
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
File: CqcW6oHMxdteS6chFMNCmhnW2V8.mft (raw, json)
Hash identifier: 4CMQP5a/rpwfBZoScm2hcmol1NCUEvXuSk1Ppx/Ji2U=
Subject key identifier: 07:3E:9F:88:5F:CF:16:3E:C6:4C:7C:F2:6E:74:5B:C9:26:9B:F6:47
Authority key identifier: 0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F
Certificate issuer: /CN=A91CED30/serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
Manifest number: 0155
Signing time: Wed 05 Nov 2025 04:16:22 +0000
Manifest this update: Wed 05 Nov 2025 04:16:21 +0000
Manifest next update: Wed 12 Nov 2025 04:16:21 +0000
Files and hashes: 1: CqcW6oHMxdteS6chFMNCmhnW2V8.crl (hash: XM/pzno10h6aKUFWrUxoVncvajEu0VuW9tm2LUHKxYc=)
2: E188F6AEAE1F11EE9E818D16C4F9AE02.roa (hash: pJb5BTsbuqpgQP5Gvhc/gW9a2gX+v1FlOBgvzyj/io0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl
rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:16:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CED30, serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F
Validity
Not Before: Nov 5 04:16:21 2025 GMT
Not After : Nov 12 04:16:21 2025 GMT
Subject: CN=690acf96-2a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:c3:0f:05:7b:a6:af:6a:f0:62:28:a5:91:
eb:f1:c8:71:48:21:04:ac:08:a3:21:d9:09:69:9b:
26:57:af:eb:0b:5c:d8:65:54:98:d3:de:55:9c:6f:
11:1f:27:a0:29:c1:f5:38:11:0b:b6:64:b0:1e:5d:
73:03:5f:ff:1d:1a:2e:fa:88:a4:27:65:d8:5b:04:
d8:65:ba:9c:f7:4f:35:96:ac:eb:8c:32:47:07:29:
78:3b:22:80:8e:cf:3f:3c:08:24:c4:6a:e6:10:34:
d4:67:a9:8a:2f:6f:67:25:a1:45:ed:30:4e:d3:e5:
25:8d:1a:b0:21:7f:b4:3e:51:9a:6c:5f:82:f9:2f:
35:ec:b1:ac:35:da:7b:51:d2:da:e1:5b:4a:53:66:
90:4b:ac:9f:f8:6e:18:c2:e0:bf:d0:08:f9:62:e5:
79:45:de:2a:fa:fa:af:4f:53:7b:85:e4:4f:f4:9e:
64:3d:84:79:56:0a:1e:5a:12:49:64:ac:e0:85:31:
7e:14:69:0c:c5:8c:7a:48:b5:db:a3:ab:5b:1b:f4:
da:57:9a:7e:3a:09:7a:d6:03:d2:41:b0:17:21:b6:
d5:d0:99:e6:1a:f2:79:e0:64:fd:b7:ea:bf:a0:ec:
6a:6a:cb:a0:3d:e9:c4:2c:ed:7e:60:d8:ac:64:ee:
4e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3E:9F:88:5F:CF:16:3E:C6:4C:7C:F2:6E:74:5B:C9:26:9B:F6:47
X509v3 Authority Key Identifier:
keyid:0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:73:e1:19:26:0f:d8:a2:62:1d:b9:2d:d6:20:a6:53:46:d9:
b5:9e:a4:85:d6:10:b8:0a:15:1b:47:2e:21:27:26:03:76:29:
82:22:ee:57:ee:40:b0:7e:84:30:e1:d6:93:57:19:db:7f:a8:
52:a9:6e:ee:68:74:f3:4b:03:26:3e:52:01:7b:ae:0e:f3:d8:
76:55:6f:67:62:1a:94:19:8a:3d:1f:73:3d:e3:16:e7:15:30:
cb:04:fb:d4:c8:ae:a7:16:6e:48:be:99:22:96:99:dc:9c:aa:
d7:1f:d4:25:a1:05:41:28:34:44:11:15:4d:a1:de:f0:4d:a9:
39:42:6a:fc:ab:4e:85:41:22:8c:df:59:d9:f5:f3:79:6d:a4:
5a:6a:7b:fa:9d:67:21:af:2a:1d:9b:d4:fe:68:54:07:e5:4f:
18:05:03:8c:7d:11:13:b0:7d:dc:ee:98:8e:05:c4:42:2f:f0:
ba:01:45:98:5d:8b:d7:c6:3e:13:f5:fc:74:d9:cf:7d:da:4f:
a7:55:2e:5e:72:7f:e1:43:7e:df:44:e7:77:c8:95:2f:70:b6:
82:a1:96:ba:fc:8c:a4:6d:a8:62:f2:04:d8:6a:03:3d:62:92:
c1:fb:66:e8:d4:cb:fc:2b:4b:60:1e:92:cf:b3:17:e6:61:04:
e5:8d:a1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:54:57 2025 by rpki-client