
$ rpki-client -vvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
File: FZbEu-cy2oXLg-incIc-o0E3AaU.mft (raw, json)
Hash identifier: XWYQ2Tu0fRIPAnvgyB/3JCuczVrz1Oks3sTrLZyldM0=
Subject key identifier: 9B:70:5E:B9:8C:13:0C:69:E8:EA:DB:4C:F2:CF:AB:ED:7A:C3:BD:D5
Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5
Certificate issuer: /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
Certificate serial: 13AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
Manifest number: 1382
Signing time: Sun 02 Nov 2025 16:59:37 +0000
Manifest this update: Sun 02 Nov 2025 16:59:37 +0000
Manifest next update: Sun 09 Nov 2025 16:59:37 +0000
Files and hashes: 1: FZbEu-cy2oXLg-incIc-o0E3AaU.crl (hash: IWuO3R3gwctRyhdauKeDMscwT10jDEhPYd3pOT2aIN4=)
2: 56094384320611EA84C94231C4F9AE02.roa (hash: mZoT1sj2WR9PydzJ0T/LJHzRsHoob8BeC9+MkrsPnys=)
3: 443241A0321B11EA83044473C4F9AE02.roa (hash: n0sRanfJ+3KhBJUHh6jH9cwbJaaTZCbfJ+87aODuzgM=)
4: 1FD07ED231FB11EAA335E10FC4F9AE02.roa (hash: y17aQP9C+LDn4Yph2n6mf2nnVwvpkbeV6pXqgmt1qVQ=)
5: 4B18BBA8A9F811EEB85DBD24C4F9AE02.roa (hash: sd3UhNYbHggo+XcciVWTFZxv/tGVhGFf2hY/GpsuhSs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl
rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 16:59:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5035 (0x13ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91771E3, serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
Validity
Not Before: Nov 2 16:59:37 2025 GMT
Not After : Nov 9 16:59:37 2025 GMT
Subject: CN=69078df9-46d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:22:3d:e3:5d:aa:86:3b:c7:87:db:30:36:31:
da:f2:f3:19:a9:86:d1:c8:b7:de:67:1d:ba:da:35:
22:db:6a:08:4e:41:95:fd:52:a2:10:12:e3:34:05:
1b:f5:2d:9c:46:1f:7d:65:ce:cc:86:7d:75:13:dc:
5d:5f:4d:c0:27:cb:c7:15:21:eb:2e:bf:7e:38:11:
e7:7f:20:9b:de:ae:aa:96:19:40:9d:d8:51:75:ef:
b1:07:93:87:fb:85:a7:d6:32:ae:90:42:f6:e4:04:
54:67:bc:27:ae:cb:2b:71:36:54:92:0d:77:55:23:
fa:a5:5c:20:2f:09:42:9d:20:0f:22:d9:c1:73:72:
c3:15:a6:51:59:2a:1f:08:3b:ab:d5:25:84:55:d3:
5e:ff:0a:bf:c6:ab:ea:f4:2d:37:c1:fd:60:02:76:
dc:3c:ac:e0:8f:3a:e1:2b:18:70:5f:85:a4:eb:57:
74:6b:77:98:10:8f:34:28:44:43:ff:cf:c2:2d:cd:
a3:b2:4c:39:63:2a:9e:e6:49:66:1a:aa:fd:ef:35:
4a:3b:2b:d4:06:a3:cd:c4:d7:28:75:0d:d5:84:1c:
d2:21:a7:4c:56:a5:d8:ed:4d:77:0b:c2:4e:65:bf:
1f:84:54:a2:dc:21:e5:25:5e:3d:7a:7f:0c:c6:d1:
df:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:70:5E:B9:8C:13:0C:69:E8:EA:DB:4C:F2:CF:AB:ED:7A:C3:BD:D5
