
$ rpki-client -vvf rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
File: ez9g2bGigAKgeHXKtYohRXBz4X8.mft (raw, json)
Hash identifier: rBxyFOFQrnEyXyPQU14GbqGFFe9A6mexkohEYHfH3ac=
Subject key identifier: 01:1F:38:79:B5:0D:64:63:03:40:D4:58:86:B4:33:89:64:B9:D8:9F
Authority key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
Certificate issuer: /CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Certificate serial: 16DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
Manifest number: 169A
Signing time: Tue 04 Nov 2025 16:49:17 +0000
Manifest this update: Tue 04 Nov 2025 16:49:17 +0000
Manifest next update: Tue 11 Nov 2025 16:49:17 +0000
Files and hashes: 1: ez9g2bGigAKgeHXKtYohRXBz4X8.crl (hash: gFJssAftwWXX/Y2TdTtxMCpjbmYM1CbqzIPnQBROJBM=)
2: EE2F10889B4911EFBBAB9381C4F9AE02.roa (hash: tGyvJQ+VHA7B7G1gS3LwI/GSq7MJrx8JwpdoWLxQjws=)
3: 2CF180F0809511EFB8A82822C4F9AE02.roa (hash: HLuyZRv6VF6qFq88g7pPhaPeJ2Pt9n+iaV4TOkNRhbg=)
4: 774A232A718011EEA0E7EF5EC4F9AE02.roa (hash: QlcIbjq7jxCQ3SgyfdLUDXjmauzJiitADg/TiWQLByw=)
5: 1DCB662A3DF211EB81F4CE73C4F9AE02.roa (hash: kCg25FDQRQj+e3KU6R/BP0M2KGcBEvQ7uEDAyKmHOCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl
rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5855 (0x16df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914254C, serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Validity
Not Before: Nov 4 16:49:17 2025 GMT
Not After : Nov 11 16:49:17 2025 GMT
Subject: CN=690a2e8d-de78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:94:d4:16:71:68:dd:6b:02:0f:b4:e8:36:5f:
87:60:bd:d5:11:46:8c:ba:3b:f4:56:44:23:0d:d2:
01:d5:89:b8:e7:6b:b5:67:62:c0:ad:4f:ec:0e:c0:
ed:50:ef:57:62:f5:1b:ef:17:3a:1a:1e:83:dd:a6:
47:0e:cd:00:db:16:3e:d3:52:ac:25:94:c9:dc:ef:
ce:ec:f8:f8:d4:b0:5f:92:c4:b4:97:fe:3d:69:4a:
3d:86:2c:9a:28:b2:19:0b:98:85:b5:5a:bc:2f:cf:
db:13:56:3a:7e:f3:4e:f1:16:9f:e4:b9:92:2d:ff:
84:d4:90:c1:36:bd:62:ca:a7:2f:2a:0a:c1:17:ee:
37:60:97:27:26:72:e4:d4:92:f3:9d:3c:ff:95:70:
18:0e:b6:92:0a:07:26:6a:27:ed:9a:b7:5d:28:82:
78:69:eb:58:35:d9:92:4e:1a:1a:bd:50:e2:28:10:
91:be:22:84:7a:ce:40:f2:74:0a:9a:92:48:c8:cc:
d1:41:74:35:b3:d3:b6:0a:7b:2c:e9:7b:bd:06:4f:
a8:d0:b5:0b:b1:e4:5a:8a:50:f2:7f:32:0d:ac:a8:
ee:2d:13:6c:d4:a7:39:f1:ad:3a:65:2d:08:77:f6:
9b:62:91:2e:35:11:d2:74:6f:ef:7e:33:dd:4c:f0:
cd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1F:38:79:B5:0D:64:63:03:40:D4:58:86:B4:33:89:64:B9:D8:9F
X509v3 Authority Key Identifier:
keyid:7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
db:49:d2:09:cd:c4:70:a2:fa:6c:16:dc:c0:b9:a1:ab:ad:ea:
3c:45:de:95:17:fb:12:ab:0f:e6:cf:c2:90:5f:be:0a:ac:03:
53:b1:65:fd:56:4c:01:51:0a:8c:1e:de:d0:72:42:5d:95:1d:
f8:b5:35:b8:b4:cd:a1:27:01:aa:87:c1:c9:45:7b:6c:f5:41:
83:13:c4:f8:ff:33:e1:b1:23:ac:93:ad:f3:a5:0d:5e:3d:2d:
fd:53:ec:e2:d7:43:a8:8c:1e:e3:5c:94:42:60:70:64:65:52:
1a:27:5f:18:5b:0a:b9:43:7f:84:db:b6:b5:75:41:22:ba:83:
7f:ea:47:fb:7c:49:e6:03:c6:08:59:6f:3f:8c:3b:3e:d1:ce:
72:c7:dc:63:9d:87:02:1e:9a:ed:9b:aa:b8:6b:2d:e6:bd:aa:
3b:9e:3e:e8:f5:d2:da:01:f1:57:c0:a6:69:ff:b8:24:3d:24:
e3:95:af:1b:83:a8:a8:ba:aa:62:2e:37:70:7e:c4:4d:eb:93:
4a:96:e2:8b:0e:25:2e:9b:17:15:b3:96:91:d4:c0:dc:c4:6f:
08:19:99:a7:53:20:68:c3:a2:1b:b2:0d:34:11:fd:5e:da:b7:
96:8c:93:a3:cb:b7:23:02:2c:5b:92:c1:8f:58:0d:d8:4f:22:
84:bc:9a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:34:59 2025 by rpki-client