
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
File: 4bgHrCt0Vfux4xYGjR0BcSYLscc.mft (raw, json)
Hash identifier: xdfTfDzVZ7BFS9NR9P8zIOAsjBvCYEBw08bZbjn4f90=
Subject key identifier: 96:E2:EB:47:3C:81:F0:40:11:D3:E5:EC:7E:DA:C4:4E:02:92:6D:41
Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Certificate serial: 1369
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
Manifest number: 12EA
Signing time: Tue 04 Nov 2025 17:10:01 +0000
Manifest this update: Tue 04 Nov 2025 17:10:00 +0000
Manifest next update: Tue 11 Nov 2025 17:10:00 +0000
Files and hashes: 1: 4bgHrCt0Vfux4xYGjR0BcSYLscc.crl (hash: wny2K9JJ0KVQ5WutyBrrTUpF6nwD7LscddNmLvz6Tcw=)
2: A6A4A20E89B911EC8FDB572DC4F9AE02.roa (hash: jk5NfHi6Ak10G3qvwwRLBuA+9+MuEQTJVNCIOpp4ijc=)
3: A8949F64D86E11E982BA0712C4F9AE02.roa (hash: o0TBqHxczgW2iXEBGTx5nw86Q8zs7jfB/2ZiH2tcXBM=)
4: 1F8378E6BCBD11EBAC9A4744C4F9AE02.roa (hash: J5LxjosxnnfdXaMAoaZ/PL1BfkizkN1e40crDyxzXgM=)
5: 9EE31802996B11E9B3FEED46C4F9AE02.roa (hash: GdNQEvmzlHfA6Ec8mmP8z6x+jIWG7iAnHlvJMuf8oD8=)
6: D17E9426B24211EFBBDC2164C4F9AE02.roa (hash: 08uSCXwlwYJnGMem9e+DAMnS4EN8A9/G3dvb9XlzVbk=)
7: 6A5222E2B8CA11F0AEF0BA3CC4F9AE02.roa (hash: pBVdrYkFMYbMM7FXnA5NEHBFD69jZzGLSHL7ZsHrvao=)
8: 161983C2B9EB11EDB53AC21BC4F9AE02.roa (hash: 21MmIK/xKiS7JETWE4m4JFsmki6dx7l2EGE0grkpOo4=)
9: C2E189AC7F8C11EF94FCB676C4F9AE02.roa (hash: RAc63GKSag+ebIvPIiKjuswG8wAgmCrcqifdzue1EA8=)
10: FDB29514452511E98F23AE4FC4F9AE02.roa (hash: pyXuQQMaaHpRKrd64JzrpDvcZINK8BGOr87BtX8mKCw=)
11: 8E6CF9C8E59911E98D355932C4F9AE02.roa (hash: duhPOulpnnqLJOw021zARLEkW5qMCDlozjaUuWOU1CE=)
12: F99AFAFE1D5411EA921E0351C4F9AE02.roa (hash: RBZSewamTngEQkgjLa0OkH4nQrMAppxSjX91nS2Wpzo=)
13: C21FA1CE080511EAA9457C67C4F9AE02.roa (hash: PiSgVIn+A3YVcVJ8J1LY1Q9+m55+zt9vsCjTvJtZIKc=)
14: 0038D872072E11EB8914E540C4F9AE02.roa (hash: bM9HkA9Kov8pVlsp7/+B8Lhib1zUTj1baRTYw1iNq78=)
15: D8E0EC82927711E985E0423AC4F9AE02.roa (hash: +fJoTern1FEL3hWeQl1ij5UIzJGzXQGhkR014UlHjWU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4969 (0x1369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Validity
Not Before: Nov 4 17:10:00 2025 GMT
Not After : Nov 11 17:10:00 2025 GMT
Subject: CN=690a3369-c143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:be:9f:21:47:1f:93:10:0d:9e:7c:64:25:
f3:97:20:6f:f9:9f:03:dd:b6:f5:65:e3:20:76:eb:
df:e0:89:1e:b6:fe:1e:6b:5d:3d:46:b2:86:94:86:
e4:a1:78:7d:8a:f1:f6:46:56:31:ae:13:d5:1b:c0:
8a:28:d9:af:e9:76:11:97:9c:97:c7:67:97:76:ec:
03:e4:1e:f6:e2:3a:6f:56:c7:0d:e3:03:58:32:e6:
75:fb:61:d7:f4:f5:b0:6c:12:d7:d3:55:a4:d1:8b:
ff:9e:b1:0c:8c:ba:ca:e6:64:06:ed:92:74:88:fc:
ed:ed:4d:c0:ea:8e:a6:2c:69:b6:7c:81:96:3a:cb:
de:ea:c7:b7:7d:6d:07:fd:26:d8:c4:23:50:58:cd:
80:63:55:3b:64:48:2f:04:da:a1:79:c2:b3:42:71:
bd:c6:a6:66:0a:39:8e:0d:72:85:bd:65:b0:ef:4a:
1c:4d:e6:75:fa:c5:db:9b:58:45:d9:1c:b9:81:c0:
be:40:8b:8e:43:5b:29:43:a7:ce:a7:5f:9a:f8:ea:
31:69:cd:34:39:da:25:c3:9f:57:0f:75:f5:8e:12:
90:86:8a:ba:b8:53:6e:50:52:5b:37:8b:9d:93:cc:
cd:66:6a:43:86:34:f8:66:3b:c7:cb:d8:fb:0b:43:
55:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E2:EB:47:3C:81:F0:40:11:D3:E5:EC:7E:DA:C4:4E:02:92:6D:41
X509v3 Authority Key Identifier:
keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:13:0c:29:d2:01:95:db:72:56:17:eb:96:08:03:40:ab:7e:
69:0d:52:f8:57:95:bf:1f:20:76:d3:67:a0:2b:2b:46:96:88:
13:fa:4f:6d:6f:cb:51:d6:71:b8:26:32:b4:1e:01:e8:a5:70:
60:56:b5:08:e2:31:d1:0f:58:ef:fe:4c:4e:21:f5:c6:b9:a7:
29:c0:22:ab:f0:da:d5:d3:76:a5:d6:b8:76:4f:15:17:6d:dd:
a2:51:1b:1c:99:5a:c0:a6:ad:8a:6e:7e:a8:77:26:23:c6:04:
cd:17:2e:24:bb:ea:73:85:15:7c:21:5d:2c:ed:a4:d3:5b:6f:
b0:bd:3f:58:af:5b:a5:93:c2:dd:d9:21:40:3c:b2:1f:2a:d4:
ef:fc:de:b5:ca:9c:21:dd:8d:53:2d:a2:23:3a:48:10:ac:af:
97:15:2a:73:ba:64:28:6c:7f:78:4e:c4:66:75:f9:83:08:0c:
25:bc:b7:b4:84:fa:71:2e:95:30:33:22:48:67:b4:b4:30:77:
ba:a0:74:55:00:e2:72:a5:4d:df:60:e6:61:9a:61:01:5e:b2:
6a:b5:dc:f4:fe:d0:bd:50:f9:59:db:9d:9f:80:92:73:5a:63:
0d:dd:78:8e:75:1b:d5:59:df:98:b0:e8:65:66:f4:e4:cd:c2:
c5:9c:47:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:36:07 2025 by rpki-client