
$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
File: n4LbyUZjEsW6LpISeTAkAJVqmCo.mft (raw, json)
Hash identifier: 1/VnqyR70WUAGEzXG4pJ30kWxqDj5htkKjaQcC5wlUo=
Subject key identifier: 5E:CD:E2:D4:03:7D:5D:6C:B8:C3:C5:69:60:15:6E:93:22:FA:85:0F
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial: 3617
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
Manifest number: 3519
Signing time: Fri 24 Oct 2025 14:23:04 +0000
Manifest this update: Fri 24 Oct 2025 14:23:03 +0000
Manifest next update: Fri 31 Oct 2025 14:23:03 +0000
Files and hashes: 1: n4LbyUZjEsW6LpISeTAkAJVqmCo.crl (hash: SuMZGiFJFiwG8D/itf9F7E20OGti8IrlaVtLcqfzCWA=)
2: 1827B7E0605411EFA8069323C4F9AE02.roa (hash: RlLRteQSfjgNjoDFYZ12j4xm4gJcxx7/ouGdnACi8jE=)
3: 439638A88DB811E98ACC9F7EC4F9AE02.roa (hash: Jl/N0P/2cG5vuafM7WPanArTIdcgOJaMycU46eiVqR8=)
4: 4D21FB36F7DB11EE92D1E11FC4F9AE02.roa (hash: 0A0Nhnr13g/AyJ6eZl3uyvpwaA6ghz922H++qApXnN8=)
5: EBD5A3CA6B8711EFB0476280C4F9AE02.roa (hash: CEN7jfWU1vPpLzR5uzYZhWk4C138cZA3lkf/fBKS00g=)
6: 4107DF748DB811E98ACC9F7EC4F9AE02.roa (hash: t33tjefPncP8dR8GX15pU981pTfbTiVj5ryxyONgq7A=)
7: F6D9C45E7B1811EF82C90D2AC4F9AE02.roa (hash: 9Ico4h3XlCaLtqQIGUKMAvjEzVqPREECMseESR6/+Rs=)
8: 4A71D7E08DB811E98ACC9F7EC4F9AE02.roa (hash: am25QW4MJ5THnozpBZGdhNNGRi5OPU/F57+oBhLG+ss=)
9: 4EE07E481F7F11ECA7242F6CC4F9AE02.roa (hash: Hnemh9EwwTeduD1Zc7gVprQ1BQwQSdNFXtPrRgQGYJ0=)
10: 42EBE8D08DB811E98ACC9F7EC4F9AE02.roa (hash: x5gAALbDWXYABqxH0UVKGWQASAjVkWdpYaVlhYcPqAc=)
11: CEC68F44973211E9954F0565C4F9AE02.roa (hash: UYL3PlfPOBzM+4YTE4YVT/B9+S0RmwIC0/LTv+8zEeU=)
12: 9DB6EBB4972E11E9B776A755C4F9AE02.roa (hash: xHKRgZRt4qbSzDPZH6wkR/9CWnhDd6W1bLMRhJgSvfc=)
13: 471E9C908DB811E98ACC9F7EC4F9AE02.roa (hash: 1cfJQS5ACrYfLQAyh5Ja07hoswmqC8p/ibeUwb6rjOE=)
14: 482C95F68DB811E98ACC9F7EC4F9AE02.roa (hash: Vvt8gIzT7X3zFgaHKZZTu/elNVhHdcP8J7ECpTHkuWo=)
15: 3ED710C68DB811E98ACC9F7EC4F9AE02.roa (hash: Td1yZRJHEJdrXdDkVXf585lTVDZ/gAEOrflJZU/zpIE=)
16: F3A41ADEC0E411EFA19F644CC4F9AE02.roa (hash: JfCzlyEj5RyOEksRQ5dZM0w5+meyD4/0WxMSGEXGqU0=)
17: 47A6C8E08DB811E98ACC9F7EC4F9AE02.roa (hash: sX+id3lu89Hjy6wyXn7YJf1vycTYavS1aKnHsZ9N81M=)
18: B2FF274A00EC11EDBC60AA4FC4F9AE02.roa (hash: Ou9GXrK/fzDAww5dRpeY0Rn8NUNZjPo4uNl9tQUkuio=)
19: 402418C08DB811E98ACC9F7EC4F9AE02.roa (hash: P0DmiEGqN7lW5E2uoWn71/z/nYWW3JpwNu+rpvGmCIs=)
20: 441E60E88DB811E98ACC9F7EC4F9AE02.roa (hash: 0+kajyIDxu72hFKkbKyeIRpJ6iZ+zJJsd5Bir90Bjbs=)
21: A3601D70C2A511EBB2025B36C4F9AE02.roa (hash: 2vo94c8bhE/vlqMz+w1F2CTUOl+XnRdJZlNw0Ckqzz8=)
22: EC8209420EB411EFAE1CF63BC4F9AE02.roa (hash: vcrOZBXHjq3K5b9IM2tb0fFhXmrTMImV0akcYw7Q7n0=)
23: B580AA94013D11EBBC81306AC4F9AE02.roa (hash: 07u1m9+WpmKzkUImJC5UFriIMTCX8GggMGZm/tBb4Wg=)
24: 46800A948DB811E98ACC9F7EC4F9AE02.roa (hash: EcBR1Y+LSwE3SFyQmCPHJrgPGrIw6HZerXAZglO7fSw=)
25: 5B917C28A2E011E9A98B0235C4F9AE02.roa (hash: +zMT8yB+e8TH1LiL/hekG194ZDTDk4B7qTjHy7txnvM=)
