
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
File: qqYttH8BKybdhpjizDXejylDd2E.mft (raw, json)
Hash identifier: kBkGZYbeMCYj6CY7gyj/3e+Md79Bl9F9eT+6HBDC45w=
Subject key identifier: 89:00:36:2E:97:B1:5C:4C:16:9B:7D:B4:67:BE:18:18:9C:F8:63:39
Authority key identifier: AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
Certificate issuer: /CN=A9178EB0/serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Certificate serial: 0887
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
Manifest number: 0870
Signing time: Sun 02 Nov 2025 20:36:59 +0000
Manifest this update: Sun 02 Nov 2025 20:36:58 +0000
Manifest next update: Sun 09 Nov 2025 20:36:58 +0000
Files and hashes: 1: qqYttH8BKybdhpjizDXejylDd2E.crl (hash: 50xiIYtLcNBf6RzFgmFtadJH5T3nGRfwmR5U9RLX42g=)
2: 23CDAE44F89B11EFA0888D74C4F9AE02.roa (hash: QEmg34gYMLcRImmZXOGPqukjodjpiHJ4l1SGgXAsmiI=)
3: 4A6D188450EA11EC8FF55B24C4F9AE02.roa (hash: d2hFjD7xeVN3cyOnjASfx1gXiQEjM5kCyEH2NHogTpU=)
4: 5DC77B0E30AB11EC876F1B41C4F9AE02.roa (hash: eAvchTE2mjoaLizoiap/tIEL3DGgf3r4bWQpO2iGLTU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 20:36:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2183 (0x887)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178EB0, serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Validity
Not Before: Nov 2 20:36:58 2025 GMT
Not After : Nov 9 20:36:58 2025 GMT
Subject: CN=6907c0eb-a26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:45:36:b8:a7:7b:2a:b6:1e:0e:36:c9:1e:
a2:18:f5:16:6f:58:03:d7:41:bd:6d:2c:33:60:04:
29:4d:31:30:84:6a:02:cc:a4:c0:7f:b6:d8:0e:61:
35:95:76:eb:22:1d:c3:cb:93:1b:c3:ff:77:f1:85:
19:43:d3:b1:9e:39:5a:32:e2:7c:4d:bd:c5:58:9d:
77:bc:37:8a:2f:05:b0:3d:6e:de:85:c9:7a:ca:25:
e8:ef:77:bb:55:ff:3b:9e:f6:6a:b5:8b:50:eb:63:
7c:5a:01:b2:63:f5:96:8c:89:9f:63:5b:eb:06:3c:
a3:86:13:a0:93:b2:53:be:0c:09:fa:ad:12:83:17:
11:bd:e1:55:af:6e:2c:39:f8:e2:0e:ab:76:73:78:
0e:9e:38:84:52:60:9f:53:ae:19:cd:f6:45:75:cb:
90:1a:7c:85:34:01:45:e5:18:9b:4a:38:0d:f3:bd:
23:07:3a:44:d1:06:33:42:aa:f6:99:41:7c:be:cb:
4b:90:26:22:42:45:cd:75:ae:ae:2d:5f:1f:9e:8e:
1b:4c:16:26:de:df:b5:64:31:e5:b5:cb:37:fb:f7:
56:cd:aa:06:43:92:4c:4b:ab:78:b3:fb:80:b8:25:
2e:17:b3:01:f2:fb:4e:57:cb:52:16:03:26:50:18:
e3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:00:36:2E:97:B1:5C:4C:16:9B:7D:B4:67:BE:18:18:9C:F8:63:39
X509v3 Authority Key Identifier:
keyid:AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:49:09:42:c4:9d:af:ae:19:3a:36:62:c5:ce:24:43:c6:ec:
50:be:64:a9:4e:31:c8:8a:ce:c9:8b:d6:6a:91:cd:1e:60:8e:
c5:90:9d:a0:57:41:d1:7b:b5:d1:63:26:bb:3d:6c:52:e8:f5:
cc:3e:f2:b1:87:52:9a:0c:a8:7b:56:3f:20:70:0e:f5:1c:f4:
53:39:69:4b:ea:00:e4:bb:13:9f:26:91:61:3d:89:82:76:6e:
78:b4:1b:6f:2a:44:f7:9c:39:a3:a8:5f:23:7e:2f:10:2c:b2:
de:e7:91:7e:18:28:f3:ff:ec:9a:55:a1:75:b0:29:90:d4:ec:
cc:4a:26:1d:de:94:77:93:c2:89:eb:3d:99:28:5b:a6:1d:b3:
e9:b3:5f:36:f3:a2:99:d6:67:10:48:f8:19:1d:dd:75:88:a0:
ee:62:82:9c:ed:5d:bd:98:10:7d:97:7c:cd:08:e2:4c:33:1c:
d4:32:e7:a3:81:df:b5:ec:97:8a:5b:1e:7a:99:d5:10:1d:57:
8e:fe:b2:27:4e:7c:0d:0e:28:45:08:69:41:03:96:4c:2d:e2:
a3:52:3e:55:95:8d:39:1e:34:f4:ab:ac:75:45:69:c5:b1:c7:
c7:8e:af:d0:a0:a6:a2:22:08:5a:79:01:dc:57:77:a6:13:25:
c1:73:f0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:09 2025 by rpki-client