
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
File: ftF6_XNwpqkI2CYrhtq8fu09YUA.mft (raw, json)
Hash identifier: bTmnXByzLg6J9Sbe7tpMx3UsSZbwtnnebi4pdHuBBy0=
Subject key identifier: A7:01:F0:8A:A7:48:44:04:16:8F:C9:99:FD:A8:A2:94:93:2A:A0:AE
Authority key identifier: 7E:D1:7A:FD:73:70:A6:A9:08:D8:26:2B:86:DA:BC:7E:ED:3D:61:40
Certificate issuer: /CN=A91B6F87/serialNumber=7ED17AFD7370A6A908D8262B86DABC7EED3D6140
Certificate serial: 07AD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
Manifest number: 07A4
Signing time: Tue 04 Nov 2025 21:31:23 +0000
Manifest this update: Tue 04 Nov 2025 21:31:22 +0000
Manifest next update: Tue 11 Nov 2025 21:31:22 +0000
Files and hashes: 1: ftF6_XNwpqkI2CYrhtq8fu09YUA.crl (hash: ZGTlXXE1wKh6Uw+iplKqPod1/rRjOEhgOhIk3P362e4=)
2: 69BA51482C9C11EBB49A3A32C4F9AE02.roa (hash: ST/Rl9xKmY8tlX8GinkPsHXgmmClbDe8hWqTijwIMqQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.crl
rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1965 (0x7ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6F87, serialNumber=7ED17AFD7370A6A908D8262B86DABC7EED3D6140
Validity
Not Before: Nov 4 21:31:22 2025 GMT
Not After : Nov 11 21:31:22 2025 GMT
Subject: CN=690a70aa-05ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:0e:52:a0:c0:ed:13:7e:f1:de:e7:00:f3:
cc:a6:9d:fb:6c:37:82:fb:29:d3:28:0c:13:d2:43:
00:af:72:3b:07:5c:05:c8:b1:e4:43:b1:a1:c2:91:
f8:12:89:9f:dd:59:f5:42:2e:ba:03:7f:d4:36:ab:
6c:eb:0f:51:63:72:75:ca:66:73:c9:e6:96:51:2b:
fc:58:40:4e:5b:4b:32:95:a5:f2:fc:9d:dd:67:dc:
95:4f:48:11:aa:64:c9:c0:87:86:a4:e4:73:fc:41:
76:83:e7:fa:87:6f:4d:4b:c2:0e:a9:83:00:e9:a4:
50:0c:f4:56:ea:fc:3f:56:ae:6a:a0:78:3b:83:9f:
4a:91:51:b8:0e:e2:f4:87:54:ec:3c:d9:b9:e9:fd:
17:1b:5e:12:6e:a4:ea:a9:d0:08:16:aa:56:e4:ae:
fa:4e:d1:ae:1b:cd:e3:2d:47:69:96:64:20:af:53:
ec:07:a4:48:1f:d9:24:6c:02:ef:08:e0:bf:72:26:
e6:39:34:08:8d:c2:14:b5:df:89:91:b3:b8:98:8d:
ba:22:0c:34:d1:a8:21:16:c2:9d:1c:5a:7d:5e:0f:
1e:c3:7b:61:e2:af:de:2c:35:8f:32:9e:9c:b3:56:
7c:eb:c8:9f:48:8c:4f:cb:95:17:4e:a7:6e:37:d7:
14:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:01:F0:8A:A7:48:44:04:16:8F:C9:99:FD:A8:A2:94:93:2A:A0:AE
X509v3 Authority Key Identifier:
keyid:7E:D1:7A:FD:73:70:A6:A9:08:D8:26:2B:86:DA:BC:7E:ED:3D:61:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f8:d4:80:61:4f:20:b8:37:1d:6c:c0:70:63:5e:8c:e6:df:
5a:63:e5:3f:4b:89:9d:ab:34:4f:a9:37:a6:15:ba:1d:95:a2:
f8:40:9a:b3:47:8d:86:f7:20:23:57:0c:95:37:93:47:13:b4:
e6:9a:21:61:7f:16:4c:03:ba:e6:93:36:99:56:01:c9:fa:49:
d4:32:33:b9:3e:47:60:ab:30:22:8d:9c:45:e7:1e:d0:11:c4:
7b:d8:bc:e7:c8:af:8e:25:f1:07:da:0b:85:73:15:aa:c8:c9:
2e:b4:f5:81:0d:3e:b0:46:a7:85:cc:15:01:9f:d7:42:2d:30:
f4:1d:46:05:c3:d6:f7:1e:97:6b:a4:75:a7:a4:a2:75:d6:23:
e3:71:8f:10:d2:f5:d3:4f:fd:c0:f0:01:2e:35:3b:32:fa:2a:
db:57:b9:2b:5f:04:06:72:78:87:20:c4:b3:73:a9:20:4e:c6:
dc:cf:eb:1c:29:05:20:d5:e2:f8:dd:e4:65:f4:cb:ba:60:c2:
2f:49:10:4b:8b:98:68:ba:c8:1a:8a:a9:4c:5b:36:86:1f:7b:
73:28:fd:47:c0:d8:e3:d8:df:b2:7b:3c:ba:98:23:88:dc:58:
76:a8:dd:91:85:95:d2:e9:6c:e3:9c:67:07:e3:a2:4b:5a:30:
21:79:2c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:52:05 2025 by rpki-client