
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
File: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft (raw, json)
Hash identifier: W9nmCsYTXqosfAnnuWmddW0qwRxju/ea8yyR1UvlBFs=
Subject key identifier: 24:1B:59:CC:00:4B:55:C1:6C:AB:8E:9E:F5:22:10:D4:EB:89:8F:1F
Authority key identifier: FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94
Certificate issuer: /CN=A9186C2F/serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
Certificate serial: 03BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
Manifest number: 03B0
Signing time: Mon 03 Nov 2025 00:39:56 +0000
Manifest this update: Mon 03 Nov 2025 00:39:55 +0000
Manifest next update: Mon 10 Nov 2025 00:39:55 +0000
Files and hashes: 1: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl (hash: W43UrEGEip0BgGUr175oFZ4iwbssxbvAtzVMjoNB7fQ=)
2: AB3742F4B34411ECB016765EC4F9AE02.roa (hash: oywLtrB7Dks1CdJjkD2xhNPjQlapRspAyRegZBX074I=)
3: E0722F2EB41B11ECB8529210C4F9AE02.roa (hash: 1PytUGKxFSlnKa32cmpuSKajNJ5x4qip8klGcU604cA=)
4: 9837349AB41E11ECAFDA1F1AC4F9AE02.roa (hash: dAddIv0JPSHHamMka9fq5eu7LbrsYsvnj5ro8P4sxvE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl
rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 00:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 959 (0x3bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186C2F, serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
Validity
Not Before: Nov 3 00:39:55 2025 GMT
Not After : Nov 10 00:39:55 2025 GMT
Subject: CN=6907f9dc-0e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e9:32:45:27:c0:33:08:f7:fc:31:68:77:c8:
da:6c:ae:85:d5:b8:fe:94:6a:7d:c9:3c:6a:23:ec:
56:fa:ce:50:66:b9:fd:ba:75:d1:e1:6f:ce:ad:c1:
97:45:e6:6f:9e:28:6e:06:2d:71:eb:39:3a:e3:cc:
91:85:cb:dc:8c:24:65:74:f2:fd:c9:e2:26:4a:06:
b0:18:59:a0:62:f6:35:52:c5:3f:c4:3a:42:57:cc:
f1:93:fd:38:48:3f:ad:79:bc:ea:f9:e2:e6:38:63:
6b:0c:7f:03:d6:0c:8d:c4:a2:d2:fb:d6:8d:51:71:
a8:11:dc:d0:86:d3:8e:77:e1:6b:55:b8:89:c8:d3:
b8:5c:83:d8:13:1a:85:0c:d6:c4:89:43:72:27:c5:
dd:b0:8a:dc:e4:79:b7:8e:29:a1:2b:a1:0c:2d:fd:
35:83:be:db:a2:42:01:70:0c:97:de:f9:82:74:a1:
5b:e0:2c:ec:cb:e8:d2:3b:e7:57:df:a6:4a:1d:9e:
41:81:ea:10:4d:72:8b:ca:b7:7f:00:fa:7d:78:19:
82:6e:50:33:35:e6:2a:64:d7:8c:fd:8c:06:0a:45:
ec:f8:12:19:a3:c4:68:e1:ee:77:b9:8b:cb:e1:58:
b7:8d:a3:bd:89:de:73:19:17:03:49:d8:7a:94:5c:
29:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1B:59:CC:00:4B:55:C1:6C:AB:8E:9E:F5:22:10:D4:EB:89:8F:1F
