
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
File: q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft (raw, json)
Hash identifier: VXXXau9lD/FUftDNo1bYTukHERwEFdF7OHCaM8Tw7z4=
Subject key identifier: B9:45:AC:75:14:18:2C:76:AA:CC:B4:E5:D4:BC:19:F2:9A:47:86:56
Authority key identifier: AB:EA:91:94:88:86:77:92:7C:50:90:3F:BB:F1:DD:E3:74:D0:62:C9
Certificate issuer: /CN=A9182A08/serialNumber=ABEA9194888677927C50903FBBF1DDE374D062C9
Certificate serial: 08DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-qRlIiGd5J8UJA_u_Hd43TQYsk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
Manifest number: 08D8
Signing time: Sun 02 Nov 2025 20:21:37 +0000
Manifest this update: Sun 02 Nov 2025 20:21:36 +0000
Manifest next update: Sun 09 Nov 2025 20:21:36 +0000
Files and hashes: 1: q-qRlIiGd5J8UJA_u_Hd43TQYsk.crl (hash: tUI5T0d6Sg8IfmvzT+R2DnL11RNlUxP7BWo4kIC8b6w=)
2: AAA8232C123411ED90E8CA59C4F9AE02.roa (hash: Qvjv2xSzp0S/r6i5DYb7//RNl54uOnwi+XbNLz5OL3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.crl
rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-qRlIiGd5J8UJA_u_Hd43TQYsk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 20:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2270 (0x8de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182A08, serialNumber=ABEA9194888677927C50903FBBF1DDE374D062C9
Validity
Not Before: Nov 2 20:21:36 2025 GMT
Not After : Nov 9 20:21:36 2025 GMT
Subject: CN=6907bd50-3240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:34:4a:36:a5:ee:72:0d:70:c6:a1:9d:cd:0f:
fd:5c:22:2a:22:cd:73:15:73:28:d4:d9:d6:40:9a:
f3:c7:d5:e4:d5:24:82:11:97:87:7c:31:b7:a7:96:
76:8e:39:5c:e8:5d:cf:73:40:d0:4d:f4:ab:d5:33:
46:e7:a1:d5:e2:b6:6b:e1:4c:5d:2c:62:72:f1:e9:
20:05:5d:d3:a7:ca:97:36:e8:6e:4a:f9:e9:b4:5a:
23:e1:82:4b:6d:bf:6f:e8:89:5d:14:4c:8e:a9:2c:
74:ed:18:16:9e:fd:c5:c7:83:87:2c:0c:3e:d9:16:
f6:9d:c7:d2:ed:ba:fa:a6:a7:76:b0:96:3a:37:6d:
3a:56:3e:86:2c:d1:ad:42:52:b8:8e:f2:79:7c:c8:
b7:17:1c:e6:3e:58:f3:2c:98:fb:54:7e:ae:cc:26:
39:6b:8f:3a:3d:a2:8a:09:44:d3:01:84:15:60:b0:
e6:a1:fe:20:6a:ab:64:3b:9c:f2:e6:d4:ed:1a:68:
0f:67:65:3e:7a:6e:a7:46:87:57:48:10:ef:95:30:
0d:4e:0c:ab:53:04:cb:69:7e:24:27:4f:53:a6:07:
5f:39:a0:36:82:45:86:7c:69:75:5d:9d:3a:a1:e2:
71:8a:be:4f:17:3d:64:91:c0:a1:f7:03:05:d7:14:
3e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:45:AC:75:14:18:2C:76:AA:CC:B4:E5:D4:BC:19:F2:9A:47:86:56
X509v3 Authority Key Identifier:
keyid:AB:EA:91:94:88:86:77:92:7C:50:90:3F:BB:F1:DD:E3:74:D0:62:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-qRlIiGd5J8UJA_u_Hd43TQYsk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:5c:ab:74:75:3d:31:e2:8b:a3:0a:58:9b:b6:ea:fa:a0:4c:
b0:83:ff:05:7e:dc:0e:8f:79:c9:9b:75:ae:f7:14:a5:0e:4b:
90:04:b1:eb:d2:8c:ae:30:87:4a:d3:98:9f:ea:7e:10:46:6e:
aa:b0:ac:26:f0:45:39:65:f9:7c:2c:97:8e:2c:ca:52:fe:94:
6f:c8:56:23:12:01:2b:a0:9b:a4:97:93:9d:cf:de:d0:65:5f:
35:67:e8:b0:98:f1:72:bd:df:30:34:58:b5:88:3b:e5:39:84:
7c:47:9a:93:5b:05:57:8d:7a:91:7d:45:28:01:60:61:f9:0d:
f5:60:e8:a3:69:8c:35:8a:b6:bd:d4:32:38:82:90:e7:92:51:
9a:93:94:46:f5:94:2a:30:36:c1:7f:20:7b:eb:fc:c3:e2:e9:
9b:b2:01:93:60:1f:da:0e:83:ec:3e:f2:9a:ba:94:8c:39:ec:
63:af:d2:09:ff:46:68:c3:db:cd:8b:e0:09:e5:b7:a7:3a:2c:
2d:5b:63:cf:9f:9d:11:8d:8d:f8:9a:cd:93:54:ae:01:58:13:
88:1a:42:41:c9:bc:59:5f:8b:60:19:b7:ad:f3:db:2d:43:f7:
55:a4:25:a3:6d:74:2b:76:19:f4:f4:5c:23:fc:41:bf:ba:e4:
70:c8:0b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:20:01 2025 by rpki-client