
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft
File: FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft (raw, json)
Hash identifier: FVI1c0edRKmTeM5Pj+FWp0HJpj2QRwmGXivVzhJYScI=
Subject key identifier: 7B:87:26:48:6C:D7:24:04:4B:30:09:0F:D7:F1:84:C8:03:66:F5:EB
Authority key identifier: 14:AD:15:CB:3F:2B:4B:F2:49:B0:AC:F4:A1:FF:DB:F4:A5:01:32:5C
Certificate issuer: /CN=A91BDB80/serialNumber=14AD15CB3F2B4BF249B0ACF4A1FFDBF4A501325C
Certificate serial: 01F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FK0Vyz8rS_JJsKz0of_b9KUBMlw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft
Manifest number: 01ED
Signing time: Mon 03 Nov 2025 02:31:31 +0000
Manifest this update: Mon 03 Nov 2025 02:31:31 +0000
Manifest next update: Mon 10 Nov 2025 02:31:31 +0000
Files and hashes: 1: FK0Vyz8rS_JJsKz0of_b9KUBMlw.crl (hash: DJagtKLPvHwQp5omGdb0PLc6nReTFUqFUphSQigqJPU=)
2: AD633F28C2C611ED86556036C4F9AE02.roa (hash: MS7NWq0UAnEQeKvAZaw7UobWiB8w/tScY/6YvlxdzAc=)
3: ACA62AC8C2C611ED86556036C4F9AE02.roa (hash: 75H6iOtyKg/g21bWinoaWQqrg0ybarH3XmE2m+ZDXWE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.crl
rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FK0Vyz8rS_JJsKz0of_b9KUBMlw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 02:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB80, serialNumber=14AD15CB3F2B4BF249B0ACF4A1FFDBF4A501325C
Validity
Not Before: Nov 3 02:31:31 2025 GMT
Not After : Nov 10 02:31:31 2025 GMT
Subject: CN=69081403-3e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4c:24:6f:d5:56:d4:cd:ae:96:8f:08:6c:ab:
e9:fe:5e:b0:5d:70:5b:d6:30:8f:18:2a:11:3c:3a:
8e:e1:8d:19:15:93:9e:0e:c1:0a:56:ae:b1:f8:3d:
39:39:2e:18:29:2d:3c:9e:0a:02:de:2a:82:ff:eb:
35:f0:dd:3c:fe:d3:09:22:5e:67:27:d8:dd:12:9b:
c8:c6:dc:fd:54:00:3e:ce:55:49:ad:ee:05:3e:92:
7f:a9:99:19:e0:00:2e:e1:49:16:f0:ee:98:23:c8:
71:6f:08:d8:53:00:86:b8:2d:e8:f3:82:a2:07:9d:
da:a6:35:bb:5d:52:aa:6b:0d:e9:db:fc:3b:1a:eb:
b8:76:ee:f8:7b:69:12:3d:7b:d7:89:e9:53:2a:76:
f8:a7:32:4c:cb:80:80:7f:f0:00:e4:19:14:56:60:
1c:73:ee:26:08:7a:d2:48:47:21:4c:6f:c4:8a:0b:
89:51:12:86:69:16:76:0f:f3:90:d1:d5:59:61:c2:
cb:aa:70:60:1c:44:82:2b:a8:6f:cd:cb:7f:e0:1b:
24:04:a6:e4:d5:ff:48:f2:e1:4a:87:f5:89:25:2c:
fa:bd:3f:99:0f:d0:bd:34:cd:34:24:ac:49:53:57:
10:cb:f3:0f:2f:e3:75:1a:6e:42:ff:ef:a9:8a:dc:
3b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:87:26:48:6C:D7:24:04:4B:30:09:0F:D7:F1:84:C8:03:66:F5:EB
X509v3 Authority Key Identifier:
keyid:14:AD:15:CB:3F:2B:4B:F2:49:B0:AC:F4:A1:FF:DB:F4:A5:01:32:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FK0Vyz8rS_JJsKz0of_b9KUBMlw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:30:cf:5b:d4:66:c0:ba:02:a3:72:f6:07:d4:03:b9:b1:50:
22:84:9e:40:38:91:39:14:ab:64:38:a1:da:d8:42:7e:11:02:
94:35:3f:6b:2a:12:b7:14:14:69:4c:59:23:99:7c:f3:d6:8b:
85:55:1d:29:8d:34:a7:99:b7:58:fd:e9:b4:e2:eb:d1:bd:ed:
a5:e9:e1:54:07:eb:84:44:77:04:6b:26:18:5c:a1:2f:9b:30:
af:ec:85:df:55:2d:25:b9:c2:91:0b:2e:01:a7:03:4b:cc:a1:
d1:ac:57:36:73:33:fb:32:6f:6b:9d:e5:e2:ef:d6:cc:dc:e9:
bb:d5:79:5c:1c:30:82:82:46:01:94:ff:14:ed:a2:41:bc:05:
13:ec:b6:d5:f5:80:f0:94:b3:40:17:32:de:1f:4b:1e:a3:37:
6f:92:db:58:8e:eb:ce:f9:f2:ad:97:c9:8c:ca:9d:57:9d:68:
d8:30:d4:ee:bd:67:a4:ed:5b:9f:1c:50:f7:82:30:27:6b:7e:
a2:35:ba:e9:09:26:de:7d:a1:39:94:72:2d:9c:55:28:64:ba:
c6:34:de:55:ee:bb:a1:e6:bc:2b:08:23:cc:fa:b7:a3:0c:22:
b4:6d:30:15:0c:9f:fd:0a:6f:d7:42:c8:53:bf:33:46:d9:7c:
ae:65:a8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:17:05 2025 by rpki-client