
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
File: FTyY0zE8xk7bmuFaujtUPkgEWZA.mft (raw, json)
Hash identifier: TqyjBQKlTE4+CmjD46IqcTZuoRJIV/pcPx0qgiE+IGQ=
Subject key identifier: F0:75:CC:0E:5C:E3:79:17:F5:F1:5A:2E:76:07:93:95:A3:33:90:B1
Authority key identifier: 15:3C:98:D3:31:3C:C6:4E:DB:9A:E1:5A:BA:3B:54:3E:48:04:59:90
Certificate issuer: /CN=A9167FBA/serialNumber=153C98D3313CC64EDB9AE15ABA3B543E48045990
Certificate serial: 77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
Manifest number: 76
Signing time: Mon 03 Nov 2025 06:50:29 +0000
Manifest this update: Mon 03 Nov 2025 06:50:29 +0000
Manifest next update: Mon 10 Nov 2025 06:50:29 +0000
Files and hashes: 1: FTyY0zE8xk7bmuFaujtUPkgEWZA.crl (hash: nsgE+u2bxUaBTw4u5mfIwBnLRgX4Z1S5//L0pTP2SNM=)
2: F552E6BA05A111F082D17325C4F9AE02.roa (hash: IboM73984syJmuqfIfDKvmHL/HfnKXEhHqhYyaPXIGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.crl
rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167FBA, serialNumber=153C98D3313CC64EDB9AE15ABA3B543E48045990
Validity
Not Before: Nov 3 06:50:29 2025 GMT
Not After : Nov 10 06:50:29 2025 GMT
Subject: CN=690850b5-c6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:95:01:51:a7:4d:1d:3e:f4:53:a9:c3:86:
48:74:23:13:46:63:2b:94:44:fa:c0:79:59:c7:f7:
5d:a1:3b:97:cf:71:08:63:63:a0:32:2c:8e:61:1a:
ae:a5:a4:76:d4:47:9c:01:55:7d:de:26:31:89:5f:
01:5e:da:aa:1a:f0:c3:67:d3:9a:ab:0a:11:52:bc:
86:c3:91:ed:32:43:55:73:3e:28:58:67:ac:10:ff:
17:57:72:c7:04:35:0a:eb:0e:3d:de:7d:ef:4a:06:
bb:9e:38:f1:67:37:b4:c0:69:36:3f:41:b6:b7:b9:
88:28:d3:84:8d:4d:2f:da:f7:f5:5f:6e:55:78:1d:
03:63:22:8a:21:dd:31:6b:33:a5:a4:b3:de:b6:8c:
c7:2f:3e:96:d8:08:29:0e:ce:f4:0b:e2:de:6c:5f:
28:3b:3f:2e:e7:2f:df:04:53:cb:23:a4:84:0a:f3:
b3:c4:fc:fd:88:09:30:f2:26:83:5e:28:89:45:36:
aa:bc:cc:72:61:f0:e6:3d:61:ea:47:03:42:e6:87:
21:f7:da:87:bb:7b:1c:f0:0c:43:06:cb:cb:6f:80:
fd:73:74:a7:b5:24:39:36:e9:ae:77:60:0c:d6:2e:
e6:a5:da:a9:d7:d4:61:62:e2:fe:ab:d8:9e:0d:65:
42:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:75:CC:0E:5C:E3:79:17:F5:F1:5A:2E:76:07:93:95:A3:33:90:B1
X509v3 Authority Key Identifier:
keyid:15:3C:98:D3:31:3C:C6:4E:DB:9A:E1:5A:BA:3B:54:3E:48:04:59:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ba:e2:8c:c2:ce:fb:e6:86:4e:68:cc:95:a0:39:87:60:a0:
ad:40:0d:08:26:37:40:2a:b0:96:62:bd:c7:73:3a:35:3d:aa:
8e:ec:47:7a:16:05:d3:a1:38:34:a5:ba:c3:c4:a3:9e:83:5b:
65:9a:0f:d5:69:7b:67:f5:d4:8b:d1:7a:68:91:c5:0a:aa:25:
ad:a4:51:75:7f:d9:97:36:7b:2e:fe:71:a6:e6:84:1f:36:d4:
91:b6:41:b5:bd:51:2a:2a:73:56:a6:42:2a:3a:20:75:a5:6a:
d7:93:e6:20:5c:de:b6:52:16:74:fa:18:73:fc:1f:c5:45:56:
d2:7d:cb:e8:92:5a:6a:db:0c:3f:e2:fa:54:61:2f:61:5d:18:
a4:29:3e:cd:67:65:20:2e:6a:a1:e0:c6:90:9a:02:d1:8e:64:
80:2b:98:00:3f:a1:aa:d1:d6:5e:09:5b:c7:ea:80:e2:4f:c4:
85:fb:c5:dd:cd:ab:75:1d:1c:aa:25:33:0a:7e:51:c8:39:25:
57:44:aa:a2:32:f4:60:be:99:7b:0b:31:c5:21:fc:55:a7:9d:
f2:1a:b9:a8:99:4f:e4:80:f6:fc:2a:5b:c6:82:67:86:1a:17:
23:6d:b1:e1:06:52:cd:a7:1d:f3:11:d8:68:86:1f:61:b0:54:
29:27:30:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:11:03 2025 by rpki-client