
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft
File: JXjLyvyiaxcgV-N6t3phyBAyIi0.mft (raw, json)
Hash identifier: wW1oxXaVIPSFNNb13sYDUWjE79ymC6ZIkeVC90Y+xYo=
Subject key identifier: 73:4A:38:A4:F8:6A:6A:4D:89:D8:2E:B1:17:6F:2A:23:1B:88:81:A8
Authority key identifier: 25:78:CB:CA:FC:A2:6B:17:20:57:E3:7A:B7:7A:61:C8:10:32:22:2D
Certificate issuer: /CN=A9137AD6/serialNumber=2578CBCAFCA26B172057E37AB77A61C81032222D
Certificate serial: 038C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft
Manifest number: 037F
Signing time: Wed 05 Nov 2025 00:57:03 +0000
Manifest this update: Wed 05 Nov 2025 00:57:02 +0000
Manifest next update: Wed 12 Nov 2025 00:57:02 +0000
Files and hashes: 1: JXjLyvyiaxcgV-N6t3phyBAyIi0.crl (hash: VeDVYfy3rWjNdrn3Wce335CnWTpziKCv44nQGWFboX4=)
2: 2595D7A6063111EDB15E2E5FC4F9AE02.roa (hash: j4AbAcrSNJQt4KCCfWgLsvvoSyCYqNIdVPPppm3Zn7E=)
3: 7142AA1A062E11EDA95B3143C4F9AE02.roa (hash: sAHMyFBwbehSytK0bjkDhBpvCN1HCAvo6oyZeTkv4Hs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.crl
rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:57:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 908 (0x38c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137AD6, serialNumber=2578CBCAFCA26B172057E37AB77A61C81032222D
Validity
Not Before: Nov 5 00:57:02 2025 GMT
Not After : Nov 12 00:57:02 2025 GMT
Subject: CN=690aa0df-8ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:b6:4c:51:0c:82:e7:15:7c:6c:cb:a3:71:
5c:93:5d:cd:31:37:b6:52:09:4b:f2:53:56:11:90:
f5:ab:d6:57:3b:7f:89:d6:4b:bc:38:75:a2:43:97:
2d:65:9a:c8:f0:ba:87:03:43:ac:11:dc:07:15:81:
87:37:68:70:fe:8c:c0:04:a2:0d:c7:af:88:bd:de:
7a:21:ad:fe:34:a5:97:c3:8e:e0:e0:bb:55:69:44:
e3:8c:70:af:a9:d1:00:1a:ea:91:05:ec:9f:77:49:
e0:6a:bc:aa:c3:38:c2:4b:28:67:e8:fa:c8:9f:de:
03:c1:85:f4:51:2f:86:c7:13:e1:4b:39:91:62:03:
05:a9:21:89:c4:93:8c:a3:04:1d:b8:de:ff:93:31:
30:7b:09:af:d6:7e:24:9c:88:72:6e:ec:e3:9f:cc:
8a:66:b7:99:c3:85:f0:2d:43:78:d9:24:9f:c2:da:
34:9b:0a:c8:54:94:07:53:c8:55:98:b0:ad:bd:cc:
8b:24:62:6c:9a:db:26:7d:dc:8a:92:a0:9e:a9:31:
a2:e8:bf:ad:35:3a:b0:67:6e:7b:bf:e0:19:c2:6e:
f4:ac:33:6a:52:18:44:1e:0b:df:5f:cf:67:89:74:
15:83:b0:eb:85:c7:18:d0:ad:1b:d3:3a:19:e4:2d:
69:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4A:38:A4:F8:6A:6A:4D:89:D8:2E:B1:17:6F:2A:23:1B:88:81:A8
X509v3 Authority Key Identifier:
keyid:25:78:CB:CA:FC:A2:6B:17:20:57:E3:7A:B7:7A:61:C8:10:32:22:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e2:22:41:cd:ca:2e:11:74:30:33:fd:92:5e:41:8c:38:e5:
d2:23:f7:be:3c:c4:4e:0d:a6:c6:1d:63:cb:6c:64:a0:90:cd:
af:2d:14:25:ca:fa:41:02:08:92:73:35:27:d8:03:ce:cb:7d:
ed:dd:d4:22:8f:9f:ac:9c:2e:e6:df:fa:14:c8:79:3c:19:3b:
80:4b:20:76:89:50:cc:8d:53:1d:95:38:4f:ad:b2:7d:30:2e:
96:be:86:06:33:9c:65:46:2f:96:d0:00:7d:6a:f2:6c:0b:97:
a3:08:46:e7:18:e3:44:07:e4:a7:ba:54:bb:48:e7:f6:de:29:
5b:6a:5e:2b:3b:37:6a:d2:7b:e7:5c:4c:a7:2c:fb:dc:a7:81:
b1:f3:12:34:5f:8a:a9:95:46:e8:34:6f:4d:8d:b9:41:29:cf:
ba:32:f5:30:46:73:5f:75:e5:c6:fe:8e:1f:02:0b:aa:02:71:
fb:a5:ec:e8:e6:db:af:af:ca:f0:a6:92:88:bf:79:ee:67:91:
25:33:70:1e:aa:86:db:ca:17:34:05:bd:41:97:3a:ce:99:a0:
d3:50:d5:b9:06:a0:db:e4:51:5a:7f:23:92:46:f5:f0:4b:6a:
7b:dc:b5:1a:5f:99:ef:a7:9d:42:e0:8b:fa:26:79:23:ed:99:
1b:ce:21:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 03:44:51 2025 by rpki-client