
$ rpki-client -vvf rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft
File: 8630DB364752FB672480309F11531C73BFEDD599.mft (raw, json)
Hash identifier: CZF1t8Qce9B5mVSginwiXJoFbx/IRmo/EiqNcssoia4=
Subject key identifier: 8E:DB:6A:3D:FA:1B:83:52:13:D7:23:F7:5A:14:E4:93:76:A0:DF:CB
Authority key identifier: 86:30:DB:36:47:52:FB:67:24:80:30:9F:11:53:1C:73:BF:ED:D5:99
Certificate issuer: /CN=A916FC1D0000/serialNumber=8630DB364752FB672480309F11531C73BFEDD599
Certificate serial: 49F4B4DDC7F1D37DCE0B514D6DFC753BF424C339
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjDbNkdS-2ckgDCfEVMcc7_t1Zk.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft
Manifest number: 3C
Signing time: Tue 04 Nov 2025 14:26:29 +0000
Manifest this update: Tue 04 Nov 2025 14:21:29 +0000
Manifest next update: Wed 05 Nov 2025 18:25:29 +0000
Files and hashes: 1: 34392e3231332e36322e302f32342d3234203d3e20323133363035.roa (hash: O+O3ngvT2eRgjWysCEGH5MTbHUuNdWckcsQv0KzXeTs=)
2: AS154185.asa (hash: xW7GnBx56SfJdYNlrU/w1PbVhWMkbLQHK0Zou3F050g=)
3: 8630DB364752FB672480309F11531C73BFEDD599.crl (hash: I6ulgm9xWY9JuAzn4Du4A4FZR4WjGe7xZnpaCaIVWW8=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.crl
rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjDbNkdS-2ckgDCfEVMcc7_t1Zk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 18:25:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:f4:b4:dd:c7:f1:d3:7d:ce:0b:51:4d:6d:fc:75:3b:f4:24:c3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FC1D0000, serialNumber=8630DB364752FB672480309F11531C73BFEDD599
Validity
Not Before: Nov 4 14:21:29 2025 GMT
Not After : Nov 5 18:25:29 2025 GMT
Subject: CN=8EDB6A3DFA1B835213D723F75A14E49376A0DFCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:b2:c3:43:81:5b:7c:be:77:d6:c9:28:12:
2c:0d:83:ee:6e:35:ac:04:8e:16:a8:02:f7:92:c1:
82:2a:82:da:0e:26:75:92:76:96:48:61:f7:72:be:
d5:01:a8:d7:96:1c:24:2d:66:b5:e0:4f:87:c1:d9:
b3:cf:66:f6:dd:12:e8:78:87:89:9f:e8:e2:ec:36:
de:00:31:56:30:49:da:d8:32:03:02:dc:76:75:fc:
0d:c4:fa:14:72:d9:9a:1a:84:a8:28:d0:2f:9d:53:
9a:51:20:25:a4:a5:aa:c3:b1:d0:e8:c1:9c:cc:4c:
98:57:12:76:a2:4a:32:f3:1b:03:19:df:cd:18:14:
50:9c:41:8c:70:51:13:fa:95:13:e7:19:85:a7:a7:
14:42:8c:22:1d:50:7b:05:cc:8b:c3:c0:44:cc:a4:
db:92:87:99:da:e6:dc:44:d7:44:cb:11:1c:5f:74:
6f:f5:6e:0b:03:0c:96:44:45:e7:57:f1:cf:92:00:
3e:6f:9f:15:b9:e7:71:60:4d:d7:2e:03:f0:a3:9e:
4c:f8:d2:47:d7:3d:a6:09:e0:00:a2:05:4e:3d:43:
71:3d:aa:34:75:8d:bb:70:5e:30:13:5e:9d:a1:03:
cb:f2:af:f5:68:56:71:bb:9c:51:01:3c:05:0a:5f:
39:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DB:6A:3D:FA:1B:83:52:13:D7:23:F7:5A:14:E4:93:76:A0:DF:CB
X509v3 Authority Key Identifier:
keyid:86:30:DB:36:47:52:FB:67:24:80:30:9F:11:53:1C:73:BF:ED:D5:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjDbNkdS-2ckgDCfEVMcc7_t1Zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4d:da:2d:c7:b1:36:4b:ae:16:f5:28:e7:4b:7b:4f:03:ff:
cb:60:33:17:3e:72:05:a7:3a:d2:fe:8f:dc:83:e5:b5:1a:34:
a9:7e:17:db:e4:c2:ad:d4:61:c2:e1:9b:ee:26:05:54:19:bd:
a4:7c:a5:d0:b8:ac:2e:09:0c:70:b3:f5:48:f3:24:53:c0:45:
12:8f:24:a4:4e:b7:1f:3d:34:45:9e:ba:74:29:85:d2:aa:d9:
43:b0:28:66:61:1d:a8:ee:df:d1:2f:03:df:79:de:d1:5b:7b:
18:bd:75:bc:ef:0e:66:64:50:52:1b:47:40:46:c0:03:23:e6:
d5:37:80:f1:ce:57:61:7d:5f:4b:67:0f:69:af:24:3b:a9:2a:
e1:10:5e:55:bf:68:57:00:34:ae:40:d4:9e:5d:56:b4:90:62:
c6:20:8e:c3:d4:7a:13:55:38:f8:43:2d:6e:5d:ca:1a:0e:e8:
ac:71:c9:d4:57:1b:1d:19:eb:b0:aa:3c:b8:e8:fa:34:f6:eb:
0f:77:46:b3:03:52:3c:b4:3f:bc:07:1e:65:d4:a8:2a:ab:41:
d4:ce:3f:f4:a2:ef:6f:ff:df:75:af:91:62:2b:76:d8:a4:b4:
6b:c8:d0:9b:21:dc:d7:39:a4:e6:0a:b0:16:bf:f8:0e:34:78:
3c:f7:18:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:37:31 2025 by rpki-client