
$ rpki-client -vvf rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft
File: 8630DB364752FB672480309F11531C73BFEDD599.mft (raw, json)
Hash identifier: 0dB9l8WqueT86yBIww2/WBGszwy3iACThdAJ9TSf77s=
Subject key identifier: FB:12:2B:BE:C9:8E:D8:EF:01:B0:08:3A:B7:7A:71:F2:52:A1:3E:44
Authority key identifier: 86:30:DB:36:47:52:FB:67:24:80:30:9F:11:53:1C:73:BF:ED:D5:99
Certificate issuer: /CN=A916FC1D0000/serialNumber=8630DB364752FB672480309F11531C73BFEDD599
Certificate serial: 19DE6D0AEC0ED7E1C137CD99CB9D8EE9D382852D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjDbNkdS-2ckgDCfEVMcc7_t1Zk.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft
Manifest number: 32
Signing time: Mon 27 Oct 2025 22:11:29 +0000
Manifest this update: Mon 27 Oct 2025 22:06:29 +0000
Manifest next update: Wed 29 Oct 2025 01:43:29 +0000
Files and hashes: 1: AS154185.asa (hash: Vy6BbMuZH/3JZGDxVCcgZTpq0yEG2F+9Krfc1ZawZiA=)
2: 34392e3231332e36322e302f32342d3234203d3e20323133363035.roa (hash: O+O3ngvT2eRgjWysCEGH5MTbHUuNdWckcsQv0KzXeTs=)
3: 8630DB364752FB672480309F11531C73BFEDD599.crl (hash: ka8rcJ6ViCMtatEnZp4taJy4hjgiR90jUYQrm72Q1WU=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.crl
rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjDbNkdS-2ckgDCfEVMcc7_t1Zk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 01:43:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:de:6d:0a:ec:0e:d7:e1:c1:37:cd:99:cb:9d:8e:e9:d3:82:85:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FC1D0000, serialNumber=8630DB364752FB672480309F11531C73BFEDD599
Validity
Not Before: Oct 27 22:06:29 2025 GMT
Not After : Oct 29 01:43:29 2025 GMT
Subject: CN=FB122BBEC98ED8EF01B0083AB77A71F252A13E44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2d:29:6a:7e:07:a6:2b:22:e1:52:9c:f4:9c:
43:4b:5c:40:8e:2e:42:01:29:70:aa:bf:2c:d5:49:
ad:bf:4f:82:a1:fe:51:39:c9:5c:96:24:52:a2:2c:
e8:cd:1b:a1:1f:ca:ff:8a:f8:af:fc:21:36:b6:63:
5b:92:2d:5f:87:4a:43:b1:ca:04:d4:9a:0e:b8:7b:
90:ad:78:d4:a4:f1:07:6e:0b:73:62:f7:94:2a:a0:
7d:e4:24:96:c1:d1:1b:cc:f2:5b:95:11:99:46:01:
c3:bd:93:1e:75:50:0d:88:b9:2c:c9:a2:bb:cd:0b:
34:f0:8e:f1:63:d6:80:01:9c:21:7f:32:05:db:3f:
15:be:57:eb:94:ab:80:b6:61:7b:3f:d9:69:2b:db:
75:ae:6c:b3:9c:5f:a5:20:e8:7b:f6:63:7e:c7:98:
b1:86:de:8e:aa:0d:e5:d4:29:7b:66:3e:ef:72:eb:
19:49:6a:06:2a:aa:d9:df:14:95:52:e6:54:5c:14:
4b:20:d4:de:d5:af:a0:5e:b2:de:e4:4d:90:c2:ea:
b8:93:46:83:58:35:02:07:78:91:bf:83:6c:c8:ce:
b8:4b:48:d7:92:aa:ac:ba:fb:c9:48:7d:a4:97:8e:
16:31:61:49:34:0a:a5:28:fa:46:e3:b2:e5:19:e9:
4e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:12:2B:BE:C9:8E:D8:EF:01:B0:08:3A:B7:7A:71:F2:52:A1:3E:44
X509v3 Authority Key Identifier:
