
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft
File: ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft (raw, json)
Hash identifier: 8d4xSJ0kyqlTQDF/VICb/sezHDfI3MGpjkHHZ8btdLg=
Subject key identifier: DB:22:41:6F:96:53:D4:E2:37:2E:43:9C:E6:E5:A4:DD:8C:52:CE:1A
Authority key identifier: 7B:3F:61:57:E9:97:EF:17:CA:50:7E:66:10:7F:C8:9E:8E:3E:39:13
Certificate issuer: /CN=A9157B93/serialNumber=7B3F6157E997EF17CA507E66107FC89E8E3E3913
Certificate serial: 62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft
Manifest number: 60
Signing time: Wed 05 Nov 2025 07:17:16 +0000
Manifest this update: Wed 05 Nov 2025 07:17:15 +0000
Manifest next update: Wed 12 Nov 2025 07:17:15 +0000
Files and hashes: 1: ez9hV-mX7xfKUH5mEH_Ino4-ORM.crl (hash: KkJMHbKfNgIF2703F5Rd+847Z8//XNFx9x1w1Pxm29A=)
2: 7C487C522AD711F0889A9C4CC4F9AE02.roa (hash: dcosUg556kia3puig3z/Vay8g6P730lM2nj6N4MJmoE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.crl
rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:17:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157B93, serialNumber=7B3F6157E997EF17CA507E66107FC89E8E3E3913
Validity
Not Before: Nov 5 07:17:15 2025 GMT
Not After : Nov 12 07:17:15 2025 GMT
Subject: CN=690af9fc-c097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b1:d9:1b:1b:b9:ff:bc:cf:c2:c7:7e:ee:ec:
7e:6c:82:09:7f:99:04:23:e4:01:d6:0e:12:30:bb:
18:f4:1f:88:fa:83:3c:42:b8:90:20:5b:23:af:68:
88:67:b3:24:c6:ca:a2:02:82:32:09:b5:2f:5e:49:
09:0d:47:72:5b:68:e4:d8:e1:97:09:69:d5:84:81:
7f:60:9f:be:7f:97:f9:ff:3a:48:30:3d:74:01:be:
da:a7:0b:a2:2c:b4:cb:f8:1e:a2:63:a7:b2:39:96:
78:c9:51:19:35:53:72:55:4e:e5:3e:13:47:4d:25:
23:28:ba:f8:41:5c:52:a2:8a:96:f1:ce:b9:01:47:
82:c3:12:4a:e3:ba:a0:85:53:e3:65:0f:35:fc:52:
93:fc:75:69:4a:94:32:a7:96:c9:ba:01:0a:ae:58:
23:c5:63:16:bd:c1:bd:14:31:46:6d:08:76:17:17:
a4:b7:5d:87:21:a9:b1:11:31:7e:b1:75:da:1f:56:
31:e2:f7:5d:6f:a7:7a:c0:9e:40:2f:23:b7:34:5d:
9b:e3:3d:5d:11:76:bf:58:c8:7d:09:12:e6:a5:27:
47:b6:45:56:85:e8:dc:d5:0c:2e:81:a0:6b:37:ea:
32:27:f2:fa:1d:85:f7:92:aa:2f:28:b8:de:a7:32:
74:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:22:41:6F:96:53:D4:E2:37:2E:43:9C:E6:E5:A4:DD:8C:52:CE:1A
X509v3 Authority Key Identifier:
keyid:7B:3F:61:57:E9:97:EF:17:CA:50:7E:66:10:7F:C8:9E:8E:3E:39:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0f:1b:7e:cf:ee:4a:af:fc:a1:98:05:df:b1:94:01:32:42:
