
$ rpki-client -vvf rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft
File: 4VLg53x5W1Qih9ZcHk4L8obU1eA.mft (raw, json)
Hash identifier: ssjuM1Vuuz4G7zw9cgAqKaXgZRMGEVJ9+suxxq57nNM=
Subject key identifier: 5A:C2:CC:A4:54:13:01:0E:7F:F4:4B:DD:CE:3E:65:8F:B5:8E:F9:CC
Authority key identifier: E1:52:E0:E7:7C:79:5B:54:22:87:D6:5C:1E:4E:0B:F2:86:D4:D5:E0
Certificate issuer: /CN=A912763C/serialNumber=E152E0E77C795B542287D65C1E4E0BF286D4D5E0
Certificate serial: 0833
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft
Manifest number: 082C
Signing time: Tue 04 Nov 2025 20:52:51 +0000
Manifest this update: Tue 04 Nov 2025 20:52:50 +0000
Manifest next update: Tue 11 Nov 2025 20:52:50 +0000
Files and hashes: 1: 4VLg53x5W1Qih9ZcHk4L8obU1eA.crl (hash: qGc8pr9WArXMdqgKF67+0pxT9sFKsn54EdEv/yW5AlI=)
2: 22329D14EE6511EAA50E8052C4F9AE02.roa (hash: CrTXUk46Qs0+2Fg8G1Szn+PXGeNBfOdVzoZfC6kMiL8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.crl
rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2099 (0x833)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912763C, serialNumber=E152E0E77C795B542287D65C1E4E0BF286D4D5E0
Validity
Not Before: Nov 4 20:52:50 2025 GMT
Not After : Nov 11 20:52:50 2025 GMT
Subject: CN=690a67a2-b43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:a0:d9:60:6a:15:a1:85:fd:cc:e2:c5:ff:
bc:8d:94:3e:bf:42:cc:ea:6f:89:6a:a2:60:11:54:
3f:ac:93:d2:1d:7e:88:ea:ec:5d:f8:7d:84:bb:79:
33:ea:34:59:21:e2:8a:d7:34:c9:10:5c:c1:89:e8:
d0:a6:de:4b:11:6a:98:77:b5:59:28:25:f8:4a:9b:
c0:80:9a:89:c3:43:e9:e6:6e:92:fc:a6:2c:6c:ea:
4f:f7:9d:47:e5:77:2c:c1:95:f0:cd:e6:22:5a:f0:
58:bc:8f:12:8d:fd:61:2a:29:02:5a:cc:e4:7d:20:
38:46:7d:fb:1b:5c:10:92:f3:5b:53:1c:a3:7c:a5:
58:b5:03:f5:ad:6e:c8:c0:48:bf:b0:d4:a2:24:54:
ea:5d:d3:45:46:79:b7:a3:03:86:75:cd:cf:eb:1f:
a2:89:46:68:6d:0f:27:f2:41:11:93:7f:3b:83:c3:
fb:a3:ae:0a:a3:09:a2:b1:0c:7a:0e:22:33:62:bb:
18:6d:6b:ad:79:3c:8c:d2:64:11:d4:41:4d:7b:9d:
06:f3:bc:5b:23:de:78:43:3c:02:8c:af:17:48:72:
d9:27:3e:90:f5:c6:93:5a:43:35:ee:9a:72:d4:7c:
ac:0b:eb:d7:b3:24:76:ff:ce:3b:1b:ce:17:eb:15:
1c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C2:CC:A4:54:13:01:0E:7F:F4:4B:DD:CE:3E:65:8F:B5:8E:F9:CC
X509v3 Authority Key Identifier:
keyid:E1:52:E0:E7:7C:79:5B:54:22:87:D6:5C:1E:4E:0B:F2:86:D4:D5:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:d7:19:5b:ad:52:ee:0a:cc:a8:3a:d8:56:ad:a6:a7:ca:9e:
59:d7:1b:41:47:e0:42:62:62:5d:d2:d8:f9:92:1d:12:a8:ce:
c1:8e:be:fa:fc:dd:94:6b:1b:18:53:8b:0f:b3:4f:85:66:50:
4d:50:ec:2e:2b:21:69:f4:09:2c:e7:4b:7c:30:53:df:1d:fa:
75:69:47:d9:03:b5:38:75:ac:a7:19:16:92:20:7f:f3:4c:44:
c3:89:01:15:44:8d:d5:75:55:9d:d1:8f:0a:85:95:4e:94:f4:
14:32:03:de:9f:16:9d:d7:6b:da:54:2a:c0:1d:2d:d7:6c:03:
b6:ec:41:4b:3c:42:c6:9d:db:55:39:6c:f2:d8:d1:fa:36:55:
43:26:04:39:f3:2f:9d:1a:53:d8:8e:bb:20:72:73:3d:22:b5:
e0:2e:91:88:ba:a5:0f:75:a1:5d:05:75:ca:fc:35:c8:c4:73:
68:41:f5:7a:dc:ba:28:53:27:4d:e6:ef:37:46:34:66:9c:57:
ab:bc:4b:01:0c:7f:81:11:dc:81:1e:fc:5b:11:85:23:5a:87:
04:57:5a:25:87:62:5e:a9:cd:00:61:b6:3a:e0:60:6b:e4:68:
2f:3b:fb:15:85:33:38:ce:9f:3a:96:84:77:e9:fe:74:a2:6e:
9c:87:28:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:39:26 2025 by rpki-client