
$ rpki-client -vvf rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft
File: Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft (raw, json)
Hash identifier: 4pkvbdnRcYNVDmRyWYR2Q3Tbd5u5LJeIV7I+HOEmKkI=
Subject key identifier: 81:64:4F:85:E2:E7:E3:58:1D:AA:0E:F1:1F:3D:08:BF:F0:11:2E:BD
Authority key identifier: 27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C
Certificate issuer: /CN=A919495D/serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C
Certificate serial: 050D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft
Manifest number: 0502
Signing time: Tue 04 Nov 2025 23:47:12 +0000
Manifest this update: Tue 04 Nov 2025 23:47:12 +0000
Manifest next update: Tue 11 Nov 2025 23:47:12 +0000
Files and hashes: 1: Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl (hash: CgqtaSS7JE6zW7hc1TyZe95l8L3+6s6IYFRXx9tOzeo=)
2: 200E2B0059A011EC83255663C4F9AE02.roa (hash: /R9JZ26EKIRVQE7fNMtoVyMx8zlmWtOsK2Jrv8Lzto4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl
rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 23:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1293 (0x50d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919495D, serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C
Validity
Not Before: Nov 4 23:47:12 2025 GMT
Not After : Nov 11 23:47:12 2025 GMT
Subject: CN=690a9080-3078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:70:21:ca:fc:79:fd:c2:2e:f7:a2:d0:e6:
37:af:49:25:58:22:7d:ba:cc:27:0c:a6:c1:a8:d7:
23:5e:1d:a0:45:e3:ce:4d:97:c0:0c:1e:28:b9:ab:
b8:ae:3b:2c:24:af:f5:16:a9:ee:6f:e1:60:75:6b:
99:cc:e0:96:8d:4d:c4:44:7d:8e:3d:96:53:5c:d8:
78:1b:34:54:0b:0e:60:6c:77:ae:f9:4f:c9:73:af:
32:f2:bd:9a:bd:ec:0c:2c:2d:9e:41:6c:25:0d:18:
56:e4:c8:79:cb:c6:85:54:c2:0b:20:4f:98:a7:e0:
cb:0b:7a:c5:63:38:38:41:fd:31:23:c2:b4:11:0d:
55:7c:e8:9d:47:16:ba:d8:bd:f5:e0:f8:09:5a:64:
d8:61:ab:0a:dc:e3:91:5f:61:b0:d0:3a:0e:f9:bf:
18:98:90:b4:ed:84:83:fd:bc:a5:a2:24:34:1e:e3:
35:82:06:9f:00:67:55:9b:50:0a:4c:10:1d:34:3c:
0c:4e:a1:1e:d8:31:56:70:94:f4:37:7b:a6:46:5f:
36:54:63:27:28:1c:f7:ef:cb:46:41:14:7f:85:58:
c4:c7:bd:3a:34:44:26:35:93:12:a6:0a:48:c7:cc:
37:ce:e3:43:cb:f5:40:83:fa:e0:0c:dd:e9:08:cb:
4a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:64:4F:85:E2:E7:E3:58:1D:AA:0E:F1:1F:3D:08:BF:F0:11:2E:BD
X509v3 Authority Key Identifier:
keyid:27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:2e:86:e0:80:2e:a7:7b:49:f3:dc:f7:cc:d9:91:f0:13:e2:
83:07:61:e0:b9:07:17:83:a7:70:c6:2c:03:32:99:77:37:28:
2c:2f:52:aa:e5:b4:7f:2c:76:69:1f:56:79:81:57:6a:ab:43:
38:0d:33:95:55:25:4d:30:b5:5a:85:18:60:7c:d0:a0:7e:e1:
55:83:3b:01:85:46:1f:9b:f9:c3:25:08:77:3b:09:d8:52:54:
0a:c8:24:25:a6:d1:84:43:a7:10:02:68:2e:3c:ce:4b:0b:56:
84:33:c8:67:0a:50:36:ee:7d:04:2a:df:e0:ae:9e:0c:4c:f7:
f8:2d:b7:c1:3a:bd:aa:f3:10:b7:dd:5d:5b:74:96:88:2e:43:
56:c6:a3:e7:a9:20:47:31:19:78:a6:6c:0a:ee:0a:0a:c0:68:
d2:b8:4c:b9:3d:77:f7:3e:8e:8c:85:54:37:8b:10:06:c3:d0:
e7:2a:cc:8e:ba:12:a1:27:e2:fc:12:63:a5:c5:e6:ce:3f:2e:
fa:3e:cb:a0:0e:ac:95:e0:2f:1e:37:2d:7f:25:67:70:54:5d:
bc:3e:89:01:4c:ab:d9:b8:58:5d:67:bc:1a:23:06:48:cd:02:
94:66:c2:79:a8:44:84:88:4b:71:e7:10:01:5f:18:4f:77:d2:
57:c5:d0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:42:48 2025 by rpki-client