
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
File: QRBhvlydJMUpvH1WmJtK0sE40SM.mft (raw, json)
Hash identifier: 49SXmxwn13sI7FZYDjxCXAAlkub/7lHymaW3EujAVyQ=
Subject key identifier: 39:31:46:6C:87:3C:80:AB:77:F4:A7:04:5C:B9:A6:2A:55:C8:F0:F1
Authority key identifier: 41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23
Certificate issuer: /CN=A9161A95/serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
Manifest number: 5B
Signing time: Mon 03 Nov 2025 07:07:17 +0000
Manifest this update: Mon 03 Nov 2025 07:07:17 +0000
Manifest next update: Mon 10 Nov 2025 07:07:17 +0000
Files and hashes: 1: QRBhvlydJMUpvH1WmJtK0sE40SM.crl (hash: R/qiIkkyl+tkaUTqG+TCALGRzQa+foyMw4/drowyVvo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl
rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161A95, serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123
Validity
Not Before: Nov 3 07:07:17 2025 GMT
Not After : Nov 10 07:07:17 2025 GMT
Subject: CN=690854a5-5e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:16:83:04:bc:7d:5b:f8:46:02:7f:7b:75:49:
c6:75:2a:b3:c0:b9:86:08:59:23:73:39:ea:77:73:
62:89:db:c4:24:57:64:ee:ec:e4:2e:44:53:b7:93:
9c:f0:d5:df:c8:72:a9:b2:a4:88:d2:3a:93:60:c7:
9d:a1:db:1d:ab:0b:88:e6:9e:73:c1:7b:ca:cd:fc:
c7:b0:2d:a3:92:6c:c1:7b:44:33:7c:8f:2e:e0:14:
94:18:a9:2c:ed:bc:2e:f3:f2:0a:f1:c0:83:7b:b4:
2c:a3:0c:e6:9d:d5:c1:4a:3a:f4:cf:e4:79:48:f5:
0d:60:49:e0:15:f9:e8:ce:1a:56:2d:e8:d7:0c:6a:
1b:d7:5e:ab:de:48:e0:e5:f6:f7:dc:88:66:bb:c7:
cb:ec:01:ca:32:f5:64:3c:3e:6b:12:14:a7:82:15:
11:69:5d:1f:35:0f:b3:9c:1c:56:5a:20:40:0b:e7:
9f:2e:96:a6:05:11:c8:f7:e2:7a:fb:a7:b1:69:9f:
e0:ad:de:7c:f0:c6:e0:3f:38:a5:d8:10:69:fb:34:
f4:fe:58:16:9c:2a:8d:02:44:25:da:4c:e3:ac:7a:
18:fe:f6:e5:3f:a6:fc:ea:67:57:b5:4c:06:ab:af:
32:f7:d8:99:e2:b9:54:8e:f1:7f:04:8a:89:15:98:
f8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:31:46:6C:87:3C:80:AB:77:F4:A7:04:5C:B9:A6:2A:55:C8:F0:F1
X509v3 Authority Key Identifier:
keyid:41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:56:e3:d5:f1:a6:08:ed:26:40:9e:61:a8:70:ec:82:51:3b:
cb:84:47:53:0d:5d:0e:c3:26:2f:b5:aa:52:9c:df:fd:e0:ee:
08:71:d8:4c:9a:f1:44:73:c9:48:2d:be:83:3b:2e:55:1c:16:
0e:b5:22:5b:7b:a4:e7:26:04:cb:f3:37:93:4e:25:41:bf:7b:
0f:af:d3:1b:8a:39:da:12:29:59:ac:3b:71:c6:9d:42:4b:33:
20:63:35:23:fd:7e:46:6a:15:39:5b:29:78:d8:9c:b2:e3:fc:
68:d8:e3:de:8a:75:86:4b:c6:ce:10:8a:af:6f:66:08:43:27:
3d:00:cf:10:67:ad:48:e2:a5:0c:85:af:8f:41:4a:91:05:4f:
37:ee:81:05:af:2b:1d:15:e2:da:22:70:da:80:4a:00:d3:09:
21:9a:7e:72:15:a8:66:27:cf:b8:e5:04:01:2c:cc:43:1e:e4:
90:8c:26:c5:bb:4b:e3:20:06:ba:e8:b3:7d:6c:10:0e:b2:18:
97:6b:52:97:4e:9f:f3:fa:3a:45:6b:08:38:2b:5c:e0:d0:b0:
8a:8f:7d:12:29:76:e2:ba:02:07:8f:62:a9:d1:1e:04:6c:11:
45:3f:8f:a1:c1:cd:e4:c0:4e:9f:f6:5c:83:85:43:da:00:8a:
e9:4d:67:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:33 2025 by rpki-client