
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
File: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft (raw, json)
Hash identifier: dMczoloGfQDJU0LScpaBYA73vNb1S+RT92G+/Cb7Gd8=
Subject key identifier: 23:4C:5B:72:0E:8F:D9:8D:A7:01:9C:49:5F:23:08:3F:7F:E0:0F:2F
Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
Certificate issuer: /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Certificate serial: 0558
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
Manifest number: 054C
Signing time: Tue 04 Nov 2025 23:31:31 +0000
Manifest this update: Tue 04 Nov 2025 23:31:30 +0000
Manifest next update: Tue 11 Nov 2025 23:31:30 +0000
Files and hashes: 1: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl (hash: A8XgxmjVwbAdvFxql5VEZC8Uh2J58C6lWnQHDvKtBXI=)
2: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (hash: g0hpjHR12ox9GBuE1AfrS2oF/EYCOY2rtHxfRiw2ckM=)
3: 9C09360E0C3411EDB8619843C4F9AE02.roa (hash: ECAgPm0goNWrUskhVC01nozAKTVudWlI1/zrxTY4T0A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 23:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1368 (0x558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186B80, serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Validity
Not Before: Nov 4 23:31:30 2025 GMT
Not After : Nov 11 23:31:30 2025 GMT
Subject: CN=690a8cd2-e082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1b:28:d2:58:ad:4c:0b:40:3d:93:0e:2e:71:
70:1c:e7:46:ee:b3:85:cb:f8:66:59:82:9a:3c:1e:
0d:e6:1d:03:53:1c:4a:b3:ae:5e:19:6a:a6:e2:69:
c7:6f:93:9f:e3:bf:44:61:b3:12:2f:7c:b3:08:13:
8f:4f:f3:ef:e1:72:6a:a6:b1:94:31:c4:f3:da:79:
59:f0:8f:8a:77:d2:f1:0c:6a:35:e5:2b:cf:cb:ad:
c4:dd:ae:40:be:ee:34:be:c5:31:07:ed:8e:02:25:
6a:36:bd:2f:b1:bd:e4:29:14:2a:7d:35:eb:b4:c1:
6d:de:fa:fe:14:5e:7d:8b:8c:9e:df:a2:22:2e:77:
79:57:34:76:d8:c1:43:ff:31:6e:31:26:fa:21:7e:
1c:5b:f4:6a:e1:fb:96:38:a4:cd:8f:dc:0c:c0:c3:
6d:ce:ef:97:5d:c2:3d:64:f0:34:24:bb:b0:19:48:
4c:56:17:de:90:46:c8:de:1b:63:2d:5e:75:5c:c7:
e5:85:85:a2:05:cd:e3:9f:42:e9:2b:f4:c2:ca:31:
10:01:de:32:0b:c2:54:b7:a2:11:12:8d:0e:c6:44:
0c:3e:6c:85:60:3c:51:1e:d6:36:27:24:d5:93:c8:
16:b0:60:6b:7e:b9:2e:59:ea:92:0a:f6:ba:47:df:
85:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4C:5B:72:0E:8F:D9:8D:A7:01:9C:49:5F:23:08:3F:7F:E0:0F:2F
X509v3 Authority Key Identifier:
keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6b:03:ae:c0:25:b5:9c:3c:91:55:0a:9a:07:49:70:e4:2c:
61:76:06:2e:18:c0:96:c8:aa:e7:96:7d:c3:c8:c9:ce:8e:9e:
9d:cb:1a:51:3a:70:8a:51:19:c7:37:8a:3b:e1:d0:00:c1:2f:
4a:f9:61:7b:d0:ac:c2:38:3f:da:70:99:53:87:2a:e4:17:11:
e0:94:64:08:27:dc:70:fd:61:f2:53:19:da:70:35:3e:7d:cd:
cc:d0:82:20:1c:81:f8:1e:72:de:6c:13:49:4d:ab:a5:ca:91:
b6:de:df:9b:e6:f5:97:bf:a7:a0:52:a7:d7:81:c0:bb:be:ca:
90:d3:7d:32:76:ef:62:8a:c6:85:6a:77:40:e2:3d:45:2c:e1:
e4:30:c1:c9:e8:0a:fd:c7:0a:08:81:da:19:08:a6:e8:f7:28:
b0:84:2c:8e:9b:a9:f5:7f:2e:f5:33:dc:ce:0c:b9:85:a3:3e:
5b:61:11:84:7a:71:6b:c0:e3:1f:20:1b:ab:fd:04:d1:66:91:
99:a7:10:ee:42:55:ba:14:26:c5:fa:4b:8e:8b:31:d9:37:dd:
f8:b9:57:88:32:85:03:a8:91:36:82:6d:47:6f:be:8a:80:a0:
c0:5a:36:35:62:21:da:d2:41:e1:4b:66:f9:fb:f4:f7:61:ca:
9f:90:76:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:35:21 2025 by rpki-client