
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.mft
File: SvQPQ3ii6YvubHhNi9uegu22bJ8.mft (raw, json)
Hash identifier: CEVsCXihhpA81XNEu4wtWR0475d3iFOibP3TB6u/KvQ=
Subject key identifier: 56:BC:D4:AB:0B:AC:70:A8:4A:04:98:AC:C6:2C:10:D4:E1:E3:21:B8
Authority key identifier: 4A:F4:0F:43:78:A2:E9:8B:EE:6C:78:4D:8B:DB:9E:82:ED:B6:6C:9F
Certificate issuer: /CN=A9162439/serialNumber=4AF40F4378A2E98BEE6C784D8BDB9E82EDB66C9F
Certificate serial: 080A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SvQPQ3ii6YvubHhNi9uegu22bJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.mft
Manifest number: 07FF
Signing time: Sun 02 Nov 2025 20:58:52 +0000
Manifest this update: Sun 02 Nov 2025 20:58:52 +0000
Manifest next update: Sun 09 Nov 2025 20:58:52 +0000
Files and hashes: 1: SvQPQ3ii6YvubHhNi9uegu22bJ8.crl (hash: 3Mfbi6e8HT9y0G6Bc0SinCGUGkvS1eNTCT/gcnT67mw=)
2: 95CAE87C6BF311EDA6D4C167C4F9AE02.roa (hash: wCm3as74zJ4XjRubAtlS5EHH43MNK7h4EVOT5pHG310=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.crl
rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SvQPQ3ii6YvubHhNi9uegu22bJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 20:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2058 (0x80a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162439, serialNumber=4AF40F4378A2E98BEE6C784D8BDB9E82EDB66C9F
Validity
Not Before: Nov 2 20:58:52 2025 GMT
Not After : Nov 9 20:58:52 2025 GMT
Subject: CN=6907c60c-dc6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:0f:07:a9:31:d3:62:37:5b:76:a7:0d:b0:
c0:ec:5d:24:77:74:8b:d1:b8:5b:f2:b4:1f:b2:c7:
80:33:1d:5f:b5:22:45:bd:74:4a:bb:45:26:32:f0:
a1:4f:c0:cb:7f:be:ff:b9:25:86:51:5c:c4:a1:35:
0b:3c:e8:b4:66:df:2a:b4:c1:bf:5a:bb:12:9d:50:
3d:60:e0:6c:a7:7e:44:08:2a:7c:fd:b5:61:9b:ba:
2a:ef:fd:98:66:00:f3:3f:de:f4:a2:1d:67:82:15:
2b:dc:2a:bc:37:8f:ff:99:61:af:b8:e4:a7:6d:8f:
d9:0d:30:3b:0c:94:a2:45:9d:c1:78:59:da:01:eb:
5b:30:ed:2a:d2:ff:13:a4:c4:6d:3d:18:84:d3:b1:
5a:4e:57:33:98:8a:ba:91:af:49:aa:dc:fb:06:d8:
2c:2c:11:e2:2f:83:fd:34:21:e1:05:cc:16:f9:a2:
fa:a1:fc:23:6a:47:01:d3:45:11:f5:99:45:f9:df:
b4:30:21:6c:db:65:68:4f:b8:62:be:70:69:55:39:
ee:69:0e:60:2f:b2:f4:fc:d9:34:79:c5:bc:a5:a0:
90:d6:44:7d:c0:53:ce:ea:77:e0:86:f4:ba:33:e9:
26:c2:76:f2:d9:33:96:46:6e:c0:c9:95:17:ef:80:
cb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BC:D4:AB:0B:AC:70:A8:4A:04:98:AC:C6:2C:10:D4:E1:E3:21:B8
X509v3 Authority Key Identifier:
keyid:4A:F4:0F:43:78:A2:E9:8B:EE:6C:78:4D:8B:DB:9E:82:ED:B6:6C:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SvQPQ3ii6YvubHhNi9uegu22bJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:10:ad:84:08:ff:af:30:8c:cc:03:5b:bb:3f:cd:a0:61:b4:
37:04:74:82:50:ec:fb:e4:fb:fc:d3:ee:f4:39:f3:e4:4a:70:
d6:94:1e:e1:f6:98:51:b7:9c:e8:72:4f:a3:8b:7e:e5:dd:54:
d7:b4:88:25:4c:ed:bf:97:f7:c2:b5:c8:05:66:72:c0:26:e8:
16:01:08:95:40:3e:0a:ff:fb:55:3f:db:35:7c:a9:a9:8f:f6:
b2:1b:58:10:c8:7e:25:cd:01:0a:0d:7c:3e:da:19:67:84:30:
81:be:f6:6c:da:7a:fb:3c:80:fb:b2:c1:19:fb:1f:8e:26:39:
c7:a0:4f:e5:40:2a:90:89:6a:a1:d1:47:97:f2:40:68:3c:1d:
c2:1f:de:80:8d:8f:af:a8:62:a5:96:5c:bf:24:5d:27:7e:ec:
af:9d:48:a4:b0:8d:2b:21:de:e9:a0:d8:51:53:bd:52:44:34:
0b:74:3f:cb:c4:97:f8:bc:65:9b:d5:50:0a:68:92:ac:2d:17:
bf:e3:0d:df:36:91:ab:53:5c:7d:1a:b8:e9:fc:5f:17:b1:c9:
1c:4e:8e:00:fb:aa:25:84:2e:92:24:7e:42:f4:6e:cb:48:0f:
a0:0a:a2:ca:dd:4e:76:5e:a3:a7:02:3d:d7:ea:4f:e8:a5:cd:
ab:86:5c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:19:33 2025 by rpki-client