
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
File: QgxcRJT5_6t6haNwv8Pklcz6S6M.mft (raw, json)
Hash identifier: /ZaO/+pRZVU/JWrqNKerYvzdPn+lsbmrNGurs5rouSA=
Subject key identifier: E1:EE:77:87:D6:DA:13:34:FC:8B:64:6A:1B:72:C7:78:AA:6D:31:EB
Authority key identifier: 42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3
Certificate issuer: /CN=A9132F27/serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
Manifest number: 014B
Signing time: Wed 05 Nov 2025 04:24:45 +0000
Manifest this update: Wed 05 Nov 2025 04:24:45 +0000
Manifest next update: Wed 12 Nov 2025 04:24:45 +0000
Files and hashes: 1: QgxcRJT5_6t6haNwv8Pklcz6S6M.crl (hash: ozboSb5tS3/uzEmEM3/Jxx0Jr0+2PPUAYCBy+uEt2Cc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.crl
rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132F27, serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3
Validity
Not Before: Nov 5 04:24:45 2025 GMT
Not After : Nov 12 04:24:45 2025 GMT
Subject: CN=690ad18d-6dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dd:0c:55:23:72:c6:ad:7c:da:b7:af:96:00:
be:3a:b7:8b:bf:6d:a1:87:82:0b:34:35:06:99:db:
c6:e7:6a:4f:38:fc:b8:b3:83:7c:75:ed:f9:6e:db:
8d:3a:41:fe:a5:ff:66:c6:f7:e2:c8:77:9f:e7:fb:
72:20:93:8a:60:a1:09:41:18:cf:c7:00:c3:34:d8:
d4:c2:53:3a:85:8f:d6:c1:c1:da:6f:b2:cd:ed:c1:
e4:e2:30:39:6f:c4:4e:23:c5:de:b6:39:25:99:48:
e7:30:80:41:3e:d7:2c:03:5e:aa:c1:6e:01:56:c9:
16:6e:32:b2:82:47:21:98:92:0d:b8:41:60:f9:7c:
97:5e:b6:c8:d8:57:77:b4:7e:f0:eb:19:b9:59:ce:
82:e0:9f:16:28:46:3d:ca:bf:3d:66:6f:03:38:f0:
fa:54:08:2f:63:4f:f8:90:79:7b:a2:91:4e:c6:eb:
57:1e:d6:a5:2c:bc:e6:28:dc:6e:64:2b:b8:a5:b8:
5e:1e:2b:42:a7:22:b7:e1:cd:1f:6f:a8:70:72:7c:
83:26:05:db:1b:c5:b0:05:b1:80:06:3b:f2:0a:8a:
53:3d:c5:65:8a:f2:95:6d:84:8c:8c:e8:3a:af:3c:
91:8c:01:da:d4:74:63:f7:a1:92:a5:1e:db:a6:ec:
27:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EE:77:87:D6:DA:13:34:FC:8B:64:6A:1B:72:C7:78:AA:6D:31:EB
X509v3 Authority Key Identifier:
keyid:42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:a3:59:0a:d7:64:44:e2:81:80:ee:50:ef:5a:41:84:a6:a3:
22:54:bc:b7:a6:8e:66:f0:d7:cc:cc:39:78:79:1b:02:d0:b8:
67:c0:2e:b6:86:f5:67:ad:2f:ff:a7:78:d4:c8:b6:0f:39:d3:
ec:04:19:9c:a3:69:79:eb:fa:7f:3e:7c:75:7f:7e:13:c2:ba:
6e:89:4e:15:52:88:bc:f2:f8:e7:2f:e0:ff:fa:e5:aa:8d:02:
29:97:f0:30:77:e1:1b:b1:95:57:32:37:b6:d7:62:07:fe:45:
d1:c7:b2:f5:5a:ed:82:a7:30:c4:be:45:4d:c7:96:fc:14:58:
53:c9:69:32:e6:1d:6a:5a:5a:b9:15:17:53:65:cf:71:ef:68:
67:8f:94:2f:2e:05:26:52:9a:16:b2:25:d8:c5:3f:5a:33:cd:
23:56:66:39:9b:aa:fe:e8:3f:e2:a7:4c:c5:d1:ae:85:db:ca:
a8:4c:75:ec:22:88:e4:88:60:fd:0a:d5:31:b1:6c:b3:b5:80:
5b:75:5e:df:a3:ab:f4:a2:aa:3b:ae:f7:3b:fb:f4:35:59:33:
8b:36:e5:ff:d7:b1:5d:69:ca:67:43:a2:da:15:8e:02:6b:0a:
c2:73:c1:da:84:84:7d:fe:1c:dd:2e:cc:7a:ee:df:4a:d6:8f:
b3:c5:7f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:10:02 2025 by rpki-client