
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
File: 8iz473at_fLPnv7b7BITSIY1b00.mft (raw, json)
Hash identifier: aCxEXHtWFZ301Escm0BSvDewhghMT+RWTPaiEQ/4cJg=
Subject key identifier: E7:79:65:96:6A:AA:75:B1:FA:1A:E1:E0:62:78:3B:7F:FB:B1:FA:C5
Authority key identifier: F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D
Certificate issuer: /CN=A91E1604/serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
Manifest number: FB
Signing time: Mon 03 Nov 2025 05:10:08 +0000
Manifest this update: Mon 03 Nov 2025 05:10:08 +0000
Manifest next update: Mon 10 Nov 2025 05:10:08 +0000
Files and hashes: 1: 8iz473at_fLPnv7b7BITSIY1b00.crl (hash: NOaNBx40RQaa6406ZiQ7gCu1a9olwiKF+pD1aCLgLy0=)
2: E36214403D0011EFAD623342C4F9AE02.roa (hash: AwYKGbCuVNqR5TnlD+W51Ob1Ci3CK6EmFUtU8criHKk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl
rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:10:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1604, serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
Validity
Not Before: Nov 3 05:10:08 2025 GMT
Not After : Nov 10 05:10:08 2025 GMT
Subject: CN=69083930-8080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:16:7d:6a:54:fe:cb:ea:8b:c1:1d:1d:06:
46:a5:5b:46:f5:64:02:89:ae:6d:c2:ab:73:f5:b7:
46:5c:ff:26:10:79:35:fd:aa:ec:61:84:6e:42:30:
92:9d:77:ea:29:e9:cf:21:b2:e4:5e:a8:46:0e:8a:
d5:b2:fc:b7:b8:fc:9d:dc:d4:8b:85:8c:d2:90:b2:
b1:65:bb:43:2f:73:24:b4:ab:cd:bc:62:a9:8b:e1:
d6:48:85:f5:b9:f0:54:0e:1f:fa:b9:a2:81:2b:3e:
c7:c6:93:53:19:ac:69:12:72:47:0b:f5:dc:f1:6d:
d6:46:9f:89:4f:a3:ee:f4:89:1f:24:c0:17:df:e5:
58:da:64:f7:d2:48:ab:d4:ce:2e:de:bd:86:96:20:
ea:40:d9:11:a5:c9:6e:a4:e2:dd:24:f9:cf:39:fb:
58:e4:a6:d4:d0:6b:07:9f:58:dc:72:a2:d8:a1:cd:
ab:83:e7:99:e0:92:7f:87:f8:09:c4:76:a6:5d:0a:
1c:6d:e8:a5:af:c9:48:cc:03:60:f0:96:f6:16:1d:
41:7a:fb:3d:06:b0:1e:3c:c8:5b:32:e3:09:99:33:
be:a9:b4:e1:c4:a8:15:08:ab:a8:6e:a0:2b:be:9f:
d6:b0:08:45:ba:af:00:73:52:c1:33:ef:10:6c:05:
81:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:79:65:96:6A:AA:75:B1:FA:1A:E1:E0:62:78:3B:7F:FB:B1:FA:C5
X509v3 Authority Key Identifier:
keyid:F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:3c:b1:02:b2:f0:3a:90:dc:25:24:6f:82:d8:87:e9:eb:d6:
01:86:11:9d:94:87:48:05:ab:dd:9d:c0:da:48:e2:61:8d:46:
30:f4:ce:7c:48:88:8c:43:d3:0e:35:8c:d2:70:9f:71:dd:14:
8a:c3:bd:f6:50:19:ba:1f:29:b3:2f:32:5e:26:f6:44:56:3c:
9e:b3:4a:3b:92:94:77:fd:31:ca:a6:e5:dd:d4:87:e3:6b:7e:
d0:c1:a5:dd:f0:a7:82:0b:50:38:b5:0d:9a:d7:97:a6:90:ea:
fe:25:28:11:1e:96:8a:a2:fe:9a:2e:95:d2:04:7a:fc:84:a8:
8e:90:fc:52:cb:c1:30:a5:60:2a:a6:6d:a2:42:b8:b2:9c:de:
78:87:ce:ea:7b:89:ef:a7:db:cf:1a:ab:9f:e4:a5:c2:e9:6b:
91:fe:10:a7:0b:a0:b9:66:63:60:8b:7c:bf:02:fa:32:da:1e:
61:42:cb:37:2f:78:cc:c7:c9:c2:1e:4d:a0:cf:79:eb:74:4a:
27:5b:c7:93:2d:ca:35:e7:ee:27:71:c1:f1:4a:7d:4f:88:e0:
19:79:ff:1f:08:8b:15:75:2d:b5:c5:78:b5:a7:27:65:be:a9:
59:cf:53:b6:ff:0b:99:2a:4d:54:a1:1a:67:76:02:4b:e4:73:
ec:12:9a:d8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTE2MDQxMTAvBgNVBAUTKEYyMkNGOEVGNzZBREZERjJDRjlFRkVEQkVDMTIxMzQ4
ODYzNTZGNEQwHhcNMjUxMTAzMDUxMDA4WhcNMjUxMTEwMDUxMDA4WjAYMRYwFAYD
VQQDEw02OTA4MzkzMC04MDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtJAWfWpU/svqi8EdHQZGpVtG9WQCia5twqtz9bdGXP8mEHk1/arsYYRuQjCS
nXfqKenPIbLkXqhGDorVsvy3uPyd3NSLhYzSkLKxZbtDL3MktKvNvGKpi+HWSIX1
ufBUDh/6uaKBKz7HxpNTGaxpEnJHC/Xc8W3WRp+JT6Pu9IkfJMAX3+VY2mT30kir
1M4u3r2GliDqQNkRpclupOLdJPnPOftY5KbU0GsHn1jccqLYoc2rg+eZ4JJ/h/gJ
xHamXQocbeilr8lIzANg8Jb2Fh1Bevs9BrAePMhbMuMJmTO+qbThxKgVCKuobqAr
vp/WsAhFuq8Ac1LBM+8QbAWBIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOd5ZZZq
qnWx+hrh4GJ4O3/7sfrFMB8GA1UdIwQYMBaAFPIs+O92rf3yz57+2+wSE0iGNW9N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTYwNC8wOUExMTIzNDND
RUIxMUVGOTRFMjRGNTlDNEY5QUUwMi84aXo0NzNhdF9mTFBudjdiN0JJVFNJWTFi
MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzhpejQ3M2F0X2ZMUG52N2I3QklUU0lZMWIwMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTYwNC8wOUExMTIzNDNDRUIxMUVGOTRFMjRGNTlDNEY5QUUwMi84aXo0NzNhdF9m
TFBudjdiN0JJVFNJWTFiMDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBxPLECsvA6kNwlJG+C2Ifp69YBhhGdlIdIBavdncDaSOJhjUYw9M58
SIiMQ9MONYzScJ9x3RSKw732UBm6HymzLzJeJvZEVjyes0o7kpR3/THKpuXd1Ifj
a37QwaXd8KeCC1A4tQ2a15emkOr+JSgRHpaKov6aLpXSBHr8hKiOkPxSy8EwpWAq
pm2iQriynN54h87qe4nvp9vPGquf5KXC6WuR/hCnC6C5ZmNgi3y/Avoy2h5hQss3
L3jMx8nCHk2gz3nrdEonW8eTLco15+4nccHxSn1PiOAZef8fCIsVdS21xXi1pydl
vqlZz1O2/wuZKk1UoRpndgJL5HPsEprY
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:48:26 2025 by rpki-client