
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft
File: rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft (raw, json)
Hash identifier: QciaQfNc5lz+TlQ7CRAxrr9i/XeOz3vQA8gz81lRYx0=
Subject key identifier: 32:86:75:43:5D:D9:E4:BB:A0:5D:4F:17:60:A5:4B:8A:D5:38:27:15
Authority key identifier: AD:06:DB:CC:53:34:C6:D7:51:37:2F:B1:79:54:F4:AA:AD:DC:9C:3F
Certificate issuer: /CN=A919F55C/serialNumber=AD06DBCC5334C6D751372FB17954F4AAADDC9C3F
Certificate serial: 04F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft
Manifest number: 04EC
Signing time: Sun 02 Nov 2025 23:42:03 +0000
Manifest this update: Sun 02 Nov 2025 23:42:03 +0000
Manifest next update: Sun 09 Nov 2025 23:42:03 +0000
Files and hashes: 1: rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl (hash: U62lcxmRE7EP1JuSUslOrc2DBnkV/2yP+KwePZqtaIo=)
2: 0EC6A7E0372D11ECA616091EC4F9AE02.roa (hash: xRvy8+EZ4EWMUGqE/C33LsDCdW9x6WHrip13g/dJz5k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl
rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 23:42:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1265 (0x4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F55C, serialNumber=AD06DBCC5334C6D751372FB17954F4AAADDC9C3F
Validity
Not Before: Nov 2 23:42:03 2025 GMT
Not After : Nov 9 23:42:03 2025 GMT
Subject: CN=6907ec4b-4abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e5:d7:26:fe:40:a6:76:7d:88:84:1e:0e:be:
14:a0:3f:42:a6:c6:ce:43:66:d8:ad:89:58:ec:62:
d6:11:fa:e4:93:08:15:a3:e9:b2:3b:c1:77:45:ed:
77:16:42:54:59:93:dd:e8:d9:f5:26:88:65:eb:73:
c7:97:66:4f:bf:dd:f2:31:ae:8d:b2:fc:a2:8f:39:
b1:02:09:36:10:92:a2:fe:0b:ae:9f:08:de:08:a2:
27:3b:eb:d2:26:44:3a:d7:16:1d:0a:93:90:6c:6e:
0f:d9:67:4a:bc:50:22:bb:57:e1:e5:e7:49:1a:08:
95:48:ff:40:3d:32:64:e7:4c:10:fa:60:17:ee:2b:
28:27:12:b1:f3:38:6d:65:b0:78:5c:78:cc:ad:75:
a0:4e:65:3c:9f:dd:29:69:11:70:b8:5b:7f:ad:36:
c7:a1:9d:a2:c5:0f:15:fa:5d:c8:07:55:14:de:f8:
2d:7b:0c:9d:e2:f9:1b:d1:b4:68:2f:45:05:6e:f4:
55:79:f8:00:80:ca:41:8f:c3:50:a1:54:10:db:b6:
b5:a9:da:95:e0:35:a7:1a:99:bb:f8:c7:16:21:59:
e6:15:d2:0b:03:1e:e3:f6:c8:25:4c:50:7b:2f:57:
eb:40:1c:3d:a9:6f:27:fe:5a:b1:20:27:eb:59:97:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:86:75:43:5D:D9:E4:BB:A0:5D:4F:17:60:A5:4B:8A:D5:38:27:15
X509v3 Authority Key Identifier:
keyid:AD:06:DB:CC:53:34:C6:D7:51:37:2F:B1:79:54:F4:AA:AD:DC:9C:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:47:b6:45:ec:ab:2a:da:97:9d:e4:44:db:b5:85:30:a9:dc:
13:16:04:ed:67:bb:66:5d:8c:06:80:df:44:2d:4b:be:7d:af:
ff:b2:75:94:55:91:fa:f5:d1:95:97:ee:e4:51:16:27:4d:3a:
76:71:18:7a:ee:b1:13:37:33:70:0c:9d:ac:18:d5:61:c7:a6:
76:73:87:c8:ff:7a:be:c0:f1:df:89:39:4a:5c:51:a7:dd:98:
96:1e:88:86:82:14:e6:4a:e2:b9:fe:0b:38:c8:26:60:de:9a:
1d:e6:9a:60:8d:23:84:37:95:64:f1:89:80:60:71:89:0c:b4:
70:e3:59:7c:64:11:04:b6:a8:ac:48:c3:06:21:fe:9e:7e:a5:
a3:34:96:4b:5b:47:13:a2:e9:e0:09:4d:d0:1c:bb:02:69:b6:
0b:8b:ea:7f:03:e4:0d:24:22:75:ca:cf:b7:41:f2:8e:7d:92:
87:54:49:16:4f:0a:60:22:4c:29:f4:23:81:de:f0:08:8a:78:
05:2e:8a:0d:61:3d:a2:3c:d0:a8:1b:6e:ed:c8:d6:d0:b6:6e:
cb:5d:ce:19:d2:f5:f0:41:25:dc:ce:7e:08:3d:e3:79:ff:5e:
87:88:05:03:be:47:8f:b9:d3:44:29:61:f6:66:2c:bb:d9:0e:
66:ae:78:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:21 2025 by rpki-client