0c:b0:41:23:ab:1d:6d:d9:26:b1:69:c7:7e:72:ba:8e:0a:3c:
5e:d1:e3:5c:7b:37:d3:50:57:6e:40:f1:2b:e5:4c:5a:7a:af:
c1:ff:f6:db:3c:5a:14:b5:49:1e:92:d0:83:44:6d:21:7b:b7:
b6:e1:02:c2:e2:a4:b6:a8:3d:2e:76:a8:4e:d6:34:12:41:d5:
c5:d7:bf:42:70:99:70:ba:59:90:ef:1b:62:30:37:7b:cc:8d:
a2:87:ca:09:1a:97:3d:6f:79:42:58:1c:89:6f:42:50:3b:3a:
d2:21:7f:14:38:3e:73:6b:ba:34:d3:43:da:0b:1e:36:b9:0f:
d5:fc:dc:8f:df:c5:cd:c5:4e:3f:97:d4:0e:2c:ec:84:a5:18:
b9:ae:d8:94:c7:6f:0d:52:87:47:ed:91:d2:13:43:33:ca:f8:
81:ec:8e:98:b0:82:90:19:97:66:99:2a:65:63:03:20:e5:24:
ca:08:17:39:eb:65:86:e2:28:9b:89:bf:90:72:8f:4b:ac:7a:
61:c9:03:a0:15:f9:0d:95:5e:62:b9:42:a2:79:4d:0c:b3:e3:
5b:86:b7:0f:27:78:90:82:59:e9:25:5a:d3:07:aa:45:a4:99:
8f:f3:55:36
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
N0I5MzExMC8GA1UEBRMoN0IzRjYxNTdFOTk3RUYxN0NBNTA3RTY2MTA3RkM4OUU4
RTNFMzkxMzAeFw0yNTExMDUwNzE3MTVaFw0yNTExMTIwNzE3MTVaMBgxFjAUBgNV
BAMTDTY5MGFmOWZjLWMwOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYsdkbG7n/vM/Cx37u7H5sggl/mQQj5AHWDhIwuxj0H4j6gzxCuJAgWyOvaIhn
syTGyqICgjIJtS9eSQkNR3JbaOTY4ZcJadWEgX9gn75/l/n/OkgwPXQBvtqnC6Is
tMv4HqJjp7I5lnjJURk1U3JVTuU+E0dNJSMouvhBXFKiipbxzrkBR4LDEkrjuqCF
U+NlDzX8UpP8dWlKlDKnlsm6AQquWCPFYxa9wb0UMUZtCHYXF6S3XYchqbERMX6x
ddofVjHi911vp3rAnkAvI7c0XZvjPV0Rdr9YyH0JEualJ0e2RVaF6NzVDC6BoGs3
6jIn8vodhfeSqi8ouN6nMnQxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2yJBb5ZT
1OI3LkOc5uWk3YxSzhowHwYDVR0jBBgwFoAUez9hV+mX7xfKUH5mEH/Ino4+ORMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3QjkzLzc3M0RGQjcyMjlG
RDExRjBCRDU1MjAzM0M0RjlBRTAyL2V6OWhWLW1YN3hmS1VINW1FSF9Jbm80LU9S
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZXo5aFYtbVg3eGZLVUg1bUVIX0lubzQtT1JNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3
QjkzLzc3M0RGQjcyMjlGRDExRjBCRDU1MjAzM0M0RjlBRTAyL2V6OWhWLW1YN3hm
S1VINW1FSF9Jbm80LU9STS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJwPG37P7kqv/KGYBd+xlAEyQgywQSOrHW3ZJrFpx35yuo4KPF7R41x7
N9NQV25A8SvlTFp6r8H/9ts8WhS1SR6S0INEbSF7t7bhAsLipLaoPS52qE7WNBJB
1cXXv0JwmXC6WZDvG2IwN3vMjaKHygkalz1veUJYHIlvQlA7OtIhfxQ4PnNrujTT
Q9oLHja5D9X83I/fxc3FTj+X1A4s7ISlGLmu2JTHbw1Sh0ftkdITQzPK+IHsjpiw
gpAZl2aZKmVjAyDlJMoIFznrZYbiKJuJv5Byj0usemHJA6AV+Q2VXmK5QqJ5TQyz
41uGtw8neJCCWeklWtMHqkWkmY/zVTY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:28:34 2025 by rpki-client