
$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft
File: 0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft (raw, json)
Hash identifier: Wu4lCw+yDrWyCC2Vaw86igh4mPLGwGMvxIfYtRGHb3U=
Subject key identifier: 79:60:3B:D2:2A:A0:29:AB:19:C0:9E:39:5A:91:75:7E:1A:71:6B:1B
Authority key identifier: D1:0B:AF:7A:A8:DB:73:4B:95:2D:03:60:87:78:3C:64:37:84:3C:8F
Certificate issuer: /CN=A91139AB/serialNumber=D10BAF7AA8DB734B952D036087783C6437843C8F
Certificate serial: 018C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Quveqjbc0uVLQNgh3g8ZDeEPI8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft
Manifest number: 092C
Signing time: Tue 04 Nov 2025 21:30:54 +0000
Manifest this update: Tue 04 Nov 2025 21:30:54 +0000
Manifest next update: Tue 11 Nov 2025 21:30:54 +0000
Files and hashes: 1: 0Quveqjbc0uVLQNgh3g8ZDeEPI8.crl (hash: dg7glrZUo911lS+dwEkECo0tMP23P8zj/KTnDUsl//M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.crl
rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Quveqjbc0uVLQNgh3g8ZDeEPI8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396 (0x18c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91139AB, serialNumber=D10BAF7AA8DB734B952D036087783C6437843C8F
Validity
Not Before: Nov 4 21:30:54 2025 GMT
Not After : Nov 11 21:30:54 2025 GMT
Subject: CN=690a708e-7177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:f9:2d:83:1a:fb:70:6e:55:d6:5f:ff:1c:
a8:51:46:44:11:50:dd:b0:9b:d5:f9:ee:94:ca:eb:
2b:1b:46:74:47:bf:f6:f7:f0:73:ee:88:b0:27:d9:
07:fa:1e:c3:76:f9:44:bb:a3:09:10:49:ea:8d:7a:
68:d1:ab:47:77:f7:dc:2c:c8:24:13:9b:59:da:0c:
b1:2c:21:96:3e:fb:b1:a1:ba:41:15:7d:3c:1f:2c:
07:18:cb:03:31:24:51:f9:45:3f:c5:f4:f6:df:e0:
bf:30:93:a1:f5:04:d0:01:aa:cc:be:a0:02:c6:c5:
d0:48:1a:a6:70:4a:0b:52:ee:84:38:62:70:88:4b:
52:84:33:48:6c:fa:81:c3:17:70:44:d7:2e:29:47:
af:0c:3b:81:b9:03:34:a4:d0:c0:91:06:f9:67:15:
8e:b7:57:55:5c:aa:21:94:09:ca:83:b2:af:9a:ce:
3e:9a:0d:3f:23:0c:76:d3:47:19:ab:d3:be:d0:1a:
3d:4b:93:f9:6b:20:df:5d:a5:ad:59:4a:ea:2f:69:
66:db:b6:72:45:87:24:6e:e6:a7:8e:00:7e:2d:1a:
a1:a4:cc:b4:9c:12:b4:33:10:e0:21:fa:0b:3c:6c:
a9:54:73:80:24:91:27:ff:05:3f:b1:ba:dc:07:9e:
28:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:60:3B:D2:2A:A0:29:AB:19:C0:9E:39:5A:91:75:7E:1A:71:6B:1B
X509v3 Authority Key Identifier:
keyid:D1:0B:AF:7A:A8:DB:73:4B:95:2D:03:60:87:78:3C:64:37:84:3C:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Quveqjbc0uVLQNgh3g8ZDeEPI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:b4:51:9e:8c:21:c8:39:70:00:53:bc:07:71:6b:8e:6b:f9:
16:4b:a9:c5:6f:fb:9c:38:7e:a5:7d:6d:5d:02:82:39:5b:91:
ed:45:7c:a2:de:f6:e4:1a:c5:54:ce:43:0a:41:2a:50:ab:c0:
4c:0e:a6:a3:57:b9:e7:6e:98:bf:1a:95:5e:a2:22:c2:81:ea:
83:fe:a4:4a:d7:ac:54:f6:58:94:3f:e1:86:b3:69:53:c0:5a:
c6:af:52:5c:d2:7b:10:21:7c:5b:88:48:79:dc:f2:7c:4c:95:
85:58:3d:4c:cd:e0:cb:13:88:a9:52:07:6f:78:4b:32:5d:18:
40:79:3a:ee:aa:17:1e:fe:1c:e1:7f:0e:57:d7:e0:7e:82:a8:
97:22:3c:03:0c:bb:c3:65:ad:c2:f8:ef:98:2d:dd:ce:d6:e0:
c5:83:53:d5:93:36:b5:9e:5f:d6:8f:f0:a8:a5:07:46:3c:6b:
e9:ce:1a:5c:65:1e:07:18:f8:6a:5d:4a:3e:5c:e6:aa:6a:ac:
d4:11:04:2d:7e:53:9e:ec:69:27:36:49:f3:73:72:74:f6:66:
f0:20:76:af:12:1b:3d:d0:60:1e:ea:d9:a3:80:ef:b9:63:76:
dc:d8:38:f5:68:a7:6b:16:b1:8a:86:cb:ab:34:73:c8:b0:d5:
ec:41:25:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:25:21 2025 by rpki-client