
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft
File: FpcDHB024MQncP5r8o2uSO4TZJY.mft (raw, json)
Hash identifier: 94MwYdd9iGqHFotZcnaD+drOne5V6ppTjA2CTrcvkSw=
Subject key identifier: DA:F8:A3:CA:96:12:BB:6A:48:86:6E:14:8A:80:1D:63:BD:E6:35:27
Authority key identifier: 16:97:03:1C:1D:36:E0:C4:27:70:FE:6B:F2:8D:AE:48:EE:13:64:96
Certificate issuer: /CN=A9193B94/serialNumber=1697031C1D36E0C42770FE6BF28DAE48EE136496
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpcDHB024MQncP5r8o2uSO4TZJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft
Manifest number: A5
Signing time: Mon 03 Nov 2025 06:16:50 +0000
Manifest this update: Mon 03 Nov 2025 06:16:50 +0000
Manifest next update: Mon 10 Nov 2025 06:16:49 +0000
Files and hashes: 1: FpcDHB024MQncP5r8o2uSO4TZJY.crl (hash: b7uqa90Y8HhDNr9e7mzNGSnCMqQDOb8+H62yk1ksjXE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.crl
rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpcDHB024MQncP5r8o2uSO4TZJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193B94, serialNumber=1697031C1D36E0C42770FE6BF28DAE48EE136496
Validity
Not Before: Nov 3 06:16:50 2025 GMT
Not After : Nov 10 06:16:49 2025 GMT
Subject: CN=690848d2-ac83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:30:b0:c6:6d:ec:ab:81:be:2d:63:f3:da:
31:27:20:39:20:2a:e7:6f:68:1b:f8:09:df:e1:d7:
d9:23:50:14:b6:2b:48:f0:da:a4:5d:8e:d8:70:8c:
95:b5:1a:63:89:a9:f3:75:8d:dd:3c:b1:89:2a:bb:
2b:c4:19:60:b5:e5:f3:45:b9:d4:4c:89:aa:6e:89:
87:f8:9e:5c:2e:48:ba:8e:49:27:8b:08:35:1b:ec:
1b:56:61:a1:76:8d:b9:63:7a:f0:79:ca:2e:39:2b:
f8:6f:fc:aa:ba:49:72:aa:40:61:ec:fe:4d:f7:a2:
40:43:ee:ed:52:7c:8a:cc:a7:87:78:5a:02:4d:d4:
55:09:52:07:bd:d5:3d:64:6c:e2:77:23:ba:4e:75:
14:21:85:02:98:c3:de:17:9c:24:45:8b:e7:8e:14:
f8:23:a4:02:07:3f:98:0a:a3:77:7c:13:2d:dd:e4:
e1:2e:eb:ec:4b:93:44:c7:43:08:8b:42:0d:b1:d1:
fe:d6:9b:24:b4:59:57:01:a9:de:ff:aa:22:c7:81:
97:cb:c4:c8:ac:e0:21:16:bf:4d:da:88:fe:82:90:
e6:61:c5:7d:47:8f:0d:19:f2:d9:17:e1:48:85:29:
1e:bf:40:e9:9a:28:bd:c4:9a:c8:13:ef:6e:d1:c3:
7b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F8:A3:CA:96:12:BB:6A:48:86:6E:14:8A:80:1D:63:BD:E6:35:27
X509v3 Authority Key Identifier:
keyid:16:97:03:1C:1D:36:E0:C4:27:70:FE:6B:F2:8D:AE:48:EE:13:64:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpcDHB024MQncP5r8o2uSO4TZJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:5a:df:ac:c5:15:86:eb:2a:6e:6d:d6:49:e5:2f:d8:c0:3a:
ca:9f:06:e9:07:3b:32:99:51:e6:f6:8a:75:e7:56:d9:1c:df:
17:28:4e:e5:e4:23:66:b9:0e:66:ba:15:83:d4:5b:82:09:78:
6e:8d:7b:6b:34:76:a5:9f:b9:07:f9:c1:cf:3b:33:44:a2:54:
a0:63:7f:e9:a6:78:5c:74:d5:d5:1a:f7:ac:5a:78:12:8f:a9:
56:55:b4:24:d4:a5:04:7e:ac:4d:b4:cb:04:9d:32:4f:ab:84:
4c:09:6c:4a:e7:ed:6e:54:d1:b3:01:8c:4f:b5:63:75:05:72:
7a:f4:cd:4c:97:ef:e3:cd:5a:83:7d:a4:e0:c5:fd:0a:61:64:
ab:0d:fc:40:78:a0:e9:0d:7f:44:34:63:29:7d:c9:b9:31:50:
9a:cb:43:b6:84:60:a0:92:9a:18:b6:76:9b:94:a4:69:8e:6e:
0c:f0:6b:d1:b9:ed:dc:89:ed:12:eb:08:ff:e3:1c:c1:b8:d7:
09:4b:f7:25:01:26:7b:43:dc:b1:85:4c:00:20:9d:5d:7e:7f:
2c:7a:fa:ab:a2:03:19:f1:e0:d3:95:3d:6a:ef:68:27:d2:ee:
ff:c1:63:92:0f:98:cd:f9:87:36:3c:b1:75:04:ba:22:df:89:
ef:8a:2d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:10 2025 by rpki-client