
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
File: e5n41rlBPOKiluscfX7-bUfQy6Q.mft (raw, json)
Hash identifier: oheXvWoujchRD5we9v6uc00Jus5DgoIMcwW4NVX8Dtc=
Subject key identifier: 35:1A:80:0E:BD:06:CF:F3:9C:53:3B:B6:7A:D6:F3:E9:19:04:E3:C0
Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4
Certificate issuer: /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4
Certificate serial: 08F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
Manifest number: 08EF
Signing time: Tue 04 Nov 2025 20:27:46 +0000
Manifest this update: Tue 04 Nov 2025 20:27:45 +0000
Manifest next update: Tue 11 Nov 2025 20:27:45 +0000
Files and hashes: 1: e5n41rlBPOKiluscfX7-bUfQy6Q.crl (hash: GCP0tBSBeRczOuQXD86Jjvw2e2jtVoJIkjUMTH94Sto=)
2: 5DD88088AF2E11F0915FDA4FC4F9AE02.roa (hash: TwAE0GwwENS3YfjFl+npdZSwgXWk0lVtJ+TPHotvZA8=)
3: E6C7D3EAAF2D11F0811BB83BC4F9AE02.roa (hash: Kmb540TuRA2tDqqWRgz9hrAljHHHHmzFl7Y1Ysy+4gE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl
rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:27:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2297 (0x8f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4F1B, serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4
Validity
Not Before: Nov 4 20:27:45 2025 GMT
Not After : Nov 11 20:27:45 2025 GMT
Subject: CN=690a61c1-4744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:32:87:96:15:6f:69:04:82:ac:c7:b6:1e:
83:27:b8:22:82:70:0f:84:86:59:f1:1c:08:ea:5b:
ed:1e:e8:a6:ab:7d:67:53:25:03:38:35:92:b2:24:
9c:9e:ed:36:2e:f7:79:eb:64:f8:0d:10:ec:db:00:
22:23:8c:e8:2f:a3:f5:0d:fe:8b:03:dd:18:7f:94:
4e:4e:35:2c:7d:5c:64:09:43:67:0c:87:ca:30:96:
8a:9e:fa:fe:8b:74:8f:ba:07:12:9e:0f:c3:34:25:
6e:e4:8b:11:28:71:91:fc:10:78:e6:06:89:19:f3:
47:e0:54:d2:ea:f8:71:78:88:9c:fa:e8:af:92:93:
3b:99:67:2c:de:16:f5:4c:d2:4d:ca:fe:15:3e:13:
8e:bb:c3:36:96:93:06:23:41:01:45:b8:e8:47:0c:
96:20:f6:2c:22:8c:2e:fc:8c:cd:1b:0e:8c:17:74:
07:d0:e8:8c:1f:63:ef:04:e5:15:01:7d:66:f7:2f:
5f:bb:5e:45:e8:51:96:d9:eb:a9:5f:ba:62:61:cb:
9b:ed:21:78:3b:90:e3:bf:f0:44:78:6a:f4:e9:2d:
5c:36:8b:52:6f:c2:77:73:16:8d:37:56:c3:11:4d:
eb:37:05:23:dd:41:19:f4:f7:07:70:ac:a1:a2:5b:
44:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1A:80:0E:BD:06:CF:F3:9C:53:3B:B6:7A:D6:F3:E9:19:04:E3:C0
X509v3 Authority Key Identifier:
keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:cc:66:73:b1:22:01:64:9a:e3:ef:8f:2b:57:13:60:3b:07:
a7:b6:0f:3f:fe:12:f4:a6:f1:c9:bc:46:06:71:78:e0:7f:fc:
cd:6e:5c:be:3c:29:d3:92:75:1b:85:50:f7:16:38:bd:68:c8:
eb:21:1a:a9:49:65:3f:ad:94:b1:2c:47:e5:6c:ac:4f:f6:9f:
1b:4c:db:f3:4a:36:53:42:36:4c:dc:a1:d1:ba:42:d8:de:26:
3d:4e:29:02:40:87:91:af:88:12:d2:ee:5e:1e:3e:48:14:89:
60:66:5c:53:e9:83:a0:6f:c4:b6:8d:60:9d:37:9d:8b:4c:e9:
a8:73:e7:1b:26:a8:8d:9e:db:df:85:01:62:f5:a4:99:73:c7:
64:09:93:71:6d:fd:92:d0:5b:03:bf:ff:56:cc:bf:f9:95:b9:
71:69:c3:5d:dc:c6:e5:1b:e6:32:7c:15:3a:16:c6:88:b8:67:
57:44:c6:bc:13:50:c0:ad:3e:02:b3:07:d2:31:c7:b9:67:ba:
c7:6a:be:21:7c:59:6d:73:ab:22:71:8f:cd:28:5d:ca:4d:cf:
95:b2:1f:bd:5c:1b:95:07:60:fc:54:25:c5:cd:6c:b6:b6:f8:
fb:b6:1e:4d:5a:1e:5c:66:bf:b1:44:13:09:b5:d9:e9:1a:15:
03:0c:1f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:06:28 2025 by rpki-client