
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft
File: FnVwIM-0mowfe-H3xI1FR9_JZu8.mft (raw, json)
Hash identifier: t0bM3FDr7saIYNffORPyyAj7BB9FHlZftYtInLDAW9I=
Subject key identifier: 16:A5:68:39:C6:11:4F:B1:4B:9F:C2:63:BD:B8:3F:35:1F:86:53:CD
Authority key identifier: 16:75:70:20:CF:B4:9A:8C:1F:7B:E1:F7:C4:8D:45:47:DF:C9:66:EF
Certificate issuer: /CN=A9150EAB/serialNumber=16757020CFB49A8C1F7BE1F7C48D4547DFC966EF
Certificate serial: 072C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnVwIM-0mowfe-H3xI1FR9_JZu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft
Manifest number: 1272
Signing time: Sun 02 Nov 2025 19:10:24 +0000
Manifest this update: Sun 02 Nov 2025 19:10:24 +0000
Manifest next update: Sun 09 Nov 2025 19:10:24 +0000
Files and hashes: 1: FnVwIM-0mowfe-H3xI1FR9_JZu8.crl (hash: agckwzKxJfoxBNeLugsOBCUFo+nT/3rOIyFyIFkDQ6k=)
2: 99871E14B32A11F0A592C451C4F9AE02.roa (hash: NrC1/64Q4pVUX0t00BSlKYPKXM6IsVAN9Gh5EcD0cmw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.crl
rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnVwIM-0mowfe-H3xI1FR9_JZu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 19:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1836 (0x72c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150EAB, serialNumber=16757020CFB49A8C1F7BE1F7C48D4547DFC966EF
Validity
Not Before: Nov 2 19:10:24 2025 GMT
Not After : Nov 9 19:10:24 2025 GMT
Subject: CN=6907aca0-3ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:7f:94:2e:bf:d9:1d:7f:46:69:c4:30:e8:
43:f6:e3:61:51:0a:2e:03:9d:3b:0c:e6:58:bd:56:
cf:b8:b5:df:f4:b0:2d:57:9c:33:e8:34:8b:72:38:
e0:7f:21:77:7c:ec:f8:aa:4a:46:4e:29:7f:8e:49:
af:61:4a:5c:d4:ad:1a:c8:bf:b6:e6:f8:6d:37:32:
f6:f0:bf:a6:19:99:22:be:f9:b1:e7:94:8b:c5:c6:
17:33:af:88:19:cd:3a:8f:50:bb:72:c6:27:cc:ff:
94:c5:7c:e5:21:27:b5:1e:6b:c6:44:56:c3:76:35:
89:fa:a2:54:2c:37:cc:22:bf:99:2e:d1:9e:51:42:
dc:df:58:dd:41:05:b6:5e:63:b4:ef:f8:18:c0:c6:
0d:d4:63:32:cf:66:25:bc:fa:f2:b1:81:6e:16:07:
0c:1f:7c:82:dd:fe:cd:17:93:48:4d:1b:71:95:5e:
59:7e:7d:4d:2d:57:2b:bd:eb:26:13:02:52:d2:f1:
58:6a:33:b9:bb:91:c2:f9:67:a9:d0:8e:29:cc:f2:
43:3f:61:8c:6f:a4:7a:65:8c:1e:46:11:a5:ed:75:
2a:2a:7f:cf:34:b0:4f:4a:1d:63:75:9c:c7:f5:a3:
f3:92:d2:ee:63:26:71:e2:c2:fd:b2:28:6f:3a:5b:
06:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A5:68:39:C6:11:4F:B1:4B:9F:C2:63:BD:B8:3F:35:1F:86:53:CD
X509v3 Authority Key Identifier:
keyid:16:75:70:20:CF:B4:9A:8C:1F:7B:E1:F7:C4:8D:45:47:DF:C9:66:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnVwIM-0mowfe-H3xI1FR9_JZu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d0:a2:d2:01:71:91:1f:d5:d6:ac:60:1f:8c:54:61:f9:7f:
40:b5:92:32:3c:2a:44:c7:53:3d:b2:f8:2f:74:2c:1c:ce:e1:
62:8e:e7:17:f8:fb:22:64:b2:cd:1e:fa:3b:4a:c7:26:a4:24:
51:94:d8:8e:d3:02:45:cd:5a:6d:51:32:e8:af:4d:fd:fc:e2:
98:e4:3f:c7:12:f1:89:bc:bc:15:63:d2:f8:b7:0f:bd:8c:6b:
1a:8d:98:af:15:65:72:8b:83:5f:26:1d:86:51:90:8c:8d:24:
c7:62:15:b7:d9:66:c2:37:b9:ac:6d:52:d7:d4:4a:3c:39:e7:
c0:42:c6:b6:dd:9c:48:8f:08:9c:d2:f5:03:6b:ae:1b:7d:87:
aa:b8:f2:8d:32:40:3c:ce:b3:7e:c0:0a:0b:0d:2c:c4:8b:83:
95:f4:2d:e5:fd:51:41:82:ab:bb:25:9c:1e:5c:c7:1b:cb:ae:
f4:3b:7a:67:1e:04:a4:de:79:51:a3:64:83:4e:41:3c:10:af:
6a:6a:52:0a:a0:b4:cd:bd:de:3c:08:fe:c9:b7:b0:b6:91:8a:
2d:4c:b3:d7:b8:67:79:40:a6:b6:c6:1e:c1:b1:51:20:0b:e8:
a5:d0:c6:4d:03:8f:98:d6:07:0d:38:d6:43:dc:eb:2a:44:e9:
fa:37:93:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:19:23 2025 by rpki-client