
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft
File: eameEjE6dnHw2VkHDVD_70tSVSU.mft (raw, json)
Hash identifier: aSXRc2S//7fNgNCuUMZYk0RagnOlrFkIIt9156LW+yE=
Subject key identifier: 51:8C:C5:A9:10:96:C7:D5:AB:22:CD:0A:EB:31:42:2C:41:3F:93:07
Authority key identifier: 79:A9:9E:12:31:3A:76:71:F0:D9:59:07:0D:50:FF:EF:4B:52:55:25
Certificate issuer: /CN=A91E3015/serialNumber=79A99E12313A7671F0D959070D50FFEF4B525525
Certificate serial: 0110
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eameEjE6dnHw2VkHDVD_70tSVSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft
Manifest number: 010E
Signing time: Wed 05 Nov 2025 05:03:47 +0000
Manifest this update: Wed 05 Nov 2025 05:03:47 +0000
Manifest next update: Wed 12 Nov 2025 05:03:47 +0000
Files and hashes: 1: eameEjE6dnHw2VkHDVD_70tSVSU.crl (hash: Mpp/65kdBLYgy/xScKr948bo8D0UNGNMJUcyqQFKOGU=)
2: 732ACDFA1C7D11EF95F4D214C4F9AE02.roa (hash: lDKMw2Uv+LSmUmslKOyptDJ98K3bb4g5+88hD0kPwgI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.crl
rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eameEjE6dnHw2VkHDVD_70tSVSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3015, serialNumber=79A99E12313A7671F0D959070D50FFEF4B525525
Validity
Not Before: Nov 5 05:03:47 2025 GMT
Not After : Nov 12 05:03:47 2025 GMT
Subject: CN=690adab3-6295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e0:15:1a:de:ef:2f:04:6d:a0:e4:51:ec:ab:
b2:8f:55:ce:c2:4e:f6:ea:9e:56:1b:31:e0:b0:ce:
da:0f:1d:21:7b:0a:13:9d:df:4f:c7:3c:ce:9a:7f:
0d:7a:fc:41:d5:c7:47:b5:df:07:ac:98:8c:b0:78:
fb:4d:7e:af:1e:f3:3c:8f:d6:4e:fd:7f:ab:28:63:
60:c4:75:86:cb:eb:26:8c:20:8e:ea:d7:16:ce:fe:
db:8b:85:65:54:61:81:2d:b9:3a:67:b3:ba:35:35:
1e:0d:18:a7:ce:e1:83:5e:cf:b3:4d:6b:06:97:b7:
24:12:db:f2:62:8f:3a:bf:8c:3c:d4:42:73:b7:b3:
b2:d4:14:05:26:62:4a:ce:d9:fc:4d:9c:f9:5f:7d:
4a:c6:17:95:2f:26:10:c8:cc:28:3f:0c:52:32:1b:
e3:ea:54:0f:0a:06:14:1d:27:71:19:83:db:bd:f3:
97:e9:e9:ae:cb:a1:2c:d0:d4:c5:4d:56:94:09:67:
db:78:5f:8f:27:67:b6:cb:ae:0f:a5:41:af:8c:d5:
a8:37:e6:37:f0:58:2b:20:e8:f7:75:eb:8c:33:01:
25:f2:d0:4c:ca:83:3e:e6:99:9f:b4:9d:27:97:d7:
e0:95:d5:48:15:bc:26:4a:27:29:10:f8:da:a4:6f:
3e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8C:C5:A9:10:96:C7:D5:AB:22:CD:0A:EB:31:42:2C:41:3F:93:07
X509v3 Authority Key Identifier:
keyid:79:A9:9E:12:31:3A:76:71:F0:D9:59:07:0D:50:FF:EF:4B:52:55:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eameEjE6dnHw2VkHDVD_70tSVSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:88:7c:fc:42:29:63:69:54:da:5d:f5:e6:b9:25:c5:8e:0e:
80:26:ee:25:45:be:f0:d7:ab:fa:a5:db:be:e5:7b:71:18:94:
0c:43:2e:35:71:b0:d4:28:c2:2c:02:ad:cb:f4:d4:e4:55:b9:
5c:56:9b:1b:72:37:da:d8:fb:c1:1c:17:e1:f4:a9:ae:a3:aa:
6b:52:05:02:af:af:e3:0d:80:e7:c7:25:90:ae:95:0c:ed:57:
16:ed:64:2b:13:40:b7:92:e9:25:70:4b:04:a2:ea:dd:6e:ba:
83:9b:ee:46:da:13:8a:d3:ba:63:db:5d:c1:bb:f6:96:b2:e4:
e1:35:83:b8:d4:9c:e1:36:2b:9f:44:a0:32:3f:38:53:8e:d6:
ed:e2:46:c1:ea:b8:cd:74:b4:31:b1:8d:68:c5:ba:a6:d9:4f:
1c:07:d2:88:ba:7b:72:cc:1a:78:13:23:be:fb:33:6f:11:e6:
a4:12:8b:96:cb:f9:38:67:7e:60:f0:56:c5:23:35:51:32:7f:
38:6d:08:3a:37:8d:68:c6:8f:8b:f9:54:af:77:5e:17:db:53:
90:39:e2:50:53:2f:b4:3f:5b:3c:83:a7:00:3c:0e:69:14:bc:
ec:0a:2c:4e:f8:17:f9:77:96:bc:88:10:72:93:01:7f:cb:83:
1e:7f:f2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:02:27 2025 by rpki-client