
$ rpki-client -vvf rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft
File: q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft (raw, json)
Hash identifier: g4Y+HtSPgNZN54x8oK5G3C04nLar0gVEiXhaqCFj3fo=
Subject key identifier: 2A:08:78:FF:AB:8C:0E:C9:64:48:B3:C2:64:B2:0C:82:58:92:8B:53
Authority key identifier: AB:A6:C0:C4:6C:E8:87:A6:39:D0:DE:07:13:3A:E1:FF:CC:0D:2D:91
Certificate issuer: /CN=A914845D/serialNumber=ABA6C0C46CE887A639D0DE07133AE1FFCC0D2D91
Certificate serial: 0687
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft
Manifest number: 0682
Signing time: Tue 04 Nov 2025 22:32:13 +0000
Manifest this update: Tue 04 Nov 2025 22:32:12 +0000
Manifest next update: Tue 11 Nov 2025 22:32:12 +0000
Files and hashes: 1: q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl (hash: O3IPlLh9eT3toVhHEBNMYbTxg2K+Nb1Q89aguQ2Ear4=)
2: 96A61404AAA911EBA223275EC4F9AE02.roa (hash: E9czvgeh6YRFhRYFfzW1p9Rsfnmm6YmfPInujvKlVu4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl
rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1671 (0x687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914845D, serialNumber=ABA6C0C46CE887A639D0DE07133AE1FFCC0D2D91
Validity
Not Before: Nov 4 22:32:12 2025 GMT
Not After : Nov 11 22:32:12 2025 GMT
Subject: CN=690a7eec-9b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:e0:9f:d3:8c:93:b4:11:a9:24:98:b7:f2:
61:2d:34:96:c9:0a:74:e6:c9:43:a8:16:f3:23:39:
d8:46:e6:4f:7e:b9:3d:f4:a7:fc:6e:17:ae:aa:e6:
72:25:d0:fe:0b:be:59:f7:b9:cd:98:cd:fb:12:95:
f8:c0:43:72:14:bb:8b:75:2b:61:ae:3f:4f:56:a6:
f9:c3:54:b1:99:3d:d1:77:9f:41:21:c2:d3:fb:ac:
e2:fb:8d:3c:c6:af:67:5e:17:90:a4:65:25:6f:f0:
18:47:31:cd:c0:e9:0b:d8:07:63:a1:45:f5:98:ea:
67:31:7d:76:d3:81:18:ad:9d:63:11:52:a7:e6:fc:
86:be:8c:f1:b3:f9:61:69:fb:c7:a7:12:e3:0d:80:
b6:14:9c:49:38:57:c2:f3:32:37:9f:78:54:20:d0:
c2:2a:f6:b5:57:c5:09:fb:d4:d4:46:d6:22:92:52:
a5:95:dc:55:be:15:fe:41:80:2a:1a:ff:7e:d5:44:
d3:69:79:96:de:f4:32:ed:14:33:83:5d:fa:07:12:
a3:bd:23:a0:e9:45:4c:6b:05:46:33:06:fc:dd:cd:
28:3c:b4:b1:08:7b:51:e5:e2:a1:5a:2d:04:82:9f:
fa:c0:0a:14:18:8f:eb:b9:00:25:57:3f:02:f0:c2:
fb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:08:78:FF:AB:8C:0E:C9:64:48:B3:C2:64:B2:0C:82:58:92:8B:53
X509v3 Authority Key Identifier:
keyid:AB:A6:C0:C4:6C:E8:87:A6:39:D0:DE:07:13:3A:E1:FF:CC:0D:2D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c2:5e:f4:38:c4:a5:8c:6b:ca:44:bd:3f:5b:27:54:ec:5e:
3f:8d:c0:3d:c4:4e:e5:eb:bb:68:cd:e1:22:dc:43:68:0e:38:
e0:be:b2:44:95:f5:0a:86:7d:7f:84:bd:90:c2:6d:62:44:ff:
f8:cb:25:76:13:d8:5a:7a:6d:89:1e:03:24:e1:81:89:cf:e8:
ec:73:a1:5b:ae:c7:3d:23:f9:7e:02:16:aa:d6:06:a6:9d:d6:
dd:be:a5:05:b9:fa:16:5f:d6:ea:ff:6a:e7:7d:27:6a:c9:c8:
cf:6b:c7:1e:f1:85:f4:4d:29:ef:1b:78:33:87:62:cd:3e:c2:
12:0e:96:23:8c:ce:d3:e2:7b:ac:59:3e:7a:14:fb:e1:ef:d2:
92:c4:9f:a0:9a:c5:80:ec:c2:2d:a4:ed:38:62:40:45:12:d7:
32:20:06:ad:43:02:f3:c7:41:47:8e:f6:56:f1:c1:a8:67:00:
9c:8c:63:87:7b:dd:f2:fd:3d:29:69:a9:b5:07:78:49:5e:a6:
52:01:61:89:64:da:c1:a6:14:64:f5:b1:f4:02:20:89:8d:e3:
33:19:70:88:07:67:72:f5:60:24:26:99:9d:be:2e:73:8b:5e:
1a:35:0e:00:8f:5f:3a:e9:d5:d9:85:6f:ed:e3:46:97:1e:9b:
55:b4:db:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:25:26 2025 by rpki-client