
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
File: ed1SqjF1MIEm0XSGpygF-w4bqlg.mft (raw, json)
Hash identifier: oT6ym0Im6PgdldtwXGZ1efs8ui5TlopLflxlMhvlB24=
Subject key identifier: 71:D7:CD:07:EA:C7:CF:85:EB:48:FA:8C:18:D4:9B:64:64:E6:72:F2
Authority key identifier: 79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58
Certificate issuer: /CN=A91CB0E2/serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58
Certificate serial: 0794
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
Manifest number: 078D
Signing time: Tue 04 Nov 2025 21:35:20 +0000
Manifest this update: Tue 04 Nov 2025 21:35:19 +0000
Manifest next update: Tue 11 Nov 2025 21:35:19 +0000
Files and hashes: 1: ed1SqjF1MIEm0XSGpygF-w4bqlg.crl (hash: 8II3rQydlmO8nGkB/ywgm52pj739mf4TPDW2z4URDxM=)
2: 6B5C86022D6811EB86D96027C4F9AE02.roa (hash: t3hqNdqM2MD3ZAVu8FNoGwxlm5G0gcPJniuKJXcYFWI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl
rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1940 (0x794)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB0E2, serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58
Validity
Not Before: Nov 4 21:35:19 2025 GMT
Not After : Nov 11 21:35:19 2025 GMT
Subject: CN=690a7197-5e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a9:54:8a:cd:17:b9:cd:1c:d3:be:a0:00:52:
3d:cd:d5:9f:58:ab:6f:6f:fd:c1:00:7b:10:51:01:
3f:b8:07:71:71:c8:7f:60:2b:7a:10:9c:ea:d7:67:
e8:1a:f6:55:19:de:bf:4e:93:0d:b9:9d:68:ac:fd:
9d:b3:f6:c4:b8:0d:8f:9e:8a:7b:40:1a:c8:e4:a6:
4d:02:c4:ab:f5:88:ab:fd:ae:e8:2f:6b:ea:73:68:
b4:3f:f7:0b:dc:52:aa:1b:c4:ad:72:14:00:87:5b:
5f:41:d7:59:c9:a4:a4:76:c0:77:48:45:14:45:4a:
c0:a8:00:df:70:e4:2d:a9:6a:a0:18:65:58:f6:db:
fd:73:25:eb:d1:aa:cd:41:10:bd:ee:73:ac:d5:65:
19:53:42:93:8c:80:ae:25:a7:c9:69:71:9c:16:1d:
78:d5:66:5b:c6:f6:56:d3:3e:5a:21:9e:b3:5c:8b:
14:89:82:ac:7b:0d:79:06:b6:aa:d3:28:86:c8:b8:
b2:b5:6e:f4:ef:8f:24:8c:53:6f:6e:fa:a0:c8:3d:
81:36:90:e4:1d:58:09:f6:35:47:a9:65:66:51:79:
08:a6:1e:09:2f:0e:8e:26:26:24:1a:98:f2:30:7d:
fc:e3:15:b3:2a:2b:f1:95:be:c9:d0:0d:22:83:e4:
9a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D7:CD:07:EA:C7:CF:85:EB:48:FA:8C:18:D4:9B:64:64:E6:72:F2
X509v3 Authority Key Identifier:
keyid:79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5d:75:78:cf:8a:5a:96:41:cd:af:5c:5a:1f:e9:ef:9c:70:
c0:6d:cc:0e:c4:c3:1c:7b:8a:0b:39:1b:fa:04:4f:c3:cc:e0:
fe:5e:65:28:1a:a3:10:56:d7:71:bb:1a:b7:18:27:19:64:a4:
17:2b:44:1e:bd:f4:35:66:53:70:71:a3:78:14:0c:ec:9d:cb:
54:00:d8:ae:9d:90:32:60:8e:d4:33:c5:b6:5e:f5:15:e4:e3:
7a:69:d3:e9:36:20:aa:ad:d7:a3:a9:02:07:6c:6f:81:eb:62:
16:7c:8b:41:6d:3e:24:98:8f:91:de:2d:5c:c3:44:89:f1:50:
17:40:53:31:81:ed:66:7c:53:83:dd:40:98:e6:9f:98:b9:a3:
9c:7b:52:62:99:cd:41:cf:ec:7c:bc:2d:85:b9:3c:f3:ac:04:
f5:c8:39:e3:36:08:09:99:97:60:28:6f:c0:89:78:72:ac:ab:
46:6e:8f:d5:f9:cf:a1:70:b1:a5:7a:1c:4b:1c:a9:bd:31:aa:
30:de:49:a0:b6:03:8c:1b:b3:8c:77:fa:7a:53:1d:13:e9:81:
3b:d4:30:0a:dd:79:04:6b:2d:91:f7:2f:3d:6b:a7:ed:d3:f3:
14:cf:d5:7f:e6:1f:bf:a5:99:ea:bd:ee:4a:11:3c:97:5c:c0:
7d:48:1a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:02:51 2025 by rpki-client