
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
File: _1wQCXXjaGJFyt5XnFdDO7_faBk.mft (raw, json)
Hash identifier: vaZy24F4ivAYBuwldfWVCterE3uztE7BynnSn8tFlt8=
Subject key identifier: 17:0E:0F:6F:1D:78:F5:36:39:49:EA:52:AC:DF:7C:F9:D1:7D:97:6C
Authority key identifier: FF:5C:10:09:75:E3:68:62:45:CA:DE:57:9C:57:43:3B:BF:DF:68:19
Certificate issuer: /CN=A9144913/serialNumber=FF5C100975E3686245CADE579C57433BBFDF6819
Certificate serial: 016B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
Manifest number: 0167
Signing time: Wed 05 Nov 2025 04:04:58 +0000
Manifest this update: Wed 05 Nov 2025 04:04:57 +0000
Manifest next update: Wed 12 Nov 2025 04:04:57 +0000
Files and hashes: 1: _1wQCXXjaGJFyt5XnFdDO7_faBk.crl (hash: 9+mfxDeMk/3nMLN2J8eiFFx1Hc/7pPcPYBdwwnD01W0=)
2: 749936E290D511EE816E5C34C4F9AE02.roa (hash: LprFRa9DDPfl/3Qfhn6O1nEl8KrrEuPylvF2cGWjxe4=)
3: 740BB01A90D511EE816E5C34C4F9AE02.roa (hash: n+XeE9XCFt/q45U7WPv35bND6hFpIvrgPLf9ca2BNws=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.crl
rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:04:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 363 (0x16b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144913, serialNumber=FF5C100975E3686245CADE579C57433BBFDF6819
Validity
Not Before: Nov 5 04:04:57 2025 GMT
Not After : Nov 12 04:04:57 2025 GMT
Subject: CN=690accea-93af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:63:0d:61:9c:65:a9:6c:57:45:38:42:6f:11:
ba:ad:c2:56:75:6e:64:e8:38:19:c7:bc:ac:d0:50:
bd:e7:61:28:9d:67:0e:a5:df:00:f6:42:e0:35:e4:
f1:8f:47:13:15:0b:5f:c6:06:ba:2d:03:b9:52:99:
e1:59:b3:be:ad:91:3d:25:32:a8:eb:41:b2:73:ef:
07:29:85:df:23:eb:8c:37:34:97:eb:22:83:28:f5:
c6:42:48:5e:70:bb:7a:b5:0e:77:2b:5f:79:b8:68:
49:7a:db:32:c1:62:0f:11:05:57:d6:d1:c9:58:c3:
05:c2:93:52:ed:76:a8:96:15:35:d7:51:c5:18:be:
46:8e:65:bd:4d:15:92:23:e3:63:d9:39:ec:bf:ec:
4a:fb:62:22:16:c7:be:89:41:99:17:54:16:06:93:
6a:42:f9:8c:6b:3d:5c:cf:a0:ae:14:bc:2a:6b:83:
40:90:63:96:bb:96:ab:61:21:71:48:19:af:b7:92:
46:5a:80:87:4d:f8:a2:f1:2c:09:26:bb:eb:21:74:
31:5d:a8:52:52:c8:4d:85:e7:df:36:5e:e2:a1:a3:
93:5c:02:e9:e9:2f:da:06:b6:1d:db:86:ba:8e:27:
78:51:de:be:25:6c:a4:91:47:83:d3:0d:e0:d9:90:
a2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0E:0F:6F:1D:78:F5:36:39:49:EA:52:AC:DF:7C:F9:D1:7D:97:6C
X509v3 Authority Key Identifier:
keyid:FF:5C:10:09:75:E3:68:62:45:CA:DE:57:9C:57:43:3B:BF:DF:68:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:19:c8:1f:2d:3f:3b:80:82:f9:fa:54:ef:e5:4d:fe:90:fe:
42:6a:04:aa:cc:fe:7e:32:d8:29:90:b9:98:40:2f:c7:7a:40:
5a:1f:0d:73:1a:34:67:5e:12:a1:b9:33:96:71:9b:11:22:24:
f6:64:ed:c4:43:79:6c:be:9e:b9:02:38:42:40:08:56:3c:4e:
66:86:24:ca:f9:7b:92:c9:27:6b:d5:80:39:ec:1f:e4:d0:11:
0a:11:c6:c5:a9:83:97:a5:f1:f2:88:32:d6:c6:69:18:2e:9e:
0d:70:e1:d4:29:ad:57:12:13:62:3f:de:d0:cb:48:5a:42:e6:
5f:f0:87:9b:46:9d:d9:83:ce:2f:d6:02:d8:f2:de:f7:2b:aa:
2c:60:17:56:32:05:da:bf:d0:c8:d9:f2:33:28:56:ae:81:5d:
9e:d6:df:69:cf:68:b6:13:eb:fc:49:7a:fe:94:0e:16:bd:c9:
db:1a:61:69:90:e3:67:26:1b:99:f4:3f:47:41:8e:cb:ea:dd:
2b:29:d4:82:df:77:2f:50:7a:d0:b7:82:bc:7e:28:9e:44:12:
20:df:f7:aa:7b:d4:28:9a:98:7c:1b:5c:ea:d7:a1:9c:c9:78:
01:21:ce:0a:3b:a7:d2:db:5c:e4:e7:6e:1f:cf:2e:df:7c:92:
e3:cc:16:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:02:23 2025 by rpki-client