
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.mft
File: eDYu-f45SW72Wzb4O2aYr5MI36s.mft (raw, json)
Hash identifier: uCknOk+JaZW2AlABKrQgv+496LamNqsIZwxmLpG0dek=
Subject key identifier: AF:81:5E:20:02:6A:71:AB:48:7D:B9:F5:C4:57:52:55:F5:38:2B:17
Authority key identifier: 78:36:2E:F9:FE:39:49:6E:F6:5B:36:F8:3B:66:98:AF:93:08:DF:AB
Certificate issuer: /CN=A91CE7A4/serialNumber=78362EF9FE39496EF65B36F83B6698AF9308DFAB
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.mft
Manifest number: 9C
Signing time: Mon 03 Nov 2025 06:22:12 +0000
Manifest this update: Mon 03 Nov 2025 06:22:11 +0000
Manifest next update: Mon 10 Nov 2025 06:22:11 +0000
Files and hashes: 1: eDYu-f45SW72Wzb4O2aYr5MI36s.crl (hash: tulK8DtoGTirb4adVF4gfoUy0Qd4vdRME5nENtGVxnY=)
2: 44B43AAECC1011EFA5596A50C4F9AE02.roa (hash: uRW4bqoOWcKD9JjoYymAbjdIYpBJL8ZXTg4SH6smXUk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.crl
rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE7A4, serialNumber=78362EF9FE39496EF65B36F83B6698AF9308DFAB
Validity
Not Before: Nov 3 06:22:11 2025 GMT
Not After : Nov 10 06:22:11 2025 GMT
Subject: CN=69084a13-9289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2b:ba:9f:81:26:40:de:e7:c7:f6:d6:f0:38:
7a:ef:cd:70:ff:93:1a:67:d1:fe:63:52:ce:d9:0e:
a0:b1:3d:ea:5e:20:de:9d:11:a4:bd:43:6d:9c:c2:
ab:df:58:50:18:55:52:1e:b6:c7:20:ab:30:63:16:
fc:30:25:0f:c1:a2:15:dc:2e:4b:c7:36:8e:3a:9e:
b1:82:c1:c3:dc:d5:9e:e4:d3:48:17:e9:b6:fa:08:
93:e4:75:fe:3a:0e:ec:d2:02:fc:54:91:a8:bb:e8:
b5:87:e3:2e:64:52:f0:ab:2b:26:3b:32:4f:e7:5b:
1f:0c:d8:4f:e7:97:fa:21:ed:86:b2:49:0b:0c:e7:
07:7f:8d:9c:17:7f:10:f2:37:b2:56:86:98:cc:a7:
7c:98:5b:a9:7d:1e:eb:5f:d0:a9:b5:94:39:95:ab:
4f:ea:56:67:fc:94:f2:e2:fe:21:1e:a2:32:2e:88:
15:09:45:30:34:74:d3:72:ca:13:56:84:bd:cb:01:
c4:1a:90:67:49:15:d9:2d:ed:07:6b:1e:3d:1f:57:
26:64:b3:0b:fb:e4:2d:0a:6e:da:06:d4:d4:64:3e:
5b:43:70:f0:f6:bd:7c:51:21:8f:67:de:46:4e:57:
7a:14:21:37:16:6b:c6:ba:f2:78:4e:d9:bc:1b:d5:
4f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:81:5E:20:02:6A:71:AB:48:7D:B9:F5:C4:57:52:55:F5:38:2B:17
X509v3 Authority Key Identifier:
keyid:78:36:2E:F9:FE:39:49:6E:F6:5B:36:F8:3B:66:98:AF:93:08:DF:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ea:25:e5:4d:e6:1e:f9:ed:39:c9:94:30:44:63:9c:93:69:
62:ad:b4:5f:ee:e9:51:1d:8c:2e:42:42:a3:c3:bc:91:55:1a:
ec:44:d8:09:f9:0b:af:47:c6:0d:e8:91:ae:d0:b4:7c:91:72:
04:6a:f0:65:14:f0:3b:f9:b8:07:aa:6c:20:3a:3d:19:e6:2c:
7a:01:65:b9:06:53:bd:d1:aa:e5:f9:d0:31:30:5a:ac:7c:17:
02:1e:cc:01:a7:d8:39:70:25:63:22:7a:34:b9:08:5d:d7:27:
58:51:54:a0:cd:35:a2:fb:67:8f:dc:7f:9e:0c:3e:2e:c7:98:
e9:92:64:de:99:f9:7f:9f:6b:b3:6a:76:59:c4:ec:f6:3d:19:
8c:57:31:d7:c5:15:3e:35:4f:3a:1d:f0:bd:7a:c8:91:58:15:
fe:95:e1:77:b7:ae:85:0a:62:52:63:8a:b7:fd:0f:97:3c:9e:
df:af:2c:4c:72:1e:36:2b:ec:02:c2:e1:3c:e7:e6:18:44:55:
8e:6e:72:5a:4e:c2:41:d8:61:47:b1:66:0d:bb:c1:e7:e9:9e:
7f:34:59:78:a0:8d:c4:29:dd:a5:90:f6:0e:be:6e:2d:d7:e9:
ff:08:17:3d:d3:2e:01:c3:ae:1c:6c:81:0e:d3:17:d1:a8:94:
e4:72:71:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:09:57 2025 by rpki-client