
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft
File: QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft (raw, json)
Hash identifier: anVlkRRCu1xtI01s2sK18NTUph13iBNUudlztUfhMlc=
Subject key identifier: F8:A5:B4:73:F4:A7:99:6F:BE:F4:88:63:C0:8C:20:AE:2B:2E:D3:E0
Authority key identifier: 41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91
Certificate issuer: /CN=A918CEC7/serialNumber=41618AE13A41F999C5790428B716FCAE5424A891
Certificate serial: 01FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft
Manifest number: 01F4
Signing time: Wed 05 Nov 2025 02:41:45 +0000
Manifest this update: Wed 05 Nov 2025 02:41:45 +0000
Manifest next update: Wed 12 Nov 2025 02:41:45 +0000
Files and hashes: 1: QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl (hash: YWu2/UTWDlxVwYnObV1cyj38L5tebYGgbHIIlyFGbic=)
2: CCD6FD9AC92E11ED931E6469C4F9AE02.roa (hash: AlNdMEqXqtWYBM5+8lhBY2zJlx8VS9MwTfRR8jw8484=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl
rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:41:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CEC7, serialNumber=41618AE13A41F999C5790428B716FCAE5424A891
Validity
Not Before: Nov 5 02:41:45 2025 GMT
Not After : Nov 12 02:41:45 2025 GMT
Subject: CN=690ab969-f57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2c:83:91:4d:9b:21:1b:54:74:54:0a:fd:6b:
56:53:50:c2:d0:50:ed:98:1e:62:2b:25:b1:1b:d4:
43:75:ea:51:05:8e:f5:89:2c:8f:51:6e:ed:64:dd:
40:8e:cb:76:ca:46:99:90:af:90:b2:4e:4e:be:f1:
fd:12:d9:05:39:82:53:fc:20:5c:e0:8a:53:06:80:
e4:5d:66:8c:cb:30:9e:80:dd:d8:ed:a6:bb:34:1c:
b5:e6:2d:fa:3e:4d:eb:f7:fa:fa:ca:f5:48:73:9c:
2a:23:cb:41:10:6d:74:50:73:ae:1f:c2:1c:a0:8e:
aa:f7:e8:90:dd:b3:fa:ec:b4:5b:ec:b0:0d:2d:77:
13:e1:cb:fb:ca:3b:7a:57:f3:23:61:c5:b8:20:c1:
d6:71:97:2f:dc:5a:cc:54:f7:4e:eb:09:3a:9d:b1:
3c:c4:96:22:f0:9d:f7:f1:89:41:bc:0c:c5:06:b9:
b1:e5:53:8d:d8:d0:25:94:4c:96:8b:56:4a:ed:49:
10:e6:0e:c0:78:54:6a:a8:1d:4b:c6:86:cc:47:83:
46:39:e0:70:57:9c:59:ef:30:19:af:5c:d9:08:4d:
89:aa:81:ab:f3:ae:f1:f5:b3:0c:a3:6a:4f:20:07:
ad:ac:27:91:c8:43:54:e7:20:fb:08:ef:24:fe:8e:
1f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A5:B4:73:F4:A7:99:6F:BE:F4:88:63:C0:8C:20:AE:2B:2E:D3:E0
X509v3 Authority Key Identifier:
keyid:41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:b3:38:ff:13:74:79:04:26:c0:39:4c:e3:96:2e:3d:51:4a:
0e:76:49:ce:cc:58:35:c2:27:f8:7a:a0:79:dc:f3:02:93:28:
91:06:00:fd:d1:f3:4c:1d:b0:1f:a9:98:5e:86:76:ad:d6:7f:
c7:87:28:26:7e:a8:48:47:24:0f:9e:e1:3f:d4:b4:11:02:bb:
29:d6:d2:75:73:27:32:75:3f:1d:84:32:4a:7c:9e:80:f6:fe:
ea:eb:27:74:d1:19:19:a0:25:2f:9d:d1:4d:0f:35:e2:43:7d:
b9:ec:20:97:6f:e5:8f:69:f8:28:97:0b:e4:e7:1f:8a:f9:c9:
57:e4:8b:95:ff:d6:a6:a8:b5:4c:23:27:18:4d:c4:8f:59:a1:
0c:46:44:2a:a8:d6:91:92:8e:1f:ba:3f:75:62:d2:2e:2a:76:
4c:bd:24:8a:67:c0:55:ac:89:14:9a:27:64:8f:dc:ad:51:66:
71:78:d0:52:f9:79:d1:f9:bf:20:90:5f:c4:cc:d8:7a:03:ba:
a5:bb:dc:c3:41:1d:84:32:b0:18:5b:1b:cb:d2:b4:c4:c2:71:
da:14:c8:fe:a6:1a:36:d9:cf:06:a9:8d:78:14:f6:25:fc:61:
79:3d:92:90:78:50:03:96:b5:d0:42:0d:8b:fd:a7:6a:7f:ac:
d9:52:d1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:37:42 2025 by rpki-client