
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.mft
File: F6Zubv3tEF6BIZCZBTal32A7qA4.mft (raw, json)
Hash identifier: sErEBtz7MglSs64wllo5Gtntnm3v4tVlVwOeTUrtxKE=
Subject key identifier: 3B:FE:6F:FA:19:22:2C:72:2E:F6:07:E5:D0:8D:17:30:81:10:05:E8
Authority key identifier: 17:A6:6E:6E:FD:ED:10:5E:81:21:90:99:05:36:A5:DF:60:3B:A8:0E
Certificate issuer: /CN=A91DFFB0/serialNumber=17A66E6EFDED105E812190990536A5DF603BA80E
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6Zubv3tEF6BIZCZBTal32A7qA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.mft
Manifest number: 0151
Signing time: Wed 05 Nov 2025 04:21:52 +0000
Manifest this update: Wed 05 Nov 2025 04:21:52 +0000
Manifest next update: Wed 12 Nov 2025 04:21:52 +0000
Files and hashes: 1: F6Zubv3tEF6BIZCZBTal32A7qA4.crl (hash: kHM6zBN+bThK919T5nq/DcGwfH4VK+6GrV1UDXRIqzo=)
2: BC75F7EEB69511EEA0196A79C4F9AE02.roa (hash: F5iN8kRUhVD5UcQHE+cdGbEF8nSM0rWOmllxV2NtDTQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.crl
rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6Zubv3tEF6BIZCZBTal32A7qA4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFFB0, serialNumber=17A66E6EFDED105E812190990536A5DF603BA80E
Validity
Not Before: Nov 5 04:21:52 2025 GMT
Not After : Nov 12 04:21:52 2025 GMT
Subject: CN=690ad0e0-b2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:75:11:3d:03:a7:a1:45:19:ac:9a:d5:10:
c2:82:b5:a8:c2:c7:05:60:18:dc:98:e1:ad:82:26:
b3:5b:8a:48:e6:c8:7a:6b:e1:05:8a:1e:3c:59:bd:
9d:ce:ab:a0:eb:2e:df:84:17:fa:46:70:ba:ae:a8:
09:45:ca:07:14:c2:aa:0b:ad:60:4e:0a:c7:da:47:
1e:49:0c:10:84:e4:fe:a0:05:67:36:29:7f:e8:a6:
05:fc:b1:31:3a:fa:40:bf:93:87:91:0b:6e:ec:61:
4b:0a:fc:4f:59:01:b3:d2:c0:15:25:2b:0c:e8:c1:
16:9a:5f:e8:b5:0b:1d:5b:ad:f0:bd:2d:d1:f0:47:
a7:63:f0:7d:4e:a3:00:64:d3:bd:a6:64:8f:4d:d6:
0d:a2:b2:a8:43:61:2d:9d:14:61:cb:51:18:42:2c:
ed:47:d6:d8:6d:95:81:62:fa:a6:76:e4:a7:64:56:
c2:21:28:6e:56:9f:7e:32:a6:01:ee:89:eb:b1:44:
3b:c0:fb:5b:89:35:7c:ec:90:ac:7f:5a:f0:10:36:
54:81:03:c7:67:cf:2f:77:72:5b:58:6c:fb:72:12:
1d:9a:05:71:db:ae:67:30:b6:ea:13:94:f9:ff:a5:
06:e1:73:6a:50:8c:c3:18:50:69:7a:ac:0b:83:dd:
bd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FE:6F:FA:19:22:2C:72:2E:F6:07:E5:D0:8D:17:30:81:10:05:E8
X509v3 Authority Key Identifier:
keyid:17:A6:6E:6E:FD:ED:10:5E:81:21:90:99:05:36:A5:DF:60:3B:A8:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6Zubv3tEF6BIZCZBTal32A7qA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e8:cc:9f:89:77:da:39:c6:f5:f1:5b:27:7e:ab:e8:46:50:
f6:8d:8e:9f:1a:be:ac:1c:3a:ef:51:46:4f:d7:1d:03:51:16:
16:cd:b3:92:b3:ca:b0:88:78:7d:32:67:37:08:cb:29:5d:8e:
d0:ab:41:12:65:8d:6f:d3:74:e9:9b:e6:47:3f:6b:06:63:30:
4a:ff:96:91:58:ac:fb:a6:aa:21:3f:d7:31:97:e2:be:6e:e4:
76:87:4c:af:4e:d6:64:16:37:04:54:26:7a:bc:0c:3c:82:f6:
34:bd:fa:c0:30:f2:68:28:0b:15:1b:29:31:fd:45:f5:ba:1f:
10:9d:1d:0e:33:21:ec:19:fd:8a:59:3e:2c:b9:60:8b:ba:3a:
68:d6:1f:71:03:ba:f2:38:7f:e7:80:07:dd:04:7f:de:e3:0f:
28:ae:15:c0:23:90:f3:f3:2c:59:8b:fa:8b:39:10:1c:e1:00:
aa:b3:9f:9f:2d:5f:7c:07:14:f1:f9:07:06:d2:38:e9:ab:e5:
ba:5d:dd:91:e9:0d:a9:65:10:c1:c5:a0:34:86:51:7d:90:1b:
a8:ed:74:21:90:40:cd:35:05:25:79:59:db:56:0d:dc:2d:b7:
03:96:b0:d8:e2:09:f6:23:28:f1:17:71:c5:67:64:3a:c3:76:
81:4c:2b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:26:20 2025 by rpki-client