
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft
File: RQlomWbTeSdWnPLLtE_-k6yo5oE.mft (raw, json)
Hash identifier: AM6YSvWng0X3fuRNdw3rNg1usegMlz3UQxlOgaBPzgw=
Subject key identifier: 91:D0:F2:62:D6:60:54:E2:A2:A4:15:FF:AB:9A:81:70:CD:14:2B:3B
Authority key identifier: 45:09:68:99:66:D3:79:27:56:9C:F2:CB:B4:4F:FE:93:AC:A8:E6:81
Certificate issuer: /CN=A9147609/serialNumber=4509689966D37927569CF2CBB44FFE93ACA8E681
Certificate serial: 0838
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RQlomWbTeSdWnPLLtE_-k6yo5oE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft
Manifest number: 1E9B
Signing time: Sun 02 Nov 2025 16:46:13 +0000
Manifest this update: Sun 02 Nov 2025 16:46:13 +0000
Manifest next update: Sun 09 Nov 2025 16:46:13 +0000
Files and hashes: 1: RQlomWbTeSdWnPLLtE_-k6yo5oE.crl (hash: O54Dr8hZY9dzjzPmq/Kp1loHidDiTi5eCXIvGPQAwiE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.crl
rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RQlomWbTeSdWnPLLtE_-k6yo5oE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 16:46:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2104 (0x838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147609, serialNumber=4509689966D37927569CF2CBB44FFE93ACA8E681
Validity
Not Before: Nov 2 16:46:13 2025 GMT
Not After : Nov 9 16:46:13 2025 GMT
Subject: CN=69078ad5-240b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ec:d4:3b:08:8e:78:56:a0:f8:4c:c8:10:d3:
4f:ac:8d:43:ad:80:b9:6f:bf:7d:b5:99:5b:0f:df:
7d:41:70:73:d5:57:97:98:e6:46:54:26:af:1c:1f:
e4:00:c6:19:a2:6f:48:0f:a0:66:d4:66:bb:d9:4b:
9a:38:bb:ab:63:c6:66:83:bc:c3:b9:a8:4c:d5:c1:
1f:d4:9a:84:f2:e1:42:b1:be:81:81:25:6c:c7:8e:
cc:6b:f0:55:6a:75:55:26:d3:5c:4e:cc:34:fa:0c:
0e:54:19:10:74:77:be:e2:00:d0:ce:42:c1:a7:0d:
7d:67:08:23:9c:1c:ef:a7:34:8c:6d:eb:71:81:91:
24:3a:6d:84:d4:ec:0d:66:39:c7:9d:50:17:04:ad:
00:f9:68:9c:d9:0a:30:e0:d5:d5:f6:df:49:a7:52:
02:05:11:bf:a6:a4:6e:1c:6a:62:5b:68:b6:6a:fc:
e3:df:f2:b2:5f:4f:b4:68:a2:95:ac:8e:e2:47:aa:
8e:b0:4d:5d:f5:4d:c6:af:50:3a:50:22:0a:09:ad:
e7:97:e3:02:f7:66:c0:78:66:7e:74:bf:bc:94:9c:
a7:f6:be:ea:75:89:96:33:3c:6a:07:a6:f9:00:19:
43:40:e0:a6:73:40:be:65:62:f6:b1:81:2d:70:26:
39:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D0:F2:62:D6:60:54:E2:A2:A4:15:FF:AB:9A:81:70:CD:14:2B:3B
X509v3 Authority Key Identifier:
keyid:45:09:68:99:66:D3:79:27:56:9C:F2:CB:B4:4F:FE:93:AC:A8:E6:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RQlomWbTeSdWnPLLtE_-k6yo5oE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c5:91:90:76:8e:fe:4a:de:5b:4a:9a:93:ef:c1:88:01:eb:
0c:53:57:1a:2d:15:87:b2:15:98:4c:23:b6:71:06:d0:4e:01:
94:4e:0b:db:b7:0b:f9:15:70:3f:6b:3a:93:87:60:a8:d4:65:
c0:49:80:6a:81:88:59:26:08:0a:94:0f:ae:66:7a:f6:ff:1c:
40:fa:98:17:42:73:de:f3:4e:bc:61:b7:df:75:13:54:05:92:
1f:84:a6:74:84:3b:a6:ca:95:36:e0:4b:6e:2f:d7:10:69:01:
95:33:71:09:2b:1f:f0:a7:b0:4c:19:58:34:85:55:5c:ba:2a:
fa:ec:2f:a6:be:3d:c3:a8:60:d0:94:04:68:1f:a9:e9:4f:f0:
54:cf:ab:be:3d:3a:37:59:cb:88:21:0e:89:45:8a:72:8c:9a:
58:b3:56:a9:3c:e3:3a:fb:13:e2:2d:6d:a1:2e:da:03:da:36:
05:a5:78:84:bf:17:64:49:9f:b2:bb:f6:00:00:a4:c5:58:fb:
2d:63:70:14:0f:a7:bf:31:bd:81:6a:44:e9:b5:56:55:05:a1:
84:fe:d0:d1:40:7c:3d:cd:f2:23:97:5f:2c:91:59:3a:7a:94:
d2:7f:9a:3c:d5:02:9f:81:26:e4:57:52:5c:3a:66:14:12:cb:
ed:be:d1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:24 2025 by rpki-client