
$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
File: v1g_8H2jVv3igoGfR7zuJHUTEZo.mft (raw, json)
Hash identifier: Sdh+07iUdaI6vX87sWp0X5nh+XB8vnZcUo0dzN5Ys10=
Subject key identifier: FA:7B:C9:8F:C3:CB:FD:35:62:64:DC:3A:B7:9E:86:C9:22:FA:EF:9C
Authority key identifier: BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A
Certificate issuer: /CN=A912142C/serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
Certificate serial: 3505
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
Manifest number: 34EC
Signing time: Fri 24 Oct 2025 14:29:24 +0000
Manifest this update: Fri 24 Oct 2025 14:29:23 +0000
Manifest next update: Fri 31 Oct 2025 14:29:23 +0000
Files and hashes: 1: v1g_8H2jVv3igoGfR7zuJHUTEZo.crl (hash: RYGk0ZAmRtHjnyCy/8wB5415rrp8Ee0cp+hE9LdKWgI=)
2: 6A1ACEF4D5B711ECB09BCC49C4F9AE02.roa (hash: st0pVxpUqrAEUwj53Z+GQXs6wx4AnLeV6lm/Wqla7jI=)
3: F73D1642F30B11EFA86D9348C4F9AE02.roa (hash: NAzmMf7NVE534MnJBMzFOT2rLSzUZpBo5WpxUwTckK0=)
4: 60629332FE4611EFB15A9D48C4F9AE02.roa (hash: /zfwzDG7n6E2JjaivpDdu+dOVBIaawCIeVKdcfBcPXY=)
5: 671CE4B2EF5911EFB8C93F62C4F9AE02.roa (hash: 8VK+APK/5itIVHmFKGjT+lEuTWBUnDuSseayGMqo1ag=)
6: B3C4F6FCC8E811EFA15E172AC4F9AE02.roa (hash: 7X3op8FxLKCInR/9TSODy+LRMH6+i0DMcG4PbSJZGR0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl
rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 14:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13573 (0x3505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912142C, serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
Validity
Not Before: Oct 24 14:29:23 2025 GMT
Not After : Oct 31 14:29:23 2025 GMT
Subject: CN=68fb8d44-327d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:75:1a:d8:72:54:e0:7a:21:a6:d6:1b:71:cc:
5a:83:da:17:f7:e6:d4:5e:bb:a2:b9:4f:91:d0:19:
16:b2:66:6a:fa:3e:6c:7a:37:69:06:d2:6f:38:79:
17:fb:b6:c2:1a:a1:48:cb:26:ad:c6:78:67:c0:06:
ac:5e:a7:ec:16:b6:81:34:3e:d4:97:c4:fa:ae:08:
7f:05:ce:d8:1c:4c:86:a0:ba:df:56:3b:de:a1:fe:
4d:56:02:2d:46:7d:45:3f:5b:a3:07:61:cc:e4:fa:
ed:12:cd:ab:1d:5f:15:0b:c5:ea:27:62:82:6d:80:
54:75:27:94:e4:dc:e1:80:8f:85:e8:8d:67:80:e3:
e5:51:9d:e7:95:46:8b:86:93:53:9e:ae:90:dd:61:
4f:5f:9f:09:3b:5a:c8:53:a9:32:26:b4:57:83:53:
8c:11:77:74:e7:ce:eb:82:34:a9:cc:3d:7e:4f:51:
74:34:b3:43:d8:b8:18:ff:d7:16:a7:5a:02:6a:d5:
9d:cf:df:2b:b6:bd:8f:52:7e:d2:90:bc:b8:dc:da:
3f:f6:21:28:29:25:a6:86:8a:00:bf:26:da:81:a3:
b0:11:94:f9:9c:e0:87:bd:e6:20:71:3a:18:7b:61:
5b:57:29:4b:d0:92:15:43:05:23:56:f0:39:f9:c9:
7b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7B:C9:8F:C3:CB:FD:35:62:64:DC:3A:B7:9E:86:C9:22:FA:EF:9C
X509v3 Authority Key Identifier:
keyid:BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d2:2d:f4:01:33:80:e1:7f:c9:fd:3a:76:66:d1:df:6b:9a:
74:1f:f3:ae:c5:c6:de:68:0b:6a:a7:33:4f:22:1d:c4:51:18:
e1:05:49:3c:8a:87:b3:2f:6b:83:c5:ff:db:55:e9:b7:cd:b3:
b0:0f:26:e4:e4:4e:b4:10:e7:23:7f:75:d2:ff:b1:32:0b:dd:
a2:8d:d8:2f:d6:18:7e:25:df:a0:d6:9c:bc:c0:11:df:7f:84:
93:63:e9:2c:fd:65:97:83:81:26:c7:7a:7d:40:91:e9:f7:e4:
b3:74:f4:22:ff:12:10:1b:3e:b8:93:70:52:cc:72:90:ce:6c:
9e:16:ca:9a:6d:06:71:54:4c:f6:8e:e5:69:5a:bd:bc:ce:e5:
6d:26:e6:e8:f8:7f:52:4b:70:6d:6a:e1:fe:47:e4:2a:e0:22:
f7:c5:35:86:62:0c:c6:b1:3d:08:23:70:41:ea:7c:21:95:95:
5e:bd:8b:65:c9:5c:45:4e:cf:11:68:f3:c7:14:ee:49:4b:27:
68:42:0b:96:a6:ad:73:88:a6:c2:de:1b:69:3a:74:de:bf:ac:
d3:21:4d:e2:be:36:5e:f3:0a:27:cd:58:96:32:89:aa:70:d0:
69:f9:0d:8b:80:86:5f:97:66:58:64:83:0b:32:b9:b5:ae:b6:
5f:16:db:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:27:19 2025 by rpki-client