
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
File: 4Loijq-YEvBn0v87-AaJVpjJOXc.mft (raw, json)
Hash identifier: txjJmvRF0R2Hm/T7H735H90vxubbjTeoc5bdnjkQuhg=
Subject key identifier: 4C:0F:05:9B:C6:C8:73:B8:4B:CB:0B:15:40:24:4D:7C:09:32:AB:08
Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
Certificate issuer: /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Certificate serial: 06F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
Manifest number: 0692
Signing time: Tue 04 Nov 2025 22:48:20 +0000
Manifest this update: Tue 04 Nov 2025 22:48:19 +0000
Manifest next update: Tue 11 Nov 2025 22:48:19 +0000
Files and hashes: 1: 4Loijq-YEvBn0v87-AaJVpjJOXc.crl (hash: joKnyjSnJtW6eBWbMHdtX/XEIT0tsjVxdqk7wn5Vtg8=)
2: 5D81DB7C51B611ECA674F080C4F9AE02.roa (hash: P2a+kPtjJ6yhmcNIHbs+Vm7Ygg7MHd+sRsHHDgTnLWA=)
3: D396006E251C11EEAB8BE444C4F9AE02.roa (hash: aw/mMcLGZFpDDulSaY/b/FllgryrbPv9l31A9Fqr2ho=)
4: B91AACE86C8A11EEA934912FC4F9AE02.roa (hash: 2i7Zy6YTNDUm3q2k9+7q5qaY4ohOTEgm7A4bQdJMwCc=)
5: D304973AC1E011EE81429B3EC4F9AE02.roa (hash: 9FIxKZess48cgYzpbCKgWUSjt13PFUPPV98OXdhIeTg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl
rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1777 (0x6f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164D60, serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Validity
Not Before: Nov 4 22:48:19 2025 GMT
Not After : Nov 11 22:48:19 2025 GMT
Subject: CN=690a82b4-708b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:34:e4:ac:56:a7:89:17:23:6c:f8:57:44:
60:26:92:db:1d:f4:de:14:c2:d7:bb:a4:a9:88:b8:
12:b9:ff:56:2f:15:8c:0e:53:ff:68:aa:af:ee:0a:
f3:81:6c:7f:1a:b6:92:10:7f:3d:77:f2:7a:26:ea:
49:9e:fb:c0:15:0b:aa:62:60:62:8c:66:47:19:c9:
58:fa:8f:36:b3:6a:d3:5b:05:30:61:9e:55:3c:12:
89:e0:7e:95:5b:9d:9e:12:30:b1:8f:35:4d:19:b3:
3a:08:41:1b:8e:3d:ce:30:3d:5e:44:75:27:6e:08:
bd:be:88:5d:03:af:3c:7c:69:ff:5c:32:e0:91:97:
58:e4:73:52:e8:8d:0d:ef:c3:0f:4b:22:4e:47:4d:
34:04:18:5a:b4:55:fb:1c:48:e1:ed:a5:21:b2:47:
c9:0b:f8:d1:08:22:44:93:a4:10:dc:bb:f9:fd:0f:
4a:19:33:31:00:a5:a7:6a:85:1a:91:6a:d2:09:07:
ca:5f:c7:74:73:e6:a8:d2:b1:ba:5c:6d:33:7d:0e:
16:7f:b8:6e:dc:21:ab:89:9b:d8:9f:ca:f6:dd:fb:
cb:a1:60:04:3a:81:8c:45:75:ac:92:ac:28:be:f5:
e9:75:42:da:c9:8d:03:8c:cb:03:bb:86:97:74:a9:
62:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0F:05:9B:C6:C8:73:B8:4B:CB:0B:15:40:24:4D:7C:09:32:AB:08
X509v3 Authority Key Identifier:
keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e5:5a:0a:d1:f0:69:3a:fa:15:8c:d5:61:8d:9f:67:56:d0:
d7:c1:e0:b3:e2:16:e8:03:71:94:69:8a:15:70:96:1e:dd:bb:
1f:12:68:c1:f4:ca:75:17:61:08:f8:68:ae:f4:a8:db:c9:ce:
c1:bf:03:1b:6b:b7:8a:ef:5a:43:79:e2:4b:e3:0a:fb:02:b4:
96:21:2b:2a:46:4e:3d:2a:d6:aa:da:9e:67:2a:9a:b9:d9:22:
23:fc:f9:09:37:02:a2:fd:0e:63:29:90:09:68:33:0e:64:bd:
c6:e2:5e:29:4e:f0:89:12:66:dc:3f:60:d8:61:12:28:e6:6b:
15:83:97:2e:0c:d7:98:4f:f4:c1:fa:f8:bd:07:dd:b9:2b:2c:
71:4a:8b:90:bb:a6:e2:26:40:13:6d:6a:9e:4a:c8:cd:c6:be:
2b:80:eb:6a:9f:28:28:31:3f:4d:18:5f:34:07:e5:49:e1:6e:
99:e3:65:43:77:70:18:72:e0:36:79:5b:65:05:ca:fc:24:85:
e4:de:47:76:04:56:3f:c5:78:ed:60:02:65:f1:d1:ce:b7:b2:
43:44:65:51:46:84:1c:1a:f1:a3:fb:66:47:ce:09:76:13:02:
a1:9c:d2:ac:88:47:08:2e:d9:8a:8e:18:83:d4:02:92:93:d4:
8f:58:20:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:26:37 2025 by rpki-client