
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft
File: SQP-uXRPViXit-FaT4CyXtPdCfM.mft (raw, json)
Hash identifier: O99MYbKS/wzma9LD/5hRHBUtKq77zMjVXnOb1ZK+FFM=
Subject key identifier: 84:28:E4:77:74:FD:0C:34:65:A2:84:62:31:F5:EC:02:47:01:D4:1B
Authority key identifier: 49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3
Certificate issuer: /CN=A91D23D1/serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3
Certificate serial: 0694
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft
Manifest number: 068E
Signing time: Tue 04 Nov 2025 22:29:08 +0000
Manifest this update: Tue 04 Nov 2025 22:29:08 +0000
Manifest next update: Tue 11 Nov 2025 22:29:08 +0000
Files and hashes: 1: SQP-uXRPViXit-FaT4CyXtPdCfM.crl (hash: biiGCPohH7Jim2+wj5ZFUDLty25M+eW0U1SBX5jJTs4=)
2: 32BA4EE0913311EB96A8E810C4F9AE02.roa (hash: +tVDBEUyvx+wiXhaQ43mL8NvF9ERpovp/kH/3l62E3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl
rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1684 (0x694)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D23D1, serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3
Validity
Not Before: Nov 4 22:29:08 2025 GMT
Not After : Nov 11 22:29:08 2025 GMT
Subject: CN=690a7e34-f66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:77:0c:5b:46:88:57:8b:96:71:27:18:0d:94:
b5:ea:31:ed:e8:2a:fa:21:cb:5c:bf:cf:27:e6:1a:
4e:db:97:69:f1:e3:1c:ec:55:f5:ea:e4:31:82:0c:
d3:8b:fd:db:fc:08:cb:ae:50:ec:a2:76:4a:e3:6e:
38:ef:c6:66:75:b8:10:58:5c:da:fa:80:84:39:9b:
19:37:b5:c5:06:f2:ed:ae:cc:82:b5:5d:da:52:51:
4b:4a:24:1a:cc:ce:2e:7d:04:76:5f:36:e6:3f:6f:
6c:d5:9c:d7:a8:3e:a5:38:bf:a3:5f:09:b6:91:c0:
c7:83:08:2d:a8:cf:21:ac:7d:24:06:8c:91:72:0b:
49:af:a5:e7:22:3e:9d:d8:b8:1a:8d:05:e4:50:37:
0a:aa:65:20:e2:ce:c4:c0:43:21:3d:81:a1:47:eb:
37:d4:3d:4b:f1:c9:79:1f:a2:46:bd:a1:71:73:0d:
c7:9e:fa:f5:2f:d0:91:24:2f:37:87:8e:60:35:4d:
53:10:d8:76:98:55:48:d7:c3:b4:e1:1e:c5:f1:07:
32:d6:8a:36:85:f3:86:a8:67:e5:ff:b4:25:d8:80:
de:9a:38:a4:4f:35:a9:84:6c:69:16:47:26:2e:24:
2e:11:b3:58:3e:c2:1e:60:ac:6c:20:40:b7:33:9d:
45:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:28:E4:77:74:FD:0C:34:65:A2:84:62:31:F5:EC:02:47:01:D4:1B
X509v3 Authority Key Identifier:
keyid:49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:04:a2:ff:06:9d:9f:ff:6e:77:a0:18:f7:09:27:1b:22:c5:
82:16:73:4b:a6:0a:72:5a:22:98:d1:08:ec:43:46:ce:84:7b:
37:56:c7:d6:55:cb:13:df:fb:27:bb:e8:61:8e:3b:76:5f:23:
7e:39:cb:25:34:d6:2a:ad:cc:13:f2:e3:4b:97:c1:fb:9c:89:
80:ff:02:cb:4d:e8:1a:57:b8:18:77:62:1c:5c:6f:fd:7d:95:
69:ba:99:da:b4:95:a6:9a:f6:f1:61:84:08:31:ff:c4:42:07:
14:a4:8b:41:1b:25:67:b0:c2:35:1c:ad:b9:da:fb:76:4c:06:
3d:82:50:b7:c4:a7:d5:45:2a:75:7e:ad:29:13:bd:32:34:6f:
9f:2f:9d:57:33:6e:1f:b7:68:cc:f8:e7:ad:d2:39:cc:95:7d:
91:a7:d8:6d:71:98:cc:6e:ae:f1:88:df:d4:59:da:de:8b:6b:
44:d9:71:64:1a:74:f8:c4:1d:f0:76:14:b2:05:b3:98:3b:c5:
3f:f5:49:c2:f1:1d:58:57:c4:0b:2c:8f:34:e9:17:6e:a2:53:
99:7c:1c:9e:fa:00:9d:f3:7a:28:1c:fb:05:c2:14:64:ff:1d:
e4:7f:b2:78:83:0f:83:f7:44:f8:6b:ff:82:4f:ac:ff:8d:0e:
52:f1:2d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:15:18 2025 by rpki-client