
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft
File: uQQiVZtYxNqonyJNSccf9E-byjQ.mft (raw, json)
Hash identifier: RLJR49+SGabL2pIIcAWDlnbgs8ODwasHWmm1umVs4I4=
Subject key identifier: 0F:63:F5:FF:45:8F:1C:2B:CC:A1:FA:24:A2:01:4F:6D:52:9C:E5:16
Authority key identifier: B9:04:22:55:9B:58:C4:DA:A8:9F:22:4D:49:C7:1F:F4:4F:9B:CA:34
Certificate issuer: /CN=A91EA723/serialNumber=B90422559B58C4DAA89F224D49C71FF44F9BCA34
Certificate serial: 0216
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uQQiVZtYxNqonyJNSccf9E-byjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft
Manifest number: 0209
Signing time: Mon 03 Nov 2025 02:24:55 +0000
Manifest this update: Mon 03 Nov 2025 02:24:54 +0000
Manifest next update: Mon 10 Nov 2025 02:24:54 +0000
Files and hashes: 1: uQQiVZtYxNqonyJNSccf9E-byjQ.crl (hash: bU9mzkWMCSzzR1aAI/zc+RSxjMclnOmAegE7oC96TbA=)
2: 4868355806A611F08F878981C4F9AE02.roa (hash: CY2/EJImr1t3NibBfSgu4VzBiSPC1MYnf7DadJvamq4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.crl
rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uQQiVZtYxNqonyJNSccf9E-byjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 02:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 534 (0x216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA723, serialNumber=B90422559B58C4DAA89F224D49C71FF44F9BCA34
Validity
Not Before: Nov 3 02:24:54 2025 GMT
Not After : Nov 10 02:24:54 2025 GMT
Subject: CN=69081276-a70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:9b:fa:41:10:8e:54:0d:df:ac:34:ff:bd:
1e:d9:51:84:ee:e1:27:2e:e8:b0:67:5e:ec:e4:74:
29:00:bf:ad:8e:55:c8:60:dc:09:a2:33:a0:98:f3:
02:91:a3:9d:a8:04:04:04:73:38:b6:cc:5c:6b:19:
4c:82:29:f2:fd:96:8d:ea:a1:82:43:c5:74:44:61:
88:9c:4c:56:bb:6e:69:f3:e6:17:53:b7:8c:da:a4:
15:8f:f7:3b:4f:bb:d6:46:01:0f:5c:14:37:c2:c2:
17:c0:5e:63:a7:cb:42:e5:cc:9b:8c:83:6c:a5:5b:
03:63:1d:e1:3b:19:b0:11:65:fb:80:48:3e:a4:82:
a2:9d:a0:3a:c2:56:b5:ed:9a:7b:37:9f:4c:40:c5:
c9:93:04:a7:2f:b8:c7:0c:99:ae:ad:1d:4f:13:fa:
1f:86:7d:5d:83:ec:b9:33:98:5e:fd:14:3a:a8:d1:
7c:58:2c:c7:27:36:2d:30:8a:d9:54:0d:8a:39:69:
ce:86:88:ea:8f:8c:3e:bd:55:f4:2a:48:9d:02:41:
49:80:17:55:14:32:cc:99:4e:cf:70:ea:83:51:aa:
64:cb:05:0d:2e:92:7f:e6:ff:5e:ae:21:45:49:8c:
f8:86:8a:7d:af:59:ff:af:76:bd:9b:35:11:53:f1:
41:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:63:F5:FF:45:8F:1C:2B:CC:A1:FA:24:A2:01:4F:6D:52:9C:E5:16
X509v3 Authority Key Identifier:
keyid:B9:04:22:55:9B:58:C4:DA:A8:9F:22:4D:49:C7:1F:F4:4F:9B:CA:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uQQiVZtYxNqonyJNSccf9E-byjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:e1:d4:de:9a:53:9e:28:d2:50:eb:bf:7b:77:5b:42:82:f2:
31:da:8a:7e:37:f2:08:3e:aa:f7:b5:bb:eb:4c:95:9b:aa:9c:
59:84:e4:b8:27:bb:44:10:e5:c6:cd:7e:a8:5d:e8:27:71:f3:
71:14:19:69:39:ea:2b:dd:c2:b7:a6:7c:c3:73:ec:d0:7f:c7:
da:78:ec:bb:16:1a:a5:31:11:04:b9:f9:a9:92:21:b0:f8:e7:
b9:c7:f5:dd:56:fb:c1:26:f3:82:11:1e:27:07:bb:92:8f:c2:
40:6f:84:50:4b:ff:e7:6a:4b:52:46:a9:d0:da:e3:51:ae:47:
0e:66:73:72:7e:31:3a:56:fa:84:2f:a1:54:8c:d9:87:6c:96:
4d:65:81:50:fd:a4:ef:cd:f0:b3:fe:f1:73:61:a4:c6:10:97:
cb:f5:2d:21:08:ea:00:93:93:d0:48:35:dd:1e:38:1a:0a:5e:
dd:8c:e2:a0:34:f0:76:76:e8:91:bd:71:e2:9e:fc:39:3e:2b:
71:c4:75:23:e2:75:a7:f8:3c:1b:e6:15:4c:45:dd:b6:15:92:
ec:72:8c:24:e5:48:da:2e:92:51:ac:ee:02:72:81:b8:fd:23:
4f:5f:e2:1d:53:28:18:8d:b5:b7:7b:63:73:14:95:f8:a1:6a:
d0:65:95:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 12:17:00 2025 by rpki-client