
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
File: fXiohwseVXPWM8mnsAQKLuQF2VE.mft (raw, json)
Hash identifier: KqdFZaKEzoTmtOWdH3k4WQqszCXbNlCAQ9FImb3K/mg=
Subject key identifier: AA:D1:E3:47:56:A9:5B:F8:65:59:44:E5:12:9F:71:2B:73:6C:20:2A
Authority key identifier: 7D:78:A8:87:0B:1E:55:73:D6:33:C9:A7:B0:04:0A:2E:E4:05:D9:51
Certificate issuer: /CN=A91C162D/serialNumber=7D78A8870B1E5573D633C9A7B0040A2EE405D951
Certificate serial: 07C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
Manifest number: 07B8
Signing time: Sun 02 Nov 2025 21:19:15 +0000
Manifest this update: Sun 02 Nov 2025 21:19:14 +0000
Manifest next update: Sun 09 Nov 2025 21:19:14 +0000
Files and hashes: 1: fXiohwseVXPWM8mnsAQKLuQF2VE.crl (hash: B6VV3e9dz/UaA+GkWFFWHZubOkJm+KkV/7PlWP58juQ=)
2: 460D934A1C1611EB8BD35065C4F9AE02.roa (hash: obLkt/nxUwTe3cYZEfOLwoBFErueOvXeFYCZsMGzozM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.crl
rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1985 (0x7c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C162D, serialNumber=7D78A8870B1E5573D633C9A7B0040A2EE405D951
Validity
Not Before: Nov 2 21:19:14 2025 GMT
Not After : Nov 9 21:19:14 2025 GMT
Subject: CN=6907cad2-5229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:2b:69:d3:38:4e:69:c7:51:27:44:0a:df:
56:d2:26:78:d1:05:df:25:5b:c4:f2:3b:87:95:5e:
4c:35:a4:9f:a7:b6:d5:6f:08:38:da:6b:c2:db:92:
7c:52:c0:48:7e:65:d2:14:f3:93:35:b7:f6:3b:a1:
9b:79:24:7c:96:ea:fb:83:d8:5e:43:44:7d:4a:93:
00:12:7c:d1:40:5a:48:c8:3c:22:f3:f2:11:09:6b:
f6:dc:a4:20:92:bd:97:d6:73:f5:e5:cb:ab:ea:ae:
af:76:81:3e:02:f0:cf:3d:a4:5b:7a:7d:65:11:3e:
57:bd:e3:d6:f8:a9:ed:58:a7:bc:89:40:74:a4:6a:
e1:de:3d:6b:61:db:81:b8:75:b1:c7:9e:34:01:bb:
e8:61:93:98:83:fc:a6:0b:48:b0:4f:ad:61:c9:aa:
88:57:7a:ae:fa:69:2e:98:55:ee:da:b0:a3:ba:7f:
24:82:d9:4b:79:96:4b:65:90:e7:d6:e7:d4:72:b9:
9e:c1:ac:68:96:5c:77:19:08:a6:7f:3c:a5:66:1a:
8f:fe:f4:71:74:b3:41:d8:4d:57:9b:a0:71:55:c7:
a8:61:96:5b:47:ea:13:2e:0e:5b:c8:05:b8:80:4b:
8c:4e:79:e1:a3:e3:1c:cc:ac:71:0e:b7:d7:69:8e:
84:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D1:E3:47:56:A9:5B:F8:65:59:44:E5:12:9F:71:2B:73:6C:20:2A
X509v3 Authority Key Identifier:
keyid:7D:78:A8:87:0B:1E:55:73:D6:33:C9:A7:B0:04:0A:2E:E4:05:D9:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:9b:7f:52:52:4f:d9:8a:43:eb:86:82:24:5a:1c:ff:04:71:
31:d8:41:38:55:c5:e9:d6:5f:08:89:1f:64:ae:b8:49:10:17:
75:ac:4d:55:a0:28:da:43:e9:f9:e6:97:ca:b5:af:ef:b5:7f:
f7:42:f4:56:c6:55:67:16:1a:61:4f:ba:96:f5:70:68:61:a5:
59:c4:7f:45:11:95:3b:30:b9:16:22:9d:53:87:5f:24:6a:bc:
41:0a:e1:a0:6e:38:f8:1a:32:c9:86:f7:f3:d1:58:03:d4:c0:
a1:11:ff:00:a4:69:0c:ec:1a:33:6f:15:c7:07:d9:6b:e1:70:
25:44:1b:21:3b:75:cd:0c:94:77:7a:f0:d2:89:27:65:f7:e7:
0a:38:bb:c6:b4:51:91:ed:54:79:9b:13:71:61:d7:ef:9f:1d:
9e:fc:fe:71:8a:0f:01:37:56:12:de:2f:be:f2:44:42:23:f8:
4f:db:21:5e:d9:4d:e0:ba:02:d1:4e:f6:c5:f7:c2:c8:62:b1:
c8:9d:e8:82:24:8a:15:fe:99:c5:a8:4b:6b:cc:9e:a7:f0:04:
8b:4c:bf:85:cc:2b:5f:28:1b:58:11:8d:68:ae:1e:3a:3b:3a:
8e:62:ed:d6:24:91:04:74:cb:50:20:cd:d2:c8:41:d0:a7:48:
75:f4:27:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:44 2025 by rpki-client