
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
File: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft (raw, json)
Hash identifier: pJBlWDNChIJAuNDcRKgWSuLOpsNWrGPlKukOlS5PHT0=
Subject key identifier: 84:B1:EF:D8:E1:B2:02:2E:92:FE:81:5A:72:E0:0E:31:F4:51:C1:2A
Authority key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
Certificate issuer: /CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Certificate serial: 014E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
Manifest number: 014B
Signing time: Mon 03 Nov 2025 04:16:54 +0000
Manifest this update: Mon 03 Nov 2025 04:16:53 +0000
Manifest next update: Mon 10 Nov 2025 04:16:53 +0000
Files and hashes: 1: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl (hash: itYiglpNv5gXKRlGixYlhC7vLiRbDOSZ1kpsgM6vi9Q=)
2: A1456A4CBE6811EEBFF35870C4F9AE02.roa (hash: 97zPU/AWi/C0nV9VIKmemXWGwZXv9hj/Vz3ExXILCII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl
rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 04:16:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C07A, serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Validity
Not Before: Nov 3 04:16:53 2025 GMT
Not After : Nov 10 04:16:53 2025 GMT
Subject: CN=69082cb6-d4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f6:e5:e8:59:00:4f:12:1d:6d:17:e3:7d:4b:
d2:17:e7:d5:cc:1f:95:54:f8:9e:11:62:25:c3:08:
68:f9:ac:4c:5e:de:81:31:32:b1:08:cd:1a:87:e9:
94:fb:19:0a:1f:6e:b3:47:be:37:8d:40:c3:74:46:
8d:4d:5f:8a:1d:e2:f5:bf:bf:a2:92:fc:8d:71:28:
3f:9e:d9:75:e7:d7:f4:a3:e2:f5:e5:1e:29:de:40:
44:f0:40:08:37:9a:31:80:bd:8e:03:bc:4e:8a:81:
be:47:81:29:8b:53:ba:bb:d5:60:ef:bd:87:28:6e:
3c:76:dc:db:32:53:eb:01:e3:16:33:ee:91:ee:98:
50:7f:0b:64:07:ba:44:8b:ef:78:47:9f:7b:07:0d:
9a:6c:77:1d:e0:50:64:09:b7:a6:39:2f:88:b6:d0:
9d:f3:e6:e7:8c:59:52:3e:15:8b:d4:2d:66:bc:c9:
9f:7c:d6:74:0b:c2:b1:2a:40:40:f7:df:e9:9f:ff:
88:3f:64:25:9a:77:98:ee:5d:bc:25:5b:4e:d4:9e:
f7:24:37:54:82:1b:8b:7d:83:71:fb:01:94:c9:52:
d1:ae:15:cf:26:34:c4:93:f3:98:dd:f1:c0:9b:05:
66:33:11:53:1c:4b:50:04:af:30:d8:73:69:87:9e:
ad:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B1:EF:D8:E1:B2:02:2E:92:FE:81:5A:72:E0:0E:31:F4:51:C1:2A
X509v3 Authority Key Identifier:
keyid:12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:a4:55:75:b0:90:31:88:86:5c:10:60:32:98:17:ac:51:6b:
fc:c6:9d:63:ea:b7:e6:b5:18:b2:72:55:3b:5e:42:7a:23:6b:
e7:1d:a6:87:2d:bd:76:23:23:ce:16:50:4f:11:e7:55:46:81:
54:30:86:77:c4:54:fd:07:88:17:b4:5c:c4:41:f6:55:b5:03:
ce:f6:41:01:77:7e:50:47:2b:73:90:da:f0:e8:b8:fd:d2:3a:
5a:96:75:79:2e:ff:16:4b:9e:37:64:66:97:80:f3:9f:8d:5b:
66:8f:45:01:89:76:e9:35:fb:8c:2c:9f:76:e3:c7:58:a5:d5:
00:c2:eb:1a:ee:73:c2:dc:ca:56:fa:ce:d1:a8:ca:1e:5d:20:
89:c1:c2:b1:4a:e3:ab:e7:66:c5:a9:2b:2f:a1:35:dc:5b:df:
97:db:07:ba:f2:a7:a6:e7:3a:ca:ad:9b:1f:06:9f:89:ec:2c:
24:75:6a:67:c6:06:96:8d:26:0b:b8:1f:a8:b3:b0:48:4c:fd:
c3:05:fa:ce:c6:3c:76:46:34:1e:06:8b:18:33:79:0f:ff:7a:
bd:60:73:79:29:33:7b:f7:1b:98:35:8b:c2:f4:56:3b:82:88:
0f:d6:5e:c6:4c:de:3b:c8:95:97:f4:57:f4:20:45:41:cc:17:
5b:63:cd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:47:03 2025 by rpki-client