
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
File: Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft (raw, json)
Hash identifier: gvWecvpKAAdd2N7QcCfF+iAWQc0oK3WgNl8BvFK8ovc=
Subject key identifier: 5C:5F:08:FA:7D:6C:71:5D:C6:2A:A1:DA:7F:A7:E5:4F:DF:F5:E5:C2
Authority key identifier: 41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28
Certificate issuer: /CN=A913D6C9/serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428
Certificate serial: 04D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
Manifest number: 04CC
Signing time: Tue 04 Nov 2025 23:57:31 +0000
Manifest this update: Tue 04 Nov 2025 23:57:30 +0000
Manifest next update: Tue 11 Nov 2025 23:57:30 +0000
Files and hashes: 1: Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl (hash: KSvpKPLPNsExTXkpJ8tIfpFBn6MeA88bx8tCdFgcW60=)
2: 54AC9B64C3B411EEBF90C180C4F9AE02.roa (hash: BPstFCUC7r4sqZcas3tBZS1NiGfkeUG5bomyvOkC2W0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl
rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 23:57:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1238 (0x4d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D6C9, serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428
Validity
Not Before: Nov 4 23:57:30 2025 GMT
Not After : Nov 11 23:57:30 2025 GMT
Subject: CN=690a92eb-387c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:26:38:8d:dd:be:38:84:49:bb:6b:73:9a:ea:
16:06:71:cd:2b:6c:fb:29:80:63:be:0b:ab:bc:83:
20:37:a6:11:a4:89:76:a8:d9:b5:9b:95:04:42:eb:
a1:06:d3:30:54:29:37:ee:70:1b:72:67:55:43:50:
14:fd:67:1b:2f:a9:ef:28:9f:ca:3f:0c:f4:e3:e6:
b4:8d:1d:53:e3:55:89:90:a3:8d:e1:17:bb:8d:33:
c6:29:99:f5:a2:ea:ae:38:6c:ff:8b:66:97:31:4d:
70:46:c5:9d:5c:3b:f7:a0:0e:8f:03:bc:df:f1:5f:
70:c4:bc:71:63:0c:27:db:28:b3:3b:33:af:fa:d9:
54:46:ac:a8:cb:b1:a8:af:49:f4:b9:b4:98:83:34:
52:ce:4e:9e:b5:86:8a:fe:90:c0:3a:cf:8a:14:7e:
89:79:8d:f4:ee:ee:c0:78:9e:3d:e1:1b:a1:36:d7:
72:79:e7:2c:5c:b5:ba:f9:d0:97:06:c8:64:3a:87:
59:92:cf:2c:d8:c4:eb:e1:d9:b7:ec:46:28:8c:4f:
5b:27:73:e5:77:06:54:3c:85:7e:ec:13:c5:ec:35:
94:60:d1:e5:f8:df:62:dc:0c:9e:b0:a4:82:79:f7:
cf:ac:d3:69:8f:a4:e2:c3:40:cd:ab:b7:28:1b:8d:
20:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5F:08:FA:7D:6C:71:5D:C6:2A:A1:DA:7F:A7:E5:4F:DF:F5:E5:C2
X509v3 Authority Key Identifier:
keyid:41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:ea:79:20:71:8c:d0:2b:02:54:11:13:5f:42:24:7f:15:34:
a2:94:17:e1:59:f7:40:dd:ee:39:e3:23:c2:a1:45:33:53:98:
cf:28:3c:2a:a5:e8:a7:0c:0f:6b:95:9e:6c:ea:d3:7b:f7:56:
be:66:a5:f3:65:2a:47:bd:4f:c9:74:d1:32:cf:2d:9f:c4:1c:
dc:bb:99:5d:97:2d:7e:62:c8:9c:ce:80:27:7f:81:ad:1a:3e:
2a:bf:91:83:5c:9a:f7:ab:42:0c:3e:20:49:00:63:e1:37:0d:
bf:51:da:fa:ca:46:90:76:dd:08:6f:b7:19:56:8f:e7:16:d6:
37:ef:ac:9c:5e:2e:98:c1:70:ac:6b:fe:97:84:9e:1c:35:ca:
e0:c3:6f:67:9a:77:80:f9:29:27:50:3e:1c:59:b1:f3:5e:9a:
be:c1:7e:21:79:b2:18:03:9a:cd:88:1a:1d:12:72:08:82:db:
24:91:f7:25:d3:22:41:16:1c:3d:d8:f6:b7:2f:37:dc:d0:c6:
1d:cb:2d:b2:36:c0:77:99:9d:fe:33:21:a3:9c:3f:ee:b3:51:
99:d2:94:22:ac:8e:20:89:c1:5c:9c:d1:e4:71:ee:64:67:59:
79:f9:bd:a2:41:c0:8c:d5:7c:7c:38:42:ae:4a:27:57:d0:d1:
3f:1f:8b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:30:12 2025 by rpki-client