
$ rpki-client -vvf rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
File: FX3bMj02U1BOMIJOaeDbA3U6aM4.mft (raw, json)
Hash identifier: NIKBAgmf+5HAtm7Gnn7T77Tr5cNc9WU9oxPhYsd/VlM=
Subject key identifier: 22:07:DE:E4:1C:FF:4C:45:96:9F:8F:6B:26:68:C3:42:54:12:B7:55
Authority key identifier: 15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE
Certificate issuer: /CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE
Certificate serial: 0187
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
Manifest number: 0184
Signing time: Wed 05 Nov 2025 03:47:12 +0000
Manifest this update: Wed 05 Nov 2025 03:47:12 +0000
Manifest next update: Wed 12 Nov 2025 03:47:12 +0000
Files and hashes: 1: FX3bMj02U1BOMIJOaeDbA3U6aM4.crl (hash: oVNxfUckD4m6jPPLfO3i3o/TEyWejGs7vI03jcKBs68=)
2: 93151D5668F911EE9916D146C4F9AE02.roa (hash: SLZLEvFIQqMp4oAp0p1ONi54RA8FIOFPctbNnoAuAEg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl
rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91480B2, serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE
Validity
Not Before: Nov 5 03:47:12 2025 GMT
Not After : Nov 12 03:47:12 2025 GMT
Subject: CN=690ac8c0-fc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:62:47:cd:6a:d0:0d:81:c1:ec:4b:d5:bf:fb:
4e:b3:ab:02:41:b1:af:33:a6:5e:2d:ea:f4:63:af:
51:8e:65:e2:c7:74:c0:a0:67:54:27:f0:ce:2c:45:
c4:a9:62:41:1b:2c:36:61:65:5f:08:80:1f:a8:07:
63:41:1c:61:a1:fb:12:a7:fb:44:67:83:93:f0:22:
f1:11:75:ac:8f:d2:58:bf:f2:9f:0c:12:20:72:da:
06:a7:01:37:8e:21:30:7e:65:fb:79:07:06:44:7d:
c2:c9:89:9a:b2:7b:6f:c4:c4:55:c1:c5:31:34:83:
58:36:d4:49:75:4f:ae:a3:e0:fd:74:bc:72:81:82:
d9:af:b7:55:b7:62:ae:f6:d1:56:cd:f4:6f:bf:76:
ef:c2:7e:b6:8b:23:f7:3a:31:d5:42:ea:82:8b:31:
5b:10:fe:fc:ec:30:49:63:01:a3:b7:7f:c1:da:81:
a5:29:e6:34:78:04:15:60:e7:dd:d8:72:16:53:64:
61:f0:52:6c:06:50:ed:7b:c0:cf:38:9f:db:6d:57:
1d:41:c5:18:44:8b:6e:e1:6b:e4:8a:02:65:a0:7a:
5c:9c:85:8d:71:3e:bb:71:29:ad:d5:b5:63:f8:b5:
03:ab:00:e7:27:f8:3b:a7:f5:cb:5a:95:20:56:7f:
7a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:07:DE:E4:1C:FF:4C:45:96:9F:8F:6B:26:68:C3:42:54:12:B7:55
X509v3 Authority Key Identifier:
keyid:15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:2a:86:38:2f:f2:f8:b8:72:81:80:96:d6:47:76:85:38:ac:
c7:51:20:a8:67:44:7e:d7:bc:81:57:c3:17:b9:48:7f:d7:42:
c7:70:d8:c0:7f:05:ba:93:1e:08:8e:31:6a:3c:94:45:30:cb:
46:d4:66:f5:3d:3c:24:fd:dd:08:0a:d3:a6:f4:b1:ad:3c:83:
66:01:d5:42:e7:42:69:3d:7b:de:6e:91:44:12:e5:16:5a:05:
ba:40:0f:b8:0e:0b:fa:08:c6:05:54:1c:c2:20:5f:13:71:cf:
d2:83:e2:d6:33:1d:66:26:50:c5:80:ef:ee:85:99:c4:4d:ca:
6f:ea:79:b3:48:72:25:3b:2b:44:04:55:31:b4:36:19:48:3e:
9d:4a:7b:5e:6c:4e:9b:da:70:b3:b7:7d:5b:fb:58:05:1d:b4:
94:35:60:46:a7:1d:c6:b7:bc:b6:12:e4:c5:36:44:86:5b:c5:
27:f6:71:c6:95:01:8d:e2:31:ab:73:89:48:01:db:7d:de:63:
af:31:f9:c4:9c:d9:32:2c:26:43:e3:dc:b4:2d:0c:4f:96:54:
47:0c:35:ea:d4:d3:90:3f:51:e9:23:05:e9:0a:62:1f:e4:4f:
72:30:bc:9d:72:29:0e:53:d6:af:be:cc:7a:b4:45:81:af:29:
42:39:d0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:28:35 2025 by rpki-client