
Manifest
$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
File: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft (raw, json)
Hash identifier: VEMdqgNbDn72Lql6S4o3/FydEkkmLS1WU+EmVhoWdQE=
Subject key identifier: AB:92:81:A9:45:DC:B7:5B:31:A3:67:75:7D:6E:F6:4C:CC:27:D3:6C
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 4790
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Subject info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
Manifest number: 4785
Signing time: Sun 19 Oct 2025 19:26:08 +0000
Manifest this update: Sun 19 Oct 2025 19:26:08 +0000
Manifest next update: Sun 26 Oct 2025 19:26:08 +0000
Files and hashes: 1: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl (hash: 3z94b1D/drzedXe9z28Gu0N5IwQ5C2uzmeSQeuA+cLQ=)
2: Ak2PFao5dyF1iDou3BZQFOGSiho.cer (hash: NRcDr6REbVzbTiHoNzZyK4YoKwtLqg9UeS+C5SRci4o=)
3: 4kPzvoJVabsWrLN0vJjavmkLF8E.cer (hash: fxyUaruAjaaco/fzq2Q5nRs7XM9NtVdLWIcLFflk+gY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 19:26:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18320 (0x4790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: Oct 19 19:26:08 2025 GMT
Not After : Oct 26 19:26:08 2025 GMT
Subject: CN=68f53b50-ff98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:f2:60:3f:e1:94:b1:02:f1:a8:e9:27:a7:
40:ff:00:35:a1:de:4a:c2:e9:11:bc:b7:0e:65:4d:
0a:e3:1f:b9:64:1b:a8:c7:13:c6:da:24:1e:52:9a:
a6:86:41:38:79:d7:c6:6b:06:13:1c:38:98:49:98:
75:d8:09:cb:70:bc:aa:f2:10:90:84:dd:0a:d0:c6:
c0:37:d5:8a:e2:6c:75:ef:a6:fa:48:e7:13:c8:a1:
5f:e8:86:b6:95:ce:c9:f8:88:07:a2:5f:04:5e:2c:
06:54:68:11:a5:79:a1:40:fb:4e:f0:73:f9:ab:b1:
6b:f0:07:9c:fa:48:e5:59:be:c7:90:ef:7e:65:ec:
f3:a0:e6:4c:eb:90:e1:f2:67:5f:0e:44:38:1f:b2:
00:57:5d:8f:8b:c1:01:ed:55:06:c3:a9:b6:ab:22:
e2:5b:bc:e1:8f:a6:89:e2:cc:5e:d9:90:a5:58:d3:
d4:0b:41:0c:b6:d7:fb:3a:8f:d5:9b:3b:9f:82:ed:
73:00:91:11:4e:5a:be:0f:59:e3:df:3f:89:78:a5:
fc:df:0f:e6:a1:56:06:b8:09:d2:dc:d4:8c:31:86:
b2:cb:16:9f:d4:03:4a:16:e7:fc:df:14:f7:62:57:
81:68:1e:b8:81:e8:42:64:c6:23:82:17:41:8b:f8:
9f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:92:81:A9:45:DC:B7:5B:31:A3:67:75:7D:6E:F6:4C:CC:27:D3:6C
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:49:35:e5:2c:f0:7d:e0:7c:01:73:a9:12:7b:5d:ee:56:90:
29:9d:4d:14:7f:16:de:da:e9:9e:bd:da:cf:1f:59:fb:2f:d1:
39:a0:85:39:8d:85:07:8d:11:e4:32:52:37:b8:fa:91:9b:84:
7e:2b:6a:d7:57:a2:ca:b5:eb:78:16:00:5b:30:6c:1c:a6:8d:
c7:6c:fd:9c:72:06:5f:17:df:72:a5:8b:9b:d7:a2:51:28:47:
46:bd:98:ce:4c:36:30:52:ef:08:d2:26:f9:62:ad:07:ba:37:
03:e6:81:28:c5:6d:d9:08:01:87:98:5d:3e:79:c3:22:fc:15:
28:ce:1e:3a:f7:21:5f:fe:13:de:87:85:49:38:81:20:cf:32:
a2:4f:b2:38:2c:cf:db:20:a1:7d:f8:01:5b:09:08:f5:3e:c0:
69:28:63:64:cf:83:73:a7:34:76:cc:82:5e:89:bf:71:57:21:
ec:86:45:86:78:06:da:7e:3e:17:26:f0:63:5c:e3:63:84:52:
eb:79:d2:c5:58:ab:51:63:88:5d:8e:04:b4:3e:65:48:ee:7d:
46:de:b8:3f:2c:19:f7:3b:d7:b7:fc:59:2c:41:09:fb:ff:c6:
be:2d:cf:f5:01:32:39:8f:15:1a:e6:2a:f2:a1:1f:44:05:91:
1d:b6:e2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:08:00 2025 by rpki-client