
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
File: NQcxtmBE00o9LadYm9gzHRRf5Jg.mft (raw, json)
Hash identifier: HnOneuNA3/eSbllBX3dHfeJ7ldtuyakP9nMPqRdk1Jk=
Subject key identifier: 06:17:BB:82:9B:8D:AA:14:A5:AD:DA:54:1D:0D:3C:B9:0D:73:4D:F6
Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98
Certificate issuer: /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
Certificate serial: 011C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
Manifest number: 0118
Signing time: Wed 05 Nov 2025 04:58:07 +0000
Manifest this update: Wed 05 Nov 2025 04:58:07 +0000
Manifest next update: Wed 12 Nov 2025 04:58:07 +0000
Files and hashes: 1: NQcxtmBE00o9LadYm9gzHRRf5Jg.crl (hash: fwNu5otgA4VO670Gle/UkEKUqVZ0Bwnr6PaEvvksZgw=)
2: 7036FFF00E9611EF8B4CB827C4F9AE02.roa (hash: ppr+f3CQLMrxRnmkUupoZgwnP/LYRvSbiOC7CwxVMhs=)
3: 6FC4A52C0E9611EF8B4CB827C4F9AE02.roa (hash: G6b5iOlkKludFCzss6jnAMWJYZcz6E/s4QELN3EDX6c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl
rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:58:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
Validity
Not Before: Nov 5 04:58:07 2025 GMT
Not After : Nov 12 04:58:07 2025 GMT
Subject: CN=690ad95f-424f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:7b:23:20:09:8f:23:0f:30:83:d7:21:dc:
cb:9e:17:82:38:7a:20:87:c4:05:c5:ef:4c:1f:94:
12:b3:bb:93:b3:72:16:70:ff:61:96:11:ed:18:73:
b7:32:6c:28:8f:e3:4d:2d:fe:5f:cd:3d:29:6c:09:
56:ac:84:ce:13:0c:4a:94:ed:de:76:c6:03:c6:83:
c3:96:41:9f:40:55:7d:ed:2d:8a:be:7c:a5:e2:17:
d9:50:38:32:9d:68:84:75:48:60:04:86:a0:0d:13:
83:1e:2d:df:e6:e4:48:89:0c:da:d4:57:6c:4c:9d:
5e:ff:57:11:ab:60:3a:8a:90:9b:21:ce:24:89:c6:
39:1e:b5:2c:0a:06:ec:58:94:cb:88:69:67:6d:0c:
fe:08:a7:01:c2:a5:9a:85:7c:b8:c0:fc:b6:54:92:
d0:bd:cc:2f:58:bd:1e:15:7d:a5:f4:85:ef:e5:ae:
48:8a:20:1a:1b:86:36:62:6e:97:b8:07:a1:87:34:
b5:85:cd:92:b9:e3:09:f7:fe:df:84:85:29:97:66:
60:4b:60:5c:50:67:5f:e7:c5:bd:aa:9e:82:bd:d6:
9c:00:f0:f5:d3:42:04:52:b7:53:1c:0a:81:b3:99:
ef:8b:ad:92:5f:74:9f:73:25:59:53:ce:19:bc:f3:
d1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:17:BB:82:9B:8D:AA:14:A5:AD:DA:54:1D:0D:3C:B9:0D:73:4D:F6
X509v3 Authority Key Identifier:
keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:e7:87:73:49:4a:ee:ae:6a:bb:bb:93:bb:f4:3b:6c:27:38:
91:85:d8:38:90:35:bc:5d:85:53:4e:55:3f:b7:e9:d2:fc:20:
cf:6a:f4:71:d3:a3:8c:35:95:52:a6:99:db:a7:88:af:00:56:
d2:95:31:5f:a3:df:0e:f2:38:26:f0:e0:63:ab:53:d0:64:03:
d3:91:de:d1:78:30:83:69:e8:74:8f:67:8c:a0:5f:8a:55:36:
21:cd:8c:8a:ae:c4:45:fb:c8:9a:5e:fe:7a:07:a6:3d:fd:91:
bc:ac:6b:f5:77:64:71:0d:da:7b:7a:33:da:89:77:3b:f8:58:
a3:81:c5:c0:a1:c8:6c:0f:c5:bc:92:e1:58:39:e2:9a:c4:4b:
4d:08:d0:78:3e:5b:b4:6d:85:21:f2:4a:79:45:54:5b:d6:2a:
e9:91:28:a7:4e:dd:d0:7a:7e:76:0a:ff:7b:4a:e2:34:d6:91:
64:32:af:1d:90:40:48:78:36:71:55:f6:ed:13:8e:50:18:1f:
34:a5:09:7e:19:6a:53:6a:51:33:39:6e:e9:59:7a:e5:0d:07:
b9:4d:a6:03:2c:cd:ae:70:ee:a7:02:fa:e1:64:78:7f:29:67:
9d:1b:cd:01:38:3a:b4:e3:40:19:2f:59:d7:f6:b5:7d:a2:fa:
c5:c4:0c:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MThBNjkxMTAvBgNVBAUTKDM1MDczMUI2NjA0NEQzNEEzRDJEQTc1ODlCRDgzMzFE
MTQ1RkU0OTgwHhcNMjUxMTA1MDQ1ODA3WhcNMjUxMTEyMDQ1ODA3WjAYMRYwFAYD
VQQDEw02OTBhZDk1Zi00MjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAugx7IyAJjyMPMIPXIdzLnheCOHogh8QFxe9MH5QSs7uTs3IWcP9hlhHtGHO3
Mmwoj+NNLf5fzT0pbAlWrITOEwxKlO3edsYDxoPDlkGfQFV97S2Kvnyl4hfZUDgy
nWiEdUhgBIagDRODHi3f5uRIiQza1FdsTJ1e/1cRq2A6ipCbIc4kicY5HrUsCgbs
WJTLiGlnbQz+CKcBwqWahXy4wPy2VJLQvcwvWL0eFX2l9IXv5a5IiiAaG4Y2Ym6X
uAehhzS1hc2SueMJ9/7fhIUpl2ZgS2BcUGdf58W9qp6CvdacAPD100IEUrdTHAqB
s5nvi62SX3SfcyVZU84ZvPPRUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYXu4Kb
jaoUpa3aVB0NPLkNc032MB8GA1UdIwQYMBaAFDUHMbZgRNNKPS2nWJvYMx0UX+SY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEE2OS9DNjIwMTFENjBD
RTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAwbzlMYWRZbTlnekhSUmY1
SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05RY3h0bUJFMDBvOUxhZFltOWd6SFJSZjVKZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OEE2OS9DNjIwMTFENjBDRTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAw
bzlMYWRZbTlnekhSUmY1SmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBW54dzSUrurmq7u5O79DtsJziRhdg4kDW8XYVTTlU/t+nS/CDPavRx
06OMNZVSppnbp4ivAFbSlTFfo98O8jgm8OBjq1PQZAPTkd7ReDCDaeh0j2eMoF+K
VTYhzYyKrsRF+8iaXv56B6Y9/ZG8rGv1d2RxDdp7ejPaiXc7+FijgcXAochsD8W8
kuFYOeKaxEtNCNB4Plu0bYUh8kp5RVRb1irpkSinTt3Qen52Cv97SuI01pFkMq8d
kEBIeDZxVfbtE45QGB80pQl+GWpTalEzOW7pWXrlDQe5TaYDLM2ucO6nAvrhZHh/
KWedG80BODq040AZL1nX9rV9ovrFxAxZ
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:37:20 2025 by rpki-client