
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft
File: qpCd6zVb4xTwVTIZQw0JrOLY53E.mft (raw, json)
Hash identifier: jqpGQQfVK89AJrkBoeij+Qc5mhU0Qpy8aOL9NdTeLEs=
Subject key identifier: 2F:11:17:CF:1A:07:9B:A9:6A:68:2D:90:3F:F9:F4:54:69:6F:FF:E0
Authority key identifier: AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71
Certificate issuer: /CN=A9188F72/serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft
Manifest number: 71
Signing time: Mon 27 Oct 2025 09:21:28 +0000
Manifest this update: Mon 27 Oct 2025 09:21:27 +0000
Manifest next update: Mon 03 Nov 2025 09:21:27 +0000
Files and hashes: 1: qpCd6zVb4xTwVTIZQw0JrOLY53E.crl (hash: rDVzqQwgGBeD9WLXygomHrwD/FmMwpHCX6LRTaEiCLc=)
2: CDD9D46EA82511F0A1B4386EC4F9AE02.roa (hash: +2ndLjbvJ/FC5QVpNRaE7vUXuw0EK/JBW1SNXfBSkkw=)
3: DC02E120A82511F0919E5F6EC4F9AE02.roa (hash: 7FVEC/IFa+cdZewBKkcb0e2EOdOIv+6jM+tdnsCxhjg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl
rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 09:21:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188F72, serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771
Validity
Not Before: Oct 27 09:21:27 2025 GMT
Not After : Nov 3 09:21:27 2025 GMT
Subject: CN=68ff3997-3a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:89:56:f5:19:24:b9:04:43:ea:47:5a:a3:87:
82:7b:ae:ca:5e:50:15:f8:3b:a8:0d:f3:09:46:d6:
6f:07:17:d5:e7:49:4f:91:c7:cf:ae:2d:49:df:74:
66:8d:26:5f:8e:1c:e1:f5:09:3d:76:22:7a:db:09:
72:f3:fd:04:e9:e0:ab:5a:82:d8:46:93:fb:f3:d4:
42:c2:ab:e1:13:01:04:43:1a:10:1a:fc:dd:6d:b4:
0c:e6:5e:67:5d:52:1f:82:f4:73:a9:b3:63:87:4e:
24:77:17:9d:1a:d3:b5:05:31:7c:8f:b7:cf:bc:ca:
7b:a1:21:55:aa:fc:3e:a4:93:2b:35:83:cf:2c:20:
84:7a:fd:3d:ab:27:f3:43:8d:82:39:88:c3:44:68:
ae:f6:b4:d5:07:fd:9f:4b:e1:52:1a:62:07:5a:67:
91:86:c8:63:8f:0a:d9:39:af:33:56:76:4f:ce:13:
79:b1:e4:e0:f5:31:da:24:e4:e2:0c:b2:d0:1c:fa:
23:5c:67:91:02:0f:31:80:c4:d9:92:a0:b4:d9:1e:
4c:65:2a:44:3f:1e:43:af:47:15:c1:9d:35:3e:2a:
fd:21:05:94:cc:5c:0d:e3:a9:2e:05:42:44:26:03:
a9:2a:27:5c:7b:7a:85:c1:b4:5c:1a:be:17:d8:4a:
3f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:11:17:CF:1A:07:9B:A9:6A:68:2D:90:3F:F9:F4:54:69:6F:FF:E0
X509v3 Authority Key Identifier:
keyid:AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:76:3f:ff:94:e8:1e:34:cf:e1:cd:60:1b:49:ec:ad:a0:47:
