
$ rpki-client -vvf rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
File: _egcp2lelKkL_f2D8Rp3NGMIF-g.mft (raw, json)
Hash identifier: kymrxfBfRXQB0/VZuoluaBxSIKaPhtgJ6HOmpjWGiOo=
Subject key identifier: 72:93:D1:26:A0:B7:B4:3A:D5:C3:91:C4:A2:31:90:91:91:3D:B4:00
Authority key identifier: FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8
Certificate issuer: /CN=A91127B5/serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8
Certificate serial: 0178
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
Manifest number: 0172
Signing time: Mon 03 Nov 2025 03:52:57 +0000
Manifest this update: Mon 03 Nov 2025 03:52:56 +0000
Manifest next update: Mon 10 Nov 2025 03:52:56 +0000
Files and hashes: 1: _egcp2lelKkL_f2D8Rp3NGMIF-g.crl (hash: THqgw0GNCCqiOiWJkeLa4Mn1KJkkTAn4/UPPMkoc1Nk=)
2: AA02862E890C11EE87862551C4F9AE02.roa (hash: iEIKCf+XGWrseL7l7p29L+eQtWAuRRnnoodUimUnIC0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl
rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:52:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91127B5, serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8
Validity
Not Before: Nov 3 03:52:56 2025 GMT
Not After : Nov 10 03:52:56 2025 GMT
Subject: CN=69082719-08cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:90:37:dd:ed:4d:57:a9:31:c9:99:7c:8d:c2:
1f:9d:a3:28:4f:53:01:e5:b3:51:26:3f:49:8a:d8:
d5:5b:a0:02:7f:48:be:5d:ed:48:26:c5:3b:c6:83:
4c:92:0f:22:f0:b5:f7:e7:5e:1b:e6:2b:27:85:95:
1d:4b:01:30:3b:b8:10:3e:cb:ad:6e:90:22:63:54:
96:26:76:47:81:5f:aa:73:86:10:53:8a:d9:cb:d1:
0c:94:99:85:f9:d7:c3:f9:51:c1:ba:bc:66:e3:de:
02:11:dd:af:26:a1:71:df:e2:f1:99:98:8b:69:e3:
ce:7c:c1:4a:f3:4d:d6:0d:2d:44:5c:58:a5:ba:16:
62:59:eb:78:96:54:3d:d4:97:f1:23:49:7f:8d:9c:
08:9d:62:9f:e1:de:56:fb:be:02:62:75:0e:fe:ac:
74:b1:51:fc:cc:29:50:cb:2f:a4:01:c7:8d:ca:c0:
2d:fc:3a:5a:bd:e3:29:c4:90:a8:cb:59:cc:0a:c7:
fc:50:54:cf:be:e2:5b:08:ec:71:31:fc:73:ec:7e:
2b:d4:f6:4f:ee:df:5d:43:30:7d:d8:4e:ec:e2:ac:
41:41:c0:0c:5a:6b:e6:f4:22:38:b7:3a:b9:96:32:
4a:a7:d9:b5:c0:c7:d0:a7:1d:a0:5b:9c:8d:b4:a5:
ee:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:93:D1:26:A0:B7:B4:3A:D5:C3:91:C4:A2:31:90:91:91:3D:B4:00
X509v3 Authority Key Identifier:
keyid:FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ef:f6:fe:5c:a2:ba:db:11:52:d1:ea:92:28:8b:12:d6:5c:
1f:19:94:a2:80:0b:7e:32:cf:6e:a5:b9:0a:24:65:f2:b0:09:
50:dc:27:3e:49:f2:02:e8:dc:5c:4c:7a:02:b0:40:82:83:2f:
53:2d:ef:1a:11:66:5f:60:72:b6:5c:da:82:3a:4e:98:ea:36:
34:98:95:38:25:83:47:f0:1a:0a:b1:86:64:84:36:41:94:07:
fc:d5:44:cd:9f:31:79:65:1a:fb:c0:53:dc:6f:04:1a:02:ae:
fe:d1:c3:89:37:81:df:16:57:c8:62:cd:79:0c:3e:ac:a2:31:
b9:13:fd:b2:bb:4b:d7:a2:5e:db:18:60:a2:db:f3:e8:0b:33:
87:85:5c:d3:ff:e1:c8:85:4d:6f:c1:49:33:85:42:16:5f:f2:
b2:0a:3a:8d:a8:74:4a:99:48:0d:8f:79:09:f5:d9:23:83:d1:
be:16:70:6a:55:c8:71:96:11:55:3b:1d:fc:5d:fe:50:0c:88:
0e:20:02:b8:ff:61:b6:63:d6:74:4c:cc:bc:c9:36:1e:1d:a4:
87:07:19:89:6a:fd:69:a0:0f:51:29:65:86:f4:7a:6a:de:40:
65:d6:30:0c:b8:0c:aa:33:57:07:f3:2e:90:49:71:a9:fc:11:
02:5a:56:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:16:32 2025 by rpki-client