
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
File: Fz6pPabl71KPpzMJc4hIg92lJ-4.mft (raw, json)
Hash identifier: puLIRW8/UOjjUx9+6QaTInPot70dS67GnuOhVB9a4K4=
Subject key identifier: 5E:0E:22:55:55:C1:6E:3D:EC:BD:42:BC:38:7B:80:D0:06:25:DD:7E
Authority key identifier: 17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE
Certificate issuer: /CN=A9145E09/serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
Certificate serial: 73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
Manifest number: 73
Signing time: Mon 03 Nov 2025 06:52:53 +0000
Manifest this update: Mon 03 Nov 2025 06:52:52 +0000
Manifest next update: Mon 10 Nov 2025 06:52:52 +0000
Files and hashes: 1: Fz6pPabl71KPpzMJc4hIg92lJ-4.crl (hash: AtvmDsSvMGI7UHzGujdItloEdeoB+SIQZC6TG+3+ThI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl
rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145E09, serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
Validity
Not Before: Nov 3 06:52:52 2025 GMT
Not After : Nov 10 06:52:52 2025 GMT
Subject: CN=69085144-073f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f2:9c:51:be:5a:6f:8d:a2:8e:0e:7a:72:78:
f0:fb:3e:a7:63:7e:fa:37:a8:d3:16:77:68:08:a0:
0f:92:15:79:a8:8a:16:6b:f1:d9:ee:1e:87:39:a1:
73:07:0b:7c:04:99:97:86:6a:58:68:64:83:55:30:
96:3e:cd:48:ea:ac:d6:62:a4:3c:53:40:d9:31:c5:
02:0a:df:df:89:ef:e1:62:f5:70:f6:3d:b7:88:28:
bc:30:2d:de:68:38:42:35:ad:c9:a0:d8:93:06:f5:
18:a4:9f:db:bb:84:50:54:86:1b:f6:c8:24:7d:53:
8e:ff:cf:01:9c:f4:b7:51:60:e0:e5:1e:0f:04:fc:
0f:67:30:4a:90:b0:65:10:7f:ac:57:06:4e:b3:b4:
0f:71:ff:22:56:b2:ee:2f:8e:50:cc:92:a4:99:78:
74:fa:16:37:e3:77:d6:30:a4:ed:b7:63:41:3d:76:
ca:fe:71:03:bf:da:1f:6d:fd:5d:3c:c6:27:c9:2b:
12:d8:06:f5:16:34:cd:2a:2f:e3:ae:90:55:12:0a:
d9:9c:b2:99:19:7a:6a:0c:6a:85:ed:f0:dc:b6:26:
5a:a9:b2:01:bc:11:65:23:08:bb:73:da:9c:96:ec:
69:35:0a:4e:c5:3d:8a:e6:7f:00:1a:58:0d:34:6c:
bc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0E:22:55:55:C1:6E:3D:EC:BD:42:BC:38:7B:80:D0:06:25:DD:7E
X509v3 Authority Key Identifier:
keyid:17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3a:fc:74:65:51:50:1a:78:5a:d6:3f:8c:2a:a8:e2:92:0c:
7f:a2:b3:f9:2a:6d:60:73:ed:04:62:65:49:8f:1a:82:19:48:
7f:47:aa:78:9c:99:e9:75:79:01:34:88:41:c5:cb:ec:be:8f:
59:51:29:83:6b:b2:de:2e:d5:3d:58:77:50:e0:a8:5c:43:5d:
df:7b:a6:14:47:50:58:17:2a:e3:57:6f:de:10:51:13:b9:58:
2a:ff:9d:cf:0c:36:07:3d:18:b0:62:1c:4e:bb:d3:1f:09:91:
4f:a9:ef:14:11:56:68:89:d1:31:1b:53:08:d7:34:46:4c:2a:
8b:b4:7c:22:e9:3e:e5:d8:34:d7:7c:d9:21:1d:41:ff:0f:e5:
7d:b1:4d:8a:5d:59:71:48:f4:35:8e:bd:48:ba:2d:ce:43:24:
37:18:75:b4:41:34:cd:ad:47:8d:c4:84:75:95:2f:ec:30:10:
fe:7b:cf:de:9b:7a:41:b4:fc:2d:41:78:47:bb:84:8c:e6:97:
f2:d5:13:24:36:eb:77:d2:9d:79:00:c3:a6:6e:3f:d6:38:49:
50:36:18:ab:6b:02:76:d5:f4:5c:0a:f1:a0:66:66:d5:c8:08:
1d:3e:42:a7:c2:c7:e4:ee:ac:af:f7:04:ed:b1:d4:f2:87:3e:
5a:c3:cd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:46 2025 by rpki-client