
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
File: ifWWEQAwvcmzutds_QXDEkYXyVI.mft (raw, json)
Hash identifier: akA4wl6/+uZYEjMhkdJRXXLV7pchXhGqWTMPGhVH1OY=
Subject key identifier: B9:70:A3:3F:85:46:82:20:83:40:6F:B8:A7:CB:D3:BA:15:F3:E6:65
Authority key identifier: 89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
Certificate issuer: /CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Certificate serial: 044C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
Manifest number: 043F
Signing time: Tue 04 Nov 2025 05:29:45 +0000
Manifest this update: Tue 04 Nov 2025 05:29:44 +0000
Manifest next update: Tue 11 Nov 2025 05:29:44 +0000
Files and hashes: 1: ifWWEQAwvcmzutds_QXDEkYXyVI.crl (hash: +RG1i9ejAI/jNcsqi/Z4DU/Gs+onCcedr9Op/apn2mY=)
2: 969AE080A14211EC8C49D660C4F9AE02.roa (hash: n7VFHzeUDeBuyUWNvkox2wNIAXMws0upgX8rIok/ab4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl
rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 05:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1100 (0x44c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EA62, serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Validity
Not Before: Nov 4 05:29:44 2025 GMT
Not After : Nov 11 05:29:44 2025 GMT
Subject: CN=69098f49-ce4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f9:38:c2:31:f0:8c:06:fd:99:3c:a3:45:4f:
e7:0a:b5:d8:a4:fc:bb:0c:14:10:2f:a0:1d:88:30:
2a:5c:bb:88:6d:b8:cf:6c:84:10:a5:bc:aa:2c:d8:
97:ec:8c:4c:42:0b:d4:3f:ba:b5:15:30:d5:ed:38:
d3:a8:eb:e2:e5:eb:ad:3f:48:85:df:33:3c:52:82:
87:42:46:2a:67:4c:bb:61:fa:55:a6:6f:86:d8:f5:
0c:2b:31:44:3a:5a:98:51:a2:9e:c7:74:3e:56:b0:
96:78:a3:ba:34:f1:ed:a2:d2:59:7e:fd:fe:ed:e2:
e9:56:07:a1:ff:a1:ba:bb:12:43:ce:95:44:cf:78:
b6:bd:eb:27:4f:ff:ef:44:0b:99:59:3d:57:7f:ff:
1d:a8:9f:56:ec:6f:4f:03:d4:c7:87:62:75:40:29:
72:7a:dc:7a:a1:42:68:6a:ec:0c:b9:09:95:b1:f0:
3b:ce:99:8c:ab:61:5e:5b:b8:09:ba:97:ad:ef:a6:
c8:c9:4e:97:f4:36:d8:b1:91:50:e2:08:0a:64:9b:
68:38:7b:62:18:5d:ca:fc:dd:e2:25:b1:55:7e:c8:
75:e6:3c:ed:e9:65:dc:a9:94:bd:cd:43:fd:8e:e3:
89:19:17:7b:0a:6d:2b:34:b0:00:f9:8a:e4:72:dc:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:70:A3:3F:85:46:82:20:83:40:6F:B8:A7:CB:D3:BA:15:F3:E6:65
X509v3 Authority Key Identifier:
keyid:89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:de:0c:86:34:2a:f2:58:d4:d5:ef:8e:16:56:ae:51:1c:eb:
