
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft
File: C-qOMYe9SY0l8kldarDunkU0p_E.mft (raw, json)
Hash identifier: mauhBUVyp8JoESf+TtkGvmoc3cM0n/3hLUfHUvgGorM=
Subject key identifier: 64:93:3E:B6:B6:DB:1E:FD:30:FC:D2:B8:A5:A0:DC:42:45:4A:33:86
Authority key identifier: 0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1
Certificate issuer: /CN=A918C64D/serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1
Certificate serial: 0832
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft
Manifest number: 082C
Signing time: Tue 04 Nov 2025 20:52:36 +0000
Manifest this update: Tue 04 Nov 2025 20:52:35 +0000
Manifest next update: Tue 11 Nov 2025 20:52:35 +0000
Files and hashes: 1: C-qOMYe9SY0l8kldarDunkU0p_E.crl (hash: mkSHXvc64Vdv8yxCIZzQJGLbSh8Zz8xRgzvHD24+Ot8=)
2: B7362AE0EDC811EAAFF8BD46C4F9AE02.roa (hash: Cnzt8nEUwiu0miGE1kfWVJ8FBWxNmEwiLfuAjUQARAk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl
rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2098 (0x832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C64D, serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1
Validity
Not Before: Nov 4 20:52:35 2025 GMT
Not After : Nov 11 20:52:35 2025 GMT
Subject: CN=690a6794-8baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ed:0c:78:2f:b3:a6:9c:37:8d:f9:40:50:9e:
4d:b1:5c:e6:6e:ea:22:35:51:ed:31:d9:03:38:c0:
6c:50:99:e6:32:65:23:48:88:3b:11:c1:eb:a1:33:
c7:7e:65:d9:68:56:3d:61:8f:14:00:b0:e5:5c:dc:
26:92:c3:c9:b3:7c:93:56:32:a3:ef:f4:e4:0a:06:
1c:97:8d:69:bd:55:38:fb:9b:9a:94:46:54:65:3e:
12:30:7c:9f:74:fb:8b:f3:f8:7c:d4:ca:81:c6:00:
d7:b5:61:fa:d6:3d:b5:f8:5a:d8:0d:61:ec:6d:83:
bc:cd:a3:80:36:a1:8e:f2:70:19:f6:33:10:14:1e:
e9:9b:b8:20:ae:02:fc:2b:fa:f3:8d:16:85:33:84:
b7:b7:33:a5:f2:b8:7e:d1:7d:9d:85:74:49:42:86:
1e:19:b4:45:fa:6b:3a:b1:21:ac:b8:e4:46:01:d8:
4e:0b:75:3d:e7:80:c1:5e:47:82:9e:d3:40:c6:ac:
22:11:b1:be:4d:38:8d:28:ef:c2:40:8e:8b:5d:31:
ab:87:36:bc:ca:80:74:69:d1:72:3d:7c:55:df:a2:
c2:88:89:30:3a:32:60:41:9c:22:7d:e6:35:6c:1c:
7d:8e:3a:c7:83:72:a6:c7:8e:68:87:3b:78:16:42:
0a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:93:3E:B6:B6:DB:1E:FD:30:FC:D2:B8:A5:A0:DC:42:45:4A:33:86
X509v3 Authority Key Identifier:
keyid:0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:d9:45:6c:47:4d:cf:3a:76:5b:81:a2:69:65:62:cf:db:07:
08:57:6b:9d:61:fa:9e:da:ef:11:8d:30:7a:48:9f:1e:84:fc:
0c:77:c5:5c:65:c0:92:1d:f7:06:f6:3e:33:cd:13:36:5e:47:
0d:b5:c2:3d:bc:11:cb:1c:45:00:99:3e:20:28:48:7f:56:cc:
1a:a8:a5:af:73:98:e1:8f:e8:31:b9:47:21:71:04:92:d6:26:
d1:20:e5:35:ca:a8:9f:2e:47:b7:c5:ad:02:20:d4:a0:5e:f4:
23:16:d8:87:c5:00:5a:6a:0a:ef:f4:9c:1f:70:56:a5:55:dd:
f1:07:34:3a:b5:a8:68:44:b8:a4:da:85:b0:58:6a:02:d9:ae:
2b:f5:62:e2:ee:69:0e:e4:47:5e:97:50:62:91:ce:e5:6e:1e:
1b:bc:3e:15:93:1f:b4:35:ee:41:57:d1:01:15:e2:d9:3d:90:
23:32:a3:c3:3c:d9:23:27:03:ca:3f:0f:af:77:b6:ec:63:49:
f3:aa:11:d0:38:07:d0:1b:4e:66:d8:82:3a:80:30:85:ca:9b:
fd:54:89:ec:45:fc:a0:4c:f5:2a:45:c6:da:0e:18:74:5c:76:
8a:ac:17:dc:a6:5f:12:f5:3e:f6:af:2a:9b:f7:d6:a3:78:4f:
6a:dc:52:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:26:31 2025 by rpki-client