
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
File: 4VZP2lztXK5pQVMJftGUJVEgkiM.mft (raw, json)
Hash identifier: zaApJ+HNS/CI0iE3AYGKmulj+Nd2bU6JRAZuXIs4J8I=
Subject key identifier: 06:B9:4B:72:5E:3C:AC:42:D9:EB:07:FC:5B:E9:59:ED:9F:40:11:21
Authority key identifier: E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23
Certificate issuer: /CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
Certificate serial: 360C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
Manifest number: 3586
Signing time: Tue 04 Nov 2025 14:33:07 +0000
Manifest this update: Tue 04 Nov 2025 14:33:06 +0000
Manifest next update: Tue 11 Nov 2025 14:33:06 +0000
Files and hashes: 1: 4VZP2lztXK5pQVMJftGUJVEgkiM.crl (hash: vGSj0dzvBL1em4NTpoGnojJ9b3zrXpcUuRBMfz4trLw=)
2: 524236EE6B5711F09CFE4572C4F9AE02.roa (hash: OFHGfo0QwzXyiL7GOwEa2vVlpzbgLwoHGG7P2JsxqIY=)
3: 165CEF66E60911EB950D930DC4F9AE02.roa (hash: GQiRmYNBeSXKrpj5tl9WCP7+ZUXAlVJOpyyBRx0JAi4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl
rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13836 (0x360c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A300, serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
Validity
Not Before: Nov 4 14:33:06 2025 GMT
Not After : Nov 11 14:33:06 2025 GMT
Subject: CN=690a0ea2-9bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:44:18:67:84:40:a0:db:03:1b:63:c2:56:a1:
62:7c:cd:49:8b:c8:8a:c7:05:25:5d:e6:61:65:41:
44:61:32:12:4f:e6:cc:1a:56:c6:4f:73:fd:04:bc:
15:86:70:0b:e5:49:a4:8b:23:e9:c5:bd:20:ee:85:
86:dd:5d:3e:02:5e:3a:e5:ac:44:96:17:57:13:5d:
df:d4:cb:c8:d5:58:59:63:ed:59:c3:92:66:f9:cc:
53:ac:c3:cd:81:93:10:bb:54:4d:06:ee:2e:f8:5a:
79:9d:6a:c0:87:fb:0a:2f:ee:e8:db:21:7e:5e:d8:
d2:58:52:29:24:78:d6:2a:1a:cc:4c:2b:af:ce:66:
a3:e8:e2:2b:4c:24:2e:d2:84:1a:20:07:fb:c9:53:
20:53:b0:87:2c:d1:32:d2:c4:42:60:22:c6:b3:61:
4b:17:2a:b6:ca:08:a8:81:eb:98:68:d4:91:12:eb:
db:3f:47:e0:51:c8:61:26:ce:6d:f5:ad:ab:91:74:
20:e0:35:2a:34:5f:f5:04:d6:ed:7d:b8:c1:4a:f4:
57:df:7b:4c:31:d1:95:e2:56:c4:d1:57:66:7e:25:
6e:e5:3a:2e:5f:9a:07:63:ec:d0:b1:99:40:02:19:
62:ea:8a:5c:42:d9:e8:b8:f6:a3:aa:6e:a8:b3:50:
46:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B9:4B:72:5E:3C:AC:42:D9:EB:07:FC:5B:E9:59:ED:9F:40:11:21
X509v3 Authority Key Identifier:
keyid:E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:91:17:7b:a3:53:f0:45:3e:14:dc:12:f9:08:24:5f:5a:c6:
e0:d3:b9:fa:65:fe:1e:39:cf:ae:59:eb:65:f0:1c:58:5a:a5:
58:41:04:5c:76:fc:53:4d:3c:85:73:a8:5e:b3:1b:f1:9d:ba:
79:d4:b5:4e:35:3e:61:02:7a:5d:22:a9:d6:cd:09:72:c8:93:
d5:e0:fe:f8:b1:c9:49:c9:7e:48:ad:1b:8c:e4:81:83:e2:3c:
a3:f3:64:25:b9:c1:a5:c7:89:ff:14:47:f2:01:a7:d6:99:83:
73:d4:14:3e:33:39:19:e6:67:5e:6e:05:e2:f0:38:5d:31:79:
19:c3:4f:ea:5d:aa:08:91:d3:22:ad:a3:96:14:81:c4:31:b0:
f5:31:95:a2:e9:3c:7f:ba:45:b6:08:3f:3b:46:81:f3:6a:18:
fa:7d:12:78:8c:e6:45:f0:21:5c:f7:8e:e0:5c:69:64:92:f1:
37:c5:c7:c6:24:8a:44:61:c2:f2:bc:44:59:fc:dc:f8:df:7b:
dc:0a:99:36:98:d8:b9:56:f2:94:86:4c:dd:95:84:5d:3e:46:
3f:cd:b3:7d:81:63:4a:7b:ae:d3:5f:3c:f0:07:70:a0:07:b5:
3e:62:8f:05:2d:b4:5c:21:0e:9d:d9:c8:51:7a:06:01:57:20:
24:70:a1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:37:07 2025 by rpki-client