
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
File: ilgWVckip6USHgD7ekJ-AZrHMHs.mft (raw, json)
Hash identifier: 8Yrhk6VWRw+n1NzZMqvGr5y+16QOwmO71YZ/qmLcsJ8=
Subject key identifier: 8C:63:75:13:F8:65:89:E2:66:95:1C:F8:D4:B9:60:B4:1E:95:35:39
Authority key identifier: 8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B
Certificate issuer: /CN=A9154376/serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B
Certificate serial: 01BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
Manifest number: 01B6
Signing time: Wed 05 Nov 2025 03:14:47 +0000
Manifest this update: Wed 05 Nov 2025 03:14:47 +0000
Manifest next update: Wed 12 Nov 2025 03:14:47 +0000
Files and hashes: 1: ilgWVckip6USHgD7ekJ-AZrHMHs.crl (hash: qbyYIR6aX05cR4gijyDEdAC6EHaw7v3O4oj1mShsqQ4=)
2: 85CE44A4BC1111EE9E42EB2DC4F9AE02.roa (hash: AfyKET21CuVm+C0lZplWyO7fvqiYNNsqsgPynM9Y4+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl
rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:14:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154376, serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B
Validity
Not Before: Nov 5 03:14:47 2025 GMT
Not After : Nov 12 03:14:47 2025 GMT
Subject: CN=690ac127-6652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3d:63:01:c9:04:f2:09:77:37:60:e0:10:79:
91:07:04:67:e0:37:36:27:fc:34:8b:d2:67:f9:c7:
3d:cb:c9:6e:00:15:90:05:6c:f0:7c:16:fa:87:1e:
a9:f5:67:a4:21:9a:46:94:99:90:c2:a0:dc:ea:9b:
7d:ef:11:09:09:f5:28:49:1f:c9:c4:b7:43:6b:cc:
6c:61:ae:01:74:78:1d:69:fd:5c:68:33:d5:2b:a8:
e9:43:d6:73:ef:9e:2d:80:e5:1c:79:5e:c1:b4:4d:
ad:c3:58:42:53:a6:f3:33:70:86:15:3e:78:3f:db:
94:81:5c:01:7a:53:ce:e8:3d:9a:30:45:ec:17:80:
d5:8c:ed:5e:ea:62:7c:c8:fd:cc:91:0e:9f:57:65:
60:fa:ac:0b:80:0a:84:63:81:7b:b8:45:d9:85:c6:
e0:12:1b:97:f4:34:47:13:84:8e:61:b3:b5:d0:98:
02:b4:ca:9f:2f:3e:3c:84:8b:83:eb:5a:c0:9b:f2:
f7:c7:fc:89:24:0f:95:f3:a9:7a:5d:35:64:db:ee:
df:84:a9:09:87:46:c6:b9:34:e1:06:7c:69:de:f8:
86:73:0b:e0:99:56:9f:37:88:a7:b6:de:95:38:6b:
7c:fd:e8:97:23:71:e1:e3:52:2b:4a:c6:6a:c1:f2:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:63:75:13:F8:65:89:E2:66:95:1C:F8:D4:B9:60:B4:1E:95:35:39
X509v3 Authority Key Identifier:
keyid:8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a2:5e:b3:cd:7a:9d:e0:d4:d3:9e:d9:91:8b:04:5e:97:1b:
4e:e0:e7:64:13:f7:57:a4:69:07:a4:bb:9a:92:2b:82:ae:02:
f6:fb:6b:cc:6c:17:45:30:f8:6f:82:a4:99:6a:1e:a3:fd:6c:
e8:de:0b:d9:52:1a:25:a9:bc:4d:5e:3a:e9:bf:72:d2:90:fa:
6f:cc:18:8c:f8:04:58:3b:bd:81:ba:a0:55:ed:bc:db:c9:b9:
a3:53:7c:60:d0:dc:ff:6d:88:3d:92:15:7f:43:44:db:99:c0:
42:6b:e8:1f:9b:c6:d9:bf:d9:38:23:db:2c:6a:5d:51:23:00:
ad:cb:a0:c0:fe:e3:9e:f8:3e:24:8a:de:4d:4f:19:e8:a0:34:
5c:16:ff:3d:52:39:b4:7e:da:28:df:17:b6:6f:bf:bd:50:40:
84:ba:45:93:31:6d:b0:f7:8a:b8:4a:0a:9a:cf:99:8c:b0:8e:
d0:41:55:5c:8d:be:b7:38:c3:cf:32:f0:37:74:9e:1e:aa:ce:
3a:23:57:a9:51:d6:36:b2:c8:2f:e9:3c:00:77:15:c9:2c:d4:
c7:5b:0e:5d:ec:c0:9b:2d:0f:cb:00:3b:76:5e:d5:5f:fd:5e:
53:7c:91:91:5b:50:3f:77:18:32:a0:0a:ec:85:fb:c9:e3:d0:
fa:92:b7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:26:21 2025 by rpki-client