
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft
File: EawzZ40YMzz-vUmJK1aJnifqY0g.mft (raw, json)
Hash identifier: ovHLHbM8QdvYnFpaxq653VJzczdMfmGvEdhhwd7lqEk=
Subject key identifier: A1:82:F8:3B:63:26:9B:7B:63:40:B0:EB:45:66:27:A8:3B:43:B5:05
Authority key identifier: 11:AC:33:67:8D:18:33:3C:FE:BD:49:89:2B:56:89:9E:27:EA:63:48
Certificate issuer: /CN=A919DA26/serialNumber=11AC33678D18333CFEBD49892B56899E27EA6348
Certificate serial: 0215
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft
Manifest number: 0211
Signing time: Wed 05 Nov 2025 02:22:30 +0000
Manifest this update: Wed 05 Nov 2025 02:22:29 +0000
Manifest next update: Wed 12 Nov 2025 02:22:29 +0000
Files and hashes: 1: EawzZ40YMzz-vUmJK1aJnifqY0g.crl (hash: tZSWUni+sj6dmSfrFRGCUYJB1gIPy/YHJImOWdXKdLM=)
2: A7119C2E8FEE11ED83F3C543C4F9AE02.roa (hash: IC3AfPJAu9lJ+ZRFCon08xXeYgQkKIdq6UvBnBDHiaw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.crl
rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:22:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533 (0x215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DA26, serialNumber=11AC33678D18333CFEBD49892B56899E27EA6348
Validity
Not Before: Nov 5 02:22:29 2025 GMT
Not After : Nov 12 02:22:29 2025 GMT
Subject: CN=690ab4e5-203d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c5:b7:d1:98:73:26:d1:e1:09:62:9c:fc:32:
77:29:d1:66:52:28:d4:cd:0d:d7:7c:9a:2d:19:0f:
ab:c6:cd:19:1e:f4:40:01:e5:04:5f:2e:fb:fd:77:
84:4c:81:eb:59:f6:25:66:d0:d1:c3:21:ef:a6:f7:
54:9e:45:14:fb:04:f0:b3:6f:0e:8a:6f:27:a8:e0:
d8:e4:6e:30:30:f8:1b:8f:27:40:d2:8e:4e:69:a3:
77:07:55:f5:ff:f0:a1:44:78:e8:1f:f9:11:a6:04:
6e:a9:f0:d5:ed:3a:d2:e0:d0:88:f4:1f:71:1b:78:
c4:ab:73:db:d2:00:a8:75:90:08:c2:a9:e3:6e:63:
4f:f0:29:83:e2:95:58:c0:73:38:80:f1:46:a8:c4:
a9:44:5e:cf:d1:d9:fb:02:89:c7:50:39:e9:49:f8:
25:f5:5c:21:78:ca:ae:45:c4:29:18:96:10:27:7e:
a2:47:7b:d5:5e:6e:bd:71:9d:32:da:2e:ab:5b:4d:
a6:37:8b:d0:87:54:d7:4e:81:43:4c:e8:65:01:1b:
66:ce:0a:9d:3e:e7:63:e9:3e:6f:b4:66:35:45:cb:
da:09:31:ee:b7:01:94:35:a4:f9:e2:c1:f3:32:38:
56:40:ed:f7:b1:6b:ad:0a:29:80:49:00:77:0d:df:
86:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:82:F8:3B:63:26:9B:7B:63:40:B0:EB:45:66:27:A8:3B:43:B5:05
X509v3 Authority Key Identifier:
keyid:11:AC:33:67:8D:18:33:3C:FE:BD:49:89:2B:56:89:9E:27:EA:63:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:36:3b:9d:1a:b2:2f:5f:7e:70:3c:3b:3c:8f:77:b8:ca:75:
9b:a6:18:db:a1:73:20:98:24:24:33:b0:77:45:b8:b5:83:2f:
2b:51:2f:98:d1:56:4e:98:8c:06:31:17:16:65:87:22:69:94:
a2:c3:ac:90:4a:20:4b:37:31:e8:2c:9e:e2:13:81:e9:72:07:
d4:60:f9:14:2b:dc:7f:1f:cd:f3:e2:ff:72:07:76:81:19:57:
12:26:8a:73:0c:c0:90:a7:3c:f2:27:60:6f:a5:87:36:76:29:
b6:ee:2e:26:27:83:1a:3b:a0:ea:4a:19:50:9a:c2:0c:e3:22:
19:c7:74:7c:62:c2:fa:f7:26:1c:55:a4:3b:19:66:6c:ed:be:
a1:ae:82:61:3a:5d:bc:f9:25:7f:b6:d8:6f:b6:a2:a1:ef:db:
a3:98:57:d9:56:23:b6:06:be:cd:c2:9d:30:49:dc:fc:2c:39:
f8:0c:ee:09:e3:53:ae:68:ae:f6:ee:86:5e:09:bf:50:e0:20:
09:03:3c:1b:84:d6:d7:2e:9c:a9:fc:4c:67:e6:1a:58:d4:59:
bf:4e:f6:6f:fb:f8:07:ff:8f:3d:65:9d:30:c7:4e:47:88:a9:
57:e8:f2:58:dc:e3:ef:48:87:05:cb:33:65:34:aa:5c:b2:e9:
92:7b:44:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:26:05 2025 by rpki-client