
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft
File: qDsByW55TejPjxyfqGQhKW2occQ.mft (raw, json)
Hash identifier: rMNtm0gXd///wXiAWAdKI21WjueEzGSMpGSQgr/C68k=
Subject key identifier: 8F:9A:19:3C:20:18:0D:17:82:B7:C2:98:A7:76:EC:52:BC:F6:59:F4
Authority key identifier: A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4
Certificate issuer: /CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4
Certificate serial: 1CB6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft
Manifest number: 1C92
Signing time: Sun 02 Nov 2025 16:11:46 +0000
Manifest this update: Sun 02 Nov 2025 16:11:45 +0000
Manifest next update: Sun 09 Nov 2025 16:11:45 +0000
Files and hashes: 1: qDsByW55TejPjxyfqGQhKW2occQ.crl (hash: 7evV/PQNgLJ2zGEkDNrHJQOSC09B4jI7zvZ2kYAvY4E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl
rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 16:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7350 (0x1cb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B978, serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4
Validity
Not Before: Nov 2 16:11:45 2025 GMT
Not After : Nov 9 16:11:45 2025 GMT
Subject: CN=690782c2-863e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:41:be:cd:be:f8:f5:8f:c2:2c:b4:3d:a7:fc:
28:9f:25:7a:48:33:6d:ab:e9:fa:e8:59:ec:e0:86:
a9:90:db:89:23:fd:3d:08:0b:63:08:b8:ad:88:47:
40:6b:93:16:5a:83:16:c4:db:49:f8:15:40:9e:f9:
91:40:66:af:6e:17:b5:db:89:a2:1c:d5:d0:f1:1f:
ad:3a:20:3b:ca:1c:1f:50:46:f4:d2:91:e2:d2:0a:
b7:25:78:53:7b:28:a4:9d:c7:d8:0f:d3:95:41:35:
b8:9e:27:1f:a4:7d:ff:a4:9f:ba:15:b0:45:46:20:
1b:8d:06:05:0e:a0:55:2c:9c:75:83:38:12:38:10:
7f:ea:cf:27:12:1e:ff:e5:00:99:fb:b0:32:2d:af:
bd:f6:ad:a6:b5:fa:1f:9a:fc:bf:50:36:72:4d:1a:
bf:27:04:ba:0f:b7:8d:d2:8c:98:71:e0:04:6a:f9:
a0:aa:c2:ba:de:5f:67:7e:33:95:af:38:9d:64:25:
90:c0:01:21:2c:2c:7c:95:3a:c9:91:6e:ac:f9:89:
c1:1c:ae:3b:9d:02:a0:46:90:40:ac:19:d1:97:04:
c4:b1:bf:93:49:69:b3:08:bd:ed:1e:b8:be:69:0d:
49:02:15:12:03:2a:35:68:be:77:eb:7b:04:88:08:
b6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9A:19:3C:20:18:0D:17:82:B7:C2:98:A7:76:EC:52:BC:F6:59:F4
X509v3 Authority Key Identifier:
keyid:A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f5:17:89:6e:da:ee:62:59:93:bf:6e:10:d7:af:0e:2e:55:
c9:f0:77:f5:09:8b:a1:87:fd:c2:71:f0:ba:e7:67:4d:eb:3b:
d7:33:99:e8:50:64:10:5d:58:59:fd:8f:38:c4:83:05:77:5b:
de:5e:25:da:2a:a7:34:28:75:a1:c2:d4:57:61:5e:c7:16:bb:
18:9f:a8:94:87:61:13:53:78:9f:2e:05:5c:df:7c:1c:18:63:
b3:06:c5:83:ed:a7:53:71:a1:44:df:d7:50:db:29:d0:43:5f:
13:8a:6f:bd:0c:70:74:ef:46:c1:63:22:a0:49:9e:55:07:29:
d1:60:ff:23:42:8f:7f:00:9b:94:71:08:d4:69:3c:ec:88:e5:
64:47:41:b5:ed:11:3c:0f:7c:e7:2f:da:9e:ea:4a:66:c2:67:
ec:6d:a3:c5:37:b5:fb:6b:28:fe:db:76:b8:0a:25:f6:ec:ad:
63:3a:be:68:ce:87:25:f9:48:9d:c2:23:5b:30:af:5c:1a:38:
51:a0:7b:82:e8:c1:5c:23:69:94:40:f5:52:8b:95:1b:ea:eb:
25:3b:13:19:43:31:08:d2:25:18:e1:43:db:15:24:00:ee:e7:
0e:ec:84:31:ac:3e:76:16:59:28:8a:21:9a:06:92:37:f3:5c:
ba:4e:b9:5d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI5NzgxMTAvBgNVBAUTKEE4M0IwMUM5NkU3OTRERThDRjhGMUM5RkE4NjQyMTI5
NkRBODcxQzQwHhcNMjUxMTAyMTYxMTQ1WhcNMjUxMTA5MTYxMTQ1WjAYMRYwFAYD
VQQDEw02OTA3ODJjMi04NjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwEG+zb749Y/CLLQ9p/wonyV6SDNtq+n66Fns4IapkNuJI/09CAtjCLitiEdA
a5MWWoMWxNtJ+BVAnvmRQGavbhe124miHNXQ8R+tOiA7yhwfUEb00pHi0gq3JXhT
eyikncfYD9OVQTW4nicfpH3/pJ+6FbBFRiAbjQYFDqBVLJx1gzgSOBB/6s8nEh7/
5QCZ+7AyLa+99q2mtfofmvy/UDZyTRq/JwS6D7eN0oyYceAEavmgqsK63l9nfjOV
rzidZCWQwAEhLCx8lTrJkW6s+YnBHK47nQKgRpBArBnRlwTEsb+TSWmzCL3tHri+
aQ1JAhUSAyo1aL5363sEiAi2XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+aGTwg
GA0XgrfCmKd27FK89ln0MB8GA1UdIwQYMBaAFKg7AclueU3oz48cn6hkISltqHHE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjk3OC9GQzRBMkEyMEU5
MDExMUU2OEMyQ0QzMTFDNEY5QUUwMi9xRHNCeVc1NVRlalBqeHlmcUdRaEtXMm9j
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FEc0J5VzU1VGVqUGp4eWZxR1FoS1cyb2NjUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Qjk3OC9GQzRBMkEyMEU5MDExMUU2OEMyQ0QzMTFDNEY5QUUwMi9xRHNCeVc1NVRl
alBqeHlmcUdRaEtXMm9jY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA79ReJbtruYlmTv24Q168OLlXJ8Hf1CYuhh/3CcfC652dN6zvXM5no
UGQQXVhZ/Y84xIMFd1veXiXaKqc0KHWhwtRXYV7HFrsYn6iUh2ETU3ifLgVc33wc
GGOzBsWD7adTcaFE39dQ2ynQQ18Tim+9DHB070bBYyKgSZ5VBynRYP8jQo9/AJuU
cQjUaTzsiOVkR0G17RE8D3znL9qe6kpmwmfsbaPFN7X7ayj+23a4CiX27K1jOr5o
zocl+UidwiNbMK9cGjhRoHuC6MFcI2mUQPVSi5Ub6uslOxMZQzEI0iUY4UPbFSQA
7ucO7IQxrD52FlkoiiGaBpI381y6Trld
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:13:34 2025 by rpki-client