
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
File: q30L1dKrXe4vHNaWuCm675d_eM4.mft (raw, json)
Hash identifier: TWhKGf0bftyQ0I5vdRLal2QR5jYGP4QIYydwnlrw55A=
Subject key identifier: 36:B6:7E:00:68:29:68:E0:D8:7B:13:CD:71:68:55:84:E4:6A:02:00
Authority key identifier: AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE
Certificate issuer: /CN=A9171A5B/serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE
Certificate serial: 191D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
Manifest number: 1904
Signing time: Tue 04 Nov 2025 16:33:37 +0000
Manifest this update: Tue 04 Nov 2025 16:33:36 +0000
Manifest next update: Tue 11 Nov 2025 16:33:36 +0000
Files and hashes: 1: q30L1dKrXe4vHNaWuCm675d_eM4.crl (hash: z1G4Ubytrtq6qTl1Pia5f6u8zvO/5KTRz5j5BF8dQPw=)
2: EC8BB4F2B2B411EF8B387C7CC4F9AE02.roa (hash: YcDZtKeRh1UHltnHTYosXa988+fvsMaT0V4n1NKi1tc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl
rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6429 (0x191d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171A5B, serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE
Validity
Not Before: Nov 4 16:33:36 2025 GMT
Not After : Nov 11 16:33:36 2025 GMT
Subject: CN=690a2ae0-35fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e4:ab:21:b9:d1:b4:7e:23:d8:b5:74:c2:6a:
4d:7b:d3:2d:27:98:f5:23:59:04:63:0b:21:44:41:
e7:34:2e:4a:37:8d:56:6e:e7:2f:b4:85:a9:fd:8c:
75:d2:f5:10:f1:98:0f:16:0a:4b:37:cc:9d:f7:6f:
46:70:52:d6:eb:c4:ba:b1:4c:42:b3:a8:f5:8a:ee:
e8:5a:9a:81:62:9e:f7:4f:2c:e1:ae:5f:73:0a:1b:
0b:bd:c5:3c:70:88:f9:12:d2:8e:78:14:a4:d5:1c:
05:dc:7b:e7:9f:95:c1:0a:87:41:d9:f7:66:c2:3f:
9e:6d:aa:31:ed:e1:45:ca:fd:6e:d6:95:c7:c7:3a:
52:c5:ff:0b:ba:0d:ae:7b:dc:1e:b0:54:94:c3:fe:
2e:5c:6c:62:c0:4b:1a:ba:6b:af:bf:bb:8c:9a:7c:
05:7e:75:63:ed:0f:27:db:7b:18:d7:2a:ff:20:4a:
ef:92:cb:5c:cc:ae:88:58:c2:1d:bb:68:9d:b7:a8:
b1:2f:44:7a:76:74:d5:fc:14:94:aa:5d:3a:ff:c5:
4a:85:b1:4a:1d:a3:61:f5:cd:c7:c4:a7:36:3b:8d:
af:d8:ec:c1:2b:df:45:32:26:62:74:d6:94:a2:eb:
a4:df:03:25:a0:c0:8c:e2:07:7f:9b:66:be:8a:aa:
25:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B6:7E:00:68:29:68:E0:D8:7B:13:CD:71:68:55:84:E4:6A:02:00
X509v3 Authority Key Identifier:
keyid:AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b0:da:78:8b:74:e1:c9:c0:30:86:7c:40:d6:68:7e:9d:78:
6d:b1:98:c2:5b:d2:20:c9:4b:9a:62:52:f0:17:6c:12:a5:78:
3c:a5:2b:b8:80:e4:b3:a5:c5:e2:7d:f1:09:a2:57:e1:c8:59:
4f:de:47:55:bf:55:66:6e:bb:61:1a:23:b3:79:09:34:da:30:
13:b1:d1:f9:79:20:a3:6b:3d:03:a4:07:85:03:31:5e:0c:00:
1f:aa:ae:26:2f:e8:6b:0f:35:64:52:51:87:33:44:03:a6:81:
bc:94:08:ee:66:fe:5d:c8:cd:15:e5:4f:c7:21:7a:e0:4c:e4:
d1:c1:16:ce:3c:55:14:13:1d:00:46:67:1f:cc:3e:4d:22:5a:
06:cb:1a:bd:98:f5:bf:ec:07:1e:a0:2e:ce:ac:fc:33:1e:2a:
17:6d:9e:14:61:1d:1c:3d:b6:0f:6f:f8:a1:3d:56:0a:66:52:
bf:9d:69:58:ae:e0:43:ce:c7:ea:4b:bf:ed:8a:b6:0e:46:b8:
62:d1:10:04:e9:9f:8e:9c:25:e3:24:07:25:af:50:b3:81:1f:
15:9d:a0:86:9a:29:c5:ca:81:50:10:29:74:4d:f1:c9:fb:a9:
32:45:23:2c:d0:29:82:b2:53:7b:44:da:e4:df:26:5d:b5:ef:
56:64:a1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:41:19 2025 by rpki-client