
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
File: e1ZuSGesy4G3S6nWZiJObARfDCc.mft (raw, json)
Hash identifier: wVrh2MJ6oE5gkdnRabUy2oLspJVJAywEUbQkEc5Vh8I=
Subject key identifier: 72:DD:A9:4A:5D:96:3B:AC:83:B3:F8:E2:13:56:94:58:F6:6A:D8:84
Authority key identifier: 7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27
Certificate issuer: /CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27
Certificate serial: 03E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
Manifest number: 03DC
Signing time: Mon 27 Oct 2025 01:52:16 +0000
Manifest this update: Mon 27 Oct 2025 01:52:15 +0000
Manifest next update: Mon 03 Nov 2025 01:52:15 +0000
Files and hashes: 1: e1ZuSGesy4G3S6nWZiJObARfDCc.crl (hash: hffQN8l+AcAxkpxSSUiSKuIpgDsAUNGNKPmzRClCd6M=)
2: 6808AEBA278511F09AB25F80C4F9AE02.roa (hash: wCf4g6o5WScb6RGG49PPoBi+hb01eShp6RghG0g0MJ8=)
3: F85D97D8278411F0B46E4A7FC4F9AE02.roa (hash: gNV6yCoYOHvCUxwy2Tl0FTscxDv6xhq7lZUCCqRtA/I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl
rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 01:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 995 (0x3e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2DFB, serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27
Validity
Not Before: Oct 27 01:52:15 2025 GMT
Not After : Nov 3 01:52:15 2025 GMT
Subject: CN=68fed04f-07bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e2:da:2e:ae:c8:98:97:bc:5d:76:68:1f:0a:
b1:53:a4:ea:f9:3a:37:8b:2d:6b:a6:d9:26:11:76:
c6:75:de:bc:ec:ef:7f:82:b8:0c:d0:35:2e:99:a1:
7c:a5:ae:dc:52:38:ca:86:9d:04:00:60:bf:e3:a8:
07:52:07:d0:39:09:9f:6d:6f:62:e1:3c:8c:6b:02:
6e:d1:ce:10:66:8f:03:18:29:32:e3:58:98:29:b9:
fb:d1:64:de:69:68:5e:60:ff:3c:ac:c4:12:0d:30:
4c:82:cf:78:a4:ae:30:e0:55:a2:09:1e:eb:d1:e8:
35:a4:9b:06:6c:21:03:82:f8:c0:0a:6f:19:7c:0e:
3a:43:90:aa:c2:6d:33:92:f7:5e:33:8a:8f:3c:80:
22:70:2e:4e:91:e5:84:6d:bc:5b:bd:7d:fb:89:63:
c9:bb:1f:e4:6e:5e:63:ad:80:b1:53:e5:65:fd:09:
2e:df:09:c2:fc:62:ff:ba:9a:09:57:8e:86:e9:92:
a6:91:b2:da:30:bd:94:7d:3a:e5:79:fd:6a:e5:8f:
38:fb:b8:5d:a8:59:23:05:1f:54:c2:54:9e:b2:a4:
93:a5:c1:eb:ed:69:8b:41:b4:97:88:67:74:74:64:
7c:cc:b1:a4:e8:d6:e1:a4:54:da:d9:38:34:1b:27:
4a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DD:A9:4A:5D:96:3B:AC:83:B3:F8:E2:13:56:94:58:F6:6A:D8:84
X509v3 Authority Key Identifier:
keyid:7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:27:98:3f:de:92:82:d0:a9:ef:7e:b7:17:11:9b:49:19:e2:
28:09:bb:81:9e:53:63:ec:8e:6c:40:98:db:7c:49:ee:b9:dc:
51:18:41:b8:c7:bb:ea:a2:26:a9:59:17:b4:c2:b4:ae:c4:df:
e8:15:d5:76:59:59:f7:17:b5:ed:4d:bb:9c:09:de:72:43:65:
97:98:a2:af:6c:a5:da:a9:ab:5c:d8:ef:e5:c2:0f:93:e4:35:
b9:14:2e:fb:26:74:7f:f5:cc:4f:14:77:83:a8:f0:41:fa:7b:
7b:03:40:97:8f:ad:d7:ae:25:fc:b8:ff:4a:c3:82:38:3b:4b:
66:46:d4:ac:4b:bd:77:ea:dd:36:14:08:f8:8b:73:c8:0d:63:
df:64:3a:d5:cd:f1:35:e0:2e:80:0c:75:96:34:0d:ab:75:bf:
b3:64:58:bb:e0:9e:67:17:68:21:9e:41:36:e6:78:e9:59:f6:
b8:84:36:48:34:6e:54:44:32:c0:68:78:c0:26:31:ee:b4:bc:
c2:50:13:00:80:c7:0e:d9:70:3d:26:8b:ca:5c:97:86:ba:56:
0d:dc:0d:49:db:67:b6:ba:b3:4d:64:3c:63:1a:d8:f1:4d:54:
8b:85:9d:55:83:fd:ac:53:ac:14:4f:d2:90:2f:a9:c5:a4:eb:
c9:e8:75:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:57:44 2025 by rpki-client