
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft
File: FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft (raw, json)
Hash identifier: Bho8+5HLKkjzIJJyBAzreOymINYioFc60czwkYxXxQI=
Subject key identifier: F2:7A:D5:8E:71:26:72:5D:FF:3F:A7:A1:5A:64:BB:27:74:EC:CF:61
Authority key identifier: 16:33:29:F5:70:5D:E9:BC:22:35:AC:57:D7:54:F9:80:78:C7:F5:2B
Certificate issuer: /CN=A918BB4D/serialNumber=163329F5705DE9BC2235AC57D754F98078C7F52B
Certificate serial: 06F7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft
Manifest number: 06F7
Signing time: Sun 02 Nov 2025 21:54:31 +0000
Manifest this update: Sun 02 Nov 2025 21:54:30 +0000
Manifest next update: Sun 09 Nov 2025 21:54:30 +0000
Files and hashes: 1: FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl (hash: AzOzUrAFlbJzUj9x0lvKx0/QNUGjv8U3H5yPEsW+ULI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl
rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1783 (0x6f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BB4D, serialNumber=163329F5705DE9BC2235AC57D754F98078C7F52B
Validity
Not Before: Nov 2 21:54:30 2025 GMT
Not After : Nov 9 21:54:30 2025 GMT
Subject: CN=6907d317-4dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:15:b7:2e:e2:35:d9:97:82:eb:ce:4e:d3:c8:
e0:6d:8d:66:4f:f0:d3:18:30:31:50:36:29:de:02:
87:67:55:dc:13:3b:7d:63:9d:b1:ea:37:22:e3:ef:
30:6f:08:02:7e:1c:7b:c9:a5:48:83:e0:b5:1d:ca:
66:c6:8d:fe:25:ee:4f:d0:16:17:fc:0a:b3:75:e6:
61:8d:4f:94:fd:1b:76:3b:52:ec:89:eb:72:3e:e5:
76:14:ab:52:78:49:8b:be:9c:92:06:04:52:10:18:
7a:f4:f8:ba:cc:8c:2b:f5:11:1b:58:60:55:a4:cf:
2e:44:00:5d:5f:51:8f:f3:50:2f:73:37:64:8f:79:
dd:8d:83:04:72:22:83:ec:dd:38:54:31:24:d1:b2:
c5:c5:b8:c7:b2:e1:3c:28:3a:26:6f:7f:58:17:27:
65:30:be:20:ff:ff:0f:54:95:21:0c:7e:b6:29:2f:
2b:16:f1:55:4f:20:f9:45:04:77:0e:f3:0f:83:71:
d0:d6:12:4e:12:d3:f8:df:62:b7:aa:00:73:0c:ae:
36:08:50:0b:c4:26:5e:9a:e9:99:33:fb:23:05:a8:
c4:11:d4:b9:02:f6:d7:53:63:66:65:5f:52:40:f8:
97:23:1b:47:65:e8:fe:27:48:d6:e5:53:d8:92:6f:
54:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7A:D5:8E:71:26:72:5D:FF:3F:A7:A1:5A:64:BB:27:74:EC:CF:61
X509v3 Authority Key Identifier:
keyid:16:33:29:F5:70:5D:E9:BC:22:35:AC:57:D7:54:F9:80:78:C7:F5:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:f7:7e:39:da:e3:7f:34:c5:d3:11:dc:98:3d:2b:c8:0a:91:
4b:72:48:30:eb:22:ff:97:41:22:03:b4:cf:8b:fa:fb:23:88:
75:55:91:c7:f8:9a:8c:7b:5c:44:ca:d8:1e:35:cb:12:d2:c2:
aa:90:6f:94:3a:2a:4e:44:52:a7:a5:90:9a:40:1e:4e:4f:10:
50:89:e0:2b:34:f8:41:1c:52:fd:a2:0d:dd:34:9b:0c:7c:11:
c1:bf:1f:64:d6:74:7e:08:60:c0:07:0b:46:94:1b:7b:ae:0f:
96:ba:3d:02:24:26:2e:42:f1:22:38:64:d5:0b:a1:92:0b:21:
8a:a3:c3:48:f6:f0:ec:07:63:31:52:d0:10:21:18:d8:a8:7b:
68:20:6a:72:45:ce:06:4b:67:3b:02:fc:0f:9e:13:d9:e8:62:
b5:e8:43:50:c2:37:ee:19:10:33:25:76:47:ed:5c:3e:d8:ef:
02:b9:c3:3f:f1:b4:a8:7a:40:44:a9:31:c5:8b:22:65:91:42:
b2:81:34:23:8b:11:51:40:06:4f:92:1c:90:1b:c4:24:3c:97:
1b:c8:49:59:3f:6c:ea:fd:8e:83:81:84:bc:33:a6:f8:df:60:
8b:de:d9:fd:3f:8f:a3:ff:59:6b:8d:1c:16:d1:2d:50:7b:c8:
23:ef:97:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:33:05 2025 by rpki-client