
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
File: hobJK4fdXdLuKrtA7HPxePYEWjQ.mft (raw, json)
Hash identifier: ivkyCid3RIQ9ChHxLwZzY8dWy6xvGTFFHjAq0dAZHJ0=
Subject key identifier: C1:BC:A4:F8:7E:80:6B:69:27:B3:B0:D1:50:AC:CE:26:04:93:C0:B4
Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34
Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
Certificate serial: 02CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
Manifest number: 02C6
Signing time: Wed 05 Nov 2025 01:29:51 +0000
Manifest this update: Wed 05 Nov 2025 01:29:51 +0000
Manifest next update: Wed 12 Nov 2025 01:29:51 +0000
Files and hashes: 1: hobJK4fdXdLuKrtA7HPxePYEWjQ.crl (hash: HhUZBQsNHkVkfnNvsN6+Enq63wNU4+5gib85mOIGzLo=)
2: 7D164B822A2811F0819D8C13C4F9AE02.roa (hash: ev+YjLUEFuV9synNnilJkgFER39S40N1zyX1CzULmag=)
3: 7CA593102A2811F0819D8C13C4F9AE02.roa (hash: Ia6tlVbLIeqz/TCnxF60wA233bLpbVn+2ya+t4NGuKY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl
rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 714 (0x2ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
Validity
Not Before: Nov 5 01:29:51 2025 GMT
Not After : Nov 12 01:29:51 2025 GMT
Subject: CN=690aa88f-c209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:de:41:1e:d7:d4:9b:ac:39:ec:7b:13:aa:
63:5e:01:00:cf:04:9e:68:64:d0:83:f9:5f:43:16:
9d:e7:ff:df:96:f2:e3:0b:8d:14:c5:5b:09:42:6f:
e4:7c:a2:d3:d4:c2:b8:52:11:6b:28:88:07:76:aa:
b5:b3:35:39:c3:e7:76:c9:ba:c5:2d:55:d8:cf:e0:
73:47:b3:43:02:ed:01:b3:4d:b2:03:5c:b0:46:5b:
42:07:02:ef:b7:ae:86:74:b8:3c:e4:71:d1:0a:cf:
a9:20:3a:79:df:40:66:41:8a:d9:14:b1:31:5f:5f:
3c:3a:f7:2d:2c:ae:d2:6a:76:0f:bd:60:6c:91:a9:
ef:9a:9b:b3:b9:ba:14:e3:bb:37:ba:01:fe:9a:6c:
39:84:cd:a2:7c:cb:9e:b0:be:1d:ac:3e:4b:3b:10:
0b:d0:73:c8:62:15:7b:50:aa:8f:cf:9a:0a:60:57:
85:6a:25:4f:ef:63:f6:06:c7:3c:bb:19:15:54:8a:
26:00:8d:5e:69:ac:f4:bf:1e:a4:06:47:af:93:54:
0e:b9:45:bc:32:7e:71:31:16:db:4a:c6:01:a2:3b:
42:77:2f:7a:a3:eb:af:f7:5e:f5:92:ec:52:85:ce:
af:5a:c6:5b:d6:da:bb:32:3f:c6:a9:4f:3c:75:9f:
bb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BC:A4:F8:7E:80:6B:69:27:B3:B0:D1:50:AC:CE:26:04:93:C0:B4
X509v3 Authority Key Identifier:
keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:50:c3:d0:74:66:42:c6:ba:d2:50:71:4a:26:b0:a1:a6:df:
9f:2d:b2:ee:6b:04:67:2f:ce:c9:bb:ad:01:0c:51:ce:8a:f7:
a6:24:ec:f1:c8:c8:8c:67:1e:4a:f7:c9:41:0b:78:78:cc:74:
1c:0b:56:b7:4f:93:45:b3:af:91:aa:29:dd:b6:cc:ee:da:54:
48:da:32:a4:40:34:77:8f:46:64:fd:b8:bb:0b:0b:14:aa:5f:
79:18:fc:61:e7:39:9a:9b:61:7a:52:bc:a7:37:00:7e:af:a0:
35:75:75:78:26:39:61:3d:c6:88:43:9d:4f:e2:da:de:25:fe:
e6:b9:e8:90:68:f7:c6:de:01:34:ee:33:ec:8c:77:e6:90:be:
a0:e6:cc:87:f6:b7:0e:ea:7f:a8:e6:a5:87:87:3f:1b:8c:1b:
76:07:43:42:69:ef:a1:5a:b0:70:1c:46:29:0d:13:97:91:fa:
73:66:dd:bf:3c:15:05:2e:74:9f:93:97:fb:31:26:b5:e3:76:
cd:63:e2:30:da:32:17:b4:47:87:9c:00:fd:fd:2c:23:ea:85:
09:a2:dd:1a:51:83:21:a2:09:44:62:81:f4:eb:f5:31:fc:d5:
55:75:3c:53:15:ce:97:fe:bb:72:b4:40:f1:60:ba:46:3c:1c:
c9:b0:5f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:55:48 2025 by rpki-client