
$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
File: eF4L_we5A3xgM0st8zaSgaTcP1o.mft (raw, json)
Hash identifier: oMB/VR0+OwXoWiHGiOKClvqbSDLyA0AaUDF9BRDDa2U=
Subject key identifier: EB:36:64:0F:64:1F:1A:85:0E:25:1C:83:4A:DB:36:C3:DE:86:BC:84
Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
Certificate issuer: /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Certificate serial: 07EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
Manifest number: 07C8
Signing time: Tue 04 Nov 2025 21:26:05 +0000
Manifest this update: Tue 04 Nov 2025 21:26:04 +0000
Manifest next update: Tue 11 Nov 2025 21:26:04 +0000
Files and hashes: 1: eF4L_we5A3xgM0st8zaSgaTcP1o.crl (hash: YlFAXjcqKWUTN6bfdf3sIgTpP0Ai0GFoZF+9lFcHLDs=)
2: 7E099DB21C5611EBB91D2683C4F9AE02.roa (hash: 68DPPkIx3TMycMvhxJ/OJZVSsCBVKZGTA7YjwfeBQOY=)
3: 39FBB4168B9811EE9C0BA252C4F9AE02.roa (hash: ULpDjDQWqs4ItvC1i6NuU7QsQ6pk8dYjef/smDJ1Zeg=)
4: 3ABCE5008B9811EE9C0BA252C4F9AE02.roa (hash: GWLk3JarDTPL/Nuw5ExP7ZtwCD4NJBGph70xGsQwiUg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2031 (0x7ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915465A, serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Validity
Not Before: Nov 4 21:26:04 2025 GMT
Not After : Nov 11 21:26:04 2025 GMT
Subject: CN=690a6f6d-a479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4e:5f:02:9a:18:81:87:7e:2b:52:90:a5:72:
fb:33:51:25:5f:05:f6:61:95:1f:d4:24:9a:b2:f4:
49:5e:2c:e5:78:a7:3e:ad:4d:e2:d6:11:19:0f:79:
16:86:7d:88:a3:c1:ea:b9:9b:e6:c2:56:2d:ab:f1:
18:fa:bc:97:2f:a8:9e:46:26:8d:73:2d:f3:38:4e:
21:77:f1:6f:60:2d:cf:00:3e:73:15:a8:de:6d:82:
14:1a:4c:4b:e7:e7:03:58:34:d1:ee:2f:f3:57:1c:
a6:b2:3b:a2:ee:55:9c:48:5c:9a:b0:2f:d8:e4:24:
da:5b:59:db:dc:62:90:36:3f:b7:06:a3:64:01:3d:
11:e3:ef:4a:8a:62:73:75:76:14:5f:45:25:7e:35:
7b:de:d2:2d:60:65:6e:3c:df:ba:33:a8:f4:41:2b:
09:84:d1:93:4d:c5:6f:46:ee:31:ad:62:bb:71:4a:
d0:25:ac:02:5e:55:ab:4d:a9:a5:fe:be:14:be:a0:
47:41:23:9d:79:f3:27:b1:bd:0e:b8:18:01:1f:2c:
26:f8:10:d0:a8:49:06:5a:ec:1c:e8:cf:61:86:24:
d1:46:4e:1a:b9:6a:f9:12:fd:10:89:cd:c9:bc:7a:
81:ac:21:39:ad:7e:82:c0:38:f7:cb:06:0a:58:df:
c1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:36:64:0F:64:1F:1A:85:0E:25:1C:83:4A:DB:36:C3:DE:86:BC:84
X509v3 Authority Key Identifier:
keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:42:2e:83:34:1c:5a:bd:4a:bb:83:19:9d:e1:63:cc:8f:de:
b8:65:6d:42:3d:b6:89:bd:14:3a:3e:18:db:6b:a6:66:02:de:
01:d5:50:39:f0:83:92:24:de:b6:0e:93:52:fe:1c:c2:14:bb:
62:cc:44:18:54:1e:48:5f:2b:65:97:f1:5d:fc:7d:ff:38:91:
84:d1:ab:d0:9a:e9:7b:e8:78:8b:6e:6e:d4:e0:a0:43:ce:f4:
af:6c:83:cf:73:c9:bb:7c:0e:00:91:c7:1a:09:a5:d4:b0:e8:
b1:d6:f5:06:53:58:da:e0:21:8e:ed:8f:26:09:11:ca:54:4a:
73:69:f6:e1:68:95:80:41:85:b6:1d:44:92:ca:c1:1b:81:ac:
ce:29:8b:6b:7d:49:1a:ff:39:93:73:fe:0e:1e:e2:93:21:e9:
22:f3:ac:1c:33:5a:dc:c6:e6:13:3d:59:a1:21:2c:5c:2b:04:
f3:0a:95:23:c1:e1:c8:6a:99:d3:a6:37:ea:db:d2:d8:27:40:
6b:a3:96:84:54:3a:9e:89:9a:c8:f5:2b:03:3b:95:2b:d7:85:
4a:3d:6d:e1:f5:72:6a:ff:d7:4c:67:f8:a8:c4:1b:56:f5:0d:
31:a8:9e:3f:7b:f3:33:37:92:f1:f3:de:74:92:e5:63:87:d0:
22:81:64:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:15:22 2025 by rpki-client