
$ rpki-client -vvf rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
File: JMzoDfDUim0MORo68N1kTdv7das.mft (raw, json)
Hash identifier: 5HyNXQbu8MQrabjBoIUxZu9TK9AC2b0H0dPpm4qwQag=
Subject key identifier: E3:DA:F8:28:9A:FB:78:ED:45:34:A3:86:92:18:B8:98:54:69:7A:CD
Authority key identifier: 24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB
Certificate issuer: /CN=A918769B/serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
Certificate serial: 037A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
Manifest number: 0373
Signing time: Wed 05 Nov 2025 00:58:34 +0000
Manifest this update: Wed 05 Nov 2025 00:58:34 +0000
Manifest next update: Wed 12 Nov 2025 00:58:34 +0000
Files and hashes: 1: JMzoDfDUim0MORo68N1kTdv7das.crl (hash: nI97AGPKdFhOv79uIppllcYxmOPtjrpd/KzrX03Z5Cc=)
2: D8D89576CF2F11EC8378951DC4F9AE02.roa (hash: hLXl6/Z8LuNjbKfmjM+o1Rss4EPhppx+VpRuw3V1cZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl
rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:58:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890 (0x37a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918769B, serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
Validity
Not Before: Nov 5 00:58:34 2025 GMT
Not After : Nov 12 00:58:34 2025 GMT
Subject: CN=690aa13a-ab60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9e:a3:b8:a2:1f:99:0b:33:ad:61:34:88:d7:
6d:64:3f:c0:11:2e:d0:f3:10:30:cb:e7:8f:67:6c:
7d:26:2e:b3:3a:da:a3:3c:9d:0c:ff:d1:e7:fb:5d:
8f:7f:24:a4:2e:2b:38:89:86:e6:d2:9f:93:56:1b:
c0:48:52:49:24:a7:46:ae:82:1c:4b:c9:2e:69:28:
b5:58:d5:ca:5b:9e:40:f0:2d:5d:a1:f8:5b:18:0a:
a8:78:c3:3e:25:24:9e:6f:97:07:8f:7b:2a:b0:68:
dc:cb:60:22:bb:de:ce:ef:3b:34:37:f8:23:52:af:
da:8f:13:6c:60:8e:84:ef:0b:d9:3c:98:66:eb:0c:
18:68:5f:b3:d8:be:77:26:26:9f:dc:0e:34:fb:8c:
4a:67:5f:56:6e:2c:d5:40:21:48:e5:ec:a1:9e:65:
41:63:1f:23:93:5d:d2:0c:8c:75:12:65:9a:6c:a6:
cc:18:2e:f0:fe:65:57:2e:4a:f5:39:f3:83:dd:e3:
2b:d8:3a:7e:3b:2d:50:09:fd:5f:60:22:05:03:2c:
82:ab:06:f5:11:9b:0e:db:dd:e1:ae:04:3b:81:06:
bd:12:1e:68:5c:20:2d:57:b0:1c:93:ed:6a:a1:ab:
cf:77:74:76:6f:92:ce:2c:8b:f0:47:6b:95:80:67:
f6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DA:F8:28:9A:FB:78:ED:45:34:A3:86:92:18:B8:98:54:69:7A:CD
X509v3 Authority Key Identifier:
keyid:24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:8a:d8:fb:45:02:a3:0e:62:c6:42:02:b1:8a:b2:4d:06:a2:
b3:18:88:b3:e8:80:6a:ca:37:3e:0f:90:d5:2b:ff:f8:bd:81:
e6:42:b5:0c:89:bd:d5:1a:b4:d5:15:c6:de:90:77:a0:e0:59:
9f:2b:56:78:44:8c:d4:2f:f9:c0:26:15:fd:57:61:71:55:fe:
d1:a5:28:ce:10:7a:54:6f:07:5b:5a:32:a0:8b:df:15:98:35:
f1:11:c2:e5:36:41:b5:4d:96:e4:15:da:39:e0:cc:7e:d4:22:
45:ac:19:45:1e:fd:87:af:d8:df:4e:52:fe:84:bb:30:63:85:
a3:13:dd:24:8e:1f:f3:58:44:7e:12:12:f2:17:65:22:79:1b:
a7:de:a4:84:34:91:72:80:cd:f7:75:d4:48:a2:e0:89:f7:5c:
51:52:1c:f6:37:75:ec:91:e1:6d:7f:da:07:92:6d:25:54:b8:
7f:18:8f:02:b8:c6:75:22:7a:64:ae:22:62:ec:85:0a:93:da:
1d:17:ea:9a:86:e1:d4:a9:b8:b1:2e:c4:5a:ef:ff:d1:74:ac:
7e:ec:4e:17:2c:74:4f:3e:3d:04:6b:81:48:f1:d9:9a:a2:83:
7b:f6:4a:f7:0d:4b:e3:d0:59:86:3c:fc:fc:15:92:75:c6:b0:
1f:82:cf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:41:12 2025 by rpki-client