
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.mft
File: FMxtyeCRBW52oT-Pinw1duzx27E.mft (raw, json)
Hash identifier: 6szoGi+Te2kCcvhrceir4JveknaR2TQQjBfm8AwCazQ=
Subject key identifier: AF:BD:47:DE:33:88:5F:1B:00:A1:8F:24:1B:C7:87:25:96:75:68:0B
Authority key identifier: 14:CC:6D:C9:E0:91:05:6E:76:A1:3F:8F:8A:7C:35:76:EC:F1:DB:B1
Certificate issuer: /CN=A91C9D04/serialNumber=14CC6DC9E091056E76A13F8F8A7C3576ECF1DBB1
Certificate serial: 1628
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMxtyeCRBW52oT-Pinw1duzx27E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.mft
Manifest number: 1F84
Signing time: Tue 04 Nov 2025 16:49:54 +0000
Manifest this update: Tue 04 Nov 2025 16:49:54 +0000
Manifest next update: Tue 11 Nov 2025 16:49:54 +0000
Files and hashes: 1: FMxtyeCRBW52oT-Pinw1duzx27E.crl (hash: oIZkRBIeOImjEMngfyGC40kGXOOgQ6o/PbpqL30Zg/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.crl
rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMxtyeCRBW52oT-Pinw1duzx27E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:49:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5672 (0x1628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9D04, serialNumber=14CC6DC9E091056E76A13F8F8A7C3576ECF1DBB1
Validity
Not Before: Nov 4 16:49:54 2025 GMT
Not After : Nov 11 16:49:54 2025 GMT
Subject: CN=690a2eb2-e846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c6:be:ec:5a:72:10:ee:6e:67:d7:e3:c1:05:
d5:82:41:52:59:25:42:94:08:52:bf:ca:b0:8a:f0:
c6:92:a5:85:23:db:f7:b2:ea:5d:39:50:7b:5b:0d:
88:cc:2a:a5:a0:29:55:1a:53:75:7c:fd:71:da:8b:
42:95:de:58:54:6a:2c:5d:f4:23:ba:10:88:e8:c0:
e0:29:5c:d6:4c:d7:8d:cf:1b:97:10:ce:0b:e0:da:
56:60:32:56:1b:e1:ff:54:6a:cc:22:65:77:7f:3d:
da:14:9d:14:40:22:1e:e6:bd:59:5b:49:7f:08:f1:
2d:be:35:a8:6e:30:70:7d:e3:42:6c:00:e1:2f:b3:
70:83:f8:1a:d1:28:fa:68:54:db:ba:e4:32:93:68:
2d:85:b2:6c:60:66:b1:a7:0e:4a:72:00:2f:e6:c2:
2c:fa:83:ea:aa:ad:48:56:ce:9a:3f:45:38:fa:b9:
c0:5c:8b:87:89:30:d5:2a:94:10:be:c3:62:5b:cb:
d9:c6:67:05:a2:a0:a3:6c:d6:64:70:4d:2b:6f:86:
13:fe:94:ba:ae:79:15:e7:90:09:a7:5f:a2:99:ab:
3e:9d:49:56:55:0c:e4:98:6b:d9:53:c4:ab:96:1b:
35:67:61:11:11:3a:b8:da:ae:2f:66:8f:6e:17:77:
23:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BD:47:DE:33:88:5F:1B:00:A1:8F:24:1B:C7:87:25:96:75:68:0B
X509v3 Authority Key Identifier:
keyid:14:CC:6D:C9:E0:91:05:6E:76:A1:3F:8F:8A:7C:35:76:EC:F1:DB:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMxtyeCRBW52oT-Pinw1duzx27E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:3d:6f:16:a6:ef:48:c0:a7:8d:eb:18:83:22:ba:ec:7f:f2:
d9:a8:f3:20:14:aa:5e:4c:97:ab:b5:49:f8:1d:b3:e9:a7:0d:
42:e5:13:b6:b8:71:b2:09:a1:15:7d:89:cd:01:6d:ef:86:8d:
a8:a7:a1:a9:00:eb:5b:14:fc:13:8d:6e:fe:0c:f3:4d:52:c7:
41:4b:48:ed:65:35:56:49:13:21:d1:55:11:60:63:63:4d:0f:
3f:82:73:13:14:cc:61:a5:76:aa:e9:67:c7:fc:52:eb:e7:d7:
66:01:f4:13:6c:24:ce:48:0d:f2:bf:6d:35:12:4e:c7:17:61:
7e:be:29:26:85:22:f8:96:5c:6f:ad:ef:b2:ec:34:87:84:08:
4e:46:5b:67:96:88:e0:9d:ab:3e:ef:00:e9:14:7e:67:7a:87:
23:7d:a3:bd:97:ba:d9:75:04:23:cc:ac:a3:ee:bd:94:b2:ac:
0d:9c:29:08:c2:5c:23:39:16:20:33:d7:b6:00:6a:56:32:ea:
07:d4:fd:12:cb:26:f4:c9:fd:52:d1:ca:e5:94:d3:46:83:34:
e4:16:01:4d:9e:17:d4:2d:76:26:57:e1:ba:ec:9e:1a:c8:28:
f7:17:bd:8d:09:72:54:b2:cf:04:2b:3d:56:ed:ff:89:10:8e:
f5:c5:d3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:28:22 2025 by rpki-client