
$ rpki-client -vvf rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
File: ETYYsNQQaCrAapAdZbuayVXtieA.mft (raw, json)
Hash identifier: 6UbLbMjegUxNu3sB/mS6p+wEviQosQp6F9djQ+xB8l8=
Subject key identifier: 33:B5:AE:AD:4B:BF:58:CB:96:F0:CF:68:E6:34:F2:55:DC:E3:13:70
Authority key identifier: 11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0
Certificate issuer: /CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
Certificate serial: 0ED2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
Manifest number: 0EAF
Signing time: Sun 02 Nov 2025 17:42:11 +0000
Manifest this update: Sun 02 Nov 2025 17:42:10 +0000
Manifest next update: Sun 09 Nov 2025 17:42:10 +0000
Files and hashes: 1: ETYYsNQQaCrAapAdZbuayVXtieA.crl (hash: ScNUGtkN14dOWY/1xGUZKW1M6EUBY78I3WDVE144Sb8=)
2: BA3A46C28D3211EB9BFE873BC4F9AE02.roa (hash: ETZXfLUU8V3KJwKDLSCPK2awgHX/8QZCXq5mNJZzacU=)
3: 93713A1442F311EDA8889068C4F9AE02.roa (hash: EzMv5lO9o81NCglSMIqMm+Knptd/vLNcXJNN5+fG3pg=)
4: 04421FB4C2A911EBB201FE39C4F9AE02.roa (hash: 60vuOkQynjGzHB5ZlHpi78kSHRwd9T4kwsOABZu9eBw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl
rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 17:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3794 (0xed2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91551D7, serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
Validity
Not Before: Nov 2 17:42:10 2025 GMT
Not After : Nov 9 17:42:10 2025 GMT
Subject: CN=690797f2-d2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:54:10:2a:5f:fd:e6:28:be:50:ec:45:87:8e:
3b:a6:93:6e:3b:d8:a4:90:a7:e7:38:d5:bf:c4:59:
95:45:7a:09:5a:e9:a8:d7:3d:af:ee:c1:65:e0:17:
04:fe:9d:c5:eb:df:e2:d7:0b:76:a3:e4:18:8a:36:
77:e1:21:1e:46:e5:f2:52:59:ff:25:b6:eb:56:45:
50:cc:85:1e:db:6c:f3:a4:3c:c5:fc:77:42:e9:87:
b1:e9:ac:60:7f:a2:89:25:07:c7:33:dc:7d:28:87:
11:84:e7:9d:49:ad:c4:c2:56:80:44:8d:bc:f1:96:
83:80:11:f6:e2:86:bd:ea:8d:53:06:54:17:fc:ae:
13:da:55:16:48:c4:a0:fc:25:55:e0:bd:b6:76:b5:
46:06:b8:f1:64:12:7e:ef:1a:bd:70:62:e1:ac:bd:
4f:a1:ea:70:2f:55:e8:7d:53:01:be:05:f0:9e:32:
ab:ad:9a:eb:ca:98:00:8a:be:11:5f:93:32:eb:c8:
b3:bd:12:67:ec:72:e7:fa:89:3f:58:60:68:90:16:
d5:2e:02:47:3f:22:0b:ca:08:2d:cf:05:bd:42:fb:
f9:64:78:f6:f7:d8:50:0b:8f:ca:42:49:c3:0a:9d:
47:44:e3:8b:8c:8f:69:55:4b:1f:c3:93:93:e4:1a:
55:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B5:AE:AD:4B:BF:58:CB:96:F0:CF:68:E6:34:F2:55:DC:E3:13:70
X509v3 Authority Key Identifier:
