
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
File: fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft (raw, json)
Hash identifier: ogCL9AaLjIcTwyu2pnPDU6wUvYC6GwhsLvFYZZU8SVU=
Subject key identifier: CF:DC:79:BB:C1:32:9A:1E:6E:EA:E2:C3:94:20:22:53:A1:15:62:BC
Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25
Certificate issuer: /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
Certificate serial: 01EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
Manifest number: 103D
Signing time: Tue 04 Nov 2025 17:52:01 +0000
Manifest this update: Tue 04 Nov 2025 17:52:00 +0000
Manifest next update: Tue 11 Nov 2025 17:52:00 +0000
Files and hashes: 1: fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl (hash: c1osllmk1T7B73HEPjMogyXlRRj1ZAaZ/6SkRidrUAo=)
2: 329274C4D31611EEA7F0475FC4F9AE02.roa (hash: pr44aMdjUjF3qJ5V59OemeYMLJZAouFtZX25Dx2aXA8=)
3: B4A14106974911EEBAFA257BC4F9AE02.roa (hash: Fb7LVlJG+JVdijAn+Ys69+wkABJKfcULX5Fgfk+/L5A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl
rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:52:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6BF0, serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
Validity
Not Before: Nov 4 17:52:00 2025 GMT
Not After : Nov 11 17:52:00 2025 GMT
Subject: CN=690a3d41-0520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:d3:4d:7f:f8:be:27:03:bd:bd:16:10:34:
55:27:ba:b4:df:c8:97:4f:74:d9:ea:96:42:0e:89:
0b:f6:10:18:1d:20:95:5a:0f:eb:40:67:27:48:d6:
ec:ce:47:6e:43:22:8b:4a:bd:ce:26:43:16:13:90:
63:3b:86:ec:c5:44:bc:f7:f3:a6:9a:3f:bd:43:e5:
e8:e6:84:c0:32:64:7f:54:ba:26:b4:5c:12:2c:42:
d5:2a:16:24:26:d0:8f:19:31:c7:c9:23:91:55:42:
2a:0a:f5:5d:3a:7d:48:51:fa:2f:e8:cf:05:d9:44:
81:78:ad:61:80:cb:74:31:a8:4f:c0:7a:9f:0b:e5:
e3:d4:f4:d0:e0:34:cc:69:da:0d:58:0c:6a:2c:5b:
ea:84:9c:4b:c6:40:6f:15:03:32:92:da:95:93:be:
ce:5d:aa:be:a0:c6:ee:4b:b3:05:5c:86:a1:2e:dc:
b2:77:ea:2d:dc:20:7c:fe:e5:cb:77:16:c3:14:f4:
f7:d3:9f:1c:1f:93:ba:d5:79:b4:27:03:d6:00:5b:
be:50:18:b4:7e:0d:7f:1a:89:d5:06:a3:6e:d0:8a:
b0:ad:80:b8:98:6a:23:2f:cb:00:a1:b1:4d:de:f8:
ee:27:c3:1e:39:e4:6a:a2:77:10:4e:6b:75:7e:ce:
00:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DC:79:BB:C1:32:9A:1E:6E:EA:E2:C3:94:20:22:53:A1:15:62:BC
X509v3 Authority Key Identifier:
keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:37:4d:d6:41:b0:a4:d5:6e:7a:d9:d8:bd:2a:32:6a:25:67:
43:48:03:9b:27:96:03:65:e6:82:23:1b:0c:1f:b9:1a:6f:36:
eb:e2:1a:79:a8:2d:4b:bb:97:0c:78:86:73:fd:33:34:e8:85:
d8:63:bf:42:dc:29:c3:2f:b4:fc:e9:1d:f4:2f:3b:02:70:95:
4d:66:e6:c4:c0:fb:ef:5e:95:0d:29:65:5f:58:dc:36:52:2c:
f9:47:15:50:70:22:1d:e3:15:e1:a5:46:94:3f:e7:e5:e3:5b:
4a:71:e1:e2:5d:68:53:07:27:23:7c:02:dd:11:be:02:c3:54:
34:79:84:b6:f7:43:0a:da:e3:35:25:45:c5:f3:29:88:64:d2:
5e:95:00:dc:84:06:4f:00:78:d9:bb:59:24:d1:bc:b8:46:5a:
bc:41:8f:59:88:c4:33:b6:76:ab:80:26:dd:a0:4f:31:bd:ea:
07:59:65:44:34:28:2c:c0:4f:5b:a3:83:00:f7:27:76:7a:cc:
1d:28:4d:82:c2:e8:82:cb:ff:24:30:fe:7c:02:bd:f7:35:e8:
46:97:68:a9:b3:93:e4:b6:5f:c0:06:da:ff:d5:e6:d6:a7:c1:
58:da:75:cd:f5:f3:5d:2e:cd:d7:d7:d1:60:e0:c8:8c:2c:c8:
34:88:19:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:19:38 2025 by rpki-client