
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft
File: FL-reUJuPSK-w_xh7kMv6ggnKUY.mft (raw, json)
Hash identifier: cbn/lqgWZ0h8upZELfodg31y6e0VI4KPVZAyoumR2tE=
Subject key identifier: 36:43:87:CA:C9:37:CD:4E:00:8F:99:81:85:A2:9D:B9:91:EC:AC:8E
Authority key identifier: 14:BF:AB:79:42:6E:3D:22:BE:C3:FC:61:EE:43:2F:EA:08:27:29:46
Certificate issuer: /CN=A919F46B/serialNumber=14BFAB79426E3D22BEC3FC61EE432FEA08272946
Certificate serial: 100F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft
Manifest number: 1005
Signing time: Tue 04 Nov 2025 17:32:59 +0000
Manifest this update: Tue 04 Nov 2025 17:32:58 +0000
Manifest next update: Tue 11 Nov 2025 17:32:58 +0000
Files and hashes: 1: FL-reUJuPSK-w_xh7kMv6ggnKUY.crl (hash: JriLKwEQ9eYOWScB9pmoU4Wdg9aMdjeQJTPYDcBWSrI=)
2: CB6BD978592811E9AD7CEF21C4F9AE02.roa (hash: Zze9TlbBres1fvJuhmxxkKTa+lNOrwdMt9mFrIPRgU4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.crl
rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4111 (0x100f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F46B, serialNumber=14BFAB79426E3D22BEC3FC61EE432FEA08272946
Validity
Not Before: Nov 4 17:32:58 2025 GMT
Not After : Nov 11 17:32:58 2025 GMT
Subject: CN=690a38cb-9754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:6b:62:9c:50:8f:15:74:4c:0e:28:13:a7:
3e:e1:62:09:a1:11:1f:37:6b:09:3b:c0:ca:fd:f4:
48:04:7d:a4:86:d1:35:0c:bb:31:23:07:57:3d:d3:
3f:84:6f:18:71:f9:70:c5:ba:61:fb:c9:62:6a:d5:
c7:33:15:7e:57:c5:01:a0:6e:a5:92:8a:b4:94:69:
70:0f:86:ed:98:7e:12:6c:a0:f8:1e:b2:b7:f9:28:
7d:33:20:61:c0:af:96:a1:a3:7c:5f:87:57:be:53:
ac:e1:ac:0a:9f:47:9e:93:21:42:08:17:76:bf:e5:
2d:ed:63:81:cd:3a:82:19:21:0e:c2:28:7a:8e:39:
fc:e7:50:81:34:27:43:dd:d7:68:f7:12:cf:ae:2b:
35:09:0b:bc:ec:21:0b:cb:a4:9a:6a:2e:3c:ae:75:
3d:4c:1a:ed:79:6b:9e:a6:80:82:5e:e9:84:79:45:
77:40:54:55:de:f9:c6:50:0b:8b:7e:02:5b:7a:3d:
08:db:0e:64:44:7e:74:34:6d:81:05:7c:27:40:9f:
67:01:9f:ee:77:3e:ea:75:5c:35:12:13:0f:41:9c:
a8:6a:23:2e:c4:3e:25:ed:ac:f1:ac:34:0b:66:22:
95:eb:0e:40:69:52:b7:d1:4f:63:b0:ba:58:b5:2f:
c2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:43:87:CA:C9:37:CD:4E:00:8F:99:81:85:A2:9D:B9:91:EC:AC:8E
X509v3 Authority Key Identifier:
keyid:14:BF:AB:79:42:6E:3D:22:BE:C3:FC:61:EE:43:2F:EA:08:27:29:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a0:b6:81:74:ee:46:61:76:0a:fd:65:7e:6f:d5:1b:ed:a3:
fe:4a:9a:c1:f3:61:98:8f:4a:9e:59:e3:5b:8d:70:c9:97:09:
59:01:03:84:59:a8:ab:49:bb:42:da:0d:85:d9:78:5f:7f:a2:
ef:8c:79:a1:d4:be:7b:1c:c4:91:b8:99:c0:12:7e:b4:91:50:
60:fe:7c:7c:06:8c:0a:82:31:0f:7d:68:28:7f:3e:36:3b:0a:
15:d1:c9:01:5e:d4:17:c6:94:76:4a:46:63:ee:af:65:15:cb:
fc:44:aa:4d:ef:1f:b2:14:3b:5f:5f:7b:cc:7f:40:8f:ee:7d:
6a:9a:c0:62:8b:e2:db:72:7f:7b:45:f0:79:bc:fc:f7:b9:ee:
74:92:de:6d:a0:9f:41:15:b3:02:08:9e:a6:f9:f1:df:24:48:
2e:0e:19:9d:6c:57:c4:03:18:6f:1e:ca:5f:70:c5:5b:81:95:
58:24:3f:db:11:5d:99:0b:bb:a4:d5:5a:a7:5d:17:b3:d4:97:
14:3f:c7:2d:a4:10:66:ee:fa:7c:f7:f8:56:b6:57:97:01:82:
8c:45:19:f2:b2:30:86:a3:f0:75:4c:7b:68:e9:ab:ef:8b:fb:
26:18:c5:a3:aa:e0:88:ff:4d:c9:f8:84:83:da:06:73:66:85:
1d:5a:7b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:25:15 2025 by rpki-client