
$ rpki-client -vvf rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.mft
File: jegu_2I015t6ZfpgoFMAfagoH8w.mft (raw, json)
Hash identifier: tDs8i5zEkS8+YqnUmgKgCR2OnRnt9aQBZeqMi9XXcDc=
Subject key identifier: CB:CA:55:01:4C:35:47:A7:58:16:9D:9D:AF:1C:A3:AE:FC:62:7B:84
Authority key identifier: 8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC
Certificate issuer: /CN=A91846F6/serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC
Certificate serial: 013E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.mft
Manifest number: 0129
Signing time: Wed 05 Nov 2025 04:57:40 +0000
Manifest this update: Wed 05 Nov 2025 04:57:39 +0000
Manifest next update: Wed 12 Nov 2025 04:57:39 +0000
Files and hashes: 1: jegu_2I015t6ZfpgoFMAfagoH8w.crl (hash: 8VI+3uHBsnt8yz4aQAngb/wPDuYsXxJ5AbpKQxd5bko=)
2: F71189FC0C3211EF98143258C4F9AE02.roa (hash: reefmtxXKi+/gWC+9S8F/zZ7mqxwpD0bAooamso9MX4=)
3: 21D692500C1E11EFBA32F937C4F9AE02.roa (hash: 2jde0CpJYt4VQjpiZa5Ac6Hum8L7zsXqwLbnIb3TjBc=)
4: 591DB9860C1F11EF9FC57C84C4F9AE02.roa (hash: q9ONqjSdzy+JisPTZwqoRB+SzsCldHkNYOddjkBH7o0=)
5: 269D906E0C1D11EF87936F72C4F9AE02.roa (hash: cCPTzsKv+Z9rgELHQkd6kxTTz90aehVs2WJq3FX4H1s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl
rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318 (0x13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91846F6, serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC
Validity
Not Before: Nov 5 04:57:39 2025 GMT
Not After : Nov 12 04:57:39 2025 GMT
Subject: CN=690ad943-8ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ba:ef:24:58:a0:c8:c8:69:3c:9a:71:13:40:
b1:93:9f:ed:1a:3c:66:55:2a:fe:3a:21:cf:df:af:
d2:11:a3:cf:3a:15:a6:b0:94:c7:c4:f5:c0:e4:30:
8e:4c:a7:b4:ef:dd:16:04:30:83:02:eb:27:cc:ae:
6b:51:86:f5:a5:11:ba:04:93:42:23:0b:d3:4a:22:
72:e6:41:93:54:35:24:c4:c1:71:80:32:a8:1d:bc:
e7:b0:9d:38:b1:b2:6c:b2:5e:ad:98:fd:c7:32:fd:
1d:c6:1d:76:aa:99:31:4c:24:1d:35:d1:d8:71:cc:
ad:50:85:ef:1b:ea:6e:11:06:c9:bd:4b:5b:3f:8a:
28:b4:30:d5:c0:fb:b2:95:7e:24:9f:ac:e3:e3:a9:
7f:1b:05:43:76:4f:34:0d:a0:d8:a1:2f:01:0a:a4:
73:de:06:43:5f:f8:75:32:41:5c:f5:c6:8f:c4:20:
7c:96:9b:fe:df:f2:1a:0d:82:df:91:5f:5e:90:74:
16:49:14:6d:5e:4e:4e:83:d4:8e:fc:21:d1:93:25:
e1:be:92:5a:7c:df:3d:1b:63:e6:64:b9:c6:63:04:
a6:08:cb:00:cd:19:b1:a3:9b:ce:5d:4e:0a:cf:88:
1d:16:f5:43:fb:0f:33:55:1f:c0:4f:1c:7e:9f:ac:
bc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CA:55:01:4C:35:47:A7:58:16:9D:9D:AF:1C:A3:AE:FC:62:7B:84
X509v3 Authority Key Identifier:
keyid:8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:2a:ea:a9:f5:d6:5b:bf:ae:e5:ae:49:82:47:7a:f2:d3:58:
c2:d0:f9:c5:72:08:7f:45:5e:a4:dd:5d:06:71:f0:31:5d:7f:
0c:a8:ab:83:5f:7d:f4:bd:05:1e:c0:6e:d4:11:68:2f:fb:a3:
f0:24:1f:32:ee:a2:d5:1d:ac:d0:12:d8:4e:85:e7:a1:f1:45:
8b:ed:73:0b:f3:69:bb:fd:7f:90:a1:b1:59:8f:a3:0b:11:d9:
96:99:c4:45:43:04:75:14:8f:4b:f1:e1:7b:b9:9c:5a:17:3d:
56:1d:c2:18:cf:25:96:df:48:c6:a7:7a:5f:0b:3d:2a:79:81:
62:a4:a7:10:79:ab:81:3f:88:d2:8a:b7:ca:30:21:fc:0f:78:
de:4a:97:3b:2c:88:81:6b:16:76:13:22:4c:46:ac:79:e7:b3:
f2:39:75:5f:ba:7f:ac:f4:30:a9:be:04:71:b9:3f:69:27:aa:
22:5f:85:57:f4:06:9f:b5:c7:d6:95:8a:1d:d3:68:a8:3f:fc:
87:d6:43:ac:f0:e9:2f:88:9f:2c:8c:e3:7b:1c:14:6f:c0:9f:
a9:a4:f7:84:b6:20:6d:ff:bf:69:46:dc:72:23:92:33:08:2c:
df:56:00:9b:e4:da:00:6d:9d:1c:d7:79:2c:11:14:a3:01:8e:
22:66:21:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:14:40 2025 by rpki-client