
$ rpki-client -vvf rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft
File: EclyfKUpLOXaXXC6iCvC1kP0EIU.mft (raw, json)
Hash identifier: aW+k8XoZTynf+T/IZUJVRfrBm0OwC/PBteN9kGcJeKk=
Subject key identifier: BD:75:1B:A5:06:A7:1D:33:C1:31:91:6F:30:38:DE:E2:BB:2F:F1:69
Authority key identifier: 11:C9:72:7C:A5:29:2C:E5:DA:5D:70:BA:88:2B:C2:D6:43:F4:10:85
Certificate issuer: /CN=A911849D/serialNumber=11C9727CA5292CE5DA5D70BA882BC2D643F41085
Certificate serial: 091E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft
Manifest number: 090D
Signing time: Tue 04 Nov 2025 20:24:05 +0000
Manifest this update: Tue 04 Nov 2025 20:24:04 +0000
Manifest next update: Tue 11 Nov 2025 20:24:04 +0000
Files and hashes: 1: EclyfKUpLOXaXXC6iCvC1kP0EIU.crl (hash: 23SxMo+yhBuef8Lb4DZzemHo9ke9pkJ3bvPrCjfbsG0=)
2: C2D236E6B70E11EAAE6CE049C4F9AE02.roa (hash: pLBLNv9Fb/TNHhGRqbBg8XhYWJCps7AirU8MPmkm88Y=)
3: 3AD34AA4B66F11EAAA29FB47C4F9AE02.roa (hash: tpF+Fo0/SMnG3Lj9IswvRitdr7I9rgpf5sDorql/H7Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.crl
rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2334 (0x91e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911849D, serialNumber=11C9727CA5292CE5DA5D70BA882BC2D643F41085
Validity
Not Before: Nov 4 20:24:04 2025 GMT
Not After : Nov 11 20:24:04 2025 GMT
Subject: CN=690a60e5-d109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:48:aa:de:0b:b8:1b:c1:8f:a2:eb:27:af:
fa:74:b4:b7:4c:26:ec:a3:2d:74:0f:d0:15:e1:ec:
3c:2d:cb:aa:72:13:3b:1e:7d:e4:f9:cc:0e:3c:35:
96:6a:1c:e4:0c:41:a7:42:eb:32:83:d6:09:c4:06:
b2:60:8b:62:f5:47:8a:d4:57:13:ce:92:1b:ba:1b:
9c:9d:36:cd:ba:20:56:f6:75:aa:7c:73:fe:1d:31:
a8:5b:ac:0d:99:0f:1c:38:f4:ba:4d:8b:c4:05:92:
2b:70:f6:92:a5:3b:c2:15:13:ee:84:3c:a3:a9:75:
d6:4d:01:69:6e:a9:cc:92:35:ef:93:3a:86:34:06:
7b:af:3b:7c:2e:04:06:4d:ad:1b:51:2a:64:3f:a8:
0f:8d:12:87:4a:63:e0:48:05:c5:2f:ec:b8:90:f1:
c0:39:59:0c:81:d3:d2:40:a3:0a:a0:05:f1:27:a6:
fb:e2:a0:2b:c7:38:56:5a:b4:7a:94:f0:18:06:4d:
11:36:66:c5:3b:77:7d:99:7a:91:6c:b9:68:55:96:
87:e7:aa:85:ff:75:f7:1f:6b:94:ea:e2:97:54:51:
c6:71:e4:e0:d3:d1:4b:dd:af:b7:5f:1e:81:b0:1c:
69:0b:a8:f3:ad:96:fa:6e:09:83:e0:31:50:3d:92:
39:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:75:1B:A5:06:A7:1D:33:C1:31:91:6F:30:38:DE:E2:BB:2F:F1:69
X509v3 Authority Key Identifier:
keyid:11:C9:72:7C:A5:29:2C:E5:DA:5D:70:BA:88:2B:C2:D6:43:F4:10:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:f0:e6:21:cb:a5:5b:15:30:1f:32:29:06:2a:77:b7:29:16:
b0:79:e5:5a:7f:35:10:99:5e:d6:df:fd:7f:93:3a:48:da:73:
59:a3:5c:e9:06:21:57:d4:bb:50:af:6c:e3:bf:c5:04:b6:ce:
e5:06:36:e5:6e:0d:bf:84:2a:af:14:b3:43:7c:d6:b9:50:33:
f8:83:e0:fb:cd:72:d3:51:5a:3e:2e:af:a3:d6:d8:1f:07:75:
02:99:cd:47:b8:7e:41:15:98:8d:e4:e3:2a:68:94:cf:5d:1e:
46:e8:9d:af:96:ac:2a:bf:7a:6d:55:29:78:38:34:d7:d8:c8:
6b:18:61:cc:e1:b8:93:b5:93:48:4b:f7:08:2a:2d:78:59:9d:
7d:94:5e:18:5f:f2:51:37:c8:87:ed:0a:4d:fb:bb:b1:41:11:
6c:54:df:b6:a8:8d:86:5f:ed:71:15:ca:4f:99:5e:4c:2b:ca:
f8:6d:a3:42:22:20:14:af:ab:26:63:74:ec:30:5e:e9:55:d7:
db:a5:45:5a:04:17:15:5c:82:5b:62:18:b1:e0:f2:49:88:b8:
9f:9b:09:b2:2b:7e:df:8e:ac:95:43:03:ba:48:5d:a2:c7:f1:
d5:25:73:11:9c:67:30:ea:b1:37:32:d5:f2:9c:fb:de:6e:d7:
2d:6e:89:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:07:38 2025 by rpki-client