
$ rpki-client -vvf rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
File: QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft (raw, json)
Hash identifier: azfmOj6DwpnD22vpHGhpJNL5PkRCyMzBgyB4Oj7ZPvI=
Subject key identifier: 3C:C1:12:C1:93:30:4E:D7:92:FC:75:9F:E0:62:A1:F1:C4:CF:A1:E2
Authority key identifier: 40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE
Certificate issuer: /CN=A913631F/serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
Certificate serial: 9A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
Manifest number: 99
Signing time: Mon 03 Nov 2025 06:23:52 +0000
Manifest this update: Mon 03 Nov 2025 06:23:51 +0000
Manifest next update: Mon 10 Nov 2025 06:23:51 +0000
Files and hashes: 1: QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl (hash: 02HPa6YmGboxRW6iVgzzItGyNK2386AiKnW8jKNI/s0=)
2: CA9B891ACF1C11EF981F2F86C4F9AE02.roa (hash: DSiGqsj/wHYJqRQngYpUalsfP9r6Z3qaSue0LX+uo6I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl
rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:23:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913631F, serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
Validity
Not Before: Nov 3 06:23:51 2025 GMT
Not After : Nov 10 06:23:51 2025 GMT
Subject: CN=69084a77-80d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2b:27:8b:92:4b:9d:a6:81:a6:89:ad:9b:2e:
be:27:71:dc:76:84:41:7e:c2:79:b7:60:f4:8b:ca:
d7:6c:d6:9a:a3:be:46:ad:44:22:42:e7:f3:b9:8c:
c5:bf:8f:c5:8d:fb:6d:a3:8b:d1:93:06:71:25:fe:
3a:d0:28:fd:b0:03:12:69:ef:f5:29:28:89:b0:cc:
e2:55:ea:3d:81:cc:56:a5:7d:f7:1d:7e:e8:79:d4:
b6:55:b4:3d:17:ff:47:23:c8:63:1e:ab:87:0c:2c:
bb:a9:66:31:f1:e6:90:d5:c8:02:ae:cc:e1:f0:cd:
f1:db:37:f0:1b:8d:0b:1c:7b:e5:f8:29:92:e7:ee:
6b:79:a8:f7:4c:a1:15:61:5d:6c:4e:96:4d:48:39:
0f:61:dc:6d:d7:0e:45:b9:13:11:cc:bb:56:64:0f:
48:34:4d:b2:ea:6f:44:aa:b7:df:0a:fe:79:55:dd:
cd:cc:2c:6b:32:25:c6:15:9f:c7:9a:60:83:72:5b:
f2:ba:6a:0f:82:13:f6:12:db:26:a7:54:b6:8a:00:
aa:c1:cb:ac:c0:e7:13:f2:e3:eb:0f:00:e3:1c:9b:
88:a3:2b:29:4b:27:60:09:43:e1:ad:08:47:90:b8:
7d:15:54:53:75:86:4a:0d:a4:b2:34:2e:65:78:8e:
45:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C1:12:C1:93:30:4E:D7:92:FC:75:9F:E0:62:A1:F1:C4:CF:A1:E2
X509v3 Authority Key Identifier:
keyid:40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:2c:2a:55:18:a0:50:72:7f:cb:c4:07:ef:72:52:97:69:dc:
3c:bc:e0:16:a6:52:a1:26:e0:71:2d:da:4a:b4:7a:e3:a7:40:
6d:e4:70:fb:cf:23:0c:2d:ba:8a:e8:c9:10:b6:a3:c6:e7:05:
4a:95:7b:66:e2:7e:fb:cc:45:89:12:87:14:36:85:41:5f:52:
0b:b2:fc:eb:15:6c:da:18:83:a6:1f:32:4e:b7:d3:7d:e5:a7:
a0:08:46:c6:f4:ad:10:68:2b:eb:b6:cf:7b:2b:ff:1f:0a:e9:
87:cf:8c:b0:6d:f1:16:54:e0:05:e8:6b:21:7a:08:b2:1b:02:
e1:36:25:54:88:a7:63:1e:c3:de:f4:d9:94:18:e9:17:12:81:
8f:b1:1b:bc:91:9f:a1:df:4f:cd:84:4f:54:d6:68:8d:bf:88:
2c:f1:c7:51:e5:85:4e:02:69:10:de:94:16:16:ab:76:1a:12:
f5:4d:08:a3:5d:83:32:6d:44:13:8e:5f:f0:91:77:c7:56:2e:
93:59:9a:c8:20:6e:a7:53:80:9a:ae:c4:09:2e:57:29:1d:f4:
24:f3:3a:6e:db:d3:2f:f5:87:57:30:5d:d4:fc:12:93:48:84:
10:04:64:e6:46:eb:49:8f:72:ef:20:9e:a7:fa:21:1f:41:2a:
0b:61:11:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:15:41 2025 by rpki-client