
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
File: q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft (raw, json)
Hash identifier: zhw9t0RftBT3NyWCJRa3TznMABHlplKzhcVn3+ZXeKQ=
Subject key identifier: 23:00:E9:AA:6E:FF:90:5E:1E:FF:26:EA:7D:C1:4E:45:1C:94:84:21
Authority key identifier: AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83
Certificate issuer: /CN=A918C5C8/serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
Certificate serial: 0595
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
Manifest number: 058D
Signing time: Sun 02 Nov 2025 23:12:31 +0000
Manifest this update: Sun 02 Nov 2025 23:12:31 +0000
Manifest next update: Sun 09 Nov 2025 23:12:31 +0000
Files and hashes: 1: q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl (hash: cz5SaOnBZpxsfVywTxoGhjHmF+FlZCKfIn4OGEsbqQw=)
2: 012EAE068C1411EDA66E4F28C4F9AE02.roa (hash: bvK3RLeaCONliQ5wzuPxM2m0myPmTbQv9PJcnbReiQA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl
rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 23:12:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1429 (0x595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C5C8, serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
Validity
Not Before: Nov 2 23:12:31 2025 GMT
Not After : Nov 9 23:12:31 2025 GMT
Subject: CN=6907e55f-1e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:73:2c:86:fa:ec:80:7a:bd:82:3d:c6:72:9d:
4a:2e:41:d8:78:19:1d:f6:c1:58:c3:a5:44:38:67:
bc:ed:f7:37:1d:67:ca:23:c7:0b:7d:05:04:37:00:
f0:c0:62:ac:5d:9a:1a:bb:16:24:3f:2c:c0:7a:a3:
13:9c:54:99:9e:64:db:e0:e2:d7:df:bd:95:1a:49:
80:74:30:67:d6:95:fe:6c:e1:50:a3:ac:8c:1b:88:
74:f9:ff:2b:c2:fb:19:b4:32:fa:bd:9d:61:f8:b3:
15:9b:31:be:2e:25:50:a7:47:c8:65:df:e1:97:4b:
fe:54:6d:e5:d5:f9:5f:82:03:6c:09:12:f4:a2:b5:
50:e7:c4:4c:17:90:f9:53:36:3d:6e:76:ba:3e:b0:
da:7b:63:b3:12:35:29:15:45:d0:ed:ef:67:c6:66:
31:91:18:3d:37:91:ad:cc:2d:26:6f:b1:47:3a:d1:
8c:22:0e:fe:49:66:97:18:82:ba:5c:1b:9a:ec:65:
3a:1d:e6:c4:60:2d:10:08:93:db:06:05:95:54:2e:
d9:b3:e3:e9:6f:cc:a9:c8:b1:dc:ef:30:12:ae:84:
52:aa:de:47:8f:1d:ad:ab:d1:6a:e5:92:2a:54:7a:
4a:ea:98:f9:d7:af:91:59:1f:53:19:bd:ea:f2:e5:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:00:E9:AA:6E:FF:90:5E:1E:FF:26:EA:7D:C1:4E:45:1C:94:84:21
X509v3 Authority Key Identifier:
keyid:AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f3:e2:67:20:81:b5:5c:4f:11:99:ad:37:aa:e2:65:1f:e2:
db:43:36:a4:ca:76:41:85:f0:c1:b8:8e:52:d5:2a:34:06:b6:
40:65:6d:1c:fd:1f:c9:eb:cf:20:21:4d:ed:c6:a3:0d:24:6a:
01:7f:bc:26:96:b7:1c:2b:06:06:bf:e8:a7:8a:18:d6:3c:a8:
fb:02:64:4a:41:14:18:6d:0e:ed:46:b8:a2:c3:f9:79:e6:29:
e8:a1:f2:cb:6d:fe:b0:fd:03:0e:95:96:72:23:3a:79:6d:19:
55:e2:30:f1:89:86:b2:1c:06:51:32:ee:7a:8f:ff:9a:4a:73:
8d:e6:09:03:fb:34:8f:c3:5c:7a:46:c3:a5:e9:69:a5:6e:7f:
19:c1:ee:0d:b5:db:e5:16:0e:d7:32:5f:b4:c9:b7:77:d4:b1:
49:39:9b:29:9c:dc:75:d9:e4:4b:c6:05:7d:20:09:6f:c0:84:
da:1f:3e:90:2b:d1:62:02:91:6d:a9:02:56:da:f6:73:a2:37:
bb:6a:d1:5e:ea:50:bd:61:a5:17:3e:64:b3:4e:72:c7:94:c3:
c6:46:ac:e1:f4:7f:db:1a:03:d5:20:e3:c9:c2:68:52:7f:dc:
7e:93:9a:15:3e:21:8b:b6:13:3c:7a:ef:83:25:d1:9a:0f:e7:
c7:70:d2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:19:31 2025 by rpki-client