keyid:11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:48:23:dd:0a:96:5d:c7:08:6b:23:4b:fd:cb:23:5b:11:51:
10:19:b5:37:58:12:96:16:17:83:ac:35:3e:9f:6e:21:27:6d:
38:8a:7b:4c:23:98:58:98:d8:b0:13:0d:7b:51:e6:71:64:52:
59:41:16:4d:47:05:f7:44:ae:82:a4:9b:4d:e7:99:c0:72:e0:
76:0c:c5:a2:7c:22:7d:fc:8a:25:85:ad:4c:d6:10:1c:63:ac:
b0:2c:7b:19:fa:33:c8:37:16:85:3a:c9:a2:73:c0:69:74:5d:
5e:56:c3:76:29:81:8a:fb:85:99:52:9c:6f:41:30:e9:77:37:
2a:11:ed:9c:39:a8:b7:64:38:5a:09:65:92:15:b0:4f:9e:15:
67:db:7c:2b:4f:4d:cd:42:1c:be:96:66:84:5b:33:49:aa:ad:
37:44:a5:af:3c:3f:48:43:9a:f3:f7:70:fb:9f:ce:e7:52:d0:
9f:c3:87:97:8b:91:14:43:f6:36:9b:eb:a8:09:9e:c9:b8:b7:
d7:6d:00:ab:22:99:c1:de:8a:01:3f:43:e2:11:b9:b0:0c:2a:
43:34:e4:50:60:a6:c3:8b:97:ea:b1:75:a5:1a:d5:22:6a:b9:
a4:8a:f9:01:c2:10:a4:ea:32:f5:a4:9b:d1:a8:34:09:d2:e5:
e4:0b:5b:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTUxRDcxMTAvBgNVBAUTKDExMzYxOEIwRDQxMDY4MkFDMDZBOTAxRDY1QkI5QUM5
NTVFRDg5RTAwHhcNMjUxMTAyMTc0MjEwWhcNMjUxMTA5MTc0MjEwWjAYMRYwFAYD
VQQDEw02OTA3OTdmMi1kMmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAylQQKl/95ii+UOxFh447ppNuO9ikkKfnONW/xFmVRXoJWumo1z2v7sFl4BcE
/p3F69/i1wt2o+QYijZ34SEeRuXyUln/JbbrVkVQzIUe22zzpDzF/HdC6Yex6axg
f6KJJQfHM9x9KIcRhOedSa3EwlaARI288ZaDgBH24oa96o1TBlQX/K4T2lUWSMSg
/CVV4L22drVGBrjxZBJ+7xq9cGLhrL1PoepwL1XofVMBvgXwnjKrrZrrypgAir4R
X5My68izvRJn7HLn+ok/WGBokBbVLgJHPyILyggtzwW9Qvv5ZHj299hQC4/KQknD
Cp1HROOLjI9pVUsfw5OT5BpVIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDO1rq1L
v1jLlvDPaOY08lXc4xNwMB8GA1UdIwQYMBaAFBE2GLDUEGgqwGqQHWW7mslV7Yng
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTFENy82OEYwOTI5MjlF
MkYxMUU5QjJFNTI4MEFDNEY5QUUwMi9FVFlZc05RUWFDckFhcEFkWmJ1YXlWWHRp
ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VUWVlzTlFRYUNyQWFwQWRaYnVheVZYdGllQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTFENy82OEYwOTI5MjlFMkYxMUU5QjJFNTI4MEFDNEY5QUUwMi9FVFlZc05RUWFD
ckFhcEFkWmJ1YXlWWHRpZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA8SCPdCpZdxwhrI0v9yyNbEVEQGbU3WBKWFheDrDU+n24hJ204intM
I5hYmNiwEw17UeZxZFJZQRZNRwX3RK6CpJtN55nAcuB2DMWifCJ9/Iolha1M1hAc
Y6ywLHsZ+jPINxaFOsmic8BpdF1eVsN2KYGK+4WZUpxvQTDpdzcqEe2cOai3ZDha
CWWSFbBPnhVn23wrT03NQhy+lmaEWzNJqq03RKWvPD9IQ5rz93D7n87nUtCfw4eX
i5EUQ/Y2m+uoCZ7JuLfXbQCrIpnB3ooBP0PiEbmwDCpDNORQYKbDi5fqsXWlGtUi
armkivkBwhCk6jL1pJvRqDQJ0uXkC1un
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:13:22 2025 by rpki-client