
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
File: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft (raw, json)
Hash identifier: 9rgngc+MWkQGpWyhMVx3ybabbbRScHZkRjzT8GskK8E=
Subject key identifier: 71:8E:97:02:28:70:1F:1D:7D:48:E1:13:08:A0:5E:4F:03:60:6A:28
Authority key identifier: 16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09
Certificate issuer: /CN=A9158F08/serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09
Certificate serial: 0C8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
Manifest number: 15F8
Signing time: Tue 04 Nov 2025 18:29:56 +0000
Manifest this update: Tue 04 Nov 2025 18:29:55 +0000
Manifest next update: Tue 11 Nov 2025 18:29:55 +0000
Files and hashes: 1: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl (hash: 77xf63yb4Q/WNH9NayTM7uAL0ndnHEin7A4v0HR4CTA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl
rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3210 (0xc8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158F08, serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09
Validity
Not Before: Nov 4 18:29:55 2025 GMT
Not After : Nov 11 18:29:55 2025 GMT
Subject: CN=690a4624-7bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:af:d7:7b:5b:60:75:87:14:b0:04:b3:e8:c1:
4d:20:ae:43:3b:18:e3:e6:f3:dd:9a:23:82:6f:17:
1c:1b:0e:06:ba:b2:bb:5c:b8:12:97:19:8f:b5:e6:
e2:35:31:8c:01:bf:ca:46:02:31:3f:8d:90:26:a8:
54:29:34:e7:25:38:76:17:4e:52:3c:03:c0:c9:1d:
34:fa:9f:db:65:4f:57:89:ce:e2:c1:bb:aa:d9:1d:
a1:cb:c0:e5:15:3f:5f:43:68:c4:66:83:1e:9b:72:
17:67:b6:d6:82:24:76:bf:17:44:7c:45:1d:78:58:
97:87:2f:fe:67:25:67:f3:17:82:68:39:d5:86:71:
46:8e:cc:c9:3a:92:c6:72:0d:3e:11:da:3f:d1:92:
60:ec:34:e5:3f:ea:2b:44:af:ea:f3:63:59:64:68:
8e:92:a9:1f:df:11:7b:7e:ce:54:57:15:e9:d4:15:
82:4f:54:7f:4a:37:8b:be:aa:1d:6d:09:eb:b8:20:
2a:f4:e6:26:dc:59:3e:a7:4b:76:24:66:af:9e:07:
ed:11:5a:31:5d:89:9b:3e:42:9c:58:b9:88:58:62:
a6:5b:8a:24:cc:85:ab:de:eb:b7:bd:d8:22:e6:23:
46:ca:9d:fd:d1:c3:6c:30:7a:65:6c:6a:de:15:11:
88:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8E:97:02:28:70:1F:1D:7D:48:E1:13:08:A0:5E:4F:03:60:6A:28
X509v3 Authority Key Identifier:
keyid:16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:fa:2d:3c:d7:e5:90:00:7a:63:86:a2:cc:b2:e3:6a:c9:dd:
56:8b:54:cf:f7:54:95:8a:eb:a8:b2:68:49:18:e5:9a:12:2c:
2a:b9:02:82:9f:b1:fa:91:08:be:d6:a2:cc:a6:32:27:42:1a:
16:94:f7:73:68:e5:64:dd:c0:36:e9:43:d4:02:76:51:d0:df:
90:3e:85:02:4c:47:e9:7c:a0:e1:00:c6:4d:69:f9:c2:a9:2d:
7a:16:a3:b1:aa:7d:97:15:2d:92:d9:37:29:61:96:9b:a7:3b:
54:23:33:8b:30:73:5f:f8:be:ff:d0:a2:7e:6b:2c:ca:53:97:
f7:c2:bb:51:d1:b5:75:c7:d0:2e:41:47:8d:de:91:00:73:82:
cf:ea:77:dd:d6:a1:e6:d7:fc:5e:2b:2e:92:fb:10:91:ea:3f:
d2:80:0d:36:02:12:b2:79:b5:39:5c:5a:33:97:12:20:cb:d7:
40:81:9c:95:13:5e:3a:f7:ec:c1:50:e0:50:f9:fa:45:85:bf:
69:4b:e4:15:22:b3:11:6b:ef:36:67:05:94:39:3f:41:66:37:
61:c1:7b:b4:2f:c9:0f:7b:84:be:48:b0:9b:81:b6:ec:33:bc:
97:fe:5b:d4:de:69:47:bd:f1:73:da:dc:3d:cb:0f:86:b6:ef:
5e:75:9c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:27:25 2025 by rpki-client