
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
File: EZQLtYNEqix5xJU51t-RUZbv6CY.mft (raw, json)
Hash identifier: d+kZV1GHfa2Gxr1+VTtq/g/giFkZ4NGiECK0gM0O88A=
Subject key identifier: D9:FA:66:B3:0B:35:8B:4B:7D:43:FB:F1:9F:C3:1B:C0:69:BC:D5:6F
Authority key identifier: 11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26
Certificate issuer: /CN=A912B600/serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826
Certificate serial: 0802
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
Manifest number: 07FB
Signing time: Sun 02 Nov 2025 14:46:42 +0000
Manifest this update: Sun 02 Nov 2025 14:46:42 +0000
Manifest next update: Sun 09 Nov 2025 14:46:42 +0000
Files and hashes: 1: EZQLtYNEqix5xJU51t-RUZbv6CY.crl (hash: XBe8LXma2yJ+/GmmnLi/MbTjKY1gWEDSQqWuXnZiW8E=)
2: 5DE12890180311EBA311E181C4F9AE02.roa (hash: 26p3NboETp7Nj+Pkns8h4o9kiHbewrSxU2XrnHDgX4E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl
rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 14:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2050 (0x802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B600, serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826
Validity
Not Before: Nov 2 14:46:42 2025 GMT
Not After : Nov 9 14:46:42 2025 GMT
Subject: CN=69076ed2-0aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f1:49:96:09:81:f0:5a:43:1c:15:52:c5:85:
c5:85:16:e3:ad:a1:03:f9:6b:ca:c4:3a:60:4b:00:
31:15:59:60:8d:58:11:ac:5f:41:01:87:a4:86:95:
a1:e7:43:63:e3:72:c3:14:44:77:f2:b6:31:42:98:
7a:1f:93:ea:93:dd:57:7a:75:c8:c5:f6:2f:be:1d:
d1:a8:19:4d:05:ca:64:41:fe:22:4f:d6:56:a2:2f:
a7:fa:61:a6:8d:dd:4f:04:13:26:b7:87:01:74:71:
b8:81:ba:de:33:74:ae:be:cd:26:e8:e7:fd:25:7d:
23:d7:dc:fa:ae:3a:f8:06:23:f1:73:37:9d:20:e3:
c3:58:75:f3:d1:ba:a2:e4:26:35:45:58:84:03:5e:
cf:9f:b3:d9:63:c2:b1:d2:7f:c0:fe:65:cd:ba:bc:
d5:9b:95:f2:87:37:d4:f5:8d:ef:3d:74:dd:63:da:
75:73:44:7b:84:23:c0:6a:14:67:a3:65:8f:6c:46:
9e:45:9a:af:60:90:e5:0a:ec:f8:a6:e8:25:ba:19:
7a:20:4d:81:0d:6b:b8:1b:c9:c7:46:d7:df:ca:37:
77:42:fc:49:4d:a2:3b:d2:42:2d:49:47:2f:d2:e5:
84:e6:33:3f:4d:b0:42:91:60:0d:f5:44:c2:78:29:
8d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FA:66:B3:0B:35:8B:4B:7D:43:FB:F1:9F:C3:1B:C0:69:BC:D5:6F
X509v3 Authority Key Identifier:
keyid:11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:33:40:87:e4:8b:c8:0d:7b:45:2b:6f:d7:c4:7c:72:fb:c9:
3f:73:00:c5:a1:1d:22:47:96:d3:16:8a:8d:73:9e:d7:9e:5d:
d6:f5:a3:cc:4d:4f:dc:95:7a:14:0b:07:d9:ab:b7:71:d6:1c:
63:15:b4:9b:16:cb:6d:7f:01:55:9f:62:de:e3:d9:25:26:44:
71:35:e4:bc:1e:a4:7a:9d:79:85:42:90:17:40:4c:d9:02:e2:
0e:11:17:9f:d6:87:71:1a:43:49:7f:cb:df:08:3d:fa:b1:68:
13:0d:3a:c4:f1:4f:24:ef:64:35:83:71:86:78:a5:38:81:5b:
36:ff:4c:00:fe:46:5c:84:f9:78:1c:a8:14:3f:fa:04:37:7b:
53:71:2f:56:d0:f0:59:aa:44:f2:3f:e8:a8:d5:11:e6:b0:05:
b9:2e:17:5a:40:26:02:61:56:dc:ba:ca:bc:17:73:55:a1:c4:
26:78:80:28:51:b0:39:41:85:bb:6c:3e:a1:21:c2:cb:81:4c:
29:2e:06:57:fc:af:1e:37:e3:21:df:54:5d:2d:df:7e:de:54:
32:cb:13:12:b6:78:20:5d:d8:63:3a:fe:aa:67:f2:c6:f1:35:
58:12:df:c9:8d:dd:3a:fe:34:b6:53:32:c1:75:cd:56:c6:3a:
0d:a7:7a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 22:29:41 2025 by rpki-client