
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
File: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft (raw, json)
Hash identifier: IFmVdRb17iBtHglf75GIODlDua7r+uNykXWbDrZqUIA=
Subject key identifier: 5F:1E:8E:7A:85:E6:C2:72:67:70:CA:90:40:B2:EE:5F:4E:CA:9B:74
Authority key identifier: A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA
Certificate issuer: /CN=A911FABC/serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA
Certificate serial: 0201
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
Manifest number: 01FB
Signing time: Mon 03 Nov 2025 02:32:27 +0000
Manifest this update: Mon 03 Nov 2025 02:32:27 +0000
Manifest next update: Mon 10 Nov 2025 02:32:27 +0000
Files and hashes: 1: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl (hash: KoOhKdg7ofcN90PsXhhkpPoLHsAs/EiDtpBkR1uD7qY=)
2: 9BF55430C4D611EDA65E8C87C4F9AE02.roa (hash: yQWifcUacebm0QWmZ7UB602HfF6Yw1unRDBx3kif0PM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl
rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 02:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FABC, serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA
Validity
Not Before: Nov 3 02:32:27 2025 GMT
Not After : Nov 10 02:32:27 2025 GMT
Subject: CN=6908143b-217f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:cf:a8:f9:c2:70:6f:1a:0a:84:72:8f:5c:
f6:af:0a:ef:e4:0d:3f:46:55:90:2d:ba:2e:ee:28:
6b:45:b1:72:a9:0d:66:93:6c:1a:b7:56:b6:e4:0a:
0e:5d:ed:90:a4:5e:2c:99:8a:56:70:99:53:e0:0f:
76:dd:8a:bc:ea:61:b6:dc:0a:fb:b9:a3:2a:dd:b8:
f1:ab:ea:b8:bc:89:d2:fc:df:b4:06:75:9e:88:ef:
46:07:83:26:7b:ff:c8:96:d5:a3:ef:67:1d:b4:e9:
25:b4:14:6b:67:1e:da:12:5b:17:fe:9c:78:f4:02:
2f:26:0d:5f:26:bf:ee:ca:08:23:6f:cd:a0:ef:b5:
bb:52:52:17:b1:2d:ec:84:8f:c3:0f:e8:17:7a:49:
cd:c0:b0:9b:07:73:e8:de:12:af:7d:68:46:ea:e3:
dd:40:83:04:26:39:6f:e2:87:ba:02:41:99:18:ec:
16:b5:05:12:5f:53:6a:91:4a:b7:ea:82:55:fd:0d:
59:ef:4a:8e:f6:7f:ac:83:3d:3e:78:c6:8f:28:35:
bb:63:29:cc:3d:a4:97:e8:94:31:34:1a:c8:81:c2:
58:9d:75:ba:0b:e7:1c:b3:74:6d:7b:f7:6d:d5:a9:
d0:fb:b7:18:a6:f7:bd:7f:71:68:b5:95:12:80:a1:
fc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1E:8E:7A:85:E6:C2:72:67:70:CA:90:40:B2:EE:5F:4E:CA:9B:74
X509v3 Authority Key Identifier:
keyid:A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ac:76:54:b4:6d:14:46:f5:26:69:15:a7:9e:25:f0:3f:b9:
d9:64:a1:5c:56:18:3f:1d:3c:1f:bb:2b:91:7d:9e:ed:76:7d:
fd:e9:77:9e:ce:23:07:90:49:26:f9:46:02:f2:43:11:4a:35:
03:19:cc:4a:3f:79:74:58:51:56:6c:4e:b5:db:e0:e0:bf:17:
40:e1:8a:fa:c4:66:4a:e7:ce:29:8c:e0:d0:21:34:34:d8:e6:
d2:77:94:8d:e0:1b:19:09:52:71:b8:1a:91:9f:29:23:8a:de:
79:af:f8:d2:3c:19:3d:38:14:c8:cc:54:a2:44:32:7a:04:c0:
07:7f:85:48:c5:20:9e:95:88:a8:5d:fe:ad:1c:57:fa:1a:d6:
87:f4:c0:9b:aa:4d:b4:e5:06:25:e4:2d:13:b3:4d:ee:17:19:
37:f3:40:56:04:01:80:c4:2a:17:98:35:ef:d6:d5:cf:05:28:
13:04:76:ed:6c:e6:e4:f9:f0:3f:55:db:a7:e8:90:e9:86:8d:
85:c7:c4:b3:10:a3:54:ef:9c:c3:ae:a0:2d:41:35:75:da:cb:
d9:7b:f5:1b:33:e1:0e:58:56:5a:d2:81:86:4a:d0:e8:5d:4e:
79:9f:37:98:88:4e:e4:cf:ec:48:30:72:80:1d:98:85:49:7c:
47:4d:50:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:58:07 2025 by rpki-client