
$ rpki-client -vvf rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
File: FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft (raw, json)
Hash identifier: seYzQ/57rWl0kaHoZpFUguuthvjVsyGy13ouPmELvPM=
Subject key identifier: 4A:D1:35:07:67:AB:B4:EE:9D:CD:32:A2:89:02:B7:16:4C:95:49:2B
Authority key identifier: 14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27
Certificate issuer: /CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
Certificate serial: 057B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
Manifest number: 056D
Signing time: Tue 04 Nov 2025 23:26:20 +0000
Manifest this update: Tue 04 Nov 2025 23:26:19 +0000
Manifest next update: Tue 11 Nov 2025 23:26:19 +0000
Files and hashes: 1: FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl (hash: uE43DQjKYE7AYNJwoAqQwt3TE5WkvxNIQHbH/CGi8+o=)
2: AC58009E782A11EFA7DD8F7CC4F9AE02.roa (hash: sZfCZ9XCzJg9q38s978ZoO/yQmeInU8GMq3otDrDntk=)
3: C8900982059611ECB2896C55C4F9AE02.roa (hash: B4anHJEaRTiTfVVaAnye8CZy9d3Hle7lj/K1p4d+P2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl
rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 23:26:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1403 (0x57b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91193C1, serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
Validity
Not Before: Nov 4 23:26:19 2025 GMT
Not After : Nov 11 23:26:19 2025 GMT
Subject: CN=690a8b9c-0d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:db:26:2f:e8:f4:2d:41:34:44:74:74:fa:fa:
e9:99:34:8b:8d:34:70:8a:ae:0f:37:dd:c1:1b:a9:
10:03:91:da:cd:c4:73:37:1a:be:6e:89:a2:68:71:
d4:11:1c:6f:a5:18:6a:4d:c7:8d:ec:3e:f7:9f:79:
60:a4:a4:49:41:93:05:84:9e:34:8a:9a:9a:04:a2:
f9:d8:b7:9e:a0:e7:da:fe:4e:0b:ab:fd:2b:0b:15:
56:87:7e:67:58:a5:ed:c6:a7:0b:4d:da:aa:ca:fd:
c0:f5:73:13:d2:59:db:24:2d:f1:4b:17:39:f8:97:
98:0e:3d:10:0f:52:45:81:97:1a:b8:a4:1a:69:97:
4f:fe:9a:58:2b:e0:6f:0b:23:2a:90:bf:35:a2:7f:
04:36:75:76:e2:c4:dd:74:b5:cb:a1:7f:38:93:81:
2c:cc:26:ac:69:cb:30:46:d1:53:33:13:65:f9:13:
66:b4:67:68:f1:f0:c5:6d:88:aa:46:54:2b:d0:fd:
1d:23:b5:8a:3c:23:7f:7c:23:0b:0d:60:57:53:61:
37:bc:b1:da:31:42:77:d7:16:15:6a:b0:b2:e9:b6:
1a:a1:da:f8:34:f3:a1:cf:9a:25:58:9b:aa:3c:bb:
0f:16:84:c6:14:5f:df:67:5e:01:9e:75:d5:25:0a:
e4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D1:35:07:67:AB:B4:EE:9D:CD:32:A2:89:02:B7:16:4C:95:49:2B
X509v3 Authority Key Identifier:
keyid:14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:f0:37:38:37:5d:9b:cb:0b:7b:2c:19:02:e3:6c:c5:4c:28:
f6:8b:d6:2d:d8:56:37:79:39:ee:09:e9:4e:27:a1:3e:a7:47:
39:6c:c4:0e:38:73:57:af:e8:71:be:48:dd:ae:87:0e:36:00:
c0:59:d5:1d:61:10:71:7f:b0:24:e1:9e:76:5c:dc:73:f4:13:
b0:76:c1:9b:96:0f:7e:bf:83:57:79:7f:f9:01:c1:a2:ea:1f:
63:95:f4:8f:c2:2e:ba:75:36:a8:87:78:3c:05:53:36:7d:d5:
a0:1b:9d:f1:d3:63:30:d9:e2:e0:b9:17:1a:fb:1b:75:ef:56:
3c:fc:46:fa:f8:0d:e3:5b:1b:e1:26:c6:26:08:1b:21:c4:7c:
b3:8d:0b:70:c1:fc:02:a4:51:09:01:31:7b:eb:54:3a:47:e0:
d7:81:2e:32:53:18:0c:04:84:42:83:da:c1:03:aa:98:0c:fb:
00:7d:5b:4c:90:98:78:cf:ba:bd:c5:2c:da:80:4f:49:75:5d:
d2:22:35:0d:44:05:0d:80:0d:6b:f3:21:35:a6:0f:6d:51:66:
71:da:1c:a3:38:83:34:45:32:27:43:56:f6:0f:e6:19:e7:fe:
5b:b5:fa:7b:87:0f:e6:1a:b9:5b:27:bb:1b:b8:78:68:a0:6f:
2f:b9:87:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:32:37 2025 by rpki-client