
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft
File: eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft (raw, json)
Hash identifier: 7F0myYv0CTsmlxqV0ys0Fxv2ztW9farLKy4J4cNRPwQ=
Subject key identifier: 09:57:76:21:10:97:2B:82:6F:FA:64:3F:C8:30:4F:28:CB:E7:9B:89
Authority key identifier: 7A:28:16:E9:69:79:75:CA:D9:34:9B:26:B2:0F:14:C8:1A:91:4C:98
Certificate issuer: /CN=A91D0C18/serialNumber=7A2816E9697975CAD9349B26B20F14C81A914C98
Certificate serial: E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eigW6Wl5dcrZNJsmsg8UyBqRTJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft
Manifest number: DF
Signing time: Mon 03 Nov 2025 05:30:31 +0000
Manifest this update: Mon 03 Nov 2025 05:30:31 +0000
Manifest next update: Mon 10 Nov 2025 05:30:31 +0000
Files and hashes: 1: eigW6Wl5dcrZNJsmsg8UyBqRTJg.crl (hash: 5qQOqPRc+ecA+JZq9oHDKOCZerQWXfoES7oFY5BPWuA=)
2: EF57F4D0646611EFA25D167EC4F9AE02.roa (hash: pbJq9Hwzg+Y00ha9CPERhZ1eVVAlCN5RZnZHCakXlK4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.crl
rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eigW6Wl5dcrZNJsmsg8UyBqRTJg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C18, serialNumber=7A2816E9697975CAD9349B26B20F14C81A914C98
Validity
Not Before: Nov 3 05:30:31 2025 GMT
Not After : Nov 10 05:30:31 2025 GMT
Subject: CN=69083df7-1c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:3d:a5:77:ce:6a:47:15:ee:1e:c1:53:b9:
07:1b:91:04:6b:51:eb:a5:de:38:aa:54:4a:64:0f:
36:4c:ef:32:15:20:3d:d5:eb:18:0f:9b:90:41:81:
00:7a:07:59:64:81:ec:94:f8:89:fd:c6:da:c4:4e:
ef:84:7b:64:0e:d2:c1:89:60:10:2e:9e:41:04:d6:
60:5a:50:c5:9d:7e:27:80:95:0d:54:43:79:82:21:
5e:90:6b:78:b5:43:57:23:6f:0b:42:c1:cf:01:30:
2f:8f:75:3d:6d:be:14:24:2b:1f:04:15:ce:c5:19:
4d:46:62:36:00:b0:9a:56:eb:60:81:29:66:fd:cc:
66:d7:76:0a:6e:98:cf:73:6b:3a:e8:b4:35:9f:be:
ac:79:e4:fb:47:9a:f0:51:dc:c4:3b:3e:cb:52:30:
d6:fa:24:e0:a8:69:bc:f2:0d:cb:ab:06:85:f5:5d:
c9:58:44:69:dc:d4:58:2d:21:94:7f:e7:32:5c:05:
89:c3:dc:90:98:c6:aa:eb:fb:e8:1b:b0:fe:71:c1:
9e:36:66:3a:c3:7a:8e:42:3f:a6:c7:48:e0:6d:c6:
66:59:0b:aa:7b:1e:0d:43:85:ca:3f:2c:e1:c1:3c:
54:96:14:3d:c6:98:69:a9:fe:0c:7c:3c:f2:2a:a7:
9e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:57:76:21:10:97:2B:82:6F:FA:64:3F:C8:30:4F:28:CB:E7:9B:89
X509v3 Authority Key Identifier:
