
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft
File: Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft (raw, json)
Hash identifier: IFpwJ1R9Ue8tNvkyPgaPY0F65edsO0H5c6R928jbPqg=
Subject key identifier: 60:4A:0C:F5:94:05:CB:EB:68:27:C8:79:54:C3:E1:07:34:DA:73:96
Authority key identifier: 43:5B:DF:93:03:04:19:4A:08:69:AD:EE:87:A0:B5:56:C5:88:F6:F4
Certificate issuer: /CN=A9180484/serialNumber=435BDF930304194A0869ADEE87A0B556C588F6F4
Certificate serial: 0DA0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft
Manifest number: 0D96
Signing time: Sun 02 Nov 2025 17:55:54 +0000
Manifest this update: Sun 02 Nov 2025 17:55:54 +0000
Manifest next update: Sun 09 Nov 2025 17:55:54 +0000
Files and hashes: 1: Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl (hash: ADufnURK/wgbNZT8LiW1zIsII89szRqoDAJW4OUGcqI=)
2: D2588FA2D2C111E9B5D20B2AC4F9AE02.roa (hash: D+ULNvDKVlD7JVj0dgqxkA98GxkgF1Daq5+neqboohk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl
rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 17:55:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3488 (0xda0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180484, serialNumber=435BDF930304194A0869ADEE87A0B556C588F6F4
Validity
Not Before: Nov 2 17:55:54 2025 GMT
Not After : Nov 9 17:55:54 2025 GMT
Subject: CN=69079b2a-04bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ed:3d:e5:40:b2:18:32:3e:5b:d8:da:50:4f:
6a:e5:bb:37:b6:64:22:ff:c0:b9:ea:40:ed:a1:82:
91:be:fd:3a:09:6b:a4:4b:c5:2a:e5:96:c0:ee:a5:
bd:63:93:72:07:a6:70:79:7a:77:35:b3:dd:81:85:
c3:12:6e:00:bb:5a:ec:bc:da:eb:fc:a8:d2:bf:b1:
b6:63:83:59:0d:4e:bd:12:df:7e:ce:8d:da:f7:0e:
76:9e:3d:6b:60:56:1f:3a:af:b8:3e:d2:98:93:70:
17:fc:91:36:8f:41:5e:09:c3:71:0b:d0:f1:85:2c:
3c:01:f6:f8:e5:86:50:ef:aa:33:88:e0:1d:2c:cd:
c5:59:97:63:f1:a5:65:32:dd:1c:3d:6f:2b:57:e4:
80:92:f0:e5:a1:7e:bb:d1:e6:6d:dc:ec:d3:4e:9d:
dd:30:3b:a6:c3:3b:1f:88:dc:77:50:59:78:e1:cf:
7c:5f:09:17:38:57:59:a8:81:20:aa:6b:14:52:80:
64:98:f5:a7:a1:2d:21:d9:93:68:ce:b5:87:82:57:
dd:57:85:27:2a:6b:a4:5a:b6:6c:c5:4b:be:2f:1a:
c0:75:cd:9b:c8:e7:ad:42:67:3d:4c:6c:df:95:20:
62:49:ed:a0:d7:08:00:43:1d:44:aa:15:ee:52:47:
0d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4A:0C:F5:94:05:CB:EB:68:27:C8:79:54:C3:E1:07:34:DA:73:96
X509v3 Authority Key Identifier:
keyid:43:5B:DF:93:03:04:19:4A:08:69:AD:EE:87:A0:B5:56:C5:88:F6:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:cc:b2:6f:77:25:a0:40:f4:51:14:1e:15:b8:3f:e2:09:75:
37:9b:06:00:83:e3:eb:57:af:03:83:55:2c:1e:dd:6a:36:ee:
7c:e0:c7:42:a9:5c:7a:6f:ef:66:b2:d0:dc:29:79:50:90:ba:
d1:2d:0d:a1:45:a4:91:b1:d0:f7:9b:f0:6a:25:87:3a:75:59:
d9:87:a4:4b:e9:81:f6:2f:c6:70:3d:4d:19:12:c3:62:33:eb:
67:91:e6:9a:e6:b4:ef:b7:7a:68:b4:10:d6:8a:4a:d4:9f:cf:
6f:30:06:7d:83:97:63:b2:9f:dc:a1:0c:c7:31:9f:7f:9b:26:
bb:d8:05:5c:c9:c7:5e:8b:de:4c:28:d0:7c:f1:1d:ae:49:ba:
1c:1c:1d:75:de:1c:98:6c:2b:b5:56:5f:08:af:a0:f8:c4:b5:
6c:a7:39:54:ac:c8:b2:62:eb:83:05:4c:b7:9c:73:cc:25:50:
c8:2c:d3:64:ec:c1:bf:68:f6:f4:f2:4e:1c:fa:e4:7c:47:1e:
c4:b5:e9:a9:45:b9:d1:2c:54:e3:bd:aa:27:3e:ea:59:06:66:
1c:9f:ac:f3:5b:c9:b6:11:f3:a1:11:1d:13:b3:d8:ad:b0:16:
0d:bd:bc:47:2a:27:1c:31:32:07:28:ae:95:73:1f:b7:3d:0d:
3c:67:9d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:46 2025 by rpki-client