
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
File: eSD4yoTskTxpqY1UNxIJtDTDMZE.mft (raw, json)
Hash identifier: HUYbRxR0VYsvHo2tS3x0tE99T+swZCt1hryfjM1mWHU=
Subject key identifier: 07:70:02:2C:8F:AA:C6:76:22:47:03:4C:50:B1:71:04:9C:FC:09:8F
Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91
Certificate issuer: /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
Manifest number: C6
Signing time: Wed 05 Nov 2025 06:05:43 +0000
Manifest this update: Wed 05 Nov 2025 06:05:42 +0000
Manifest next update: Wed 12 Nov 2025 06:05:42 +0000
Files and hashes: 1: eSD4yoTskTxpqY1UNxIJtDTDMZE.crl (hash: DZXCA9342Rf7XNgKhtJBLF9du/hw976bBtCkJ0l4FfM=)
2: E188EE7A935711EFBE98944CC4F9AE02.roa (hash: MvYbkMM7qX+K3Cl1XMK5DsKY9VO54145P/lZVkIO3Zo=)
3: F561A3BE935811EF97E1194EC4F9AE02.roa (hash: CBRfaNleeLhQbkhZ9Y/Gyu8j+qS/vePZy+tfvqG3Iy0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl
rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A554, serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
Validity
Not Before: Nov 5 06:05:42 2025 GMT
Not After : Nov 12 06:05:42 2025 GMT
Subject: CN=690ae937-241b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:93:03:bc:63:79:3f:c0:4e:43:be:e1:30:
f6:79:e0:40:41:ae:4a:69:f5:fa:2d:31:3f:2a:a4:
6d:06:a3:1e:4e:23:ea:a5:d0:14:93:eb:5e:e9:62:
0c:46:b1:a0:86:ca:db:98:d1:e0:06:b4:32:5f:e0:
08:68:10:66:6a:e1:cb:53:54:2a:1f:57:5a:8c:aa:
40:67:02:6d:45:03:e2:ed:bf:34:cd:35:05:c8:f8:
50:fb:f1:ef:31:02:55:7c:bd:47:f4:11:fa:ab:69:
f1:9b:52:56:db:c0:89:df:d8:f6:58:9c:82:01:17:
61:54:7b:b7:72:89:55:4c:2f:db:28:9e:e4:3e:56:
9c:4e:e7:5a:54:04:7b:ad:b3:99:51:af:fc:1a:3e:
cd:41:f5:61:ce:5e:a4:f8:63:20:46:c1:67:2f:24:
5a:3d:26:0c:41:8c:be:a6:17:18:13:2a:8b:91:bf:
9b:31:63:f5:ba:14:24:73:56:a1:e0:5d:bb:ea:88:
c6:1d:3b:46:36:d3:6f:31:4b:e5:27:04:78:84:c6:
cc:c0:3b:74:53:26:d9:af:89:05:1e:38:f2:ac:d4:
6f:7e:33:fb:15:ae:cd:f3:ac:8c:ed:f2:a2:40:ee:
9e:df:38:06:b7:c5:d9:83:98:62:ce:d1:31:91:7b:
3d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:70:02:2C:8F:AA:C6:76:22:47:03:4C:50:B1:71:04:9C:FC:09:8F
X509v3 Authority Key Identifier:
keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:a8:96:c1:9e:89:28:89:3d:51:36:13:41:5d:80:4d:cb:0e:
7a:72:d1:af:87:2a:8c:56:f1:31:b2:fe:96:77:32:79:cd:6b:
4e:41:90:50:43:21:3c:36:45:09:83:ed:74:8f:a0:06:08:0f:
92:33:47:c9:1c:80:e0:19:9c:41:d6:79:11:0c:33:bd:ce:d9:
e9:27:00:bc:0a:1b:36:6e:96:2f:e7:5f:07:70:82:21:2d:a2:
8e:a3:77:3d:00:02:dd:30:ba:96:f0:46:72:34:dc:76:c2:3e:
71:23:96:b8:de:1a:b0:59:d4:0f:01:9e:c9:72:7d:20:05:ba:
a2:ec:2f:28:c7:6d:0f:8f:07:86:a2:b4:e1:89:05:0e:15:6d:
2a:51:c1:6d:b1:2d:34:6d:66:5c:1f:48:3e:17:17:9a:49:70:
e7:5e:dc:41:d7:9e:4a:7f:b8:f9:2a:e6:85:1b:73:96:e2:5c:
26:e1:a9:63:72:d5:97:22:7e:67:bc:83:46:e1:52:63:03:41:
80:b7:e0:c6:2e:d1:38:f0:f4:37:4b:57:0f:47:60:fa:79:a6:
55:29:46:07:4e:60:77:ae:23:b7:54:21:eb:9f:8a:92:03:4e:
0a:a0:7a:bd:ab:93:5f:43:b7:0e:e4:dd:5a:b0:c9:2c:31:3b:
51:18:59:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:17:06 2025 by rpki-client