keyid:7A:28:16:E9:69:79:75:CA:D9:34:9B:26:B2:0F:14:C8:1A:91:4C:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eigW6Wl5dcrZNJsmsg8UyBqRTJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:41:69:03:b3:1c:03:0f:82:8e:0b:24:b1:93:e0:7c:37:b4:
ac:70:d6:a4:19:cb:f7:07:5b:41:b3:60:59:ef:25:4f:4e:1c:
35:3e:e5:49:26:95:08:a9:ce:12:d3:39:81:28:5c:0e:e2:85:
bc:6c:ee:f6:cc:9a:ed:58:58:dc:55:6e:be:67:55:cb:6a:39:
0a:5c:b5:37:d1:78:a5:7b:e2:d8:e1:f5:13:49:a3:da:ed:d9:
88:a4:1c:ae:13:69:92:66:df:ba:86:29:2c:f9:27:6b:90:70:
df:7c:2c:99:f1:21:f4:bc:78:22:4c:ff:57:86:ec:f3:3a:71:
5d:85:df:08:fd:68:32:fc:d7:ae:23:0a:7a:29:15:be:2d:06:
fd:34:c6:23:36:be:d7:f0:37:98:f5:26:09:98:00:48:7f:ab:
4d:44:f9:31:2e:cf:38:cc:eb:f8:42:7d:3c:70:93:a2:04:46:
02:59:96:c7:fc:37:17:70:c7:c7:fe:2c:50:a6:59:93:3b:b5:
17:68:47:a5:32:b3:a5:a1:00:6b:4b:59:32:82:f4:b9:04:98:
dc:81:64:c2:70:06:aa:cc:b1:96:a6:cb:63:4b:cf:30:be:bc:
24:a8:03:d8:94:05:7c:38:77:52:13:56:4d:ea:41:63:d0:da:
5e:d0:43:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDBDMTgxMTAvBgNVBAUTKDdBMjgxNkU5Njk3OTc1Q0FEOTM0OUIyNkIyMEYxNEM4
MUE5MTRDOTgwHhcNMjUxMTAzMDUzMDMxWhcNMjUxMTEwMDUzMDMxWjAYMRYwFAYD
VQQDEw02OTA4M2RmNy0xYzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqhg9pXfOakcV7h7BU7kHG5EEa1Hrpd44qlRKZA82TO8yFSA91esYD5uQQYEA
egdZZIHslPiJ/cbaxE7vhHtkDtLBiWAQLp5BBNZgWlDFnX4ngJUNVEN5giFekGt4
tUNXI28LQsHPATAvj3U9bb4UJCsfBBXOxRlNRmI2ALCaVutggSlm/cxm13YKbpjP
c2s66LQ1n76seeT7R5rwUdzEOz7LUjDW+iTgqGm88g3LqwaF9V3JWERp3NRYLSGU
f+cyXAWJw9yQmMaq6/voG7D+ccGeNmY6w3qOQj+mx0jgbcZmWQuqex4NQ4XKPyzh
wTxUlhQ9xphpqf4MfDzyKqeeswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlXdiEQ
lyuCb/pkP8gwTyjL55uJMB8GA1UdIwQYMBaAFHooFulpeXXK2TSbJrIPFMgakUyY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEMxOC83MTJDRjBEODY0
NjYxMUVGOEUxOEY4N0FDNEY5QUUwMi9laWdXNldsNWRjclpOSnNtc2c4VXlCcVJU
SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VpZ1c2V2w1ZGNyWk5Kc21zZzhVeUJxUlRKZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MEMxOC83MTJDRjBEODY0NjYxMUVGOEUxOEY4N0FDNEY5QUUwMi9laWdXNldsNWRj
clpOSnNtc2c4VXlCcVJUSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBOQWkDsxwDD4KOCySxk+B8N7SscNakGcv3B1tBs2BZ7yVPThw1PuVJ
JpUIqc4S0zmBKFwO4oW8bO72zJrtWFjcVW6+Z1XLajkKXLU30Xile+LY4fUTSaPa
7dmIpByuE2mSZt+6hiks+SdrkHDffCyZ8SH0vHgiTP9XhuzzOnFdhd8I/Wgy/Neu
Iwp6KRW+LQb9NMYjNr7X8DeY9SYJmABIf6tNRPkxLs84zOv4Qn08cJOiBEYCWZbH
/DcXcMfH/ixQplmTO7UXaEelMrOloQBrS1kygvS5BJjcgWTCcAaqzLGWpstjS88w
vrwkqAPYlAV8OHdSE1ZN6kFj0Npe0EOL
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:11:32 2025 by rpki-client