
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft
File: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft (raw, json)
Hash identifier: D04pj/NBXxsJmKsHqa9At19Z19sfdGl8371KSO34iC0=
Subject key identifier: FE:E9:CB:77:A6:10:7C:B9:2B:BD:B1:AF:C7:EE:13:52:27:51:79:B6
Authority key identifier: 7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60
Certificate issuer: /CN=A91A5DC1/serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160
Certificate serial: 0755
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft
Manifest number: 0755
Signing time: Sun 02 Nov 2025 20:26:30 +0000
Manifest this update: Sun 02 Nov 2025 20:26:29 +0000
Manifest next update: Sun 09 Nov 2025 20:26:29 +0000
Files and hashes: 1: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl (hash: UkJivHFgv4SI2HuV2Ej3iuGm3YPSUd3xrDls6bixTN0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl
rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 20:26:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1877 (0x755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5DC1, serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160
Validity
Not Before: Nov 2 20:26:29 2025 GMT
Not After : Nov 9 20:26:29 2025 GMT
Subject: CN=6907be75-d7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:f0:12:cc:3c:9c:98:d5:11:63:2d:7f:73:
be:ac:9c:13:ba:88:1f:e8:eb:23:4f:5b:74:ec:c2:
28:40:7e:7e:8d:a8:56:a0:23:71:27:dc:e2:e4:14:
30:6c:3f:44:5a:22:76:d4:7d:69:01:d5:5a:cc:0e:
34:2a:f5:f8:9a:59:3e:6d:16:ef:2c:41:db:45:ea:
ba:c2:79:c4:19:20:3b:34:75:dd:3a:82:e8:1b:f0:
e3:c3:73:ea:28:9a:33:8c:95:9d:f7:5c:b7:2e:b3:
15:96:44:19:6c:b6:75:ec:c5:ac:4a:32:0c:cd:82:
51:0a:80:ea:fa:bf:f1:8d:d7:8e:88:b9:9e:b8:92:
22:17:e2:a8:b3:7e:95:7a:05:44:d0:6e:b2:e6:cb:
ac:aa:71:51:33:53:6c:b0:b5:3f:4a:1b:c6:e8:24:
b1:eb:df:16:13:34:9d:dd:8a:96:fd:f6:cb:b8:df:
22:83:be:7e:19:6e:17:0a:fa:ec:f8:24:75:24:80:
ba:d3:8a:7e:c3:b0:e6:75:b4:8f:eb:29:14:20:0c:
e1:3e:41:45:ad:9c:43:4e:39:6f:f2:be:53:38:77:
98:92:b7:b3:cb:39:11:d3:e8:78:ee:9b:04:ad:5c:
1b:67:ad:09:c6:9b:85:ad:64:7e:d0:c7:52:fe:f5:
78:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E9:CB:77:A6:10:7C:B9:2B:BD:B1:AF:C7:EE:13:52:27:51:79:B6
X509v3 Authority Key Identifier:
keyid:7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:06:25:d4:57:8a:43:38:d5:74:77:e4:b9:06:0e:47:ea:47:
45:33:98:3e:3f:fb:ec:08:9a:82:01:b8:26:86:d5:e0:42:ca:
bf:3e:a5:d6:88:9b:33:a0:fc:ed:9b:da:c6:81:e4:7b:70:c1:
ce:81:3f:e5:49:31:b8:d6:b2:ca:16:3a:6f:b4:6d:a7:b7:2b:
99:d5:d4:2f:f4:77:59:50:d8:58:58:c3:81:b8:25:f4:99:e1:
b9:17:c6:d4:01:f1:4a:0b:7b:5b:34:0f:58:ea:f9:ca:10:9a:
44:67:2d:c0:ad:d9:18:d4:1f:0d:8b:ab:38:2d:f1:15:52:61:
cd:a2:65:38:04:eb:dd:28:b3:79:be:a4:2b:89:eb:b6:e2:5c:
81:89:10:20:99:1d:2f:b2:09:fb:61:ed:91:d2:13:6b:8d:9e:
7f:c5:68:a3:36:26:ab:49:da:b1:96:12:1e:9d:88:b9:c2:a7:
43:4b:23:3b:f8:1f:6b:be:44:c0:0d:16:41:b4:61:ef:48:2e:
7a:0e:4b:22:e4:70:bc:13:94:9d:ea:69:49:5e:2a:7f:c4:75:
15:c6:2e:63:b7:f8:12:1d:df:65:38:54:60:12:be:ad:85:3f:
2d:4e:b6:97:6a:39:a5:9d:d2:f6:6e:fe:7a:17:40:d6:bc:1d:
e3:6a:db:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:19:13 2025 by rpki-client