
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft
File: 0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft (raw, json)
Hash identifier: IWT1QON0z08r1yBlaRR8lV9YKggfZa3/BhlUpbW0yms=
Subject key identifier: BE:62:08:C1:E5:8A:C9:B1:99:5B:9A:F6:0A:DF:69:D7:0D:C0:DB:10
Authority key identifier: D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3
Certificate issuer: /CN=A91EEA4D/serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3
Certificate serial: 4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft
Manifest number: 1404
Signing time: Tue 04 Nov 2025 19:20:08 +0000
Manifest this update: Tue 04 Nov 2025 19:20:07 +0000
Manifest next update: Tue 11 Nov 2025 19:20:07 +0000
Files and hashes: 1: 0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl (hash: 7+AT2XRNrMmsWCjT5IRzNutE+zoF/wuArcht/KfW2Vw=)
2: 6B6060E445A311F093AEF324C4F9AE02.roa (hash: KkaxMY/paqE0NvJV6adlijQxx/J7VWmCwLLLInlyw1A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl
rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:20:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEA4D, serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3
Validity
Not Before: Nov 4 19:20:07 2025 GMT
Not After : Nov 11 19:20:07 2025 GMT
Subject: CN=690a51e8-dc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:7f:6c:9b:8c:ad:a9:17:a2:62:dd:3d:0a:
1f:8d:69:0a:08:b1:42:23:66:30:0e:c3:17:75:2b:
64:d5:6b:4f:82:f0:d0:f0:e7:67:ec:f5:70:c4:94:
c4:8f:8b:67:5b:d6:0d:d3:90:dc:a0:eb:49:2e:bb:
90:55:2d:87:68:0f:1c:8a:19:39:07:40:21:31:35:
c9:88:a2:c8:15:c1:b3:b7:dc:59:89:46:0a:08:53:
1f:0f:ea:6e:b6:30:9d:31:72:6e:5b:59:05:e5:40:
2c:eb:04:63:22:6a:6d:04:e6:50:24:35:58:02:74:
31:8a:14:6b:2c:1f:59:4a:64:11:11:0c:20:8d:fe:
f9:59:bf:84:a8:d1:10:9a:04:f9:dc:17:64:61:48:
ab:ff:1a:df:ed:2d:71:16:bf:12:91:67:56:85:d7:
b0:80:eb:33:6c:bc:b0:09:0c:d5:83:0a:14:03:0f:
fc:91:78:e8:3b:a4:05:8f:dc:b1:04:aa:e3:fb:0d:
f8:b6:55:2c:a6:64:a0:1c:83:d5:8b:3c:a9:87:66:
0b:c3:5e:45:81:17:39:13:e5:01:1d:20:eb:ee:9d:
7c:02:73:78:df:3f:f9:d1:97:9a:b3:99:6e:17:73:
44:8f:0c:6e:34:4b:b1:14:73:22:bb:86:52:c3:b2:
44:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:62:08:C1:E5:8A:C9:B1:99:5B:9A:F6:0A:DF:69:D7:0D:C0:DB:10
X509v3 Authority Key Identifier:
keyid:D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:ae:7b:3c:82:9f:3f:75:a4:ee:6a:53:1b:91:20:2b:ea:34:
56:39:f6:65:01:d4:3c:c5:b5:27:71:fc:05:58:52:6d:85:fd:
aa:1e:7a:9c:db:ca:1c:a6:c5:f9:c8:9e:0e:f2:ae:c6:c2:57:
21:4b:dd:86:52:e3:5f:f1:e9:e2:59:41:3c:cd:36:3b:8d:8e:
b7:b5:b4:09:ba:f8:17:5b:6a:23:e1:49:9c:cd:e6:ab:24:7f:
cc:67:67:0c:63:d4:e0:e5:ca:3e:05:46:57:85:5e:0e:6e:88:
30:67:dc:ba:b9:80:4a:68:58:24:e7:04:1d:e1:ec:40:02:f1:
99:2a:2f:a0:ea:ba:2f:c6:bd:74:dc:f3:83:9a:e9:de:3b:05:
f0:82:ed:66:70:f6:53:e2:6f:6f:d8:b5:11:b4:c2:38:e9:53:
10:16:9d:0a:e0:68:1d:55:fe:41:20:97:84:f3:97:74:47:37:
e2:c8:7c:8f:50:7c:4b:e1:46:22:57:38:e1:86:27:8c:74:0f:
d0:2e:e2:bd:5b:86:75:4e:d9:92:e5:c4:2b:47:ae:8a:50:f7:
75:6f:01:f1:f1:ec:b7:29:0e:81:e2:f4:29:ed:b6:58:65:ef:
74:fa:01:e4:5e:11:76:34:96:c9:41:cd:1e:ca:f6:6f:8f:1f:
2f:c2:f0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:00:22 2025 by rpki-client