
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
File: PmqgA4_dRmnJDxiDgji35BAt3Bk.mft (raw, json)
Hash identifier: gyQgRCE8cZzHs/pZoodFB2JiL9PcyxiXVfcJnH47Rxs=
Subject key identifier: 2B:AD:A0:FE:E0:37:FE:31:5E:14:AF:31:23:69:3D:90:91:2F:E0:95
Authority key identifier: 3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19
Certificate issuer: /CN=A9161322/serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
Manifest number: 0154
Signing time: Wed 05 Nov 2025 04:17:55 +0000
Manifest this update: Wed 05 Nov 2025 04:17:55 +0000
Manifest next update: Wed 12 Nov 2025 04:17:55 +0000
Files and hashes: 1: PmqgA4_dRmnJDxiDgji35BAt3Bk.crl (hash: onqaAd9mIO2PxCfEvghmg9KdmWd8+9kTNtKNL6a924c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl
rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161322, serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19
Validity
Not Before: Nov 5 04:17:55 2025 GMT
Not After : Nov 12 04:17:55 2025 GMT
Subject: CN=690acff3-5de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:51:a7:f0:43:b0:e6:1e:50:46:a2:ff:d3:
12:23:e8:5d:95:21:bf:7a:db:f7:ff:3b:38:bd:0e:
13:af:ba:82:bc:37:a3:d0:60:d0:ae:39:53:cd:34:
9d:fd:ad:96:d7:67:97:14:8c:63:97:52:3d:e8:fc:
e6:cb:44:83:49:39:17:ad:80:35:0c:a2:96:d1:fc:
ce:43:04:56:94:9e:81:3f:40:b7:5d:82:db:71:03:
20:5a:34:a3:87:42:e0:87:a8:c1:96:40:c8:30:b6:
b2:5a:d4:4d:ec:e7:86:42:4e:bd:8e:66:1f:7c:38:
a1:23:58:f1:c5:fb:5a:a1:f1:9e:1c:b4:3f:6a:ee:
69:00:b8:77:92:8a:ca:03:87:63:58:1a:fd:8f:92:
f2:c5:d5:64:8e:5f:05:3c:04:06:f8:aa:84:9f:73:
73:a4:cb:84:c2:46:0a:66:dc:83:07:12:9f:a3:66:
ce:7b:d3:7c:59:7d:dd:2f:a9:f0:61:4d:4d:86:8e:
74:c8:11:66:e6:c0:22:ee:0a:67:73:ec:ec:d6:47:
9a:e9:c6:de:8f:1f:fe:e7:59:3a:91:b1:4f:60:91:
63:3d:a1:ea:e6:f9:47:f2:b3:97:32:54:93:a2:3e:
36:a1:77:ab:9b:d9:76:4a:5e:14:90:c9:0a:ed:18:
6a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AD:A0:FE:E0:37:FE:31:5E:14:AF:31:23:69:3D:90:91:2F:E0:95
X509v3 Authority Key Identifier:
keyid:3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:7e:2c:82:b0:2b:c8:73:8c:ce:05:08:c4:93:01:7e:5d:b3:
01:ca:c5:3a:73:b8:e7:32:77:57:cc:11:6a:07:75:93:55:24:
b0:21:a8:cd:73:d7:63:67:83:16:86:51:3e:c1:ff:f0:86:37:
ff:93:a2:0b:c2:7f:04:44:c3:04:1e:09:98:7e:8b:9d:f6:7b:
63:27:79:ed:d1:86:94:9c:77:e8:f4:28:e0:d4:32:7e:e8:04:
48:38:b2:1d:f9:e4:34:3a:98:7a:9a:36:70:43:cf:33:e9:67:
71:5b:d8:db:8a:79:19:67:83:16:03:95:8f:85:5a:90:cf:0b:
3d:b3:8f:4f:f8:8f:58:e4:c5:8f:2a:48:4a:3b:b1:82:85:30:
14:f6:a3:a2:f9:2b:c5:49:97:22:45:fc:cd:e6:dd:b5:7e:a3:
0d:a4:80:ae:45:2b:bd:7b:98:fd:4c:ce:99:2d:b2:f0:3b:11:
17:51:fe:c2:d4:48:d7:ca:54:62:c8:84:25:36:9b:0f:2c:08:
03:bb:ef:2b:7b:c1:bf:ea:7f:c5:3a:0c:4b:ed:8b:36:3a:8e:
1b:c9:b0:5c:62:c8:b4:3b:6e:04:f0:43:99:ef:eb:24:36:ae:
5c:36:cd:17:bf:3f:9b:4a:61:10:7a:10:88:43:ea:0d:31:d5:
fd:0d:a0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:47:31 2025 by rpki-client