X509v3 Authority Key Identifier:
keyid:FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:37:bc:06:67:4d:4c:02:e2:ed:5e:ed:83:97:10:6c:eb:61:
96:e1:f5:1a:cc:98:e5:2c:d5:5b:08:87:08:92:c4:cb:ee:5a:
f1:ac:a1:ba:38:b3:30:9d:36:85:af:3c:77:db:f4:3a:2e:8b:
f3:82:66:e9:2a:1a:cd:c0:16:df:29:c5:19:00:e7:e3:4c:34:
43:7b:ce:1d:cf:bc:45:f2:3e:45:4d:48:e8:5f:f4:bd:4e:ce:
f4:d1:05:64:63:21:19:75:5c:68:5b:03:6e:8c:0f:b7:81:fd:
98:b7:74:ba:56:61:02:ae:e9:ef:66:06:97:1c:2e:b0:38:e3:
13:d7:06:ca:17:f2:64:e3:55:be:9a:65:3a:fe:d3:25:6f:5b:
b7:7a:9c:e7:e3:e2:6a:c6:58:5e:a2:ac:ec:af:0b:5a:ed:cf:
27:dd:10:7f:14:60:0b:ed:b7:86:a9:cc:6b:6c:c2:e4:aa:a2:
c7:c2:3f:0e:13:15:31:98:9d:43:c1:52:4e:fb:71:34:92:f1:
81:81:25:69:f4:de:e4:d2:90:54:cd:3a:50:81:53:53:78:57:
7c:bc:ff:0d:48:67:1a:7a:c3:7e:45:d1:7c:56:41:f0:50:71:
e2:42:aa:5b:ce:86:67:5a:f3:d1:36:b7:c9:c2:1f:51:59:2d:
9c:ad:68:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZDMkYxMTAvBgNVBAUTKEZFMTk3NzhBMEQwN0JEREI1RkY2QjlGMDVCRTJENTQ1
NTIwRUM0OTQwHhcNMjUxMTAzMDAzOTU1WhcNMjUxMTEwMDAzOTU1WjAYMRYwFAYD
VQQDEw02OTA3ZjlkYy0wZTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx+kyRSfAMwj3/DFod8jabK6F1bj+lGp9yTxqI+xW+s5QZrn9unXR4W/OrcGX
ReZvnihuBi1x6zk648yRhcvcjCRldPL9yeImSgawGFmgYvY1UsU/xDpCV8zxk/04
SD+tebzq+eLmOGNrDH8D1gyNxKLS+9aNUXGoEdzQhtOOd+FrVbiJyNO4XIPYExqF
DNbEiUNyJ8XdsIrc5Hm3jimhK6EMLf01g77bokIBcAyX3vmCdKFb4Czsy+jSO+dX
36ZKHZ5BgeoQTXKLyrd/APp9eBmCblAzNeYqZNeM/YwGCkXs+BIZo8Ro4e53uYvL
4Vi3jaO9id5zGRcDSdh6lFwpcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQbWcwA
S1XBbKuOnvUiENTriY8fMB8GA1UdIwQYMBaAFP4Zd4oNB73bX/a58Fvi1UVSDsSU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkMyRi83NzNEMzlCNkIz
NDExMUVDODIwMzE5NUJDNEY5QUUwMi9faGwzaWcwSHZkdGY5cm53Vy1MVlJWSU94
SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19obDNpZzBIdmR0ZjlybndXLUxWUlZJT3hKUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NkMyRi83NzNEMzlCNkIzNDExMUVDODIwMzE5NUJDNEY5QUUwMi9faGwzaWcwSHZk
dGY5cm53Vy1MVlJWSU94SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAnN7wGZ01MAuLtXu2DlxBs62GW4fUazJjlLNVbCIcIksTL7lrxrKG6
OLMwnTaFrzx32/Q6LovzgmbpKhrNwBbfKcUZAOfjTDRDe84dz7xF8j5FTUjoX/S9
Ts700QVkYyEZdVxoWwNujA+3gf2Yt3S6VmECrunvZgaXHC6wOOMT1wbKF/Jk41W+
mmU6/tMlb1u3epzn4+Jqxlheoqzsrwta7c8n3RB/FGAL7beGqcxrbMLkqqLHwj8O
ExUxmJ1DwVJO+3E0kvGBgSVp9N7k0pBUzTpQgVNTeFd8vP8NSGcaesN+RdF8VkHw
UHHiQqpbzoZnWvPRNrfJwh9RWS2crWhl
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:34:49 2025 by rpki-client