
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
File: EEjCfhFLkRMVXq68kL7G3YD4xss.mft (raw, json)
Hash identifier: Av78xNYO4vLkLEKef4XIhlb/HZ7UU7vqwNZC92usMwY=
Subject key identifier: 6A:02:AE:56:E3:E9:02:1A:AA:C6:E7:A5:7D:9C:38:F6:CA:AC:DD:49
Authority key identifier: 10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB
Certificate issuer: /CN=A919E08E/serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB
Certificate serial: 069C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
Manifest number: 0697
Signing time: Tue 04 Nov 2025 22:25:54 +0000
Manifest this update: Tue 04 Nov 2025 22:25:54 +0000
Manifest next update: Tue 11 Nov 2025 22:25:54 +0000
Files and hashes: 1: EEjCfhFLkRMVXq68kL7G3YD4xss.crl (hash: HiLkmMg69rHaISyzhGIiwKJQLQQOWB4DNz0YxC7kh2c=)
2: 5F506D7C8C7911EBB7E88620C4F9AE02.roa (hash: AgY8IbFur1Q4oa6eGF7ycAtrRQlqnrORaZ4AABeYzt4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl
rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:25:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1692 (0x69c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E08E, serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB
Validity
Not Before: Nov 4 22:25:54 2025 GMT
Not After : Nov 11 22:25:54 2025 GMT
Subject: CN=690a7d72-c775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:45:65:cf:f9:4a:8b:0e:92:0e:f3:12:4d:ec:
58:e6:50:78:09:e5:89:60:1a:36:ce:0a:e2:10:f3:
64:4e:c9:4d:f7:03:ce:de:29:9e:8e:10:c7:39:7a:
72:3a:27:de:73:48:a6:7c:bb:eb:7e:dc:35:82:67:
82:94:86:03:a0:25:ca:20:f9:1e:bc:ab:83:18:63:
49:93:cc:fb:34:a3:b5:de:27:27:d0:e7:66:2b:0e:
b0:f7:38:af:5b:ce:a0:41:9b:94:ef:b2:aa:a7:2f:
1d:1c:76:0b:05:ab:43:7c:b2:3b:80:97:a1:84:ba:
ff:bf:63:4b:fe:df:ac:f9:76:55:8d:92:3a:8c:ae:
cc:bb:da:01:96:fb:80:9f:23:d2:13:d8:c5:8f:0f:
29:fd:c1:a9:2b:2d:4f:21:94:75:d0:63:09:32:f1:
22:99:96:fe:94:4b:5b:73:36:7b:94:19:7c:3d:64:
b1:16:d2:30:e1:b4:30:dc:6c:5b:f7:3a:f7:15:0c:
f8:38:c1:59:c9:1a:f9:38:af:60:8a:3d:cc:7e:08:
3c:4a:05:da:33:fd:3a:fd:89:1b:89:f9:d3:88:b3:
a4:fa:ca:e9:48:18:dc:93:83:3b:1b:87:53:10:34:
b0:7e:15:9d:8a:97:51:3e:88:f8:01:20:70:a3:50:
c9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:02:AE:56:E3:E9:02:1A:AA:C6:E7:A5:7D:9C:38:F6:CA:AC:DD:49
X509v3 Authority Key Identifier:
keyid:10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:1a:1b:d2:cc:e6:0b:86:e1:01:41:c3:64:ca:bf:39:6e:6e:
c8:fe:41:c1:97:70:b9:4a:a5:db:17:fc:ed:c2:a9:11:75:9b:
56:bd:75:74:4d:fb:01:8e:4f:af:68:31:26:50:db:e1:a9:d5:
86:42:a7:58:28:82:03:cc:7c:90:41:c1:a1:04:0a:48:ab:30:
c4:30:a2:b9:4d:be:ae:bd:00:d5:86:12:e7:73:33:4e:e3:cc:
95:fd:63:84:ef:4b:3b:aa:36:c2:30:51:1a:eb:13:0a:5f:f0:
b7:48:67:89:64:97:af:b7:53:ea:05:78:61:d1:ab:8e:79:80:
43:cd:bc:3b:40:cc:11:69:3b:07:87:0f:54:10:fd:b4:05:e8:
d4:c7:45:6f:e4:91:cc:34:fe:67:fd:be:5c:56:05:dd:f8:fe:
be:43:15:c8:a7:7c:7f:06:4b:e3:52:85:1e:96:21:d4:7d:39:
cb:8c:23:c0:84:f4:a2:7f:ea:db:13:da:d5:58:69:35:3d:9b:
9e:15:d5:42:3c:de:08:38:4c:b3:29:31:d6:c0:b0:64:14:64:
a8:b2:45:94:cf:07:ea:85:60:09:b8:57:3d:dd:7a:21:78:6a:
be:e8:29:78:0b:f5:14:42:96:72:86:4f:71:a4:ca:e6:53:a6:
be:b8:d6:00
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUUwOEUxMTAvBgNVBAUTKDEwNDhDMjdFMTE0QjkxMTMxNTVFQUVCQzkwQkVDNkRE
ODBGOEM2Q0IwHhcNMjUxMTA0MjIyNTU0WhcNMjUxMTExMjIyNTU0WjAYMRYwFAYD
VQQDEw02OTBhN2Q3Mi1jNzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx0Vlz/lKiw6SDvMSTexY5lB4CeWJYBo2zgriEPNkTslN9wPO3imejhDHOXpy
Oifec0imfLvrftw1gmeClIYDoCXKIPkevKuDGGNJk8z7NKO13icn0OdmKw6w9ziv
W86gQZuU77Kqpy8dHHYLBatDfLI7gJehhLr/v2NL/t+s+XZVjZI6jK7Mu9oBlvuA
nyPSE9jFjw8p/cGpKy1PIZR10GMJMvEimZb+lEtbczZ7lBl8PWSxFtIw4bQw3Gxb
9zr3FQz4OMFZyRr5OK9gij3Mfgg8SgXaM/06/YkbifnTiLOk+srpSBjck4M7G4dT
EDSwfhWdipdRPoj4ASBwo1DJNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoCrlbj
6QIaqsbnpX2cOPbKrN1JMB8GA1UdIwQYMBaAFBBIwn4RS5ETFV6uvJC+xt2A+MbL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTA4RS9FMUNBNTg0NjhD
NzcxMUVCODg1QjMxMUZDNEY5QUUwMi9FRWpDZmhGTGtSTVZYcTY4a0w3RzNZRDR4
c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VFakNmaEZMa1JNVlhxNjhrTDdHM1lENHhzcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RTA4RS9FMUNBNTg0NjhDNzcxMUVCODg1QjMxMUZDNEY5QUUwMi9FRWpDZmhGTGtS
TVZYcTY4a0w3RzNZRDR4c3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDQGhvSzOYLhuEBQcNkyr85bm7I/kHBl3C5SqXbF/ztwqkRdZtWvXV0
TfsBjk+vaDEmUNvhqdWGQqdYKIIDzHyQQcGhBApIqzDEMKK5Tb6uvQDVhhLnczNO
48yV/WOE70s7qjbCMFEa6xMKX/C3SGeJZJevt1PqBXhh0auOeYBDzbw7QMwRaTsH
hw9UEP20BejUx0Vv5JHMNP5n/b5cVgXd+P6+QxXIp3x/BkvjUoUeliHUfTnLjCPA
hPSif+rbE9rVWGk1PZueFdVCPN4IOEyzKTHWwLBkFGSoskWUzwfqhWAJuFc93Xoh
eGq+6Cl4C/UUQpZyhk9xpMrmU6a+uNYA
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:22:54 2025 by rpki-client