
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft
File: Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft (raw, json)
Hash identifier: iwavfSNZAMkokKkrFCe/+FSp2pHWYHxbtcQ5lyjuaWk=
Subject key identifier: BC:82:E1:98:02:F2:6F:79:EA:EB:DC:D9:67:FF:5C:E6:6A:90:3E:E7
Authority key identifier: 16:2E:95:6F:88:DD:3E:09:A6:B0:44:D8:B2:B4:2D:EB:10:A8:3D:A1
Certificate issuer: /CN=A91E6F07/serialNumber=162E956F88DD3E09A6B044D8B2B42DEB10A83DA1
Certificate serial: 0C8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft
Manifest number: 1526
Signing time: Sun 02 Nov 2025 18:19:28 +0000
Manifest this update: Sun 02 Nov 2025 18:19:28 +0000
Manifest next update: Sun 09 Nov 2025 18:19:27 +0000
Files and hashes: 1: Fi6Vb4jdPgmmsETYsrQt6xCoPaE.crl (hash: sjWyvUJE2cPRaDW9sq8D10iDtQQbU2L5YNAe2b/aufE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.crl
rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 18:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3214 (0xc8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6F07, serialNumber=162E956F88DD3E09A6B044D8B2B42DEB10A83DA1
Validity
Not Before: Nov 2 18:19:28 2025 GMT
Not After : Nov 9 18:19:27 2025 GMT
Subject: CN=6907a0b0-bcca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:5a:b3:8c:8a:ff:b6:80:87:a3:64:8b:32:
5d:75:82:05:19:3c:57:5c:f6:9e:93:64:2b:1d:07:
8b:f6:a9:6c:05:75:18:dd:95:53:f9:9f:f2:9c:c2:
b6:9e:9d:33:19:75:05:31:fb:44:de:ad:ef:2b:e5:
5e:e7:ba:75:bc:78:c5:ae:83:e7:82:77:80:67:38:
89:e7:61:65:86:03:3a:39:c9:d1:9e:29:fc:cf:43:
d2:db:1b:53:78:65:91:72:49:bc:89:ea:8a:a2:6e:
e9:32:0a:54:d2:51:3b:7a:7d:f6:24:3a:29:d7:c1:
a2:bc:a7:2d:1b:4c:24:b6:24:55:b6:65:9f:2c:f0:
e9:4d:33:d3:00:67:3f:61:bd:01:9d:de:17:cf:b9:
4c:fe:89:fe:c2:56:dd:54:95:d1:aa:22:71:56:86:
25:a1:f1:34:ca:c9:c4:32:99:5b:43:eb:ae:51:57:
13:16:5d:bc:65:da:16:81:57:72:0a:5a:7e:30:d2:
68:ef:89:59:86:91:57:b7:36:ad:2b:c8:8d:da:a0:
e5:67:ca:38:16:25:0a:99:f6:b6:e6:4d:6e:38:61:
1c:09:cb:2b:b9:6f:b6:0b:16:a7:15:39:f7:3d:d8:
ff:58:2e:04:1c:92:95:f8:96:66:7e:ec:bd:50:a5:
0e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:82:E1:98:02:F2:6F:79:EA:EB:DC:D9:67:FF:5C:E6:6A:90:3E:E7
X509v3 Authority Key Identifier:
keyid:16:2E:95:6F:88:DD:3E:09:A6:B0:44:D8:B2:B4:2D:EB:10:A8:3D:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:37:eb:3f:ef:e4:4c:7e:7b:ad:3f:e9:0f:26:04:c8:8d:d9:
c6:98:d8:15:70:91:eb:4b:45:4c:19:d3:d0:2b:d8:de:1c:d4:
ff:0f:1f:80:44:98:cd:b3:ce:57:d5:0c:32:48:6c:82:fe:c1:
26:a3:ba:28:5f:4a:c7:68:bd:9d:85:aa:4b:a8:eb:c2:01:a5:
81:09:e3:dd:cf:d4:c2:f0:c5:d4:e3:07:0b:a9:12:73:4f:97:
dd:eb:8e:39:4a:1c:b8:af:6f:31:5a:f3:69:ec:48:31:44:5b:
c6:2c:c1:f7:b1:bd:59:3c:0e:66:b9:7d:d2:b3:36:e0:97:a1:
76:87:e7:12:fb:f6:d5:b0:95:1d:42:96:05:31:18:53:19:01:
6c:20:a8:11:1b:e4:85:8d:48:b2:04:0e:22:66:0a:d4:e0:22:
ca:55:f4:7c:e2:01:04:92:b5:95:58:9c:47:38:5b:84:87:60:
23:a1:2e:02:b6:9e:ed:0b:36:41:d2:69:2d:b2:9b:8c:ed:c2:
3a:4e:e9:d2:a2:25:3e:9f:95:e3:d9:b9:c6:4c:52:16:d7:36:
db:5a:5c:50:00:4c:41:ba:17:fa:bb:22:f1:18:9d:f2:ca:aa:
c8:2e:de:5e:b3:54:3c:0a:bd:b4:ea:b6:46:94:e9:db:2c:e6:
a1:fa:3a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:22 2025 by rpki-client