
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
File: q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft (raw, json)
Hash identifier: 4ndZ8zWj37QjtuNKpgMy4nXCQF1dX1q4alUgOe9BfeI=
Subject key identifier: 01:13:6F:84:55:6D:A8:09:65:95:57:BD:21:6A:D8:9D:9F:1A:0A:D2
Authority key identifier: AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83
Certificate issuer: /CN=A918C5C8/serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
Certificate serial: 0591
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
Manifest number: 0589
Signing time: Mon 27 Oct 2025 00:11:10 +0000
Manifest this update: Mon 27 Oct 2025 00:11:09 +0000
Manifest next update: Mon 03 Nov 2025 00:11:09 +0000
Files and hashes: 1: q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl (hash: bYAEvKnVYY88dgcXzV1bZ2j3SkqVzh98HkNQNFRD9sU=)
2: 012EAE068C1411EDA66E4F28C4F9AE02.roa (hash: bvK3RLeaCONliQ5wzuPxM2m0myPmTbQv9PJcnbReiQA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl
rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 00:11:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1425 (0x591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C5C8, serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
Validity
Not Before: Oct 27 00:11:09 2025 GMT
Not After : Nov 3 00:11:09 2025 GMT
Subject: CN=68feb89d-5713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cc:44:89:c0:f1:84:55:d2:26:0d:80:a6:84:
38:e6:6d:7b:55:62:4e:a9:0b:e7:1d:21:95:51:a1:
29:ef:4d:9e:56:1f:1f:80:66:06:72:79:a2:ff:da:
27:70:f7:57:f2:d1:b7:a3:3c:9c:46:38:d3:96:bb:
39:49:a1:4d:10:ff:37:5c:a1:2e:6a:af:72:66:e2:
c8:95:7c:ef:07:36:be:92:9a:66:03:48:41:94:01:
fc:2e:fe:de:bc:b7:1e:a7:b8:65:0a:83:05:81:31:
3b:2a:44:83:cc:6a:90:06:9a:1c:6b:21:bb:4b:d8:
9b:c5:f9:c4:57:c5:9c:6e:59:0e:3d:b9:20:b4:28:
bb:60:d8:5c:c8:37:8f:f4:78:f6:ca:ec:17:2f:08:
04:1e:b3:d5:3d:6e:51:95:50:3a:ee:d4:21:08:eb:
98:7f:45:91:ed:cc:90:b2:32:93:a0:74:99:d5:c3:
fd:ba:14:e4:4a:d1:fa:17:1f:2d:4f:8c:27:a9:2b:
c1:36:8b:66:ab:de:14:94:93:3f:f0:5d:bd:76:a1:
5a:28:c5:16:67:d7:0a:53:8b:79:6c:2a:df:bb:98:
22:c2:d4:de:44:eb:f0:86:2b:d7:c1:9b:c6:a9:8a:
97:9e:de:6b:fc:59:7e:4d:42:6e:84:c2:b1:65:d9:
c7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:13:6F:84:55:6D:A8:09:65:95:57:BD:21:6A:D8:9D:9F:1A:0A:D2
X509v3 Authority Key Identifier:
keyid:AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c7:a7:96:d3:00:d8:96:05:04:cc:bc:23:38:29:be:51:d8:
0b:fa:36:c4:a6:d4:e9:fe:c7:86:fd:be:00:fc:93:39:25:d2:
8f:cc:08:53:b2:6e:e7:c6:4c:f6:df:ea:a8:9a:f3:24:60:78:
4f:21:7c:9a:f4:94:54:5a:28:e6:5e:54:d9:f5:d7:47:10:9b:
61:c4:b5:32:a7:6f:07:95:d7:7c:3c:e4:35:87:07:06:f0:07:
02:2f:c1:f6:c2:fc:df:06:ff:9b:50:b6:4f:6b:de:c6:28:d6:
6a:4b:d1:1e:6b:50:4c:68:fc:80:ea:25:b2:c6:48:16:36:a7:
e9:54:98:88:16:af:b9:90:a4:0e:ea:a2:e8:6e:4e:80:6d:00:
08:98:b4:a2:49:a9:b8:76:7d:86:80:4c:a5:a8:da:4f:49:cf:
aa:6b:58:23:48:76:7d:fc:7c:87:96:a9:fb:5c:a0:9a:36:0a:
d5:a7:e7:89:a4:46:40:03:36:d9:2b:0e:36:86:06:f8:f1:fe:
60:b4:63:e9:84:a5:3e:63:6d:e8:a0:60:85:06:6a:50:ce:4b:
19:5a:60:52:4b:e3:ac:73:af:b1:a6:e9:c9:d5:fe:da:ba:b4:
3b:7d:16:bc:49:fb:6d:c8:5e:82:10:45:16:6e:d5:7f:5a:44:
b6:fb:57:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 00:54:59 2025 by rpki-client