X509v3 Authority Key Identifier:
keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:ab:f3:bb:8d:49:5c:5a:51:c4:ee:f9:9f:bb:96:41:f5:fc:
70:59:2e:2a:93:e2:fe:09:b8:e8:a1:d9:61:7f:4f:68:14:53:
eb:2a:a6:e9:15:43:c7:a3:8e:4b:5c:c8:6b:e9:e9:ff:c6:d7:
c1:fe:5d:3d:12:02:22:7e:e6:55:b6:02:e8:19:1f:73:db:bf:
cd:58:bd:dc:05:61:8a:b2:a9:62:54:83:c8:87:66:90:3d:bf:
28:eb:6b:dc:09:fe:86:8f:fc:1e:49:00:50:d8:9f:a3:ab:f5:
2f:2e:9b:bc:97:25:aa:8c:c2:31:63:4c:ab:b6:99:e9:8e:da:
b7:e0:c3:b2:fa:ab:36:b7:40:01:99:d4:76:57:18:32:ca:07:
2f:3c:a9:41:56:68:2f:e9:23:78:c0:b4:43:c3:fe:b5:28:8d:
86:21:84:06:e6:ed:0d:ec:c4:c4:e3:26:f2:2b:01:5f:e1:93:
41:5f:4a:02:9b:4a:45:f8:57:a4:b7:66:64:4f:74:38:41:f8:
4b:38:fc:b0:9d:e0:9d:46:3a:5d:86:64:ef:a7:95:93:09:7c:
8d:fe:f6:e6:39:f8:b3:0b:2f:0b:6f:0f:12:ec:ff:2d:7e:b2:
a3:e4:30:97:cf:e0:86:57:48:5e:1b:62:22:4a:d2:98:c8:e8:
04:e2:6b:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICE6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzcxRTMxMTAvBgNVBAUTKDE1OTZDNEJCRTczMkRBODVDQjgzRThBNzcwODczRUEz
NDEzNzAxQTUwHhcNMjUxMTAyMTY1OTM3WhcNMjUxMTA5MTY1OTM3WjAYMRYwFAYD
VQQDEw02OTA3OGRmOS00NmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqCI9412qhjvHh9swNjHa8vMZqYbRyLfeZx262jUi22oITkGV/VKiEBLjNAUb
9S2cRh99Zc7Mhn11E9xdX03AJ8vHFSHrLr9+OBHnfyCb3q6qlhlAndhRde+xB5OH
+4Wn1jKukEL25ARUZ7wnrssrcTZUkg13VSP6pVwgLwlCnSAPItnBc3LDFaZRWSof
CDur1SWEVdNe/wq/xqvq9C03wf1gAnbcPKzgjzrhKxhwX4Wk61d0a3eYEI80KERD
/8/CLc2jskw5Yyqe5klmGqr97zVKOyvUBqPNxNcodQ3VhBzSIadMVqXY7U13C8JO
Zb8fhFSi3CHlJV49en8MxtHf5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtwXrmM
Ewxp6OrbTPLPq+16w73VMB8GA1UdIwQYMBaAFBWWxLvnMtqFy4Pop3CHPqNBNwGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzFFMy85MzgzRTY0NkFE
NjUxMUU4QUNCRDBENkFDNEY5QUUwMi9GWmJFdS1jeTJvWExnLWluY0ljLW8wRTNB
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZaYkV1LWN5Mm9YTGctaW5jSWMtbzBFM0FhVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzFFMy85MzgzRTY0NkFENjUxMUU4QUNCRDBENkFDNEY5QUUwMi9GWmJFdS1jeTJv
WExnLWluY0ljLW8wRTNBYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAxq/O7jUlcWlHE7vmfu5ZB9fxwWS4qk+L+Cbjoodlhf09oFFPrKqbp
FUPHo45LXMhr6en/xtfB/l09EgIifuZVtgLoGR9z27/NWL3cBWGKsqliVIPIh2aQ
Pb8o62vcCf6Gj/weSQBQ2J+jq/UvLpu8lyWqjMIxY0yrtpnpjtq34MOy+qs2t0AB
mdR2VxgyygcvPKlBVmgv6SN4wLRDw/61KI2GIYQG5u0N7MTE4ybyKwFf4ZNBX0oC
m0pF+Fekt2ZkT3Q4QfhLOPywneCdRjpdhmTvp5WTCXyN/vbmOfizCy8Lbw8S7P8t
frKj5DCXz+CGV0heG2IiStKYyOgE4msD
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:33 2025 by rpki-client