
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
File: qoXM0t0-HAA79y_1PljHIA588Kg.mft (raw, json)
Hash identifier: rBqcvUeUTCwnZ7Drh4aKp4dBXyZ74OJG8EEGrWCGq5Q=
Subject key identifier: 2D:E5:5D:7C:52:00:F6:DD:4A:14:DC:69:E9:83:E8:41:4C:60:A8:1E
Authority key identifier: AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8
Certificate issuer: /CN=A916D29F/serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
Certificate serial: 0EEC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
Manifest number: 0EC8
Signing time: Tue 04 Nov 2025 17:44:42 +0000
Manifest this update: Tue 04 Nov 2025 17:44:41 +0000
Manifest next update: Tue 11 Nov 2025 17:44:41 +0000
Files and hashes: 1: qoXM0t0-HAA79y_1PljHIA588Kg.crl (hash: L5npQ2ui+2+ofe00IhLAUR5AHBAr+btKQI/4btK4ZAc=)
2: 8D655C9656A511EA8FAB974DC4F9AE02.roa (hash: 8zgED/u5BJ4UZdNgGr2psVcwZmXJQhr/Sce32Chr/as=)
3: AA135886D75411EFA0D6BE34C4F9AE02.roa (hash: FL9RyjoTD6DVuuRd2ISuSk98bbRopCzPxXp8wZNKZas=)
4: FA9D67D07C5711F0AD80C25CC4F9AE02.roa (hash: IfHyorIOQ7bueAyQaemWspNEc+/bGan7gB84RC3Kv/Y=)
5: 3FCD146C97D911F080901462C4F9AE02.roa (hash: zFjZk2S9ws5t5ZdI9szHa+nHw5gtdNKIsc6poD8Md0k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl
rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:44:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3820 (0xeec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D29F, serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
Validity
Not Before: Nov 4 17:44:41 2025 GMT
Not After : Nov 11 17:44:41 2025 GMT
Subject: CN=690a3b8a-02b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c2:23:ba:ad:5e:6c:79:13:2e:c7:0f:8c:06:
53:f1:0b:11:c6:3c:af:06:7e:b1:b7:ba:35:48:31:
e7:ba:33:68:7b:20:db:1a:96:ec:f0:56:ee:22:2c:
25:8c:4e:c4:e1:fa:c8:05:44:69:c0:d7:d3:f9:50:
af:a7:c6:3b:ea:eb:12:d0:a3:c1:92:1a:67:c5:21:
3a:a5:fa:db:d6:79:d2:62:09:87:0b:39:20:e6:b3:
8e:36:dd:e9:72:0c:3a:89:3f:8e:bd:0a:90:9d:cf:
39:2b:59:8a:93:78:09:80:b2:39:78:92:66:02:98:
17:b8:a6:7f:38:67:09:30:be:7d:0e:32:67:72:11:
47:86:2c:23:fb:aa:0e:2f:fc:19:58:04:ba:0c:ab:
81:ff:ad:f4:dd:b3:f5:0b:4a:01:af:49:14:d3:8b:
c6:cc:3f:af:8a:66:67:24:0e:d4:1f:16:1a:e1:03:
d4:2f:46:0f:4a:91:b2:7e:04:92:58:43:4d:2e:7e:
04:12:a4:b4:7a:b2:9b:26:c2:dd:fd:ba:a4:6f:07:
d9:2d:9d:b4:5c:ed:bc:24:78:42:16:40:6c:45:84:
2c:01:fd:f7:39:23:4a:5d:f4:af:75:2e:42:57:0c:
e7:9b:5a:de:12:70:67:74:b7:54:97:30:f8:80:72:
4c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E5:5D:7C:52:00:F6:DD:4A:14:DC:69:E9:83:E8:41:4C:60:A8:1E
X509v3 Authority Key Identifier:
keyid:AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:61:b4:79:1d:54:fb:34:d8:8b:5c:45:30:72:83:43:ed:d1:
ce:bc:c7:bc:8f:c6:b4:e0:79:43:ea:d8:a1:8c:3f:9d:9e:29:
37:cc:bd:76:9b:ac:24:f2:ad:81:09:ee:ea:a9:1e:f3:17:aa:
85:be:4e:8b:88:70:24:0a:4a:75:a5:f1:54:1c:47:bf:49:91:
d5:4b:a9:d2:ea:1d:bf:d0:75:16:c5:d6:62:b1:c7:07:7c:96:
8d:d6:46:c5:8b:f4:d8:a0:18:2e:a1:59:88:d1:95:a2:e0:a2:
78:ff:db:65:38:37:cf:a6:06:b0:15:0a:28:84:79:d0:6b:fa:
71:64:b1:1f:49:98:c0:55:eb:a8:73:18:a9:bf:f1:81:f5:6c:
4c:d6:bd:93:6d:33:10:aa:92:c1:d8:26:0e:5c:95:47:c3:9b:
f0:89:35:59:57:c3:d1:39:e8:bd:bb:65:9a:c7:53:72:25:85:
59:6d:50:dd:a2:b2:ad:ab:72:e7:f3:8b:45:9c:29:c2:f3:31:
0d:3c:be:51:f2:c5:b7:ba:8b:de:9b:2c:fc:b5:f5:85:85:5d:
69:3c:83:a6:11:b6:aa:12:21:ef:20:4b:fe:2d:91:e6:6c:97:
06:f4:0d:61:94:10:23:fc:45:9f:6e:8f:f3:3c:10:b9:32:19:
d9:c5:55:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:07:54 2025 by rpki-client