
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
File: eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft (raw, json)
Hash identifier: SajInI7FBZzAFIs2WG5QWaUcWT47254WmXrSlSGr4wo=
Subject key identifier: F0:07:AC:BA:30:DF:29:CF:D7:F2:3B:56:0A:14:3C:71:27:00:80:5F
Authority key identifier: 79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80
Certificate issuer: /CN=A9182B6F/serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580
Certificate serial: 037F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
Manifest number: 0378
Signing time: Wed 05 Nov 2025 00:57:17 +0000
Manifest this update: Wed 05 Nov 2025 00:57:17 +0000
Manifest next update: Wed 12 Nov 2025 00:57:16 +0000
Files and hashes: 1: eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl (hash: vEljDHsu7JxMGMXJ/Qv0T/75AAcivcOVob6G6DT6QBc=)
2: 681E9EECCAC111ECA0AC3E32C4F9AE02.roa (hash: yx0tgJAxnt6G+jTtg9/EBjHjIHPyHzwd9ZlOS5AoF1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl
rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 895 (0x37f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182B6F, serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580
Validity
Not Before: Nov 5 00:57:17 2025 GMT
Not After : Nov 12 00:57:16 2025 GMT
Subject: CN=690aa0ed-1606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:0c:30:aa:b1:16:59:b9:ca:08:33:49:b8:
44:70:78:b8:a5:32:3e:bc:44:51:cb:41:1b:77:3e:
ed:45:8f:e7:3f:70:4a:6b:cd:99:c1:47:17:7e:ab:
de:ef:c3:87:79:3f:94:0d:5e:58:ea:89:67:b4:88:
b9:e3:50:44:bf:51:ba:52:1d:08:e4:98:80:38:6b:
3e:04:dc:ac:fd:4c:36:91:58:5f:a2:a8:a0:07:9f:
b4:7a:bd:df:1f:aa:d7:09:1f:b7:8b:8a:6e:da:8b:
03:9c:82:f8:b2:ea:5b:f9:a7:55:ae:1a:77:21:69:
29:4d:dc:a9:bc:75:28:67:e1:b9:6f:db:ae:25:11:
12:1c:91:23:14:42:16:96:fb:16:cf:63:94:bf:f0:
47:67:37:5a:88:f9:05:77:f9:9f:01:8c:30:59:aa:
da:77:e6:ff:0f:b0:f7:6f:a0:32:53:bc:b1:58:e3:
ac:97:e1:79:e7:b7:e5:d1:06:6f:c2:03:c0:7b:9a:
01:1c:36:0f:c5:80:33:4b:40:72:e7:85:43:cd:87:
8f:ae:36:d8:48:6f:55:0a:ad:59:d1:2a:a0:07:82:
64:56:d6:50:f7:f8:be:d5:4e:be:65:c8:50:40:38:
cf:ea:21:b7:91:61:6b:35:d1:d8:5a:a6:68:70:d3:
a3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:07:AC:BA:30:DF:29:CF:D7:F2:3B:56:0A:14:3C:71:27:00:80:5F
X509v3 Authority Key Identifier:
keyid:79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:bd:20:da:76:47:8a:8e:81:47:23:43:40:ef:ff:3b:37:82:
92:4b:0b:72:e5:3e:b3:b6:df:d0:b3:3f:1e:54:81:c3:4b:67:
7e:e4:b5:fe:4c:f9:88:9c:6a:3b:6f:45:ff:62:04:df:f8:ec:
bc:a4:10:3a:5b:fa:9e:ef:56:e4:90:ef:99:01:c1:b4:6b:82:
35:31:a6:31:ab:79:a7:7c:81:e7:92:ad:61:83:9e:a6:a5:2a:
89:9d:c9:a6:12:bc:a5:70:d8:b6:dd:27:98:dd:87:46:ed:80:
b7:e3:47:a5:ae:6d:fa:01:da:77:20:ad:da:cb:bb:c0:16:76:
49:c7:59:43:2f:d6:72:94:10:88:45:40:28:42:92:6d:07:29:
f0:89:f3:8e:4f:6c:79:31:3e:d6:de:1d:a7:d5:d1:be:3f:1e:
e3:7d:bf:c5:a8:47:83:5a:fb:fb:00:b9:a6:9e:47:da:57:82:
48:a2:5a:12:a3:2a:a3:45:f9:38:d0:4b:ae:d1:4c:f9:f0:7e:
6f:c4:8c:6f:4f:05:e6:f4:d5:d2:43:d6:a9:ab:70:9b:56:83:
13:08:5f:54:8d:e5:7c:a5:d7:31:f3:aa:1a:72:a9:c4:cb:96:
51:79:23:a9:d3:e0:d1:48:b2:4e:de:2a:a9:79:c4:ae:8e:40:
c4:16:96:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:56:55 2025 by rpki-client