
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
File: hctAGQp33J5olNhX9zu3qQ4JdOQ.mft (raw, json)
Hash identifier: +41qqCA7CK+yCKiV83IovwhOdQwJvLzYDYvcM+O3310=
Subject key identifier: 8B:10:14:94:85:EB:E1:97:EC:A8:C4:5A:DA:99:30:D0:8D:77:29:A3
Authority key identifier: 85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4
Certificate issuer: /CN=A9169BB4/serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4
Certificate serial: 05C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
Manifest number: 05B8
Signing time: Tue 04 Nov 2025 23:11:57 +0000
Manifest this update: Tue 04 Nov 2025 23:11:56 +0000
Manifest next update: Tue 11 Nov 2025 23:11:56 +0000
Files and hashes: 1: hctAGQp33J5olNhX9zu3qQ4JdOQ.crl (hash: a4BVmWUyUFjhA7plVaoNX8GHlAge5je0JvyM93Aok10=)
2: 7FCFB4745E8411EE89DF693EC4F9AE02.roa (hash: AcP4+2aIj47AkfHQ0Si3gKCupjSk93I6lVYcHLmJ46k=)
3: FD9A4AA0E53111EBAB62446EC4F9AE02.roa (hash: zDAY/JgF04rYgWurZj2nx6aFtMaDIFUtTRAO3VpvWV4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl
rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 23:11:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1476 (0x5c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169BB4, serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4
Validity
Not Before: Nov 4 23:11:56 2025 GMT
Not After : Nov 11 23:11:56 2025 GMT
Subject: CN=690a883c-bf89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6c:bb:dd:18:34:2b:1a:28:bc:37:be:28:b0:
0e:44:1b:1f:94:ff:4e:b8:03:90:84:82:4d:c5:d3:
6d:05:43:e1:55:dc:61:7d:87:4d:41:7b:d0:18:4d:
6c:e6:24:dc:28:bf:d4:66:3d:49:92:76:2c:3b:33:
0b:26:af:40:a1:ab:4e:47:cc:8f:27:27:cf:98:fc:
5a:2e:b5:df:5a:4d:81:0d:18:45:8e:a0:a0:5c:4c:
f1:a7:7f:21:6f:2e:ee:20:4e:8f:a0:35:f7:29:1d:
81:94:d5:86:8f:ef:5a:23:2f:99:bb:47:89:67:f1:
2d:6a:59:1f:a9:7b:c0:f4:81:df:07:81:3f:f7:b9:
f6:54:91:0f:f6:f9:97:2f:7e:90:8b:ab:36:09:f9:
dd:ec:1f:b4:58:85:e5:19:c7:1a:e7:88:91:a7:f6:
25:cd:9f:16:ba:d7:ec:21:47:66:96:3f:ec:d2:59:
ce:4d:2e:7d:c9:f5:fd:34:0f:ee:38:0c:91:e9:9d:
05:50:bd:ab:2b:35:df:2c:43:5d:d5:2f:79:ee:25:
6f:8f:32:be:ff:18:22:7b:b3:e7:9a:1e:48:ca:8b:
19:24:86:e8:3c:45:bb:44:3b:ce:89:8b:de:ec:8f:
5a:f5:07:fa:97:07:9f:04:42:f2:7f:81:31:f7:1b:
f4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:10:14:94:85:EB:E1:97:EC:A8:C4:5A:DA:99:30:D0:8D:77:29:A3
X509v3 Authority Key Identifier:
keyid:85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1e:d2:cd:e7:bb:ad:63:24:92:2d:40:73:93:ed:4a:a3:29:
15:40:df:ed:3b:f3:b6:5c:e0:55:5d:68:4c:bd:7a:1f:04:91:
f3:c6:9f:87:8d:ec:73:fa:7b:f4:b6:80:b5:66:b1:fb:17:7a:
3b:78:75:99:e3:1b:3f:f9:04:cf:af:b0:17:92:af:18:ec:7b:
78:0f:7c:d8:5c:b4:81:6b:ce:35:e8:e6:1a:d4:c5:20:b2:2a:
bf:b4:60:b6:22:54:1f:5e:f5:ef:9e:9e:05:0d:ee:16:2b:9c:
35:ab:10:38:84:ee:6b:a9:34:3d:94:8a:fe:6a:73:30:f6:00:
bf:4b:4e:00:9c:13:03:b9:47:59:ae:16:79:2f:56:3d:3c:e8:
99:86:43:f5:b1:64:34:ee:7f:b2:6e:2d:6e:b1:a3:ca:a0:8d:
31:6f:85:df:30:d6:3e:de:30:a4:13:97:0e:6c:95:8d:7b:af:
ed:b0:1e:29:1d:91:74:d9:7d:03:3a:97:1a:1a:84:fe:12:6f:
5d:c8:1d:51:fb:12:40:45:e3:5c:d8:89:a7:cd:3e:01:30:6c:
cf:a1:7b:89:f5:aa:be:00:f9:e2:89:78:cb:b1:b8:f5:e2:1b:
c3:69:a4:67:45:96:e0:d3:03:39:88:a2:56:c6:25:8a:7e:95:
22:8d:94:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:55:02 2025 by rpki-client