
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.mft
File: SvQPQ3ii6YvubHhNi9uegu22bJ8.mft (raw, json)
Hash identifier: z6vsqNr49NXhtCkg8r70Vy4My0kskWvUxRAOy9TQDAI=
Subject key identifier: D9:34:39:24:CB:A8:AE:92:A2:7D:E2:0A:A8:B4:9F:21:C4:7E:23:3F
Authority key identifier: 4A:F4:0F:43:78:A2:E9:8B:EE:6C:78:4D:8B:DB:9E:82:ED:B6:6C:9F
Certificate issuer: /CN=A9162439/serialNumber=4AF40F4378A2E98BEE6C784D8BDB9E82EDB66C9F
Certificate serial: 080B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SvQPQ3ii6YvubHhNi9uegu22bJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.mft
Manifest number: 0800
Signing time: Tue 04 Nov 2025 21:05:39 +0000
Manifest this update: Tue 04 Nov 2025 21:05:38 +0000
Manifest next update: Tue 11 Nov 2025 21:05:38 +0000
Files and hashes: 1: SvQPQ3ii6YvubHhNi9uegu22bJ8.crl (hash: xZlZn+VTdV104YLFfj3eflfIkNytvs0MBHuDk9qpzcU=)
2: 95CAE87C6BF311EDA6D4C167C4F9AE02.roa (hash: wCm3as74zJ4XjRubAtlS5EHH43MNK7h4EVOT5pHG310=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.crl
rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SvQPQ3ii6YvubHhNi9uegu22bJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:05:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2059 (0x80b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162439, serialNumber=4AF40F4378A2E98BEE6C784D8BDB9E82EDB66C9F
Validity
Not Before: Nov 4 21:05:38 2025 GMT
Not After : Nov 11 21:05:38 2025 GMT
Subject: CN=690a6aa2-d87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8b:12:09:b5:cd:62:79:76:c9:33:ca:1c:4d:
20:3d:3f:b9:2a:4b:d6:de:d2:f9:11:c2:ac:1b:a0:
ce:cf:91:be:98:f0:cf:c3:db:c9:cc:66:9e:3b:65:
16:05:e4:6b:e4:12:11:11:99:fb:a3:b7:3a:16:8c:
16:05:33:1a:0a:b4:14:62:f2:e5:d9:c8:bf:a0:21:
78:57:e2:e0:d8:d5:a8:f2:c6:28:99:42:40:07:2e:
47:66:ee:01:8e:e2:16:a2:ff:a5:7e:fe:a5:aa:ed:
63:62:79:f2:37:9d:f2:99:74:ec:d7:f8:31:93:28:
c8:50:73:d2:9f:f2:f3:9f:47:f9:fb:ee:35:0b:37:
d1:cd:7b:46:52:1a:44:4c:e8:ab:f0:b9:0c:b5:a6:
a4:4c:92:10:2c:8e:4d:66:78:49:85:9b:a0:f9:58:
a2:5b:00:50:22:0f:59:e5:57:70:80:13:58:cf:2a:
c8:08:26:0e:f2:a3:37:76:a8:af:d0:f2:7f:26:99:
49:b1:95:c5:91:47:09:6e:17:03:86:dd:03:22:b3:
79:8f:84:47:58:18:05:a7:61:6d:2e:31:ea:58:70:
c0:74:e6:1b:f2:83:38:db:43:00:5f:15:b6:06:91:
3b:41:64:2b:d9:16:15:be:34:57:fd:6c:93:ad:26:
62:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:34:39:24:CB:A8:AE:92:A2:7D:E2:0A:A8:B4:9F:21:C4:7E:23:3F
X509v3 Authority Key Identifier:
keyid:4A:F4:0F:43:78:A2:E9:8B:EE:6C:78:4D:8B:DB:9E:82:ED:B6:6C:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SvQPQ3ii6YvubHhNi9uegu22bJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:d5:54:c9:16:63:88:d2:bd:81:b4:06:b7:bc:31:e3:b6:dd:
d1:a1:3f:d1:11:da:49:bb:f3:41:ce:62:83:ab:8d:0c:bb:67:
a2:b0:4f:3b:2c:df:28:50:94:b3:c9:2c:03:35:12:99:6b:9e:
2a:14:1d:e6:d8:95:95:60:1c:86:fe:e4:5f:c2:d0:1e:14:72:
7f:29:45:bc:f1:d5:61:c2:07:4f:e4:7f:4f:86:db:1e:6d:a9:
66:f0:6c:89:d9:71:63:b9:fa:13:be:6b:f5:59:93:a1:8b:99:
4b:1c:ea:f2:1e:10:76:29:f4:fd:b1:40:07:05:64:d5:d9:2f:
98:10:a7:ed:25:51:89:6a:7b:cd:86:86:f5:23:17:ec:ec:62:
69:e4:a8:d8:aa:48:db:7b:dc:50:e4:ae:80:02:cc:44:06:23:
ec:34:71:a7:3a:a1:c4:c5:f5:65:d7:10:95:e3:79:94:9c:bf:
28:1c:38:ff:89:d1:56:75:13:ef:5d:61:b8:19:71:45:c1:92:
72:4b:05:a1:e3:61:26:f5:d0:e7:99:4e:96:58:b9:cc:61:07:
03:43:e1:0e:c7:3e:0b:06:f3:88:38:22:bf:c1:96:62:66:65:
fc:ea:4b:4a:2d:8f:ea:ff:c6:29:ef:78:74:32:a5:e9:9e:3e:
f9:0a:e9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:10:52 2025 by rpki-client