
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft
File: Eb6TUALwKMF878tfClhoOZJbU0o.mft (raw, json)
Hash identifier: aZu7j0i2oNtC3IhS6qrIOSgHKPVvMS44XcZ5yNWPEyc=
Subject key identifier: 43:F7:F3:CF:F8:19:13:AC:61:86:62:7B:61:A9:F2:9F:79:C1:C9:41
Authority key identifier: 11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
Certificate issuer: /CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Certificate serial: 04EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft
Manifest number: 04CE
Signing time: Sun 02 Nov 2025 23:52:27 +0000
Manifest this update: Sun 02 Nov 2025 23:52:26 +0000
Manifest next update: Sun 09 Nov 2025 23:52:26 +0000
Files and hashes: 1: Eb6TUALwKMF878tfClhoOZJbU0o.crl (hash: jzY6i53yRGTS12gmlzhaHIgjVtLqRWviwPVC7Z3EvUk=)
2: 95C77970B7F011F0819F626AC4F9AE02.roa (hash: aYAV3Npfnc8/Nogg/Rmyz0rcZ3eG2tfsf8xKg2PjMmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl
rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 23:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1259 (0x4eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113066, serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Validity
Not Before: Nov 2 23:52:26 2025 GMT
Not After : Nov 9 23:52:26 2025 GMT
Subject: CN=6907eeba-c1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:16:39:d4:f1:57:08:70:80:fd:dc:fb:0e:
a3:7e:e8:b3:92:e3:3a:a3:92:e8:30:9d:e4:b9:a4:
ea:fc:1a:fd:94:b7:87:d2:4c:3e:ef:65:5a:0c:d2:
ff:bc:3b:3e:0b:95:6d:2e:47:67:f8:b6:0e:be:3e:
64:56:1b:2e:19:72:03:01:1a:80:9f:0c:ad:b2:7d:
7d:01:10:e1:fa:83:f0:b9:87:23:55:26:f3:f7:3e:
f1:b0:b3:bf:28:f2:2b:24:f9:71:28:ae:c6:a2:38:
ea:7f:e1:4f:40:d0:7e:75:5d:ca:e7:42:47:cc:ec:
dd:f6:a7:ec:ae:21:1b:4f:e7:89:b1:85:77:71:53:
08:f8:64:39:5a:68:a0:3a:84:7e:c2:5b:cf:fa:03:
29:04:18:11:9f:7d:72:4d:cd:b2:10:03:e5:bb:a6:
03:e9:ad:5b:5b:06:21:7b:42:05:4c:b0:c7:b1:eb:
97:fc:c6:3d:46:16:25:a5:46:37:a6:3a:22:ed:f1:
3c:85:45:17:f5:c4:19:83:13:5f:b8:3b:da:5f:a8:
e6:d9:1f:f4:04:53:6f:28:5e:8d:16:02:fa:1a:a8:
28:d4:55:5a:a9:c4:d2:28:8d:f1:89:45:7f:91:9e:
94:f8:fc:1c:64:c2:57:db:fd:14:23:75:42:bc:64:
cb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F7:F3:CF:F8:19:13:AC:61:86:62:7B:61:A9:F2:9F:79:C1:C9:41
X509v3 Authority Key Identifier:
keyid:11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:99:f2:69:2a:0a:b6:65:e8:6b:40:e0:21:70:e8:58:ba:d1:
a8:5a:21:56:c0:ab:a1:07:ab:f5:85:4c:6c:56:e6:16:41:91:
e1:eb:36:ed:ac:f9:99:10:bc:cc:b1:e6:ee:55:0e:e8:bf:48:
cc:7d:c4:ca:1d:ad:39:a6:26:11:43:2d:56:4d:39:e2:35:9f:
1d:90:bc:bc:7d:07:0b:58:7b:58:49:14:cf:3e:9e:d2:32:be:
ef:75:68:f1:29:f8:e4:92:27:15:36:b2:48:c6:f4:40:22:09:
7f:73:48:4d:22:cd:a6:58:06:bd:19:cc:27:e1:e0:2e:68:21:
25:6a:b5:46:9c:5f:fc:73:d3:95:3a:61:d7:f6:73:22:91:0a:
98:c1:b2:d6:7b:2e:1d:89:96:13:98:37:67:dd:c5:5a:9b:00:
08:1f:7d:b3:01:9f:bb:51:2d:36:1b:1e:90:6b:22:c3:5a:78:
a3:25:06:a7:fd:06:be:0d:bc:f3:dc:a2:66:61:ce:e8:8c:1f:
e5:9a:94:e9:5e:73:47:91:01:b2:41:16:5e:db:04:d5:1e:e6:
36:2b:66:81:6e:ec:5d:68:5b:ab:4b:45:55:b8:2e:1c:63:6d:
b4:31:4b:1e:61:70:15:0a:87:5a:09:26:44:eb:dd:85:62:03:
c4:44:f7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:24:35 2025 by rpki-client