
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
File: EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft (raw, json)
Hash identifier: fxinIKPrmOOKbFW/M9Ek3GsO8+GXq2+1OgCbmjxSIzg=
Subject key identifier: E6:39:15:B6:CE:E8:14:2D:AB:7A:AC:99:13:7B:90:3C:42:BF:BD:52
Authority key identifier: 11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6
Certificate issuer: /CN=A91BD844/serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
Certificate serial: 01C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
Manifest number: 01BF
Signing time: Wed 05 Nov 2025 03:10:57 +0000
Manifest this update: Wed 05 Nov 2025 03:10:56 +0000
Manifest next update: Wed 12 Nov 2025 03:10:56 +0000
Files and hashes: 1: EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl (hash: kG5wa13wogNYJ/2VQdXHvFCnUIota37vN7Oy1eDk5lA=)
2: 32D39C06224511EE81776175C4F9AE02.roa (hash: IpE3dRMtn4VIH+WF4zXN3kMbPGJfB4KqDmJ+7Dw6ktA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl
rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:10:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD844, serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
Validity
Not Before: Nov 5 03:10:56 2025 GMT
Not After : Nov 12 03:10:56 2025 GMT
Subject: CN=690ac041-ebe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:46:1e:23:c1:a0:08:77:3d:a9:cd:d2:42:
de:c8:8e:36:cb:cc:23:1c:84:e8:67:b5:2c:de:8d:
9d:2a:cf:f3:16:60:8b:e0:38:8d:7a:96:49:a3:a3:
ef:cc:b2:7b:aa:3c:a9:70:e9:85:b2:e0:ce:1a:43:
56:3f:86:7d:ff:b3:f7:94:8a:08:60:bd:a2:f2:6b:
85:f9:a2:fb:16:8d:a9:19:76:40:56:bc:a4:9d:ea:
0b:d8:32:60:5a:7f:e0:80:5f:53:3d:53:31:49:51:
b0:4d:f1:8d:dd:04:06:a0:53:78:b8:93:ed:c9:67:
c9:00:69:22:9a:ba:d7:d2:b3:b3:aa:3c:d9:6d:bf:
87:4c:b3:e0:15:5e:11:14:66:80:a1:b9:0f:9c:fb:
09:ef:b1:aa:69:bd:e3:4a:1f:71:3a:02:c3:aa:a3:
c1:46:d4:ef:a7:82:b8:8b:3f:7d:2c:14:24:0b:81:
08:8e:1b:e2:5c:4c:ea:8f:eb:af:b9:f7:b2:94:df:
9c:be:23:5c:7d:de:77:39:26:8d:06:ce:b6:25:30:
9e:fd:69:9f:0d:c4:e4:1a:cc:f3:5d:25:3c:5e:63:
03:5f:37:97:7f:dd:94:97:ce:40:33:00:90:a6:56:
aa:ef:1f:da:7f:a0:b1:43:68:f9:b0:5c:88:6b:5b:
8c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:39:15:B6:CE:E8:14:2D:AB:7A:AC:99:13:7B:90:3C:42:BF:BD:52
X509v3 Authority Key Identifier:
keyid:11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:57:d1:08:8f:2f:7f:2a:6c:fd:d9:3c:f4:46:35:12:0a:f3:
40:d5:4d:81:0a:61:9f:b0:28:7c:b7:98:91:3b:d1:0c:84:07:
26:d9:18:ac:c5:45:6c:24:cb:25:dd:b1:af:ba:f4:2a:81:f0:
ad:76:d9:3a:ab:9b:c9:c8:4c:b7:68:e7:29:9b:4b:05:1d:a1:
8b:b7:9e:96:10:58:17:3d:f4:0d:d8:0b:c0:b5:98:59:5a:15:
ab:03:f4:d4:8e:b8:e2:cc:11:8e:39:01:b0:e2:75:53:33:f4:
76:96:29:67:31:19:ff:bd:1c:a1:12:52:bb:7f:f1:c8:55:fa:
00:26:fc:73:01:7f:18:dc:49:db:00:02:2f:d0:db:4c:cd:0c:
8c:70:8f:9b:24:64:72:dd:51:97:3b:33:8c:7b:f3:b1:95:75:
72:eb:1f:d0:48:09:6a:3c:6b:f9:42:32:b2:29:28:92:fd:6f:
1b:17:b1:4a:05:b6:30:f0:30:2e:2a:ee:db:1b:56:d0:55:c6:
a9:6e:f1:b3:03:3b:8a:f6:d3:c4:54:d0:1a:00:2e:17:ef:33:
62:0d:af:41:03:ca:65:5e:78:d1:0b:c1:e6:2a:b8:7f:93:51:
ac:3d:29:70:02:c2:3c:de:6e:d9:14:31:d0:3b:d6:a3:2e:10:
7c:d6:57:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:30:23 2025 by rpki-client