f7:a6:33:c5:13:cf:cf:71:91:ff:b6:b5:f8:3c:25:f4:62:f5:
fd:81:1b:dc:09:79:79:ff:7f:6d:23:da:ca:5e:05:4d:33:09:
31:45:51:77:aa:50:76:fd:fa:d6:59:ad:45:6d:e5:fd:3e:e8:
30:89:f3:e9:74:1f:74:b0:ce:9a:d3:8b:6c:a2:f4:ad:dc:35:
4a:b9:4a:5b:ca:38:be:69:83:2a:d8:19:6b:84:38:2d:fd:84:
e1:1a:4a:da:2d:7c:81:82:45:34:4d:7e:6e:f4:e9:30:c8:41:
bf:3f:7b:db:e2:ba:78:a9:18:92:8d:4c:8a:42:c5:28:18:58:
03:9a:69:ec:b1:84:e4:b5:75:03:23:d6:f1:11:92:26:a0:f9:
80:ed:36:45:5e:02:9e:cf:f9:5a:a4:6c:45:66:56:f0:f2:ff:
19:38:ef:58:94:e3:6f:3f:ff:2d:10:a4:ff:9f:01:c9:41:17:
71:96:7d:57:ab:14:e7:ce:8b:aa:2e:7a:ee:99:d4:3d:fd:21:
53:63:6e:b5:3e:50:fb:6e:a0:09:c6:69:39:31:5a:d0:46:75:
9c:6f:b4:bf:a7:c5:ee:4b:20:df:a3:f0:1a:d3:2c:3a:40:5a:
3a:0e:51:56
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
OEY3MjExMC8GA1UEBRMoQUE5MDlERUIzNTVCRTMxNEYwNTUzMjE5NDMwRDA5QUNF
MkQ4RTc3MTAeFw0yNTEwMjcwOTIxMjdaFw0yNTExMDMwOTIxMjdaMBgxFjAUBgNV
BAMTDTY4ZmYzOTk3LTNhOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDXiVb1GSS5BEPqR1qjh4J7rspeUBX4O6gN8wlG1m8HF9XnSU+Rx8+uLUnfdGaN
Jl+OHOH1CT12InrbCXLz/QTp4KtagthGk/vz1ELCq+ETAQRDGhAa/N1ttAzmXmdd
Uh+C9HOps2OHTiR3F50a07UFMXyPt8+8ynuhIVWq/D6kkys1g88sIIR6/T2rJ/ND
jYI5iMNEaK72tNUH/Z9L4VIaYgdaZ5GGyGOPCtk5rzNWdk/OE3mx5OD1Mdok5OIM
stAc+iNcZ5ECDzGAxNmSoLTZHkxlKkQ/HkOvRxXBnTU+Kv0hBZTMXA3jqS4FQkQm
A6kqJ1x7eoXBtFwavhfYSj/DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULxEXzxoH
m6lqaC2QP/n0VGlv/+AwHwYDVR0jBBgwFoAUqpCd6zVb4xTwVTIZQw0JrOLY53Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4RjcyL0NBQUYwRDRDMEUy
QzExRjA4RjFENjk4MUM0RjlBRTAyL3FwQ2Q2elZiNHhUd1ZUSVpRdzBKck9MWTUz
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcXBDZDZ6VmI0eFR3VlRJWlF3MEpyT0xZNTNFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4
RjcyL0NBQUYwRDRDMEUyQzExRjA4RjFENjk4MUM0RjlBRTAyL3FwQ2Q2elZiNHhU
d1ZUSVpRdzBKck9MWTUzRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACt2P/+U6B40z+HNYBtJ7K2gR/emM8UTz89xkf+2tfg8JfRi9f2BG9wJ
eXn/f20j2speBU0zCTFFUXeqUHb9+tZZrUVt5f0+6DCJ8+l0H3SwzprTi2yi9K3c
NUq5SlvKOL5pgyrYGWuEOC39hOEaStotfIGCRTRNfm706TDIQb8/e9viunipGJKN
TIpCxSgYWAOaaeyxhOS1dQMj1vERkiag+YDtNkVeAp7P+VqkbEVmVvDy/xk471iU
428//y0QpP+fAclBF3GWfVerFOfOi6oueu6Z1D39IVNjbrU+UPtuoAnGaTkxWtBG
dZxvtL+nxe5LIN+j8BrTLDpAWjoOUVY=
-----END CERTIFICATE-----
Generated at Wed Oct 29 00:20:57 2025 by rpki-client