
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
File: qDxuziIztsuMwOthPwqVLIM8A6E.mft (raw, json)
Hash identifier: k3gZ7UNDhODvQQX9YSpfvqqjtI0+3M/XqondLWLrBJs=
Subject key identifier: D5:E7:FB:FF:EE:66:3D:61:80:37:B6:39:46:24:5A:A1:3B:0C:97:28
Authority key identifier: A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1
Certificate issuer: /CN=A9155447/serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1
Certificate serial: 3261
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
Manifest number: 3258
Signing time: Sun 02 Nov 2025 15:25:04 +0000
Manifest this update: Sun 02 Nov 2025 15:25:04 +0000
Manifest next update: Sun 09 Nov 2025 15:25:04 +0000
Files and hashes: 1: qDxuziIztsuMwOthPwqVLIM8A6E.crl (hash: NysFE4wUj0ptEdyFRey/ka+5IGQnFaLAzjkE5J8uAq8=)
2: 3A6CB168758811EA93AADD3FC4F9AE02.roa (hash: TFCn636yLuadqVbcXLAhLUEzL1Zyn0W3zvCwCZ8vPXY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl
rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12897 (0x3261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155447, serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1
Validity
Not Before: Nov 2 15:25:04 2025 GMT
Not After : Nov 9 15:25:04 2025 GMT
Subject: CN=690777d0-b57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b5:2c:38:99:1f:d9:ee:a9:78:e4:15:35:0d:
f6:66:4e:12:ae:e2:8b:49:80:08:80:43:e8:da:a4:
78:a3:b2:54:8e:b4:1d:e8:7d:63:20:59:fb:9d:81:
77:02:83:6c:a9:ea:5d:b4:ca:d0:5a:ab:e3:a0:3a:
0f:58:49:b1:a2:7f:20:41:fa:13:6b:fc:95:09:52:
0f:88:5a:a1:76:bf:cd:ea:05:9e:ca:4c:38:64:18:
46:d7:d0:5f:69:60:83:6a:7b:fe:1c:c7:c7:89:46:
e0:1f:0e:a2:36:ac:63:d5:db:0a:52:88:b6:ac:b6:
a4:d1:7b:a0:af:2b:aa:e5:d4:2f:a0:0c:a9:7b:ad:
05:ca:0d:b8:3d:c8:2c:02:96:6f:70:06:51:41:0c:
31:2b:56:61:62:8a:99:ce:a9:bd:49:c7:39:e4:65:
ae:31:89:d7:92:04:76:b4:63:be:64:83:93:cd:8c:
a2:a1:bb:ab:45:04:51:a2:de:b2:a7:5c:e7:a6:a2:
e6:5f:d8:21:96:35:2f:70:cb:1f:33:29:80:ff:a9:
e8:39:c1:05:da:0f:54:f4:8b:7b:d1:a9:ac:f4:65:
ee:8f:b5:22:57:12:ab:fe:ca:f0:d9:ee:d6:83:af:
b6:a7:2d:3a:be:4d:20:36:69:04:99:d6:f4:ad:e5:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E7:FB:FF:EE:66:3D:61:80:37:B6:39:46:24:5A:A1:3B:0C:97:28
X509v3 Authority Key Identifier:
keyid:A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:34:a4:81:d1:ad:31:a8:60:77:e4:ce:24:a6:05:02:c1:df:
67:a2:4c:a1:2c:62:45:2d:fd:3d:c7:e6:15:ef:1f:ae:81:a2:
e5:41:46:7e:ce:5c:05:6b:93:39:09:80:ad:bb:c4:9d:49:1c:
2b:85:e6:c6:a7:6a:80:67:68:8c:1c:ea:b9:d1:15:5e:cf:3e:
f2:cc:ea:26:24:32:85:a0:13:fc:e7:0d:03:2b:74:18:4e:6f:
4b:6c:26:db:af:0b:22:b3:30:56:22:14:69:3d:7e:95:93:a5:
80:da:ae:53:ae:1e:2f:05:36:9b:24:fd:ec:8a:9e:06:14:a7:
7d:7d:fd:25:ee:cc:9c:a7:fb:d7:fa:e2:61:75:3a:19:1e:2a:
04:d5:21:e6:7a:d8:9d:e6:a1:42:fa:8b:1a:7b:6b:db:ea:6b:
bb:e7:e4:93:5f:ab:8e:d6:62:9b:89:5b:55:21:7f:a7:89:f3:
95:ae:75:96:1f:64:f4:c5:2d:7c:1c:7d:1e:93:f3:bf:7c:bf:
8f:73:40:a0:00:21:54:7e:61:2d:b3:7d:c5:3a:0b:1c:f5:b4:
8b:3f:45:fb:8e:84:27:3b:4f:52:5c:12:14:70:7a:e2:ea:ef:
97:10:42:ed:7c:f3:89:4c:8d:4d:90:39:97:6a:e4:0a:53:58:
61:88:7b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:19:29 2025 by rpki-client