54:7b:2f:a8:9b:36:9d:ec:8e:47:6c:42:4b:da:38:d2:fb:40:
e1:4c:f2:c4:47:07:5f:db:0f:74:e4:97:aa:62:b8:6e:16:87:
e1:52:af:2e:37:29:30:ab:87:b0:0a:24:11:14:d4:2e:9f:ec:
ea:f7:f3:14:9d:72:d6:09:4f:1e:58:ce:74:a7:7f:38:eb:39:
6b:49:3e:a9:2e:1d:81:60:3d:ef:ea:2d:4e:ad:b8:c0:1e:97:
fa:31:ce:4b:f2:54:1f:e4:2f:e8:bd:7d:5a:87:92:c5:3f:29:
e1:88:0c:49:d4:b1:a3:00:0b:bc:1f:52:fe:be:fa:45:f1:f1:
4d:c7:56:43:be:42:da:a8:37:b5:cb:63:d7:46:2b:d8:3a:c9:
39:35:43:29:7d:36:39:99:6b:fe:62:ac:3c:04:6a:58:39:7f:
63:7b:30:38:0d:17:60:f6:a3:77:17:e2:e1:a2:67:9c:05:e6:
9c:ac:88:36:4d:a7:ac:32:7f:7e:1e:37:42:d2:98:84:d3:1b:
7a:95:18:fb:ca:a8:75:54:46:d2:03:40:7c:df:09:9a:6a:ac:
da:aa:83:84:70:3f:d1:d4:06:a6:78:d2:82:63:70:4a:ec:db:
61:a9:e1:b5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUVBNjIxMTAvBgNVBAUTKDg5RjU5NjExMDAzMEJEQzlCM0JBRDc2Q0ZEMDVDMzEy
NDYxN0M5NTIwHhcNMjUxMTA0MDUyOTQ0WhcNMjUxMTExMDUyOTQ0WjAYMRYwFAYD
VQQDEw02OTA5OGY0OS1jZTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvfk4wjHwjAb9mTyjRU/nCrXYpPy7DBQQL6AdiDAqXLuIbbjPbIQQpbyqLNiX
7IxMQgvUP7q1FTDV7TjTqOvi5eutP0iF3zM8UoKHQkYqZ0y7YfpVpm+G2PUMKzFE
OlqYUaKex3Q+VrCWeKO6NPHtotJZfv3+7eLpVgeh/6G6uxJDzpVEz3i2vesnT//v
RAuZWT1Xf/8dqJ9W7G9PA9THh2J1QClyetx6oUJoauwMuQmVsfA7zpmMq2FeW7gJ
upet76bIyU6X9DbYsZFQ4ggKZJtoOHtiGF3K/N3iJbFVfsh15jzt6WXcqZS9zUP9
juOJGRd7Cm0rNLAA+YrkctyyPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlwoz+F
RoIgg0BvuKfL07oV8+ZlMB8GA1UdIwQYMBaAFIn1lhEAML3Js7rXbP0FwxJGF8lS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUE2Mi8xMTY4MjExQzgw
NkMxMUVDOTJCNTFDNUFDNEY5QUUwMi9pZldXRVFBd3ZjbXp1dGRzX1FYREVrWVh5
VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lmV1dFUUF3dmNtenV0ZHNfUVhERWtZWHlWSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RUE2Mi8xMTY4MjExQzgwNkMxMUVDOTJCNTFDNUFDNEY5QUUwMi9pZldXRVFBd3Zj
bXp1dGRzX1FYREVrWVh5VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAm3gyGNCryWNTV744WVq5RHOtUey+omzad7I5HbEJL2jjS+0DhTPLE
Rwdf2w905JeqYrhuFofhUq8uNykwq4ewCiQRFNQun+zq9/MUnXLWCU8eWM50p384
6zlrST6pLh2BYD3v6i1OrbjAHpf6Mc5L8lQf5C/ovX1ah5LFPynhiAxJ1LGjAAu8
H1L+vvpF8fFNx1ZDvkLaqDe1y2PXRivYOsk5NUMpfTY5mWv+Yqw8BGpYOX9jezA4
DRdg9qN3F+LhomecBeacrIg2TaesMn9+HjdC0piE0xt6lRj7yqh1VEbSA0B83wma
aqzaqoOEcD/R1AameNKCY3BK7NthqeG1
-----END CERTIFICATE-----
Generated at Tue Nov 4 16:40:14 2025 by rpki-client