
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
File: Fm664SGI_4_HXurj7PjTvearJxo.mft (raw, json)
Hash identifier: aO5pFGe2+Q+3dLDisa+KFarfoQc8RWWFsn0A4k+sUjc=
Subject key identifier: E6:C3:CE:97:14:BC:EB:F0:B1:FE:02:71:A4:1B:AA:86:89:04:3B:3C
Authority key identifier: 16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A
Certificate issuer: /CN=A91C654A/serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A
Certificate serial: 01D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
Manifest number: 094C
Signing time: Tue 04 Nov 2025 21:40:07 +0000
Manifest this update: Tue 04 Nov 2025 21:40:07 +0000
Manifest next update: Tue 11 Nov 2025 21:40:07 +0000
Files and hashes: 1: Fm664SGI_4_HXurj7PjTvearJxo.crl (hash: 4XRfbS1lMrH+7DKA1HdB/jZC7g9vyc4+lLgBKYNg6+A=)
2: 50F8849CFDC111ED95AAA041C4F9AE02.roa (hash: 0DD71MyNn/a0ClFzY+negnwcfIlHkrg4N1Q4gkDWcxQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl
rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C654A, serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A
Validity
Not Before: Nov 4 21:40:07 2025 GMT
Not After : Nov 11 21:40:07 2025 GMT
Subject: CN=690a72b7-583f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:f7:8f:d7:1c:08:d3:c0:9c:4f:95:df:b8:
fe:55:f4:c7:f8:15:45:f7:2d:4a:cf:eb:4a:b5:1d:
49:a6:2d:67:2c:94:d0:7a:0b:a2:6b:a7:8b:7a:31:
30:c3:dd:3f:b5:55:cb:54:3b:45:98:6e:f3:6c:d9:
18:13:d1:82:9b:64:45:60:c4:25:c8:d8:0d:b2:a5:
ac:7c:a9:89:19:cf:bf:76:90:db:37:4c:27:75:e3:
a8:a3:22:6b:f3:f4:48:72:c5:f3:ae:88:b4:46:96:
25:7f:ad:ca:26:d5:1d:0d:c2:83:2c:43:f1:e3:25:
31:d7:7f:ac:18:19:a2:23:46:ff:8f:82:3a:4d:dc:
23:4c:3f:ef:2a:a1:f6:84:f9:ed:a8:96:6c:ef:39:
01:f7:66:15:86:ac:fa:ef:91:4a:17:a6:2a:a9:0d:
47:1c:77:cd:bf:89:38:e9:3d:b2:76:bf:49:be:29:
0f:3e:91:86:36:e4:43:34:e4:4e:2e:97:a6:28:bb:
a9:72:9b:81:2c:09:d7:93:55:68:82:0a:f1:e5:2e:
a9:f6:6b:a4:b9:a6:db:c7:38:b7:1b:2f:1d:da:78:
b0:ce:3b:a5:6d:3f:3b:e1:2f:35:3b:e6:93:87:71:
c1:cb:9d:39:60:a5:5e:f5:e4:24:ec:04:10:24:1e:
9f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C3:CE:97:14:BC:EB:F0:B1:FE:02:71:A4:1B:AA:86:89:04:3B:3C
X509v3 Authority Key Identifier:
keyid:16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:dc:7a:2a:47:46:ae:cc:1f:c6:fd:cb:61:85:cc:fb:96:b0:
b2:31:36:12:f6:d1:30:c9:68:f0:eb:c9:25:44:5a:3b:d8:9e:
08:bf:99:9e:20:0e:9c:80:10:11:9c:4e:87:37:29:d9:24:b9:
21:af:d5:33:2e:21:a6:d2:5a:69:14:3e:57:5d:ba:94:ff:e6:
54:62:bb:8b:85:c6:c5:39:0b:ee:b9:69:24:45:3c:d2:f8:0b:
a7:ba:9a:12:ee:d6:ab:46:41:53:48:e0:c4:d4:7d:ca:1e:8f:
7e:5c:93:d7:54:ba:fc:00:59:cd:bb:7f:83:b5:2d:8e:5d:a1:
e7:91:5b:d7:10:df:90:47:09:d8:28:fc:29:4a:52:7e:f1:54:
e1:1b:70:14:41:4a:04:b6:29:86:a4:8d:8b:88:38:6f:1f:f0:
ef:20:ed:5e:35:b9:bd:21:54:d7:52:8b:c5:fa:9f:ed:a0:49:
e9:8e:98:4f:b3:4d:8e:01:f4:06:73:81:56:82:7f:dd:1e:26:
8f:a3:50:ad:d8:1a:49:72:ba:10:9f:f3:31:34:73:95:dc:a1:
0c:80:6d:27:4a:7a:1b:ee:9e:74:14:32:ee:4a:87:b7:66:a8:
90:dc:04:4d:e5:c1:43:d1:1a:50:af:48:ea:8f:20:ca:d0:70:
13:d2:82:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:33:02 2025 by rpki-client