
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
File: 0q268NfVLLlNShOXizIFO833eg8.mft (raw, json)
Hash identifier: qrFwI2UuNExXbYMY0vwu0Q+wUU1/0mXsrzst8APuhwc=
Subject key identifier: FB:0D:3D:D3:7D:BC:7B:85:B4:37:8D:3D:D1:7C:21:91:2E:3D:A6:8E
Authority key identifier: D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F
Certificate issuer: /CN=A91BE514/serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
Certificate serial: 0181
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
Manifest number: 017F
Signing time: Wed 05 Nov 2025 03:50:53 +0000
Manifest this update: Wed 05 Nov 2025 03:50:52 +0000
Manifest next update: Wed 12 Nov 2025 03:50:52 +0000
Files and hashes: 1: 0q268NfVLLlNShOXizIFO833eg8.crl (hash: Ny0B1tAnEih4pIRjswhH+i+cCpt5/d+t0qhIbafEJlw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl
rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:50:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE514, serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
Validity
Not Before: Nov 5 03:50:52 2025 GMT
Not After : Nov 12 03:50:52 2025 GMT
Subject: CN=690ac99c-64df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:53:61:6a:0e:27:5f:ba:b4:e7:04:83:eb:
18:57:fe:15:0a:00:4c:b7:9d:43:33:19:e6:32:eb:
1f:c8:87:03:d6:7a:4b:a9:4c:35:07:12:57:5c:0a:
40:d1:d3:87:2d:2c:b3:6f:2f:a3:90:26:be:ce:57:
54:1d:30:d9:86:69:f3:45:84:8d:55:d9:c6:88:35:
dd:ba:d9:74:d9:11:0e:dc:5e:61:11:97:cf:b3:34:
ad:69:3c:fe:89:e4:14:de:98:34:07:20:3f:dd:1d:
15:82:f1:3c:6c:8f:62:44:17:86:e4:ef:f7:0b:99:
b2:76:a2:2e:e9:51:91:cc:93:b1:6c:a8:53:65:39:
46:2b:73:e3:e7:98:0a:1a:84:6b:ba:a0:54:73:9c:
43:c6:9b:44:6d:52:26:3d:eb:68:c3:4a:ee:03:c3:
76:f4:36:0f:12:ae:e0:b7:3f:0d:57:40:8a:7b:4e:
e3:6f:da:13:8d:df:b0:97:05:51:f1:f6:41:1b:de:
41:92:e3:71:ca:ff:dc:80:18:f0:a4:01:f7:0f:65:
47:4f:c4:f8:de:1d:d3:9e:6d:10:ac:a4:5a:3a:ad:
75:1f:82:71:d3:9e:58:73:65:18:a1:dc:9c:74:b2:
8b:63:52:3c:cf:ce:04:69:d1:bf:4a:7f:40:7c:e9:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0D:3D:D3:7D:BC:7B:85:B4:37:8D:3D:D1:7C:21:91:2E:3D:A6:8E
X509v3 Authority Key Identifier:
keyid:D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2e:0c:db:0e:9a:a9:a5:01:bb:b3:5d:f7:94:6a:04:ec:e4:
b1:b0:d5:f5:46:d4:dc:e4:90:34:15:df:46:13:eb:fa:6d:28:
d0:e4:80:77:d5:4f:b2:56:c0:84:55:0d:82:46:d0:8c:11:a6:
5a:9e:c9:fa:56:ef:7c:c1:11:0d:0c:19:df:f7:83:2d:5f:3c:
ba:92:7e:6d:36:2d:26:3b:e2:c1:29:6d:4d:7a:3b:3b:60:fe:
20:90:0b:0f:a3:98:f1:0c:4c:ac:34:8c:43:97:ab:6d:7e:1f:
70:b4:0b:e6:68:d2:ee:c0:61:06:76:e7:dd:82:18:47:1a:7b:
12:49:08:44:5f:3e:49:a8:06:a3:ab:eb:0d:8c:b7:71:86:83:
f0:de:b9:b3:aa:a4:c4:ea:32:5f:33:ff:b8:95:be:81:7d:58:
fd:d2:34:c4:b0:68:f8:89:e2:44:36:28:85:4d:cb:1d:d8:64:
ae:85:e1:7b:a5:ac:74:41:c1:b7:95:ce:6e:44:cc:91:59:b9:
30:12:73:9b:df:6a:d4:00:f9:50:52:09:49:18:98:38:f0:56:
e7:ee:29:ed:ee:de:f4:06:31:9e:7b:38:b3:9f:af:a5:c7:53:
2f:58:a4:5f:46:13:c4:cf:f9:8b:36:4d:3d:15:cc:3b:62:4c:
40:5a:de:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:32:39 2025 by rpki-client