
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
File: E7lE6lgzzbdBH9TsaqHJYs87CIA.mft (raw, json)
Hash identifier: Sc0kdg6hn4ESosSNQ1U0N4zOX11+8UA42w1MJLN7LQQ=
Subject key identifier: B1:F6:F9:4A:C9:69:41:23:7A:64:3B:79:E9:70:E4:DF:6A:2D:24:BE
Authority key identifier: 13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80
Certificate issuer: /CN=A91FCF44/serialNumber=13B944EA5833CDB7411FD4EC6AA1C962CF3B0880
Certificate serial: B0
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
Manifest number: B0
Signing time: Wed 05 Nov 2025 05:38:29 +0000
Manifest this update: Wed 05 Nov 2025 05:38:29 +0000
Manifest next update: Wed 12 Nov 2025 05:38:29 +0000
Files and hashes: 1: E7lE6lgzzbdBH9TsaqHJYs87CIA.crl (hash: mxR0A3Pg/f4k8ZeTLh3vXkzYX1R7k+Ggq3zIqjBkur8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.crl
rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:38:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176 (0xb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCF44, serialNumber=13B944EA5833CDB7411FD4EC6AA1C962CF3B0880
Validity
Not Before: Nov 5 05:38:29 2025 GMT
Not After : Nov 12 05:38:29 2025 GMT
Subject: CN=690ae2d5-a702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:83:94:5b:67:ff:98:17:09:4c:d3:6a:83:
80:95:14:5a:96:87:db:ab:75:5b:95:62:87:1c:9c:
b6:1f:30:54:b3:ca:11:f5:64:eb:23:b3:8a:96:aa:
62:56:a9:21:4c:c0:bb:fc:b7:29:64:8c:e3:a0:ca:
ae:9e:61:70:93:7d:af:ea:33:5b:8c:c8:e2:27:17:
1b:0c:98:0d:71:b8:36:3d:3c:b0:a3:c0:35:99:0a:
92:ad:cf:a9:4b:5c:fb:15:02:87:e5:74:26:fd:94:
7e:50:3b:64:38:af:bd:e8:4d:7b:e1:8c:c3:2d:1e:
40:56:5e:f4:ee:b3:0b:cf:74:e5:2c:2b:b0:90:7c:
a6:df:c6:ae:1b:56:e7:d0:3e:10:4e:b4:c6:1d:42:
eb:b2:d4:71:71:ff:8d:80:87:90:d6:18:e7:07:70:
a0:1c:8d:2f:a3:18:ad:93:7d:24:78:77:c1:58:dd:
13:57:ba:70:ae:27:79:74:54:7e:7d:cf:17:0f:4e:
ae:c0:26:05:f2:3b:71:91:df:2a:83:eb:b6:61:db:
92:14:1f:f6:b7:d3:0e:f9:61:31:34:4f:56:07:00:
7a:ac:98:0c:41:dc:d5:e7:81:43:a9:c2:b5:c6:42:
be:2b:13:d9:e5:66:65:c4:f7:46:1a:a6:24:b7:4e:
29:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F6:F9:4A:C9:69:41:23:7A:64:3B:79:E9:70:E4:DF:6A:2D:24:BE
X509v3 Authority Key Identifier:
keyid:13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:86:f5:35:2c:f0:1a:a3:75:ea:7d:18:cf:42:8e:19:98:9e:
4e:01:46:93:92:60:eb:b0:7e:65:5b:a2:6d:63:97:69:45:d1:
b2:fc:b2:94:6d:99:89:12:d5:3d:ab:b3:6e:a2:56:a1:1a:33:
44:55:c4:19:89:28:94:dd:b6:3b:8a:78:ec:e2:b6:76:97:f6:
cc:ca:3e:28:9e:76:0b:bf:9c:0e:98:31:cd:97:a3:50:fe:6b:
57:74:cb:a1:1d:99:6a:cc:c2:a0:b3:d8:40:34:7a:6b:bb:c7:
51:8b:24:e5:e3:47:77:9e:07:ef:a4:8a:e4:9d:97:e2:6d:0c:
96:32:9a:99:34:79:81:31:9d:7e:e6:6b:bb:15:58:5f:9a:f4:
f4:26:60:5a:6c:1f:a4:d1:e5:d4:f8:2c:3a:e2:c7:a0:e6:3a:
d4:8a:9f:80:3c:47:c6:54:12:b7:bd:ca:cf:37:f6:6e:34:05:
f4:fb:30:f8:11:24:41:32:a8:e7:f9:2c:a2:7f:a7:d7:36:81:
22:d0:34:7f:09:f3:37:f6:f3:83:25:0d:c9:4b:a5:ce:e9:9a:
1b:d5:92:86:38:58:1a:f2:19:32:8f:8d:57:32:7a:ea:d4:bb:
c4:45:73:59:32:6c:ab:08:e3:e1:9e:25:bc:43:f2:81:53:60:
7f:ea:ee:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:57:02 2025 by rpki-client