Manifest
$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
File: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft (raw, json)
Hash identifier: 6JByeKb5gvZtNUhJ1oRGwo4epAzeAbBMII/6OdYFXwc=
Subject key identifier: BB:34:80:D1:22:DF:BE:A3:37:4A:B8:A9:7E:3E:14:95:52:44:55:CC
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 47C1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Subject info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
Manifest number: 47B6
Signing time: Wed 05 Nov 2025 02:50:29 +0000
Manifest this update: Wed 05 Nov 2025 02:50:29 +0000
Manifest next update: Wed 12 Nov 2025 02:50:29 +0000
Files and hashes: 1: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl (hash: uRu6TKc0N13t24dEO18+f9cIdXJiEgEmuCZDkZMvcXE=)
2: Ak2PFao5dyF1iDou3BZQFOGSiho.cer (hash: NRcDr6REbVzbTiHoNzZyK4YoKwtLqg9UeS+C5SRci4o=)
3: 4kPzvoJVabsWrLN0vJjavmkLF8E.cer (hash: fxyUaruAjaaco/fzq2Q5nRs7XM9NtVdLWIcLFflk+gY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18369 (0x47c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: Nov 5 02:50:29 2025 GMT
Not After : Nov 12 02:50:29 2025 GMT
Subject: CN=690abb75-34d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:ad:03:3f:58:9e:3e:a9:fb:26:85:6f:20:
85:ba:e6:db:4f:ff:d3:1d:83:b2:36:6e:34:53:5c:
7d:88:51:c4:07:c7:cc:a1:eb:80:0c:f0:68:52:6d:
ec:41:41:f8:ba:db:55:b0:31:d9:12:b7:d0:14:61:
24:c5:6d:a3:ea:18:70:fa:2e:a1:ba:b5:2d:8d:45:
bb:90:50:14:13:a5:88:44:e0:70:c8:46:14:2c:ae:
3e:34:2d:fe:6a:35:3e:c2:f2:d0:db:30:13:d0:9f:
61:f2:d9:2f:aa:0d:9f:4f:05:8e:b1:60:8e:75:8e:
da:17:f2:8a:b9:99:8c:4e:3f:69:72:d8:cd:3c:c2:
88:cd:cf:d3:5e:04:18:dd:bb:55:53:e7:dd:af:fe:
72:5e:56:24:5a:bc:d4:be:b3:77:a7:91:7d:d5:29:
a6:d5:b1:94:0e:ab:6c:8d:40:fd:ba:e1:3c:3c:df:
c3:52:45:fe:e8:e8:cf:e8:d9:6a:f8:b7:23:64:51:
50:6f:b2:cd:d6:f9:6f:d9:c1:72:82:54:93:a5:51:
2d:1f:96:fe:3d:63:87:dd:77:b3:95:01:7e:fb:14:
c9:44:49:56:0c:5d:17:72:c0:ad:48:f8:6d:9b:b7:
75:dc:cb:94:6c:98:00:be:b9:46:89:ee:1c:7d:b5:
be:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:34:80:D1:22:DF:BE:A3:37:4A:B8:A9:7E:3E:14:95:52:44:55:CC
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:6e:a4:d2:9e:ac:9b:73:ee:40:88:ba:55:18:f2:e9:90:64:
fb:7f:c0:b1:ee:ef:6c:34:fe:57:63:68:d4:26:99:57:ed:70:
db:a6:25:cb:50:69:59:2c:52:80:a1:52:05:1a:ae:c9:b5:c5:
66:f2:d4:83:0a:45:ca:b8:ad:e8:88:b1:c9:6e:9f:36:47:15:
f2:49:19:5a:d6:98:a8:77:10:48:47:4a:a8:f1:2e:17:7b:86:
30:99:31:32:b1:64:1b:0d:50:37:9e:fc:4d:99:b8:b6:53:4c:
ea:5a:a7:c4:67:f4:25:3d:2d:61:fe:6d:92:34:ab:0e:57:4b:
e6:1d:01:af:6c:13:29:58:43:29:41:36:39:46:a2:f7:24:81:
cf:3d:e0:e3:bb:25:aa:b6:ab:0d:08:7e:94:ad:57:21:01:9c:
af:3d:c9:dc:13:36:0b:dc:0a:16:5b:f3:25:53:18:35:bb:e5:
ef:39:ad:03:03:26:f3:d5:ff:3a:1f:6b:a7:a8:1e:c8:11:d8:
17:3d:de:8d:d7:8f:7b:a1:a7:24:7d:76:1e:bf:25:0a:35:c0:
b5:b0:13:e8:00:c2:4c:14:da:f4:91:99:ee:a7:ba:10:78:4a:
2c:f2:15:99:7f:48:7a:80:26:e6:d7:51:3e:30:cc:f4:be:61:
fc:6c:c9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:50 2025 by rpki-client