
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
File: qju6qgnV04M0CJnW1TqW1UBTnAE.mft (raw, json)
Hash identifier: MmhXm6lSQk8cFVMR/G4R0bd1QmEIdJOT7PCagdKNvmc=
Subject key identifier: 2C:91:7F:A2:54:8F:B8:46:C5:53:44:05:A8:DA:C2:B9:3D:C3:DA:B1
Authority key identifier: AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01
Certificate issuer: /CN=A915A0EE/serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01
Certificate serial: 01C7
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
Manifest number: 01C4
Signing time: Wed 05 Nov 2025 03:05:40 +0000
Manifest this update: Wed 05 Nov 2025 03:05:40 +0000
Manifest next update: Wed 12 Nov 2025 03:05:40 +0000
Files and hashes: 1: qju6qgnV04M0CJnW1TqW1UBTnAE.crl (hash: p/76IoBlCEu+OuB7XHH18YK4nTano7ip559uYRZootY=)
2: 37B56C103AA111F0AB9C9C63C4F9AE02.roa (hash: 7McDM53x18516IO6Lyt3v+d1E7mua3h325oyeNt73ZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl
rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:05:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0EE, serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01
Validity
Not Before: Nov 5 03:05:40 2025 GMT
Not After : Nov 12 03:05:40 2025 GMT
Subject: CN=690abf04-7159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:c0:8e:49:2c:ee:5c:b3:e6:7a:5e:1c:22:
94:04:e1:79:ff:72:a0:c1:3b:fd:06:aa:53:76:04:
8c:36:82:5e:b7:c5:73:17:38:51:dd:d5:53:18:58:
f1:3b:47:96:b2:39:be:67:db:46:84:61:44:68:1e:
a8:26:13:ff:2f:e4:e9:a1:29:44:86:d7:a1:4e:a5:
ea:94:9a:2e:c9:68:06:bb:aa:8f:5f:34:1a:bd:d2:
a6:6e:04:f7:9f:a9:43:60:b2:e0:37:cb:6c:87:6d:
6f:fa:2b:db:c9:35:8f:34:8d:e2:f0:5b:96:14:a5:
d3:41:a3:92:21:dd:b4:9d:2e:da:c1:40:9b:fb:2d:
00:8f:59:50:97:e9:f0:07:03:88:57:f5:f0:58:9a:
8c:84:7e:b6:7c:9d:86:5c:e1:55:de:b3:74:fc:7b:
31:f1:7d:90:bd:71:5a:04:e6:97:6f:5a:1d:8e:f4:
d9:48:5e:12:f9:5b:6a:a3:52:2a:05:48:a8:07:74:
fd:d2:ad:06:5f:bc:e3:b9:56:fe:34:39:29:dd:42:
bc:bf:10:aa:f2:18:31:ab:99:07:4a:e2:58:dc:6a:
45:60:66:48:24:ab:02:20:97:5d:4a:e7:b2:4a:71:
17:c3:46:af:45:9c:a1:72:b6:e6:9a:4a:d5:b6:93:
4f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:91:7F:A2:54:8F:B8:46:C5:53:44:05:A8:DA:C2:B9:3D:C3:DA:B1
X509v3 Authority Key Identifier:
keyid:AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:63:8b:65:5b:45:19:79:ee:7d:2e:60:c9:a6:2a:3f:d2:16:
17:53:bf:f8:1f:9a:10:e9:3a:68:2a:22:48:7e:61:ab:9b:19:
7e:30:21:11:6a:75:a9:2c:0f:86:71:e1:1a:b3:dc:f9:e9:06:
aa:8d:28:23:56:2b:c2:a4:0b:60:5d:21:83:b5:44:19:7c:b4:
ac:c9:46:48:22:02:7e:34:4c:6f:a9:c2:0f:0c:2a:ba:29:a6:
a1:4b:8c:d7:9b:9e:22:68:f0:d4:89:ac:cc:c5:03:25:9e:0b:
39:9a:b9:16:cf:b7:99:6c:36:c8:52:41:98:90:c4:23:45:b3:
80:3e:af:cb:01:ac:07:2f:75:9b:70:66:c1:e3:ed:31:c8:95:
0a:40:66:7e:1f:92:40:c4:bf:cd:8e:bd:dc:6f:36:87:43:ad:
ed:95:09:1f:b7:b6:f3:01:c2:9f:5a:84:3a:e8:0d:40:ec:a1:
9e:70:f1:ff:3d:81:f4:d0:62:7f:97:c4:28:08:0d:38:b8:9c:
62:8c:cb:ae:60:19:16:ae:dd:4e:3d:7b:61:d2:96:4b:79:c2:
09:a5:9d:32:22:0f:34:e3:0c:f4:75:ec:48:4f:52:c3:ef:ae:
86:7f:81:f0:6d:44:48:2e:61:a1:48:f4:7f:fd:56:2a:82:3b:
e5:ef:93:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:52:16 2025 by rpki-client