
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
File: q1NeEyiEvKNF969pE6sKOXdl56k.mft (raw, json)
Hash identifier: hEMQHvu/eMigyHr0xYMckic1iUXplycjohuBW8K0pNI=
Subject key identifier: 13:70:AD:91:F5:0D:5D:50:EF:30:1F:65:3F:0F:12:3F:19:0D:67:89
Authority key identifier: AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
Certificate issuer: /CN=A9115F15/serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Certificate serial: 0788
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
Manifest number: 0773
Signing time: Mon 27 Oct 2025 01:12:09 +0000
Manifest this update: Mon 27 Oct 2025 01:12:08 +0000
Manifest next update: Mon 03 Nov 2025 01:12:08 +0000
Files and hashes: 1: q1NeEyiEvKNF969pE6sKOXdl56k.crl (hash: 8ScIwjofLmO1j88E6w6ClGuNlBR+S01i9ybBn55rehI=)
2: 1F2DD6743A9611EB8CD4224BC4F9AE02.roa (hash: TlDhnldYuakAwxJhMCiNbVx6zqDuO+DOexXHVfVHcu4=)
3: 56D3C71687AB11F095613811C4F9AE02.roa (hash: aD2CLMizmkDNhBVFcvaNkcRkyod1i+1AjvAvs5tf+7Q=)
4: 574E0B4810E111F09B0FF441C4F9AE02.roa (hash: R7FrPdkL1ySrHNC5nrqzQKSqKbGci3RcVPsSdrI/vVo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 01:12:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1928 (0x788)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115F15, serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Validity
Not Before: Oct 27 01:12:08 2025 GMT
Not After : Nov 3 01:12:08 2025 GMT
Subject: CN=68fec6e9-8f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:53:b0:69:f7:b2:6c:91:b9:e8:61:cc:c4:b9:
7d:17:38:81:1e:65:01:4b:33:51:b1:68:fb:46:7a:
5c:07:49:28:38:72:bb:a7:b9:57:c2:00:9a:34:c8:
29:dc:88:51:00:cf:62:a1:70:a6:11:ff:aa:b6:b1:
a5:d0:f2:45:8e:65:2e:c5:a8:7a:a0:62:ed:08:d5:
74:19:01:17:f3:06:53:8f:c5:c7:36:a3:96:bb:49:
1b:d1:d5:9e:d8:57:fe:9c:4c:be:a5:86:de:1e:f5:
5d:aa:2d:4f:d9:31:6a:a0:b6:bd:2f:1e:1f:c6:64:
00:05:27:42:a6:0e:e5:a8:17:28:a1:9d:0f:3a:61:
eb:10:d0:f3:9e:ec:11:ce:7d:d0:9b:f2:06:03:56:
7c:bf:ae:eb:8d:79:38:ef:0e:0e:92:39:ea:a2:f6:
de:4c:4b:21:74:bc:9a:12:8c:2b:41:de:7d:7a:89:
8f:ef:19:ad:ee:68:52:37:1e:7c:1c:2b:49:0e:35:
72:0f:37:ec:b1:40:27:9e:af:ec:59:68:76:0a:79:
c0:43:ae:d3:22:a7:4c:5b:e9:ab:a9:45:4a:20:69:
bb:c6:82:8f:dc:1f:5b:7c:29:37:4a:65:cd:05:3a:
3e:e5:e3:7d:f8:13:37:8b:ef:4c:d5:9e:24:07:b4:
96:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:70:AD:91:F5:0D:5D:50:EF:30:1F:65:3F:0F:12:3F:19:0D:67:89
X509v3 Authority Key Identifier:
keyid:AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:7e:8b:8f:9b:97:a0:1c:d0:d8:4c:57:62:01:8f:7a:39:fb:
52:a2:dc:4f:d5:0b:ba:79:51:44:c3:93:f6:cf:ca:cc:8e:31:
cd:01:7d:4f:b8:8f:ea:51:4f:bf:70:b8:b2:4f:a8:fd:64:16:
af:03:73:1b:e0:01:21:1f:d9:ab:69:2c:7b:a2:e4:92:87:b2:
c1:16:d8:1d:bf:78:a7:af:48:0f:24:e7:62:04:ef:6d:29:8b:
02:1a:c1:01:a2:ee:09:53:ce:6c:5c:fb:b5:54:44:c2:be:3d:
90:e6:25:13:e6:06:b7:a0:f1:95:c7:e4:42:24:aa:a5:ef:56:
73:d1:ee:6b:62:5b:48:f5:0c:a2:45:00:a3:8e:1a:fb:de:11:
87:ed:a8:4e:db:c1:93:63:77:8f:bf:54:3f:14:e3:d1:e1:c5:
6c:2b:87:98:08:e4:bb:5b:0f:81:e9:16:0a:52:14:82:f6:7d:
75:37:49:de:1d:e6:54:a1:ee:77:cd:f1:40:ac:31:81:8d:ce:
13:96:56:97:33:36:47:da:67:bb:4d:76:a8:68:c6:48:ea:7f:
e1:11:13:c3:98:4e:22:1d:fe:87:78:91:58:94:e2:e0:68:9d:
d9:f8:51:ff:71:2d:8d:3a:b0:5e:9e:a7:61:ce:99:d1:29:db:
6b:df:4e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:50:11 2025 by rpki-client