
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft
File: ft761lb9iDJvbfriSHAQWAQCo18.mft (raw, json)
Hash identifier: ncfxVaYKzjljAbtxk87/3fpT4BVerDGvCNLk8qHrzF8=
Subject key identifier: 9F:05:09:C2:4A:5F:0A:80:3E:14:E0:3E:D2:81:92:43:EF:4B:E9:45
Authority key identifier: 7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F
Certificate issuer: /CN=A91D9785/serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F
Certificate serial: 1A60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft
Manifest number: 1A4B
Signing time: Sun 02 Nov 2025 16:22:04 +0000
Manifest this update: Sun 02 Nov 2025 16:22:04 +0000
Manifest next update: Sun 09 Nov 2025 16:22:04 +0000
Files and hashes: 1: ft761lb9iDJvbfriSHAQWAQCo18.crl (hash: Sdh3nQ6dM5+Fsw4MhcFCDToHSYgQI+cTkddKtPIELfA=)
2: CBCD905AA6E811EFB43BBB4EC4F9AE02.roa (hash: /HeNZUmasiA1sFyQ07qK6IR+x8tI1Ek4b4MMz3sVfn8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl
rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 16:22:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6752 (0x1a60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9785, serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F
Validity
Not Before: Nov 2 16:22:04 2025 GMT
Not After : Nov 9 16:22:04 2025 GMT
Subject: CN=6907852c-9ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e5:62:f9:90:67:ad:16:dc:7c:df:c5:ab:f8:
fd:0b:36:37:de:cd:13:92:e5:99:a0:e6:31:61:23:
80:ae:b1:36:97:26:fa:01:ec:71:bb:28:f6:5a:fe:
91:8d:9b:7a:6c:f1:e4:be:25:08:4f:58:93:85:4c:
60:22:f5:fa:20:17:fa:87:70:8f:a7:a0:f2:40:b9:
2c:91:21:9a:e5:fa:89:64:5f:fd:9e:76:ba:1b:80:
44:da:a7:63:3e:47:ed:ed:50:26:94:55:61:b1:0a:
41:43:44:bf:2b:49:78:8d:d0:1a:9c:f1:f2:57:e2:
d0:9f:63:9c:6d:58:27:aa:a5:df:71:42:ba:4f:44:
0e:97:9c:5d:cc:7e:60:23:e3:ca:ae:c9:d3:f4:ee:
af:44:b3:0f:77:2f:29:59:1d:66:7d:42:4e:44:2a:
0c:ea:eb:5f:66:d2:d2:9c:b5:81:77:8f:00:d5:4a:
2c:54:ea:86:e4:fe:69:2d:9b:4a:95:52:6b:84:48:
ae:b5:3d:c0:bb:b9:3e:71:11:c2:75:b5:54:1a:d5:
7d:49:b4:38:93:17:23:9b:a1:62:11:fa:e8:fb:01:
4d:3c:df:43:ca:26:15:a7:eb:f9:0c:f5:57:e5:0c:
80:f2:50:66:06:28:30:41:a5:41:e7:8e:19:3c:9a:
19:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:05:09:C2:4A:5F:0A:80:3E:14:E0:3E:D2:81:92:43:EF:4B:E9:45
X509v3 Authority Key Identifier:
keyid:7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dc:36:12:51:f4:f7:7f:ab:04:62:75:49:56:3d:42:75:f5:d7:
6b:73:f2:7e:7c:5c:7a:fb:c0:a8:13:f5:cd:12:a4:98:7f:83:
ba:91:e5:89:6e:42:b1:5a:49:aa:df:03:e1:40:34:1a:34:6c:
95:7e:0a:c1:1d:fb:57:b8:b8:53:79:4e:95:e6:5d:85:93:a4:
1e:ab:da:08:76:31:fa:b9:87:cf:e0:51:eb:4f:7d:56:18:e6:
4e:a2:10:15:b8:94:0f:d3:88:f4:c7:af:cf:ec:28:91:3d:0d:
33:46:91:91:12:93:34:26:de:23:11:7a:e9:fc:af:2e:c5:a8:
25:99:be:4b:cc:1c:4d:f5:3d:3a:ef:7e:7f:50:7d:03:ee:10:
03:bd:bb:ca:0f:af:73:c0:00:bb:d1:28:84:80:99:e5:e1:7f:
46:6a:b6:a0:75:8a:09:b3:00:68:7a:aa:3f:9f:5a:47:88:0a:
e3:60:1a:fb:b1:8c:c7:e8:cf:86:58:ff:0f:03:88:1f:b0:b9:
1d:d0:46:8d:6c:3a:23:66:99:57:a0:07:d0:57:de:43:0f:5b:
a1:43:1e:16:aa:31:73:e0:16:2d:79:37:56:7b:69:a9:91:68:
07:4e:78:ae:a8:4e:4b:5c:d4:e6:d0:d3:d7:d4:84:50:68:d3:
6e:e0:d7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:31:00 2025 by rpki-client