
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
File: qI7iP_jXCCjO28cB54yAdH_8Eco.mft (raw, json)
Hash identifier: iegg+r1uerBhBvhZsRF7Alzk4J7/hLnweEz3EeG8GWY=
Subject key identifier: 1C:EB:7D:0F:4E:C7:FA:B6:A4:49:C2:76:BB:8F:10:74:DD:3B:C3:4C
Authority key identifier: A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA
Certificate issuer: /CN=A9188A46/serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
Manifest number: 93
Signing time: Mon 03 Nov 2025 06:30:36 +0000
Manifest this update: Mon 03 Nov 2025 06:30:36 +0000
Manifest next update: Mon 10 Nov 2025 06:30:36 +0000
Files and hashes: 1: qI7iP_jXCCjO28cB54yAdH_8Eco.crl (hash: d1m7oZlJU0WEm3OI/miFB1Vdy23IikN8EzLU62preIw=)
2: 31F9C990668B11F0B10A9677C4F9AE02.roa (hash: K71+YfyZb/sq1ejJDvO1hCnjvjzaiRU1ev/4lLqwtW0=)
3: 1BE631B0668C11F092BB0479C4F9AE02.roa (hash: 889zGZBsMfgV1bTIc5AsOgt3rk6bmVAUBCLPcamrp9o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl
rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188A46, serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
Validity
Not Before: Nov 3 06:30:36 2025 GMT
Not After : Nov 10 06:30:36 2025 GMT
Subject: CN=69084c0c-76c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:04:ab:b0:5d:63:af:a2:85:d9:ba:d9:b4:
df:c4:13:fe:46:27:9e:b9:fc:e7:b5:b8:3f:6f:ce:
c6:24:01:ce:b4:fe:30:2d:56:6b:37:97:30:04:52:
ff:8c:35:68:22:37:ea:bc:39:3a:5c:f9:5b:55:34:
85:46:77:4c:2b:b5:1d:4a:ec:3f:74:64:57:60:7a:
cd:9d:ca:44:a8:cf:cc:a6:c8:55:64:74:67:60:4f:
b1:c0:40:f1:dc:c5:36:13:12:0c:4c:5a:09:01:7d:
0d:81:57:6d:3c:85:ea:af:28:c1:d0:22:95:e3:24:
8d:c2:05:05:b9:03:4d:09:9a:2d:bf:49:9e:dc:92:
c9:50:14:d8:52:d7:3d:f3:bb:cc:24:aa:95:a3:6b:
3a:8b:60:24:68:60:c6:13:32:29:c4:0f:2f:7a:24:
71:e5:6c:59:ea:86:d4:01:47:a1:2b:97:4f:de:98:
83:90:c9:99:5f:33:e7:8b:6d:42:36:d5:5b:bd:fa:
ee:7d:77:ae:fe:b2:e7:b5:75:ec:a0:2d:3d:f9:e9:
dd:cc:04:a9:73:6a:a7:3a:47:d0:7c:f1:13:19:3c:
2e:c9:52:95:28:c6:ce:a7:2b:dd:ca:95:11:84:30:
8d:42:e8:85:b5:c2:9b:83:77:03:aa:ea:a4:b9:eb:
4d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EB:7D:0F:4E:C7:FA:B6:A4:49:C2:76:BB:8F:10:74:DD:3B:C3:4C
X509v3 Authority Key Identifier:
keyid:A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:84:07:1c:9b:f2:fb:62:df:f4:fd:3c:41:1d:1c:ec:59:36:
7d:b2:e3:f8:9c:3a:39:23:f9:60:e8:0b:fd:0d:89:78:93:64:
b8:60:b9:ef:4d:39:66:50:3b:6d:31:bd:b6:9d:33:0d:66:23:
6c:e5:14:a9:4a:c2:6d:65:fd:2f:93:66:89:30:08:2e:f7:70:
d6:78:3d:20:d0:e5:89:79:0c:a9:d4:af:7b:72:39:61:04:73:
a9:f1:cf:58:e6:66:0c:ac:2d:47:03:8a:c4:ac:0e:5d:61:44:
d5:e6:88:7c:f6:9c:a9:f9:f5:3f:4f:a1:f1:90:8d:c2:64:f0:
cb:f5:c5:64:b0:af:2c:46:fc:16:ba:03:71:93:9a:f3:3a:d0:
2a:78:a4:27:5e:21:87:9e:d1:f1:9c:cc:49:cf:93:fc:25:5d:
85:ee:c8:2e:1e:24:0e:ec:94:3f:f2:8f:db:5d:47:53:c3:1f:
63:43:4e:cb:e3:5a:46:8d:83:e7:a9:17:a4:87:09:35:6c:f4:
f2:d9:97:62:f5:fb:c1:25:c1:3c:c7:db:fc:57:2c:96:36:60:
88:43:70:d4:ef:2b:d7:39:72:85:3b:85:3e:61:da:2e:45:ef:
d0:d8:cf:28:d1:64:0b:d6:46:f8:12:d4:ff:69:c6:a5:17:7a:
01:42:be:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:09 2025 by rpki-client