
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
File: eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft (raw, json)
Hash identifier: GNgTXCKTEvbQa061EDUMjJevZjkXtc6wyC44j1SkeUQ=
Subject key identifier: 80:05:E2:91:11:77:13:8F:1F:42:B8:BA:79:E4:1E:C6:7B:88:2F:52
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Certificate issuer: /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial: 1D56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
Manifest number: 1D4D
Signing time: Tue 04 Nov 2025 16:14:31 +0000
Manifest this update: Tue 04 Nov 2025 16:14:30 +0000
Manifest next update: Tue 11 Nov 2025 16:14:30 +0000
Files and hashes: 1: eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl (hash: /Qd1BicZpXP9eV/8DNKnZQhe6gGGq1sJyFWZhDXaTTA=)
2: 8DB2B8E6E27F11EEA6719536C4F9AE02.roa (hash: djG4mlXw26i8Pdv1t32X7f3gUOAe2ux1BErj6m1pRZU=)
3: 8D3981D8E27F11EEA6719536C4F9AE02.roa (hash: AoTvkjBLyBipM5IlClQA63t5jA6mXfrjVZKQW3CI8MM=)
4: DBB62584510F11EE91E98858C4F9AE02.roa (hash: eUZl6xYTmnN5IXCb/B1kt6lwOE4wAzzohcEkE00c85k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7510 (0x1d56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Validity
Not Before: Nov 4 16:14:30 2025 GMT
Not After : Nov 11 16:14:30 2025 GMT
Subject: CN=690a2666-b802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:50:53:76:f6:8a:60:4e:79:8e:9d:84:3a:56:
09:94:3b:5a:fa:1a:84:6f:06:26:75:bc:c2:e2:25:
b5:80:4a:bb:d3:bf:65:73:5f:be:7e:2a:75:a5:4e:
72:68:03:33:28:1b:cb:fc:2e:1e:3c:2d:3a:75:10:
35:11:48:98:93:c2:e3:9d:9a:0b:2f:5e:aa:63:4f:
fe:54:a2:c8:34:a2:5a:df:a4:d1:9b:9a:cd:d5:b0:
c2:49:66:3c:de:08:01:b7:7d:f4:e0:b6:59:d6:02:
90:91:3c:be:81:62:83:89:18:34:d3:8c:0d:24:bc:
76:8f:1b:f2:10:18:2b:aa:39:f7:7f:d3:c4:d1:01:
6d:40:85:fb:3e:04:ec:56:09:c7:9b:da:46:4b:be:
71:99:38:4b:be:af:72:9f:f2:5c:7d:e4:94:8f:62:
51:6f:45:49:13:1c:fa:61:d7:7b:f1:83:17:47:3b:
63:e3:75:f2:87:cc:d3:82:78:0c:50:7b:52:c2:98:
a3:ff:a9:3f:a5:c9:bb:7f:0a:f9:6b:5b:24:ce:db:
99:86:b1:a0:03:9b:01:87:78:03:9b:fc:43:1c:65:
26:05:dd:a3:d6:ad:cf:82:1f:37:d7:e5:61:47:da:
a3:47:11:b0:bf:8c:c2:af:65:c9:5c:25:fa:0b:cd:
c0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:05:E2:91:11:77:13:8F:1F:42:B8:BA:79:E4:1E:C6:7B:88:2F:52
X509v3 Authority Key Identifier:
keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ae:fd:43:95:fd:7a:4b:b5:2a:fc:b0:65:80:f2:e4:64:a9:
34:34:05:c9:27:e6:30:87:dc:ac:a1:f2:67:db:c5:e1:72:56:
7c:5f:66:72:37:c8:0b:67:48:71:df:54:88:2b:31:91:47:3e:
86:27:1c:1c:e5:be:2c:9b:cc:02:f5:ea:56:bf:ec:6f:67:a0:
40:86:e7:0d:27:aa:73:c9:e1:40:8a:64:09:e3:94:33:40:9b:
92:42:7b:bf:99:7d:23:ba:ea:43:83:af:59:49:f3:41:d7:00:
03:fd:29:47:83:ed:47:1c:ab:62:da:88:43:78:ea:ff:9a:55:
67:31:a8:11:b9:6a:7f:77:f0:90:d6:bd:77:32:fb:2e:38:5d:
72:df:54:d0:f7:bb:40:d2:fc:fe:05:69:2d:2a:7d:67:71:b7:
bf:75:a5:b0:e7:66:ec:77:38:4c:58:33:91:ce:91:11:d4:e2:
f4:ad:ac:52:ed:80:a8:24:70:a6:5b:f9:86:ef:0a:7a:c4:c1:
14:cd:56:d5:56:1c:73:51:a6:c6:69:42:7e:09:1b:61:d3:15:
5e:81:32:9f:1b:50:1d:d5:1d:4e:0c:68:b5:c8:64:9c:b2:8f:
c6:30:47:e4:fb:cf:21:e4:a8:4e:d0:4a:f8:f9:1c:45:ca:b9:
4c:b5:a0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:08:17 2025 by rpki-client