
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft
File: Mqch0wW1KTmxanDu43n7nIIQmhI.mft (raw, json)
Hash identifier: XkPi59FfF7SVamKoULpl26oikCH16vCB76rDX3kDr4w=
Subject key identifier: 9D:82:78:E7:3C:3F:C8:D8:A0:A9:92:EE:88:A7:BB:03:78:38:3C:DD
Authority key identifier: 32:A7:21:D3:05:B5:29:39:B1:6A:70:EE:E3:79:FB:9C:82:10:9A:12
Certificate issuer: /CN=A912D71D/serialNumber=32A721D305B52939B16A70EEE379FB9C82109A12
Certificate serial: 55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mqch0wW1KTmxanDu43n7nIIQmhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft
Manifest number: 55
Signing time: Mon 03 Nov 2025 07:12:13 +0000
Manifest this update: Mon 03 Nov 2025 07:12:13 +0000
Manifest next update: Mon 10 Nov 2025 07:12:13 +0000
Files and hashes: 1: Mqch0wW1KTmxanDu43n7nIIQmhI.crl (hash: HFfGhifEf1g4Tt+asCslVY+jkFQZcKkV6BCJzevmLus=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.crl
rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mqch0wW1KTmxanDu43n7nIIQmhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:12:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D71D, serialNumber=32A721D305B52939B16A70EEE379FB9C82109A12
Validity
Not Before: Nov 3 07:12:13 2025 GMT
Not After : Nov 10 07:12:13 2025 GMT
Subject: CN=690855cd-b735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:d7:bb:aa:71:d3:4c:5b:55:17:f6:a7:52:
5e:63:c2:1b:0d:da:9d:f6:52:7c:2a:02:79:e4:e0:
5c:41:17:2f:5a:7a:c8:ad:3a:7b:03:1b:0d:59:67:
55:dc:dd:cb:56:0c:59:79:20:f9:87:a8:cf:01:44:
8f:91:c8:ca:00:4f:da:56:0b:7b:58:0f:84:3c:4c:
18:97:f0:c7:c2:cf:b4:57:17:9f:16:6a:88:35:dd:
8a:c2:82:9d:cf:48:5d:aa:e3:fc:9f:f1:ac:39:78:
48:91:36:f1:db:c9:b2:c1:39:45:33:d9:6b:33:26:
e6:cd:8b:67:01:24:53:16:1e:d3:f2:0c:b0:c1:0f:
35:66:ef:51:bd:64:0d:41:04:36:aa:ea:d8:c8:ee:
dc:fe:b3:22:dd:5e:7a:cd:0c:48:9f:93:bb:7d:7b:
c7:18:0a:28:ef:fe:40:c4:e2:cd:81:21:17:e0:5f:
a4:d6:34:0d:eb:3e:a1:ae:39:e8:4a:d2:89:bc:58:
a7:64:a3:b9:e5:17:6d:c1:8c:9e:fa:7e:9c:9d:74:
57:f8:42:dd:40:cb:2a:3d:42:ca:c5:af:2f:8d:5c:
ec:0a:f4:23:7b:00:1b:bd:8b:01:58:4c:d3:8d:9b:
d6:3b:7a:c2:3a:da:39:d6:ea:25:35:ec:d7:fd:c8:
2f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:82:78:E7:3C:3F:C8:D8:A0:A9:92:EE:88:A7:BB:03:78:38:3C:DD
X509v3 Authority Key Identifier:
keyid:32:A7:21:D3:05:B5:29:39:B1:6A:70:EE:E3:79:FB:9C:82:10:9A:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mqch0wW1KTmxanDu43n7nIIQmhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:44:29:b6:27:ca:dc:97:23:3c:e4:ed:35:05:7f:fc:c6:e9:
ea:ea:20:26:02:b0:bc:06:4b:df:00:09:60:52:fd:cb:3c:79:
e9:23:f9:92:b3:ae:de:84:13:1b:62:3d:0c:0c:3f:f8:08:1a:
0b:66:6e:45:f2:0f:86:55:02:d8:f3:ec:d1:94:1b:a2:34:7e:
0c:bb:c5:4f:92:66:67:11:94:ed:92:82:ef:2a:17:11:51:d7:
f7:67:bd:63:8c:94:9a:a6:6d:ef:d5:f7:dc:63:83:10:27:b3:
75:cf:69:61:6f:86:a2:c6:d8:32:cd:cd:0e:0c:03:76:fd:f5:
9c:b0:d8:50:28:d0:6a:9f:a4:6a:44:11:59:82:ed:b6:3f:e1:
80:ff:63:4f:ad:26:42:7d:c0:20:48:4b:76:62:a4:66:d4:4d:
74:32:e2:95:97:ba:fa:fe:18:6f:6b:95:5d:61:c3:8e:65:8f:
8e:4d:eb:eb:e8:ab:3c:4b:63:e8:ff:1c:20:77:c3:be:28:58:
49:f2:62:96:41:af:f1:51:ff:9f:2c:27:fc:6e:bc:6e:26:7a:
cd:39:4a:c5:3e:99:30:de:02:5d:fb:1f:3b:be:d9:1a:64:c6:
fc:69:b9:06:4b:5d:f1:89:a9:f3:0b:7d:ed:81:52:06:b0:91:
25:54:2f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:11:05 2025 by rpki-client