
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
File: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft (raw, json)
Hash identifier: htVjjH1S2SY00nxZA9feofc9d5dvKSe0gSHCM//Yh/Q=
Subject key identifier: F0:A8:5C:7A:A6:55:5C:9A:D6:C0:CE:6C:49:86:79:17:5A:AD:D7:EE
Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Certificate serial: 0B79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
Manifest number: 0B62
Signing time: Sun 02 Nov 2025 19:05:12 +0000
Manifest this update: Sun 02 Nov 2025 19:05:11 +0000
Manifest next update: Sun 09 Nov 2025 19:05:11 +0000
Files and hashes: 1: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl (hash: D+ypMqgaloSyRKFv8g1/4EP4zyKLc6xeuoN+ZDltm9Q=)
2: 9D999E187CA811F0AE15ED6EC4F9AE02.roa (hash: J/Y6p2/yKRXDBc4lXrVgkXTkn/NmrMfJzbfX/5O/hQo=)
3: B285AC807CA911F09D442F15C4F9AE02.roa (hash: UX2zMGfv+WxZ0voK+QDzKZn1ZKk782a4iAXgqqE0IQo=)
4: DC06CBC0419A11EAA5E2BA6EC4F9AE02.roa (hash: jb+NbLPJbNRFrpXKly3k3uaY8m7AD5q86vW7O0jvGcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 19:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2937 (0xb79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Validity
Not Before: Nov 2 19:05:11 2025 GMT
Not After : Nov 9 19:05:11 2025 GMT
Subject: CN=6907ab68-32a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:0e:51:79:75:97:15:6b:44:7a:ae:d1:a7:
d5:60:ff:db:bd:47:a7:69:3c:c8:0b:4e:37:99:1b:
cb:02:ff:ca:54:cf:21:ff:da:30:61:4a:5d:b1:a1:
17:a1:8b:23:dd:4d:81:e3:0d:96:7e:77:96:bf:da:
53:14:d1:99:a3:1a:ec:c3:c5:69:e1:90:6e:6b:37:
1e:ef:53:d0:48:6c:a7:e3:d7:65:79:23:bd:3a:fa:
83:76:2d:0e:61:e2:64:86:18:e9:c3:52:2b:3e:c9:
a8:9a:81:03:42:42:ff:f3:e1:32:5d:48:ea:6c:23:
6b:3a:71:75:7f:c6:d8:44:3e:24:c6:e2:47:d3:17:
92:62:77:3c:53:e7:83:50:3b:4a:80:36:ab:37:16:
cd:03:61:2e:51:92:c3:db:81:0e:a7:f3:75:58:b0:
b6:64:ee:5e:e9:4a:83:77:a9:98:a5:3f:84:a6:a4:
38:8b:68:6d:f6:43:b3:3c:05:d2:64:42:e9:fe:e7:
09:ab:18:7c:ab:f5:c5:aa:86:cc:b9:3b:22:65:c9:
1e:70:7b:3a:82:37:72:43:f8:2f:87:64:12:86:9f:
e9:f7:e8:3b:1c:79:c6:46:93:1d:03:56:90:57:5f:
de:36:5d:d0:eb:15:53:4a:93:2b:e0:3b:28:99:ae:
00:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A8:5C:7A:A6:55:5C:9A:D6:C0:CE:6C:49:86:79:17:5A:AD:D7:EE
X509v3 Authority Key Identifier:
keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:3e:05:b1:f5:bc:4c:5f:63:7f:a9:89:7c:48:c3:f3:cf:f1:
bd:1c:26:b9:3e:27:71:ad:3c:99:81:af:f9:2b:bf:4f:fa:96:
fc:47:fd:39:81:9a:d3:00:1f:15:37:22:95:4f:de:a6:d8:a0:
b7:99:e8:1e:5f:f9:7f:04:04:42:c6:5d:ed:7b:ca:f3:1b:66:
9d:05:2f:94:7c:3c:8b:7a:2a:0a:cc:15:c6:77:81:cb:15:1c:
99:ab:de:cc:a8:2f:11:45:9f:69:dc:1c:c1:81:50:8e:96:fd:
02:57:41:8e:16:9b:78:6a:fd:9d:13:ce:24:52:69:3f:98:68:
b1:05:74:88:0b:d6:47:b8:5e:bb:67:bb:5e:eb:3b:42:12:fa:
00:1a:70:ff:04:41:60:d8:f8:59:a6:da:4b:5e:25:ae:08:a2:
26:1d:37:9b:d2:91:e7:52:73:d7:8f:67:7b:73:a9:8b:bf:e3:
cf:91:c2:47:11:a6:e7:4c:fb:0f:38:4a:b7:b6:82:ea:db:aa:
70:d2:39:38:f1:9a:f0:be:0d:4a:6d:bd:06:67:95:28:53:b8:
aa:a7:c8:a8:71:47:f8:57:89:b0:93:89:b7:9f:85:73:ee:10:
19:53:30:49:c8:38:e8:83:7d:b3:ba:fa:9e:95:ec:e3:d2:9c:
27:63:5a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:05:01 2025 by rpki-client