
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
File: EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft (raw, json)
Hash identifier: qIZcRVtDRobis3w2fo2w3fRe/7DGvQ3YKj7aynmz5zU=
Subject key identifier: 06:3C:C2:7A:8B:6E:A1:7E:CD:1B:A1:E2:25:8E:0A:5A:B4:58:05:6B
Authority key identifier: 12:E6:2B:5B:4D:33:01:A0:8D:67:A7:B8:B3:C6:5D:44:14:F2:D9:3F
Certificate issuer: /CN=A916B845/serialNumber=12E62B5B4D3301A08D67A7B8B3C65D4414F2D93F
Certificate serial: D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
Manifest number: D0
Signing time: Wed 05 Nov 2025 05:55:58 +0000
Manifest this update: Wed 05 Nov 2025 05:55:57 +0000
Manifest next update: Wed 12 Nov 2025 05:55:57 +0000
Files and hashes: 1: EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl (hash: mZ4nz+KnhZ1lo8G87jw3s5+UpdxYcrdxjd+G9pw/VkU=)
2: 7B026F0686C711EF9B284139C4F9AE02.roa (hash: I6/Xug9sgzfx9zXpY7A6l18h25D10MEv3RG9NdPO5Kk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl
rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:55:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B845, serialNumber=12E62B5B4D3301A08D67A7B8B3C65D4414F2D93F
Validity
Not Before: Nov 5 05:55:57 2025 GMT
Not After : Nov 12 05:55:57 2025 GMT
Subject: CN=690ae6ed-30f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:64:a5:08:42:ca:68:44:c7:ef:07:9a:f1:bb:
9e:c1:2e:4e:39:f3:55:1f:19:6f:33:f5:63:69:e5:
bc:df:df:9c:ba:92:45:21:e3:f6:15:88:6e:84:da:
e7:63:f8:64:8b:cd:a6:09:99:f7:87:89:9c:ce:b3:
06:72:93:1d:f0:92:c6:08:c5:5f:fd:c7:17:08:b9:
18:e1:21:ba:08:7a:a7:37:5f:fd:6f:57:f1:b1:e2:
83:f7:bc:00:d3:f7:75:0d:bd:49:73:bc:f6:a9:79:
7d:1c:7a:e9:52:f0:57:b2:ba:17:75:13:9c:b8:03:
eb:4e:c0:29:5a:e4:1a:7a:0f:eb:ed:97:39:41:2a:
13:40:b9:86:60:60:f6:da:e9:d9:90:01:6f:cb:a4:
6a:cc:5c:01:08:c6:78:3f:80:55:e6:9c:4b:5f:b6:
6d:83:52:01:6c:e7:94:d7:5a:3e:24:c1:38:25:1f:
40:ee:d9:1e:fc:31:08:44:9f:61:c2:80:2b:cf:46:
1e:ee:9d:80:84:19:f3:98:bc:a9:70:fa:bf:91:fa:
7b:a5:58:56:e7:03:8f:02:f9:4e:32:db:00:2e:08:
a4:c3:50:1c:ff:15:fd:a0:c1:79:5a:6d:79:fa:8a:
55:7c:92:f0:ae:82:57:b2:0f:da:4b:e7:23:48:96:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3C:C2:7A:8B:6E:A1:7E:CD:1B:A1:E2:25:8E:0A:5A:B4:58:05:6B
X509v3 Authority Key Identifier:
keyid:12:E6:2B:5B:4D:33:01:A0:8D:67:A7:B8:B3:C6:5D:44:14:F2:D9:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:1e:9b:35:8f:f1:86:25:27:73:2f:d4:a1:fb:50:25:c3:fb:
28:1a:ba:ba:21:e4:20:1c:c6:fd:c7:6d:d3:04:47:cf:0c:83:
55:71:8a:00:f7:77:a4:01:54:e7:45:91:7e:83:50:e7:bd:d3:
30:9c:8c:53:b5:1b:16:50:1f:8d:e7:da:dc:a0:57:3f:39:52:
56:c8:2d:a2:ee:9f:a2:58:06:73:67:cc:c8:ae:eb:e8:67:98:
4d:e8:e5:43:52:91:84:f3:e2:6a:77:7d:58:63:65:6d:5b:5b:
fc:d0:2f:0b:ff:67:71:b5:64:60:60:c3:d7:7b:df:b2:84:f7:
0f:77:17:44:3a:99:10:6c:11:75:16:62:91:6e:19:c8:b7:24:
f9:73:2f:03:bb:60:c8:15:76:f3:70:04:a5:63:ac:32:15:67:
d8:df:2a:f5:a8:cd:2a:63:d8:88:57:9c:ad:77:f0:1d:73:72:
6b:8a:cc:78:de:c5:dd:17:a9:6b:c4:a4:af:c2:a5:88:b2:5c:
32:d7:33:9e:79:62:c4:d7:b9:e4:d3:fa:2a:32:d2:04:c0:6a:
1f:4c:57:83:4c:14:bd:74:17:0d:04:c9:b9:7f:0c:d0:43:a7:
c0:31:b3:01:b1:db:71:6e:9d:79:bf:e2:1f:c4:da:a4:24:b8:
9d:88:13:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:32:42 2025 by rpki-client