
$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft
File: FsAdnKD_vvrguwEOUURQeupBDQM.mft (raw, json)
Hash identifier: KpeLxa1W8AOtZYZdFZk0bEL1cR0RXBJXOuQf2oJAKKk=
Subject key identifier: 23:5B:7B:E8:EE:5D:EC:67:EE:7A:24:CE:29:E1:BD:C5:2E:C9:98:71
Authority key identifier: 16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03
Certificate issuer: /CN=A91415AA/serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03
Certificate serial: 08D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft
Manifest number: 143B
Signing time: Tue 04 Nov 2025 19:35:04 +0000
Manifest this update: Tue 04 Nov 2025 19:35:03 +0000
Manifest next update: Tue 11 Nov 2025 19:35:03 +0000
Files and hashes: 1: FsAdnKD_vvrguwEOUURQeupBDQM.crl (hash: 4TM+idRcPZnZjwOGqSc9qRbCzW4/Z2O4nt5BZYoIamk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl
rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2262 (0x8d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91415AA, serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03
Validity
Not Before: Nov 4 19:35:03 2025 GMT
Not After : Nov 11 19:35:03 2025 GMT
Subject: CN=690a5568-55f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:76:88:f1:6e:ce:39:3b:8a:3d:f2:4f:87:6f:
6b:da:81:64:e1:58:08:ea:51:96:a2:7c:ac:c2:0d:
87:f5:ce:8b:b2:bf:d6:64:bd:6a:16:54:c6:d5:67:
ec:63:6d:4d:80:85:e6:14:39:67:b7:cb:7f:48:41:
09:3f:0c:a5:f3:e9:2e:24:16:0f:ad:5a:6e:4f:9e:
cf:b3:b4:b7:31:8a:e6:71:96:fd:46:16:6c:3f:63:
dc:a0:58:cf:c4:eb:b2:eb:11:ce:74:a6:1f:96:c0:
5b:55:45:a1:d1:e5:1e:39:03:ef:48:86:24:fd:7d:
8d:c0:62:64:e7:bd:8b:a8:de:79:13:06:21:08:60:
5d:83:d5:6d:73:ca:4f:8b:fb:ac:53:dc:eb:e6:c5:
de:a6:78:a4:f9:77:c7:94:3f:6c:1b:87:2b:30:ab:
e2:53:9c:90:46:01:0c:61:28:23:08:bf:47:69:38:
b2:96:66:03:b2:02:07:38:19:a2:f0:ec:68:7d:6a:
5b:6d:42:d7:5e:6a:f2:f9:4a:10:df:fc:dd:55:74:
56:20:29:35:96:0f:51:ae:53:e2:2b:67:9f:d8:c1:
09:36:2c:0b:f2:17:5c:d2:5a:cf:12:96:e0:08:b1:
f3:2f:f1:5d:00:39:7c:a1:48:98:13:8d:a3:a9:30:
e4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5B:7B:E8:EE:5D:EC:67:EE:7A:24:CE:29:E1:BD:C5:2E:C9:98:71
X509v3 Authority Key Identifier:
keyid:16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:58:c1:67:69:9c:af:d8:06:7d:c1:a7:bd:fe:1a:fa:2a:d1:
d9:18:69:1d:75:d1:74:c1:0a:57:91:db:b5:7c:d0:16:4d:42:
eb:b2:b9:7b:77:1b:19:84:15:62:81:8a:19:45:8f:1d:be:b9:
85:07:64:28:25:66:a1:6a:69:e7:ec:29:17:33:e2:ca:d5:b1:
7c:b2:a4:0a:4a:da:61:1b:ca:e0:f5:5e:11:a3:9f:54:96:79:
00:99:da:c9:6f:34:3e:86:f5:af:65:96:cf:e9:45:c7:dc:9b:
aa:dd:fc:e9:5b:c0:1d:66:e7:09:e7:2a:89:62:8b:0c:08:dc:
65:c3:3a:5e:b2:a9:0d:7c:bc:fc:2c:5d:4b:b1:d7:64:ba:94:
bb:5b:4f:f8:f9:77:74:50:97:77:7f:47:77:87:69:75:f6:5c:
ca:ba:66:79:b0:57:6f:90:c6:06:fc:f7:47:e3:1f:e3:c6:6c:
87:cd:08:eb:e9:7c:f3:78:2c:0a:b9:0f:0c:a2:72:0d:f4:ad:
b6:79:01:81:1f:72:7d:08:75:2a:ec:58:86:da:31:72:df:a1:
e5:2f:fd:30:7f:df:75:b5:02:d2:59:3c:1d:7f:4f:77:1d:bb:
af:bb:88:fa:45:c0:38:32:b2:c8:99:a3:95:c9:10:cf:3f:0d:
b9:61:fe:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:47:25 2025 by rpki-client