
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
File: qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft (raw, json)
Hash identifier: f/3yCXwufdsK7XbNIPDGjF6sbjA23NwC1wEJ/VOHkEE=
Subject key identifier: 14:D2:16:F6:0C:76:F2:71:B9:BD:1C:50:C0:95:7A:F4:FA:50:1D:BC
Authority key identifier: A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A
Certificate issuer: /CN=A91A1C52/serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
Certificate serial: 01F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
Manifest number: 01EE
Signing time: Wed 05 Nov 2025 02:40:45 +0000
Manifest this update: Wed 05 Nov 2025 02:40:45 +0000
Manifest next update: Wed 12 Nov 2025 02:40:45 +0000
Files and hashes: 1: qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl (hash: 1k/HND6c5+CI4y+Y5kVELXrulbiaunESMT0exmFMOmY=)
2: A40C03B0D3B511EDA2A9DD7BC4F9AE02.roa (hash: qTpurh8+bWpZzwTVZxTLGeJXujwiEOMw1H0kXdqpaC8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl
rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:40:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1C52, serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
Validity
Not Before: Nov 5 02:40:45 2025 GMT
Not After : Nov 12 02:40:45 2025 GMT
Subject: CN=690ab92d-29fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:62:3c:90:73:6f:83:8f:3a:9f:ed:ab:01:aa:
5c:2a:40:0c:bb:be:2b:8f:d2:53:1d:64:31:a4:98:
49:5e:d4:74:b6:ce:bc:06:6c:12:ef:30:b8:f5:96:
1c:a6:67:7c:d9:eb:67:b3:66:25:f6:77:47:2b:30:
3a:3d:58:79:db:ae:02:ca:bf:a6:8e:fe:5d:f8:9f:
07:87:60:79:3f:83:f1:10:1f:bb:6b:e6:c7:1a:21:
bd:e8:96:1b:2a:4f:84:f7:a3:95:60:f1:44:b6:3f:
a0:a5:36:3d:83:de:94:d1:ac:c9:ef:72:ae:b8:1c:
fa:d7:33:db:ff:2d:16:be:67:2b:75:11:a3:64:cb:
df:71:4a:3d:8a:4b:f0:8a:64:42:52:62:d5:72:49:
36:ae:3a:0b:ee:e7:18:42:13:2b:6e:e2:85:64:b5:
3a:4f:f1:12:66:8a:d6:10:94:18:a3:cf:4a:54:4b:
12:1d:3c:1c:c7:a0:4b:c8:ca:c9:8f:af:24:ae:98:
50:0c:8b:d0:39:87:51:68:44:44:f5:ad:a1:7b:8a:
d1:5d:94:47:bd:5a:10:dc:fb:33:7c:58:b0:f3:a7:
b1:1f:b6:5a:3e:40:c0:24:f7:10:3e:70:bb:cc:c3:
c4:33:10:1b:fa:49:2f:bd:87:7d:06:b8:b4:7e:64:
4f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D2:16:F6:0C:76:F2:71:B9:BD:1C:50:C0:95:7A:F4:FA:50:1D:BC
X509v3 Authority Key Identifier:
keyid:A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:30:7b:d4:92:53:80:0a:f9:4f:96:f6:c5:02:e8:e9:b7:7a:
d4:9f:1c:fa:af:ab:68:3b:55:32:77:a2:ef:5d:d8:c9:8c:90:
46:24:08:e0:fd:a3:c8:5a:ff:b9:c4:d2:5d:50:bf:9a:e2:f0:
e2:b5:14:61:32:7f:9f:a3:9d:cc:b7:79:82:c6:8e:1b:ba:fe:
79:f8:6d:2e:0a:12:e3:dc:8f:f3:26:3b:6f:c1:8a:b6:10:69:
3a:53:56:46:8f:e0:fa:57:00:d3:f4:fb:8e:21:f9:da:58:b7:
a8:58:5c:ea:b2:16:70:7e:0a:72:d8:50:0f:7d:ee:bb:4f:90:
27:21:9a:5c:8c:c7:cb:db:1d:e7:fb:c0:64:e5:d9:0b:c0:40:
40:e5:58:e8:92:d4:20:bc:dc:ab:61:8a:f8:11:f6:14:fe:05:
10:ad:10:8b:8d:ff:1e:60:36:2e:22:3a:09:b0:1b:ec:f0:09:
13:00:48:bf:91:74:8d:b2:79:f2:3e:c0:ff:40:7f:55:1c:06:
67:a1:b3:6d:4e:2d:53:31:01:4e:21:63:8e:bb:8b:c7:b3:a1:
57:72:0b:d0:4d:fa:48:1a:bc:cf:33:c1:cd:9c:c3:24:29:27:
9a:d9:c8:e7:00:fe:65:81:90:7b:5c:06:5f:b8:1b:ce:33:93:
b3:6b:47:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:07:43 2025 by rpki-client