
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
File: EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft (raw, json)
Hash identifier: sAuwf06s80SaG6YxGksCAbCgR6TCakxUuWRpudFpySY=
Subject key identifier: F9:A6:BA:9F:DD:13:F3:36:1C:85:05:8D:FE:B6:65:5B:51:B9:F1:6F
Authority key identifier: 12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75
Certificate issuer: /CN=A91AB72F/serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
Manifest number: EF
Signing time: Thu 23 Oct 2025 07:14:47 +0000
Manifest this update: Thu 23 Oct 2025 07:14:46 +0000
Manifest next update: Thu 30 Oct 2025 07:14:46 +0000
Files and hashes: 1: EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl (hash: 0M2VUa/jszslJ/9ysB756h2fCcfTq4Wxq+yJC3FYrrM=)
2: 79F48DAAED0711EFA7332931C4F9AE02.roa (hash: GLbMFy1JbyAVM7u4jQAEv8xQTj/rbFbdkkf2ZQWfsOQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl
rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 07:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB72F, serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375
Validity
Not Before: Oct 23 07:14:46 2025 GMT
Not After : Oct 30 07:14:46 2025 GMT
Subject: CN=68f9d5e6-72ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d5:ff:c3:e2:a0:32:77:38:6f:52:d7:6b:57:
bc:0c:e3:2e:bf:85:b0:e2:c5:dc:0b:bf:31:12:35:
9f:86:c6:3b:d2:c3:4d:99:a0:1e:ca:0e:92:12:06:
ab:9a:54:ae:1e:ce:00:b3:1c:9b:18:0a:27:92:3f:
2f:b6:01:80:15:1a:e8:5b:2a:89:32:9f:ee:fc:22:
25:ed:67:b3:4b:80:44:47:9a:92:38:cf:fe:14:59:
47:10:81:61:85:c8:cd:6c:da:ae:f1:93:6e:56:63:
d4:f2:e3:14:0b:14:6e:d6:ca:07:42:81:16:16:97:
2a:68:df:de:dc:21:67:25:30:2d:8b:25:7d:66:df:
4c:65:4f:c7:db:73:6a:25:83:af:78:c0:24:4b:17:
25:15:0b:66:75:64:e8:bd:07:d6:70:99:04:87:4b:
b8:53:92:57:63:84:c4:e7:50:89:eb:e9:e2:6b:4d:
0d:59:9d:e9:f2:de:f0:b6:1c:e7:d3:16:6c:7d:51:
2c:b0:1c:18:62:38:62:fc:f5:ff:4e:48:b1:06:c0:
51:43:ae:b2:aa:d6:0a:89:1a:97:94:a8:ac:3e:64:
a5:d8:30:1f:be:d7:82:cb:98:ce:6c:29:0e:fb:7d:
aa:84:4e:9d:4a:34:a0:af:5a:86:2e:40:66:98:5f:
23:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A6:BA:9F:DD:13:F3:36:1C:85:05:8D:FE:B6:65:5B:51:B9:F1:6F
X509v3 Authority Key Identifier:
keyid:12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:69:87:a1:a8:92:f9:6d:d2:bb:bd:91:c4:4f:ee:8b:ba:1b:
6e:97:3a:4a:e2:1a:bc:95:62:38:7b:fe:a6:68:63:9d:9c:14:
a8:88:91:0c:d9:ac:15:73:3d:b7:ab:62:d4:fe:35:bc:2e:ad:
97:7d:48:a8:80:8e:7b:06:42:2f:2d:11:c9:aa:c9:dd:40:9d:
19:8a:2c:7d:06:4e:47:b5:56:84:8f:8b:1d:ab:73:e1:37:e4:
5a:03:2a:4f:df:3b:75:55:c7:45:61:26:ed:b4:7d:89:ae:fb:
ce:93:7b:7f:30:09:6c:1c:91:f4:c1:be:87:9e:90:24:7f:bc:
83:ab:49:69:7a:52:26:8c:21:dd:f7:f6:3b:3c:20:61:a8:7c:
3c:5c:2a:34:8c:30:6b:8c:12:5a:62:9a:bb:0c:4c:63:b1:3b:
9e:b9:03:20:00:13:b5:42:97:42:ba:03:f0:a6:8c:86:d7:bd:
77:d7:ca:e5:03:95:83:6f:b2:89:3b:97:6f:dd:ff:68:71:d8:
92:76:08:1c:94:6c:12:dd:c9:a5:0b:98:ff:7e:07:78:75:ef:
09:c7:25:a7:48:d9:a3:1f:21:0f:84:5a:6a:a1:7b:2b:e8:25:
bf:44:41:a7:a7:18:3c:97:4a:5b:27:ed:ff:85:39:1a:ca:d0:
d9:6f:e5:9e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUI3MkYxMTAvBgNVBAUTKDEyNDQ3ODVENDBDNUVDNThERkM0QTMyODU0MEYxQjM5
M0RFQTIzNzUwHhcNMjUxMDIzMDcxNDQ2WhcNMjUxMDMwMDcxNDQ2WjAYMRYwFAYD
VQQDEw02OGY5ZDVlNi03MmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp9X/w+KgMnc4b1LXa1e8DOMuv4Ww4sXcC78xEjWfhsY70sNNmaAeyg6SEgar
mlSuHs4AsxybGAonkj8vtgGAFRroWyqJMp/u/CIl7WezS4BER5qSOM/+FFlHEIFh
hcjNbNqu8ZNuVmPU8uMUCxRu1soHQoEWFpcqaN/e3CFnJTAtiyV9Zt9MZU/H23Nq
JYOveMAkSxclFQtmdWTovQfWcJkEh0u4U5JXY4TE51CJ6+nia00NWZ3p8t7wthzn
0xZsfVEssBwYYjhi/PX/TkixBsBRQ66yqtYKiRqXlKisPmSl2DAfvteCy5jObCkO
+32qhE6dSjSgr1qGLkBmmF8j9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmmup/d
E/M2HIUFjf62ZVtRufFvMB8GA1UdIwQYMBaAFBJEeF1AxexY38SjKFQPGzk96iN1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjcyRi8yRkI0OUIzRTQz
RDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdGamZ4S01vVkE4Yk9UM3FJ
M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VrUjRYVURGN0ZqZnhLTW9WQThiT1QzcUkzVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjcyRi8yRkI0OUIzRTQzRDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdG
amZ4S01vVkE4Yk9UM3FJM1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAyaYehqJL5bdK7vZHET+6LuhtulzpK4hq8lWI4e/6maGOdnBSoiJEM
2awVcz23q2LU/jW8Lq2XfUiogI57BkIvLRHJqsndQJ0Ziix9Bk5HtVaEj4sdq3Ph
N+RaAypP3zt1VcdFYSbttH2JrvvOk3t/MAlsHJH0wb6HnpAkf7yDq0lpelImjCHd
9/Y7PCBhqHw8XCo0jDBrjBJaYpq7DExjsTueuQMgABO1QpdCugPwpoyG171318rl
A5WDb7KJO5dv3f9ocdiSdggclGwS3cmlC5j/fgd4de8JxyWnSNmjHyEPhFpqoXsr
6CW/REGnpxg8l0pbJ+3/hTkaytDZb+We
-----END CERTIFICATE-----
Generated at Fri Oct 24 06:10:44 2025 by rpki-client