
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
File: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft (raw, json)
Hash identifier: R9NsuBiNkoNEU9xoo5EuvmSRbJ5fu4G5Rmb8QN1FTfQ=
Subject key identifier: 85:50:5A:E7:32:68:33:F6:0C:B0:01:14:38:C1:16:AE:2C:95:32:9B
Authority key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
Certificate issuer: /CN=A91D8BB1/serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
Certificate serial: 52
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
Manifest number: 52
Signing time: Mon 03 Nov 2025 07:15:26 +0000
Manifest this update: Mon 03 Nov 2025 07:15:25 +0000
Manifest next update: Mon 10 Nov 2025 07:15:25 +0000
Files and hashes: 1: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl (hash: 8TA4EsuCQAaJXzctRcSxTXxSWahYnIU4YU7HUe6PVXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl
rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:15:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
Validity
Not Before: Nov 3 07:15:25 2025 GMT
Not After : Nov 10 07:15:25 2025 GMT
Subject: CN=6908568d-5d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:eb:83:cf:3c:67:82:35:aa:fd:c5:e0:47:9a:
80:52:18:26:90:cf:e7:b0:f9:06:7f:47:7d:4a:42:
65:a7:53:2d:c2:09:9e:4e:3a:08:e1:ce:35:1f:d0:
7c:23:d2:5d:89:81:8e:44:02:f7:9c:b0:4f:95:08:
cf:37:3e:12:c7:08:00:99:9f:d3:ab:94:d3:c9:8d:
b3:46:3f:10:82:65:71:e7:26:db:16:c6:9b:0c:65:
08:b5:f2:79:57:00:6e:fb:a8:e3:d7:30:a7:da:c9:
fd:bd:58:e6:12:0e:fb:29:6a:16:be:32:c1:58:15:
d4:82:fc:bf:63:45:f6:ca:fc:03:b6:19:02:55:68:
61:87:da:18:59:75:61:7c:05:15:4d:ea:22:f6:00:
98:17:9e:b3:cd:49:44:ad:67:b0:c8:87:ee:04:9b:
16:16:e0:47:f4:7c:b6:34:a2:57:75:e1:d6:0f:73:
e5:0b:90:9c:8d:33:00:7a:75:2f:dd:d7:ee:46:39:
a9:01:1f:21:ee:20:f3:65:21:f0:d9:cc:8f:4a:67:
13:d6:67:5e:49:dd:a5:fe:50:c9:71:50:7d:0e:9b:
8a:67:2b:66:40:c9:17:de:48:40:87:8f:ad:68:4c:
16:c2:6f:4d:3d:d8:0e:cb:3c:dd:c3:6d:f4:14:86:
c6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:50:5A:E7:32:68:33:F6:0C:B0:01:14:38:C1:16:AE:2C:95:32:9B
X509v3 Authority Key Identifier:
keyid:41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:14:39:2a:9f:e1:22:2b:b1:83:c5:26:a3:71:5c:77:a3:38:
0b:92:b0:51:05:43:58:a4:c4:12:65:bf:af:f3:cc:04:30:78:
6d:3a:8c:2a:2a:72:a9:38:49:d7:5b:4c:03:33:06:88:ff:94:
36:d7:ff:94:95:f1:d5:dc:08:a4:af:8d:e0:59:64:cd:a4:6f:
19:a7:37:c8:74:a0:82:8e:7e:33:98:1f:e3:e1:34:13:b8:77:
33:0b:40:a6:d2:34:2c:68:c4:0a:03:6c:7d:df:2b:fb:ee:40:
90:ee:b6:a1:1c:3a:1e:19:e3:c8:67:3b:7b:9f:eb:0f:be:9d:
4b:6e:9f:ff:a8:ee:7d:d2:3b:cf:1e:b7:56:21:64:56:df:1c:
c2:89:1f:38:82:6e:81:7e:15:3e:d9:1f:44:f3:c4:3f:45:17:
54:c7:bc:15:f5:57:01:a4:94:7e:e7:f2:0f:75:ae:71:23:2b:
af:f2:a9:38:ac:0f:f2:8b:e7:74:b9:ec:e3:80:61:9e:d6:4d:
03:62:96:79:be:17:96:1e:e0:12:b0:9c:bb:e2:10:bc:46:e6:
8a:0d:f4:94:73:b7:81:aa:02:e0:eb:34:bf:8c:43:68:b7:f7:
4b:f3:33:e5:cf:1c:f5:61:06:55:d4:80:b0:fe:ec:ea:85:c6:
8f:d4:cd:d3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
OEJCMTExMC8GA1UEBRMoNDEyQThEMTdERjkwN0E3ODM3NjUwMTJBODNCNzhCN0NC
MUNBMjUxMjAeFw0yNTExMDMwNzE1MjVaFw0yNTExMTAwNzE1MjVaMBgxFjAUBgNV
BAMTDTY5MDg1NjhkLTVkMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDU64PPPGeCNar9xeBHmoBSGCaQz+ew+QZ/R31KQmWnUy3CCZ5OOgjhzjUf0Hwj
0l2JgY5EAvecsE+VCM83PhLHCACZn9OrlNPJjbNGPxCCZXHnJtsWxpsMZQi18nlX
AG77qOPXMKfayf29WOYSDvspaha+MsFYFdSC/L9jRfbK/AO2GQJVaGGH2hhZdWF8
BRVN6iL2AJgXnrPNSUStZ7DIh+4EmxYW4Ef0fLY0old14dYPc+ULkJyNMwB6dS/d
1+5GOakBHyHuIPNlIfDZzI9KZxPWZ15J3aX+UMlxUH0Om4pnK2ZAyRfeSECHj61o
TBbCb0092A7LPN3DbfQUhsbhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhVBa5zJo
M/YMsAEUOMEWriyVMpswHwYDVR0jBBgwFoAUQSqNF9+Qeng3ZQEqg7eLfLHKJRIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QkIxLzUxRjlGNjE0M0Qy
NTExRjA4MEM0ODk1NUM0RjlBRTAyL1FTcU5GOS1RZW5nM1pRRXFnN2VMZkxIS0pS
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvUVNxTkY5LVFlbmczWlFFcWc3ZUxmTEhLSlJJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4
QkIxLzUxRjlGNjE0M0QyNTExRjA4MEM0ODk1NUM0RjlBRTAyL1FTcU5GOS1RZW5n
M1pRRXFnN2VMZkxIS0pSSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAA4UOSqf4SIrsYPFJqNxXHejOAuSsFEFQ1ikxBJlv6/zzAQweG06jCoq
cqk4SddbTAMzBoj/lDbX/5SV8dXcCKSvjeBZZM2kbxmnN8h0oIKOfjOYH+PhNBO4
dzMLQKbSNCxoxAoDbH3fK/vuQJDutqEcOh4Z48hnO3uf6w++nUtun/+o7n3SO88e
t1YhZFbfHMKJHziCboF+FT7ZH0TzxD9FF1THvBX1VwGklH7n8g91rnEjK6/yqTis
D/KL53S57OOAYZ7WTQNilnm+F5Ye4BKwnLviELxG5ooN9JRzt4GqAuDrNL+MQ2i3
90vzM+XPHPVhBlXUgLD+7OqFxo/UzdM=
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:22:14 2025 by rpki-client