
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
File: q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft (raw, json)
Hash identifier: +nxToXwifpRHZCb652nnDExfCjzLBfDoKkk3O0yrXrg=
Subject key identifier: 0C:DA:F2:C8:61:76:4B:7E:88:05:BD:2F:01:A4:36:63:4C:11:66:1D
Authority key identifier: AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
Certificate issuer: /CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Certificate serial: 0931
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
Manifest number: 0922
Signing time: Tue 04 Nov 2025 20:21:23 +0000
Manifest this update: Tue 04 Nov 2025 20:21:23 +0000
Manifest next update: Tue 11 Nov 2025 20:21:23 +0000
Files and hashes: 1: q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl (hash: 3ltugYiAcgtG3uPYXcmJygek5d8vGcSsViwOHlvJvfo=)
2: E3829F3CB1CF11EAA8732709C4F9AE02.roa (hash: YwnEBUIIwCJtRBxz+rjLHt3w237awmJC1uWnaTU6Q3M=)
3: 7CA0A2E2B1CE11EAAF2F2784C4F9AE02.roa (hash: WYE1oD8S3ftmPZ9P42MC6m1geSKXvRB8dw3HalDWvGA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl
rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:21:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2353 (0x931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F67F5, serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Validity
Not Before: Nov 4 20:21:23 2025 GMT
Not After : Nov 11 20:21:23 2025 GMT
Subject: CN=690a6043-8bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ad:50:92:e0:28:ce:c4:0b:0c:2a:6f:00:9e:
bf:6b:2a:f0:e7:9c:6e:b3:ee:31:cc:a0:23:13:c1:
43:3d:b8:fd:1d:08:50:77:b5:5d:06:6f:14:ed:87:
a8:08:1e:5b:2f:46:e7:16:85:13:50:32:f7:db:61:
99:85:36:cb:07:07:2d:de:57:0d:45:98:e7:62:41:
3c:52:57:de:b5:68:a5:a3:33:68:af:a2:54:10:98:
77:ae:ed:df:8a:1d:63:6a:a2:a5:b6:0d:f9:1b:0e:
a7:5a:a2:80:c6:17:52:1b:c6:5b:c7:4a:33:80:f8:
d4:46:fe:6d:c5:75:63:63:93:cf:53:6f:8a:3b:86:
68:39:76:71:ea:d3:a8:22:45:bf:7f:37:01:3d:e6:
ad:0c:8b:2b:7e:06:66:fb:03:60:8e:6e:a1:01:78:
5c:c2:83:1c:65:cb:0e:75:9b:76:f9:b9:ff:43:0d:
3d:75:62:07:e6:88:06:19:cc:cf:70:b7:ed:51:f0:
f0:d2:bc:a4:c3:f4:9e:7d:ff:30:b7:40:85:3d:44:
af:d6:87:bf:86:cc:e4:94:38:17:b3:c6:bf:c8:c3:
7a:bd:62:10:6e:91:ac:80:16:bf:f7:9e:b4:8d:54:
ce:5d:7b:bc:6a:e7:36:fd:0c:12:27:f1:53:62:40:
7d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DA:F2:C8:61:76:4B:7E:88:05:BD:2F:01:A4:36:63:4C:11:66:1D
X509v3 Authority Key Identifier:
keyid:AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:04:80:4f:9d:f2:2d:ad:11:fb:b2:fe:4e:84:45:7b:97:e2:
a3:32:14:2e:bf:a9:3e:5a:43:0f:ba:f2:61:34:9c:e9:dd:ad:
50:ea:4b:28:7d:8b:53:81:0d:ee:68:ee:a2:dd:e0:c0:2b:a7:
13:92:3f:cd:85:bb:5a:74:d7:fe:82:26:24:d7:b5:b8:4e:23:
5a:d1:2c:9b:e2:ff:d7:23:0d:47:ce:9d:f1:60:8c:b3:b2:ae:
5c:94:70:66:88:c9:41:21:cb:33:98:55:d7:b8:b1:c0:04:2e:
cb:65:61:a8:e0:77:f5:45:9a:3e:a5:c9:4b:c1:b2:60:69:98:
40:eb:8b:06:0e:28:c4:a2:46:35:90:b6:e0:d8:2a:51:20:3e:
23:87:51:f7:6d:cc:9e:f5:8b:96:72:25:04:d2:df:1b:1e:29:
7b:41:38:cc:b9:03:44:82:34:0c:53:4f:15:7f:09:09:82:c3:
cb:c6:98:a3:d2:ec:f4:81:4b:4a:1b:5d:0e:15:93:73:cc:0a:
01:b6:4c:84:6b:e1:46:ea:cf:25:22:66:e8:37:2b:8e:b5:6a:
ea:0b:5e:7a:b7:ec:b7:50:f2:6c:21:68:87:82:42:4b:c8:70:
35:87:69:b6:01:64:b9:4c:85:5e:e2:dc:5a:7c:22:be:d3:8a:
b9:25:53:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:16:39 2025 by rpki-client