
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft
File: JLddtbfhQhLSg1_VqoX5droQ9rE.mft (raw, json)
Hash identifier: 4oPpY0Cv4BuT8BtAQASoaLaDrmmdUGLcm6/7Y6iDlYY=
Subject key identifier: 87:8F:93:8C:33:D6:8B:3E:D8:19:A9:E9:FD:74:54:B3:08:70:F1:BA
Authority key identifier: 24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1
Certificate issuer: /CN=A9166488/serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1
Certificate serial: 04E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft
Manifest number: 04E2
Signing time: Sun 02 Nov 2025 23:43:52 +0000
Manifest this update: Sun 02 Nov 2025 23:43:51 +0000
Manifest next update: Sun 09 Nov 2025 23:43:51 +0000
Files and hashes: 1: JLddtbfhQhLSg1_VqoX5droQ9rE.crl (hash: bCdj74cpDp89fWDZJa3nmAukfH+P6aXyrqzv7sf8Dk8=)
2: 26A3B4903A1411EC925DC27BC4F9AE02.roa (hash: 2ZjvwcPMcqXEaANE73WvlyO0V3DxHIbOSZ3Q/4eDvaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl
rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 23:43:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1254 (0x4e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166488, serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1
Validity
Not Before: Nov 2 23:43:51 2025 GMT
Not After : Nov 9 23:43:51 2025 GMT
Subject: CN=6907ecb8-4ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:11:af:97:64:84:64:a1:fe:91:46:56:b1:
75:c0:b2:9e:fc:8f:fd:83:45:8e:27:64:37:6d:b7:
b2:44:d3:4e:fa:18:0e:c5:d3:82:03:4c:da:00:01:
6c:f7:b3:37:17:c2:b3:02:25:9a:73:a9:3a:9e:da:
ce:86:fc:a2:8c:ad:66:5d:59:89:8e:41:39:f8:3f:
a2:58:44:d2:cf:9e:92:c5:5f:85:55:d7:32:a4:5d:
7e:57:48:f5:06:eb:a7:d6:68:af:81:c6:9c:22:03:
bc:e9:90:5f:af:32:f0:45:99:2b:64:3a:68:ae:af:
ef:f9:a9:1a:b5:eb:d3:d8:e3:fd:92:a7:d7:71:bc:
50:67:a3:6e:0b:9f:0a:ff:6d:f7:60:f1:23:26:9b:
55:03:25:de:a2:9d:c1:d3:d0:68:a9:42:72:9f:ea:
4c:38:1d:fe:49:3a:7b:b8:ae:e7:b6:82:f5:de:ff:
1d:58:6d:63:90:b2:b6:16:4b:2f:9b:52:6c:6a:28:
e8:95:1b:07:76:c2:a9:2f:9f:6d:e1:58:99:99:38:
29:d0:90:11:cb:30:bb:97:89:dc:ff:44:ab:58:d3:
e7:ce:f7:b7:0c:6b:6e:19:f3:3f:e1:b8:d8:27:32:
f7:6b:7e:6a:84:bc:90:06:2f:71:85:cb:af:80:3f:
3c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8F:93:8C:33:D6:8B:3E:D8:19:A9:E9:FD:74:54:B3:08:70:F1:BA
X509v3 Authority Key Identifier:
keyid:24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:2d:d9:68:40:8f:16:05:ed:0c:f6:0e:66:03:45:1f:e0:da:
53:10:a4:f8:46:c1:cd:25:be:be:3d:eb:e0:da:bc:6f:e2:dd:
5b:8a:b3:6a:6e:45:9b:57:63:26:a2:00:eb:86:c7:cb:11:09:
ce:c5:54:6c:9e:4a:bf:37:77:c4:46:39:a1:0f:a0:f9:cc:df:
78:4f:11:dc:b9:ff:a0:cc:b1:60:7e:3f:b9:6a:0b:32:e3:43:
60:0c:12:4d:2b:c6:fb:59:f6:6e:1d:24:09:bb:62:be:88:05:
83:32:51:50:8b:1e:04:16:6f:f7:1e:23:9d:76:9e:dd:38:b2:
26:24:8e:e9:a0:7e:7f:1a:bd:be:c8:1b:ac:70:2f:b6:7e:98:
b2:7f:97:d1:1b:25:ef:88:13:c7:f4:7e:bf:2b:dd:6a:66:2d:
77:b0:99:bd:3e:63:dd:08:f4:81:91:f8:a4:07:2c:59:bb:31:
87:18:2c:44:40:a9:fd:89:dd:b8:1d:03:a3:1a:fb:09:0b:a7:
d5:81:fc:5c:c5:1f:7c:bc:c8:b8:97:40:76:64:e5:cf:01:9c:
d3:9e:d8:0a:19:2b:9d:a9:f8:a5:46:e0:6c:15:8f:a2:d0:43:
c1:73:db:98:ff:08:20:13:ee:e7:bd:a2:1a:ad:3a:40:6f:33:
ec:b3:c3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:34:45 2025 by rpki-client