0:6f:
8c:22:aa:5a:71:77:75:4a:11:71:5b:2d:ff:85:fa:f2:df:85:
a2:89:6c:73:de:21:d5:c9:33:93:7a:89:5f:30:67:21:71:8f:
84:31:6d:b5:bd:31:23:84:83:62:89:69:a4:98:6e:ba:53:db:
26:ad:61:87:0b:b5:46:80:93:4a:ef:87:a7:0f:86:19:73:a4:
e2:35:82:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:56:55 2025 by rpki-client