
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft
File: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft (raw, json)
Hash identifier: rDXE0Ufl3mB34hx7Cgk955Ab3dYl5asjgboS8xMdreE=
Subject key identifier: 63:EE:54:D3:F1:02:54:1E:D7:3F:7D:5F:1E:14:83:74:93:97:C1:9B
Authority key identifier: 7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60
Certificate issuer: /CN=A91A5DC1/serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160
Certificate serial: 0756
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft
Manifest number: 0756
Signing time: Tue 04 Nov 2025 20:34:27 +0000
Manifest this update: Tue 04 Nov 2025 20:34:26 +0000
Manifest next update: Tue 11 Nov 2025 20:34:26 +0000
Files and hashes: 1: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl (hash: kaXRJzMH//9IB+DjkLaAoUzPujNNv09DukH1ri7i1yY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl
rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:34:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1878 (0x756)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5DC1, serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160
Validity
Not Before: Nov 4 20:34:26 2025 GMT
Not After : Nov 11 20:34:26 2025 GMT
Subject: CN=690a6352-c50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:01:0d:32:d7:7b:38:5e:8f:4b:d6:09:e0:
bc:42:be:2d:9b:35:9e:ba:3e:25:d0:51:c7:f9:24:
9b:9d:5a:b1:da:f6:78:5d:35:21:2d:c8:28:77:ba:
46:a5:32:82:01:8b:50:55:3e:69:8e:be:91:0e:09:
2c:11:a4:69:3b:56:11:ae:4a:fb:99:f9:d6:41:e8:
eb:68:08:f0:f4:3f:4a:12:0f:24:cd:88:3f:1e:e7:
d6:af:46:ec:72:9f:ae:c7:18:1e:0f:93:e5:cd:45:
86:f4:24:56:de:b2:35:22:93:1a:6d:bf:3b:02:94:
f6:53:5c:6e:aa:7f:c8:ea:85:31:c4:cf:16:37:28:
59:69:f5:1f:4a:15:f2:f5:9b:69:24:d0:20:91:25:
6a:2d:49:0a:56:77:38:72:8f:b8:13:27:61:de:8b:
5f:83:7a:c1:d9:e5:22:fa:b5:32:92:5c:e7:23:eb:
85:71:c8:a2:30:41:db:27:be:2f:37:2d:f1:86:16:
25:c9:65:f3:9f:65:43:f2:c7:44:f4:63:7b:17:5d:
f2:99:f0:f2:81:00:51:a7:5f:b8:54:f1:e3:0b:ca:
1b:76:21:bf:33:5f:92:e8:90:9e:66:90:16:02:7b:
19:29:db:71:df:21:ed:b8:1c:07:35:8a:3e:5f:6a:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EE:54:D3:F1:02:54:1E:D7:3F:7D:5F:1E:14:83:74:93:97:C1:9B
X509v3 Authority Key Identifier:
keyid:7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3c:12:32:1e:72:b8:ed:71:cb:66:f4:72:3e:d1:62:5f:a2:
5f:64:5a:10:b4:36:cd:19:3a:b2:da:43:ad:48:e5:94:6f:df:
64:92:0c:16:55:35:5a:15:60:20:0b:23:39:b3:9c:8b:3e:c2:
f6:97:53:d1:92:fd:c2:bc:4d:61:92:8e:ed:de:86:43:c7:8e:
32:fe:5e:ee:7b:eb:40:e9:49:35:bd:52:97:c5:3a:35:28:03:
f5:39:7b:8c:1c:fa:d8:b2:1f:7d:94:a0:2e:4b:d1:d7:10:a2:
27:ac:be:8b:4a:fa:4d:05:9b:75:ba:27:6f:5d:37:ae:6c:e4:
dc:b1:c2:ce:99:52:3c:5f:d5:48:17:a3:9a:d6:73:8c:d6:b9:
ef:ec:e1:4d:cd:0b:a8:27:7b:78:3f:a7:08:8c:08:42:d2:4f:
63:fc:7f:01:17:fe:87:fe:7f:50:c4:2f:77:6e:af:0f:74:f4:
d1:f4:88:23:2e:97:28:fb:c4:3c:64:03:cf:59:8a:34:86:1e:
3f:52:c2:50:d9:47:78:46:bc:50:71:29:4d:28:ae:93:51:68:
f9:07:09:3a:80:86:3d:c0:2a:8e:2a:0e:c8:83:75:da:f0:7d:
dc:7b:33:87:10:3b:ce:02:1d:9a:13:60:5c:69:10:b7:2f:37:
2d:f2:b0:29
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVEQzExMTAvBgNVBAUTKDdBOURBNDYxRUJFQkQxNTMxNjQyMDczOUM4OUVDNEND
RUU5OUMxNjAwHhcNMjUxMTA0MjAzNDI2WhcNMjUxMTExMjAzNDI2WjAYMRYwFAYD
VQQDEw02OTBhNjM1Mi1jNTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy24BDTLXezhej0vWCeC8Qr4tmzWeuj4l0FHH+SSbnVqx2vZ4XTUhLcgod7pG
pTKCAYtQVT5pjr6RDgksEaRpO1YRrkr7mfnWQejraAjw9D9KEg8kzYg/HufWr0bs
cp+uxxgeD5PlzUWG9CRW3rI1IpMabb87ApT2U1xuqn/I6oUxxM8WNyhZafUfShXy
9ZtpJNAgkSVqLUkKVnc4co+4Eydh3otfg3rB2eUi+rUyklznI+uFcciiMEHbJ74v
Ny3xhhYlyWXzn2VD8sdE9GN7F13ymfDygQBRp1+4VPHjC8obdiG/M1+S6JCeZpAW
AnsZKdtx3yHtuBwHNYo+X2r8iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPuVNPx
AlQe1z99Xx4Ug3STl8GbMB8GA1UdIwQYMBaAFHqdpGHr69FTFkIHOciexMzumcFg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNURDMS80MTNBODkyNDQ1
ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBWTVdRZ2M1eUo3RXpPNlp3
V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VwMmtZZXZyMFZNV1FnYzV5SjdFek82WndXQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NURDMS80MTNBODkyNDQ1ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBW
TVdRZ2M1eUo3RXpPNlp3V0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAPPBIyHnK47XHLZvRyPtFiX6JfZFoQtDbNGTqy2kOtSOWUb99kkgwW
VTVaFWAgCyM5s5yLPsL2l1PRkv3CvE1hko7t3oZDx44y/l7ue+tA6Uk1vVKXxTo1
KAP1OXuMHPrYsh99lKAuS9HXEKInrL6LSvpNBZt1uidvXTeubOTcscLOmVI8X9VI
F6Oa1nOM1rnv7OFNzQuoJ3t4P6cIjAhC0k9j/H8BF/6H/n9QxC93bq8PdPTR9Igj
Lpco+8Q8ZAPPWYo0hh4/UsJQ2Ud4RrxQcSlNKK6TUWj5Bwk6gIY9wCqOKg7Ig3Xa
8H3cezOHEDvOAh2aE2BcaRC3Lzct8rAp
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:04:21 2025 by rpki-client