26: F7318C2CBA3E11ECA0543F6BC4F9AE02.roa (hash: 1bdsgMBWNk0J8N0RhS3NVIo135QEMXhjy/l9087BnFU=)
27: 4AEE35608DB811E98ACC9F7EC4F9AE02.roa (hash: yxUvZSwNOnvgFyxK+xyWLF/IFfuAV6JnnBBih/qkFIk=)
28: 48ED106A8DB811E98ACC9F7EC4F9AE02.roa (hash: jWBtMJRBrQmahUt0pi2YibmAZBgFlEfn4PBIYmSkROs=)
29: 453F8E988DB811E98ACC9F7EC4F9AE02.roa (hash: 5+MRoBA+rOp6HemFzB+KMhs/OCqWXA66uUpcbDP4GD0=)
30: 1BA16D001F8211EC8FC82E73C4F9AE02.roa (hash: ZQ/r1ORMQDfDWVK/TZq7hs+eIvBXZKfdyf99uBq0RP8=)
31: 49EECD288DB811E98ACC9F7EC4F9AE02.roa (hash: 8/pIg0nOoslqGVpUnPoQipLD1CjxnbDa2dRCnlmkpWQ=)
32: 4495856A8DB811E98ACC9F7EC4F9AE02.roa (hash: zLL9jkNh6O2K6tYXIsyvEGSPolQEwe8/GLuSvRNkabw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 14:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13847 (0x3617)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Validity
Not Before: Oct 24 14:23:03 2025 GMT
Not After : Oct 31 14:23:03 2025 GMT
Subject: CN=68fb8bc8-af70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:36:ab:27:3b:62:a0:88:a7:fa:51:8e:d9:
2a:35:38:59:b5:8b:fe:b1:fd:07:f1:ec:b3:da:17:
d1:01:e2:72:e3:32:ea:7e:cf:73:31:e9:df:d9:83:
97:0c:17:50:0a:7a:11:89:e8:33:b4:5a:aa:af:95:
57:22:75:25:25:9d:d5:a9:62:a0:33:f0:bb:2f:da:
35:3e:2a:8b:9b:10:55:7c:84:42:2b:9b:ba:25:c3:
87:4b:22:ce:c7:70:ba:1f:41:8a:3c:a9:13:e7:33:
8d:68:41:c2:cf:90:5d:c5:b2:28:8e:67:ca:c7:54:
df:57:ee:d9:9a:f0:a9:ab:8b:94:d9:5b:26:fd:26:
55:73:0e:38:1d:1a:56:fc:4b:e3:52:42:82:1b:b9:
8c:a0:cc:b3:6c:99:b0:80:7e:49:9d:ec:60:1e:ab:
d0:10:2c:cd:43:00:21:63:2b:c1:7c:92:6a:6a:9f:
17:31:f5:7d:81:53:08:a0:1e:36:41:37:ef:fd:4a:
bd:db:cd:41:4b:8c:40:b5:59:19:da:0a:09:93:fb:
c5:bb:73:2d:b4:f5:30:ba:89:e1:3b:a8:29:3f:5f:
fe:b6:e8:89:ad:51:48:b6:f8:79:35:69:05:da:ad:
03:55:a9:c4:03:18:72:ea:fe:1b:61:46:db:3d:3b:
be:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CD:E2:D4:03:7D:5D:6C:B8:C3:C5:69:60:15:6E:93:22:FA:85:0F
X509v3 Authority Key Identifier:
keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:43:ff:8f:cc:dd:87:cc:fe:ce:ac:3d:bb:88:b6:93:47:13:
3f:50:2d:8f:8a:69:53:09:37:35:82:cc:cb:11:91:81:bc:46:
87:25:c0:6f:e4:7c:ef:9e:f0:c7:bf:53:cc:79:e3:a7:5e:49:
ae:0d:78:5e:61:53:32:7a:07:b7:d0:e6:97:15:9c:40:18:3d:
56:d3:3f:c4:3e:de:ea:92:d5:68:c6:f1:a6:29:6c:db:8d:4d:
98:45:60:e5:36:7b:df:66:b8:86:ee:d1:60:9d:8c:ee:28:fd:
73:10:e0:82:41:aa:1f:2a:5a:22:17:e5:90:9e:9e:ff:0d:71:
9c:45:5a:2c:c2:bf:2a:f8:82:ce:60:57:ea:46:ec:6a:53:b0:
4e:9d:f0:e6:5d:56:b3:8e:7b:b1:5b:a0:96:90:de:52:04:33:
e2:c7:0d:e1:4b:1d:e9:cc:ca:5c:05:34:65:5c:cc:c2:16:95:
6e:28:7e:c4:58:41:fb:aa:38:46:5f:37:33:21:ef:59:a7:aa:
90:be:b8:72:24:cc:12:9f:32:5b:5e:df:eb:ef:90:18:25:27:
f1:f1:21:fe:86:62:c5:b6:ee:ef:56:88:00:79:0b:38:30:74:
16:90:ff:56:a0:bc:5a:51:8d:86:80:8d:81:9f:bc:c3:6c:27:
cb:54:3a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 04:24:24 2025 by rpki-client