
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft
File: qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft (raw, json)
Hash identifier: 7OR+o65RFqBzrbmR1qX2BkZabk2ue+mAfYazdTwSOn8=
Subject key identifier: 7C:05:4C:B1:03:36:8B:C8:0A:6D:FE:16:F3:5D:C9:9C:09:37:09:6F
Authority key identifier: AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B
Certificate issuer: /CN=A913C04E/serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B
Certificate serial: 01A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft
Manifest number: 019C
Signing time: Mon 03 Nov 2025 03:26:45 +0000
Manifest this update: Mon 03 Nov 2025 03:26:44 +0000
Manifest next update: Mon 10 Nov 2025 03:26:44 +0000
Files and hashes: 1: qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl (hash: FFTGs9Fe8HDnkS9XtPeHdg5+ZgrEJiriQTlDrsg6ePE=)
2: 7236C4D8513211EEA8D81765C4F9AE02.roa (hash: u8AwSmxDFWZDKiV8J1m6ovC7b3ZHtGWT1cfjDOWs8Nc=)
3: F696778AFE6C11EF8DF5DD5FC4F9AE02.roa (hash: MhowPeZSiNZp59R7cxUY280rgW3KhDyuYTuF7r4VgLQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl
rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418 (0x1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C04E, serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B
Validity
Not Before: Nov 3 03:26:44 2025 GMT
Not After : Nov 10 03:26:44 2025 GMT
Subject: CN=690820f5-00b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:27:5b:02:80:5f:26:07:ea:46:b1:86:f8:
ef:10:13:60:95:e6:fc:fe:20:c7:b4:33:fe:97:83:
07:a6:40:f9:7c:87:7f:bf:17:60:ee:c5:ab:7b:2f:
f1:9b:64:21:d7:7b:f1:52:24:65:c1:c2:8b:1e:ff:
82:2d:7e:43:54:a9:97:2e:32:1b:ce:94:fb:73:53:
8c:ea:ba:77:77:a0:00:7c:f9:65:0c:5d:7f:d3:08:
09:8a:18:c9:7b:4c:a6:14:54:69:ac:20:10:bb:a9:
ca:11:76:d6:1b:06:d7:a6:0e:a9:6b:81:7d:31:dd:
87:11:c3:56:64:83:a6:ea:e5:58:6f:47:06:a0:03:
7f:f2:90:b8:43:8d:0d:00:a8:27:ca:d5:39:ac:b4:
13:8b:c9:06:d7:ae:37:a0:e2:25:f0:9c:e0:4d:8e:
ba:a2:6c:39:2a:b5:75:99:0c:87:95:c3:91:e2:94:
80:9e:76:70:bd:0a:07:ec:9f:b9:19:01:f2:46:4e:
57:b2:47:f6:10:2d:84:73:5a:77:6a:56:73:93:df:
7d:c9:66:29:27:28:56:92:a5:cd:fa:a7:3b:b2:f7:
7b:05:65:1b:9e:3d:f8:23:10:25:d9:43:7b:80:7a:
eb:73:93:a0:81:20:5c:14:59:aa:f6:93:47:bf:bc:
2b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:05:4C:B1:03:36:8B:C8:0A:6D:FE:16:F3:5D:C9:9C:09:37:09:6F
X509v3 Authority Key Identifier:
keyid:AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:9d:9f:2a:0c:56:40:c7:1d:99:08:4a:12:d4:e5:e3:76:9b:
92:87:86:c1:45:46:b0:3f:b5:80:28:11:2f:94:df:0e:9f:64:
da:0f:d6:d5:86:2d:e0:60:75:83:82:2d:81:89:9d:59:f1:1a:
1f:1b:43:4b:c5:5d:95:b9:4d:3b:27:6d:13:20:ef:2e:b0:36:
41:6b:ef:a8:3f:e1:6d:55:1a:84:90:61:be:41:a7:da:23:0a:
ac:6f:05:90:8d:d3:73:6e:33:97:4c:06:1f:0a:b8:48:fa:3a:
57:53:4e:6f:c4:a0:10:b8:2a:10:f3:90:d9:cc:84:20:b4:46:
5e:47:66:d7:2a:ec:bb:ab:3e:49:f2:27:5c:8f:10:00:ae:42:
3b:ad:26:0a:ae:ea:59:23:6c:08:cb:9c:c9:77:6a:c0:69:ab:
9e:0f:07:83:a1:5e:d7:04:4e:69:d3:eb:70:ef:67:2f:61:79:
bb:c9:96:61:97:2c:12:df:07:95:f3:75:f7:10:fa:52:6e:e2:
c9:27:dc:2b:6a:92:f8:bc:c1:16:76:4b:e6:21:c6:1d:88:4b:
27:c4:e6:c7:73:c7:ed:31:27:0b:10:81:3d:32:c2:0b:d6:37:
15:13:56:5c:2f:6f:32:cb:08:60:50:bb:7b:ca:89:ae:38:41:
00:a8:4a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:30 2025 by rpki-client