
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
File: eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft (raw, json)
Hash identifier: 04OBxprIsDIywDHQC6C0KJsKwqAiTefY3R1EJUzQChg=
Subject key identifier: 01:BC:88:71:C1:96:6C:33:25:68:EE:D5:DD:17:E0:F0:FE:3C:7E:A7
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Certificate issuer: /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial: 1D55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
Manifest number: 1D4C
Signing time: Sun 02 Nov 2025 16:09:15 +0000
Manifest this update: Sun 02 Nov 2025 16:09:15 +0000
Manifest next update: Sun 09 Nov 2025 16:09:15 +0000
Files and hashes: 1: eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl (hash: YChTzHTQh/Jzpx08TbgG5eTXSWiqgOjiDs+IavtnmDY=)
2: 8DB2B8E6E27F11EEA6719536C4F9AE02.roa (hash: djG4mlXw26i8Pdv1t32X7f3gUOAe2ux1BErj6m1pRZU=)
3: 8D3981D8E27F11EEA6719536C4F9AE02.roa (hash: AoTvkjBLyBipM5IlClQA63t5jA6mXfrjVZKQW3CI8MM=)
4: DBB62584510F11EE91E98858C4F9AE02.roa (hash: eUZl6xYTmnN5IXCb/B1kt6lwOE4wAzzohcEkE00c85k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 16:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7509 (0x1d55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Validity
Not Before: Nov 2 16:09:15 2025 GMT
Not After : Nov 9 16:09:15 2025 GMT
Subject: CN=6907822b-5570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ec:61:55:d0:85:52:f8:bf:e1:51:60:93:5e:
67:f5:10:9c:4f:56:73:90:5d:35:eb:0f:a7:6c:5a:
65:17:56:79:65:cb:99:ea:b3:2e:d0:5d:8c:66:62:
58:4d:bd:6a:f2:b4:4e:a4:57:a1:89:0b:b8:03:a0:
95:e0:e2:65:ae:fe:5e:99:f8:8e:4f:85:3f:80:f9:
cc:8c:58:90:45:55:90:18:da:e8:60:56:ef:78:f9:
79:32:08:f4:46:a0:79:49:09:07:2d:49:84:4f:a8:
02:f9:7b:bb:ed:fc:f3:0d:a1:38:63:6d:17:39:a8:
ca:00:bc:7e:ca:a1:68:42:99:07:99:0e:3b:40:69:
41:7b:04:9d:5b:1f:90:58:1b:25:6f:23:96:ff:27:
02:aa:3b:50:e4:6c:a3:a4:ea:70:7f:f5:43:1a:e5:
0b:f6:07:51:af:1c:e2:37:1e:a4:9d:76:6d:22:5f:
ea:0c:d0:0c:be:9f:fc:58:3f:72:ef:6e:b9:4c:d5:
df:5f:33:07:17:77:7f:9e:2b:a4:ca:31:54:0f:80:
26:81:b9:8f:72:fd:df:c1:21:0c:b2:eb:92:05:92:
14:74:98:57:c8:f2:5b:9b:7f:a9:b5:d8:09:21:5e:
50:55:14:c8:f0:ea:4a:be:91:53:4b:9a:cf:6c:11:
59:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BC:88:71:C1:96:6C:33:25:68:EE:D5:DD:17:E0:F0:FE:3C:7E:A7
X509v3 Authority Key Identifier:
keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:af:ab:2c:ed:e2:7f:fb:ac:25:0b:af:c7:30:52:e2:8d:02:
e4:0b:4b:e4:9e:3b:73:e9:91:1f:51:9c:34:cb:50:ba:cd:08:
47:32:de:e5:87:76:37:69:1c:15:c6:37:ca:2f:c8:78:49:5d:
f1:ab:35:8b:9a:bb:51:78:ed:5e:ec:30:d3:a3:ef:21:8d:98:
27:38:41:81:dd:ac:71:67:57:ab:f6:15:47:8e:6b:85:3d:80:
41:6a:4d:af:89:59:eb:ee:fa:7f:89:a8:41:f2:c5:b6:d0:9e:
0f:11:61:85:19:e0:25:96:8a:26:37:5b:c7:96:38:68:3b:6a:
1f:3d:d1:cd:68:d6:58:38:ff:25:61:14:f5:20:fd:38:9c:86:
14:60:89:ac:33:bf:c5:be:6c:db:ee:22:97:45:33:5e:ed:5c:
59:5b:f4:6a:07:3a:ef:98:dd:76:08:32:6c:54:df:91:27:e3:
54:3f:90:b8:7d:0d:e0:0e:bd:fb:1f:d3:ae:d5:a9:e8:12:c3:
67:ba:c1:fa:18:05:4a:4a:a3:c3:c9:ee:1a:ae:cb:3d:3e:dc:
4b:1a:1b:ad:b2:2e:e8:a4:03:ef:55:b1:20:ff:d5:a5:83:d0:
0d:c4:52:74:fe:15:d7:d0:f2:6d:1a:df:53:1e:ad:94:a7:ab:
b9:2e:b8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:12 2025 by rpki-client