
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
File: eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft (raw, json)
Hash identifier: aadR6o1JQB0o7fp/RRZwT9vUn+WQOLTs2aK7r5R6rnA=
Subject key identifier: 69:8A:2C:86:F5:D5:0A:DD:39:46:29:CE:D4:C8:13:84:6A:2F:C4:CC
Authority key identifier: 78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6
Certificate issuer: /CN=A914CF73/serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6
Certificate serial: 34A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
Manifest number: 349E
Signing time: Sun 02 Nov 2025 15:21:05 +0000
Manifest this update: Sun 02 Nov 2025 15:21:05 +0000
Manifest next update: Sun 09 Nov 2025 15:21:05 +0000
Files and hashes: 1: eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl (hash: GBRJ0VbXJ0DyynajqC+J4DPGd4e0i1GwW9vGCMJFfIM=)
2: 5007D8DECAB411E889484D32C4F9AE02.roa (hash: d/14FJHyt97NnvQezwZgszS2h7OqJIW+bhi4rgk0UNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl
rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 15:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13478 (0x34a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CF73, serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6
Validity
Not Before: Nov 2 15:21:05 2025 GMT
Not After : Nov 9 15:21:05 2025 GMT
Subject: CN=690776e1-9411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:85:70:4f:f7:ee:f4:47:3d:14:8d:17:39:b4:
fd:b9:84:69:70:53:ac:e0:18:f4:09:86:62:a3:55:
7a:e5:8a:95:d9:62:aa:d4:36:5d:4c:ed:80:52:87:
b3:79:e8:0d:59:e4:40:db:bd:7c:4c:db:af:84:e1:
43:35:e4:02:47:70:2d:76:63:5e:10:ec:a2:f9:58:
29:68:ac:86:a6:bc:12:91:0c:93:8a:76:2c:99:0b:
ee:64:68:f2:e5:cd:06:28:5a:2b:4d:8c:c3:63:56:
ba:2d:da:32:af:12:43:5b:56:d3:27:a7:37:22:de:
8a:96:98:6c:a5:4d:dd:c2:6b:e2:f6:82:b3:6e:7c:
e0:3c:1f:ad:5d:32:4d:2b:46:fb:6f:fe:8c:23:e8:
6d:af:87:cb:82:df:55:a0:c5:95:d8:f0:d1:be:14:
1f:3c:28:b9:1b:ff:d2:c7:3f:35:55:54:44:de:96:
33:cc:4d:78:97:1a:c8:40:aa:90:e7:7b:41:04:24:
0c:14:8d:2e:1f:2a:4e:b8:66:24:b9:06:77:81:08:
c8:df:ed:3a:7c:af:6f:d2:27:d6:5a:74:94:f7:30:
a8:06:9c:e4:8b:4a:e5:12:13:8e:47:ab:9c:36:78:
b3:7c:2c:e7:29:35:0b:35:78:bd:a9:65:c4:ed:05:
d5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8A:2C:86:F5:D5:0A:DD:39:46:29:CE:D4:C8:13:84:6A:2F:C4:CC
X509v3 Authority Key Identifier:
keyid:78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7e:13:2d:a8:71:9a:39:21:02:41:38:f1:f5:a4:ae:84:16:
f5:f2:75:f5:df:c5:a7:79:96:0b:e6:ac:23:f3:fb:fc:44:4a:
81:97:b9:0b:22:45:1e:b3:4e:df:42:5f:3b:f2:98:6e:ce:a7:
2d:a2:cc:0a:5b:1d:c5:d0:c2:d3:c8:42:87:c2:5b:92:a8:63:
c0:a1:b9:35:a7:40:59:0f:1a:69:bd:ff:a0:90:82:8b:12:f1:
a3:de:76:88:3b:fb:d7:f0:7f:74:e6:8f:85:bd:97:fb:2a:01:
f0:7e:cd:33:f6:b8:ef:3e:31:3b:87:22:2b:f0:16:c2:2c:89:
9a:25:cb:e3:84:19:86:d0:cb:f8:0d:60:96:23:67:b2:06:ec:
9a:c7:78:53:a0:1a:52:18:7c:e9:b9:c4:68:f5:ec:29:e5:d9:
30:4f:5e:a3:7d:14:f4:23:09:d2:76:00:56:b7:88:a6:d4:05:
f1:b7:90:af:e3:ca:81:e5:14:33:b1:36:06:b2:11:f1:ff:24:
f9:a7:3b:87:ac:e0:1b:79:4e:1d:2f:80:77:90:85:40:a4:03:
ba:48:3b:34:f8:34:4f:bf:b7:a4:ef:49:3d:3f:28:0b:89:58:
09:31:30:6a:c8:9c:c6:63:4d:f5:db:6e:0d:8f:95:27:69:d3:
6a:80:e2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:32 2025 by rpki-client