keyid:86:30:DB:36:47:52:FB:67:24:80:30:9F:11:53:1C:73:BF:ED:D5:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjDbNkdS-2ckgDCfEVMcc7_t1Zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f8:de:96:86:7f:e3:b8:f4:17:b9:2a:40:92:21:02:b0:6e:
e5:99:b8:89:51:73:0f:bc:38:b9:3f:3b:2a:83:d3:73:2f:fa:
b6:57:65:10:5b:da:16:4b:05:30:09:a0:9c:aa:0d:44:04:c8:
c1:3f:8b:7f:7f:20:35:6f:11:a3:da:ce:9b:1d:8b:69:2c:d7:
63:26:55:99:bf:40:f0:d6:9f:1e:96:21:91:0d:0a:ab:90:52:
d1:9d:9d:8e:35:7d:d7:ed:6c:b4:7c:cd:db:a9:dc:36:fa:81:
55:91:55:9b:24:11:95:3c:d6:f8:46:9a:8c:61:d1:f3:b7:a7:
65:c2:88:05:bf:b2:e3:0e:80:27:97:c5:72:be:89:a8:0f:d7:
19:76:e2:fa:5e:8d:c9:d0:a6:e0:6e:82:ee:8a:b8:c4:4d:24:
ef:81:0a:42:8e:76:98:20:18:d4:c0:14:31:21:7d:69:39:8e:
23:28:2d:da:f2:b7:50:fa:71:38:0a:8c:ee:8f:72:d5:79:6f:
38:b8:4b:df:5f:48:6a:fb:f9:29:bd:7d:a9:30:bb:18:7a:5b:
05:a4:08:65:d5:0a:74:0a:f7:76:e9:1f:c2:65:04:dc:0b:c6:
92:c6:fc:47:59:f9:b7:58:5e:00:65:a3:24:d3:b3:b4:45:6c:
8c:31:cd:98
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUGd5tCuwO1+HBN82Zy52O6dOChS0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNkZDMUQwMDAwMTEwLwYDVQQFEyg4NjMwREIzNjQ3
NTJGQjY3MjQ4MDMwOUYxMTUzMUM3M0JGRURENTk5MB4XDTI1MTAyNzIyMDYyOVoX
DTI1MTAyOTAxNDMyOVowMzExMC8GA1UEAxMoRkIxMjJCQkVDOThFRDhFRjAxQjAw
ODNBQjc3QTcxRjI1MkExM0U0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJEtKWp+B6YrIuFSnPScQ0tcQI4uQgEpcKq/LNVJrb9PgqH+UTnJXJYkUqIs
6M0boR/K/4r4r/whNrZjW5ItX4dKQ7HKBNSaDrh7kK141KTxB24Lc2L3lCqgfeQk
lsHRG8zyW5URmUYBw72THnVQDYi5LMmiu80LNPCO8WPWgAGcIX8yBds/Fb5X65Sr
gLZhez/ZaSvbda5ss5xfpSDoe/ZjfseYsYbejqoN5dQpe2Y+73LrGUlqBiqq2d8U
lVLmVFwUSyDU3tWvoF6y3uRNkMLquJNGg1g1Agd4kb+DbMjOuEtI15KqrLr7yUh9
pJeOFjFhSTQKpSj6RuOy5RnpThECAwEAAaOCAhswggIXMB0GA1UdDgQWBBT7Eiu+
yY7Y7wGwCDq3enHyUqE+RDAfBgNVHSMEGDAWgBSGMNs2R1L7ZySAMJ8RUxxzv+3V
mTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE2RkMxRDAwMDAvMC84NjMwREIz
NjQ3NTJGQjY3MjQ4MDMwOUYxMTUzMUM3M0JGRURENTk5LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9oakRiTmtkUy0y
Y2tnRENmRVZNY2M3X3QxWmsuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE2RkMx
RDAwMDAvMC84NjMwREIzNjQ3NTJGQjY3MjQ4MDMwOUYxMTUzMUM3M0JGRURENTk5
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAkPjeloZ/47j0F7kqQJIhArBu5Zm4iVFzD7w4uT87KoPTcy/6
tldlEFvaFksFMAmgnKoNRATIwT+Lf38gNW8Ro9rOmx2LaSzXYyZVmb9A8NafHpYh
kQ0Kq5BS0Z2djjV91+1stHzN26ncNvqBVZFVmyQRlTzW+EaajGHR87enZcKIBb+y
4w6AJ5fFcr6JqA/XGXbi+l6NydCm4G6C7oq4xE0k74EKQo52mCAY1MAUMSF9aTmO
Iygt2vK3UPpxOAqM7o9y1XlvOLhL319Iavv5Kb19qTC7GHpbBaQIZdUKdAr3dukf
wmUE3AvGksb8R1n5t1heAGWjJNOztEVsjDHNmA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 14:36:03 2025 by rpki-client