
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft
File: Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft (raw, json)
Hash identifier: YO6hzD767O5AVPyrZvH3VZvIlQJj9uRI8EWRmlxTgW8=
Subject key identifier: EE:E0:A5:A9:CB:67:D1:1D:DA:0D:0A:E8:A4:49:AA:BF:1A:E8:D2:DD
Authority key identifier: 11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2
Certificate issuer: /CN=A916E39F/serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2
Certificate serial: 0120
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft
Manifest number: 011D
Signing time: Wed 05 Nov 2025 05:19:56 +0000
Manifest this update: Wed 05 Nov 2025 05:19:55 +0000
Manifest next update: Wed 12 Nov 2025 05:19:55 +0000
Files and hashes: 1: Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl (hash: bwA5FsGKJJiMECYvipTJb+/WWPT0Cr71kG4QskFrItk=)
2: 66387A6C087211EF9EDFC673C4F9AE02.roa (hash: 6CoZctRh+5TN7bimUtTXkZuJtbaIJypN9r/nRbV8PTc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl
rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E39F, serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2
Validity
Not Before: Nov 5 05:19:55 2025 GMT
Not After : Nov 12 05:19:55 2025 GMT
Subject: CN=690ade7b-1d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:56:9a:13:eb:4f:6e:fb:9d:95:06:2a:28:
92:0f:4f:76:b7:44:88:c5:35:7b:0b:c0:e0:31:4c:
aa:42:a2:53:75:03:de:6a:30:c8:55:78:f5:81:73:
71:74:7e:8e:11:71:82:c2:4c:93:39:f6:76:b8:e5:
50:83:8f:f6:80:c7:13:60:88:85:f7:cf:36:19:77:
a6:be:16:a8:0f:c9:d4:b6:5e:d5:7a:e5:06:60:39:
0e:a4:bc:ae:ae:ab:c2:3e:c6:7d:fe:77:ff:50:95:
4a:e0:26:f3:ba:c1:d6:77:22:d5:1b:74:d8:fb:dc:
06:34:79:69:95:ca:0b:41:7b:9f:4e:d2:17:ee:b1:
1e:79:c6:a0:bf:01:dd:07:f8:85:ce:0d:1a:e1:f5:
d9:73:82:ac:e4:c9:76:be:b5:a3:51:8d:ef:64:a4:
4e:4c:12:99:fe:d8:98:5c:af:65:86:29:bf:a4:76:
83:d7:d3:60:86:48:23:4f:fc:ae:6b:08:ce:f5:ee:
e6:ae:49:80:9f:9b:0b:55:80:ce:eb:97:a6:86:8b:
93:0c:4f:98:b5:48:6c:66:a8:94:b6:01:ce:dc:c7:
65:f5:d5:ff:3e:ff:5e:b1:67:84:d8:d4:dc:ef:2d:
7b:d1:61:a3:4c:bc:e6:5a:fb:98:ae:a3:10:cc:6e:
35:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E0:A5:A9:CB:67:D1:1D:DA:0D:0A:E8:A4:49:AA:BF:1A:E8:D2:DD
X509v3 Authority Key Identifier:
keyid:11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:91:25:3a:a7:08:fe:09:e4:26:7d:03:42:a4:28:4c:3a:74:
6a:a3:3e:b3:75:b3:60:81:19:f3:71:58:33:06:26:6b:9c:4f:
5f:e1:cd:48:43:9f:10:ff:b0:2a:fa:87:62:e7:45:c6:b9:02:
b3:ca:d0:e1:9b:88:e6:b7:0b:79:7f:5d:49:8f:a1:9e:e4:37:
a7:70:1f:bc:81:5a:9d:1b:5f:19:7c:8f:a5:da:b5:51:fa:3e:
a3:50:b3:1a:af:66:13:b4:11:91:b0:01:8e:be:93:da:d2:21:
aa:43:89:f0:24:e5:c8:67:6d:d4:e7:9b:0e:88:24:aa:3a:bd:
95:66:62:da:64:99:47:f3:02:a8:14:43:cd:01:88:40:f3:c7:
f5:b6:22:33:22:70:2a:d4:e7:3e:50:0f:42:a2:34:bf:1b:12:
b9:9f:ab:09:50:9c:f8:e0:95:fb:78:e1:9b:f2:ac:9d:11:22:
2d:a3:38:47:17:5a:46:15:e8:75:44:45:3b:ea:9a:7a:f7:25:
2e:5d:18:76:24:45:0b:9a:67:d8:30:5c:24:fe:b3:ba:21:b5:
24:77:d2:72:db:ab:dc:61:d3:a1:f7:0b:34:04:12:ca:71:c0:
1b:66:71:15:52:d0:75:f2:f3:f0:4a:cb:6f:bd:db:49:22:c9:
ff:d0:5d:ed
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkUzOUYxMTAvBgNVBAUTKDExRTczRjUyQkYwRjU4NkYyQjlGQTY5RUUyQ0ExNUYy
MTg1RjY2QzIwHhcNMjUxMTA1MDUxOTU1WhcNMjUxMTEyMDUxOTU1WjAYMRYwFAYD
VQQDEw02OTBhZGU3Yi0xZDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAulpWmhPrT277nZUGKiiSD092t0SIxTV7C8DgMUyqQqJTdQPeajDIVXj1gXNx
dH6OEXGCwkyTOfZ2uOVQg4/2gMcTYIiF9882GXemvhaoD8nUtl7VeuUGYDkOpLyu
rqvCPsZ9/nf/UJVK4CbzusHWdyLVG3TY+9wGNHlplcoLQXufTtIX7rEeecagvwHd
B/iFzg0a4fXZc4Ks5Ml2vrWjUY3vZKROTBKZ/tiYXK9lhim/pHaD19NghkgjT/yu
awjO9e7mrkmAn5sLVYDO65emhouTDE+YtUhsZqiUtgHO3Mdl9dX/Pv9esWeE2NTc
7y170WGjTLzmWvuYrqMQzG41KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7gpanL
Z9Ed2g0K6KRJqr8a6NLdMB8GA1UdIwQYMBaAFBHnP1K/D1hvK5+mnuLKFfIYX2bC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTM5Ri9CNTA5NUEyMjA4
NkMxMUVGQTA4NTJFMTZDNEY5QUUwMi9FZWNfVXI4UFdHOHJuNmFlNHNvVjhoaGZa
c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VlY19VcjhQV0c4cm42YWU0c29WOGhoZlpzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RTM5Ri9CNTA5NUEyMjA4NkMxMUVGQTA4NTJFMTZDNEY5QUUwMi9FZWNfVXI4UFdH
OHJuNmFlNHNvVjhoaGZac0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA2kSU6pwj+CeQmfQNCpChMOnRqoz6zdbNggRnzcVgzBiZrnE9f4c1I
Q58Q/7Aq+odi50XGuQKzytDhm4jmtwt5f11Jj6Ge5DencB+8gVqdG18ZfI+l2rVR
+j6jULMar2YTtBGRsAGOvpPa0iGqQ4nwJOXIZ23U55sOiCSqOr2VZmLaZJlH8wKo
FEPNAYhA88f1tiIzInAq1Oc+UA9CojS/GxK5n6sJUJz44JX7eOGb8qydESItozhH
F1pGFeh1REU76pp69yUuXRh2JEULmmfYMFwk/rO6IbUkd9Jy26vcYdOh9ws0BBLK
ccAbZnEVUtB18vPwSstvvdtJIsn/0F3t
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:57:21 2025 by rpki-client