
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
File: JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json)
Hash identifier: kJuaofUojd1AFgmlcVeCoZUs0NrPnS9+u0G0VdOJaCQ=
Subject key identifier: 22:90:19:84:4C:DE:E8:AE:BD:A3:86:6D:82:BB:22:F8:6B:86:C4:FF
Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B
Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B
Certificate serial: 0377
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
Manifest number: 0351
Signing time: Wed 05 Nov 2025 01:07:53 +0000
Manifest this update: Wed 05 Nov 2025 01:07:52 +0000
Manifest next update: Wed 12 Nov 2025 01:07:52 +0000
Files and hashes: 1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: naEwbmsqCQkNGmF+6pcA/I+eELNon9xyvm/hi413V2s=)
2: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: aCiTo8r6/YizGBxfvK+82W96JeKhKg5t3eb9WI+OofU=)
3: 28A46886845B11EFA46A8F64C4F9AE02.roa (hash: fvVxyFpJKv2/Kv82D1rdU5ie/2GisD974gz0+Vt1t6k=)
4: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: aCk5dw5oxFHrUmANk28KoR3AF4mj3OF8t0MW7sG5Ktg=)
5: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: b4RibpoJMhsqMgrvgCz+wbq8oYJevPHAnDjdAidam1w=)
6: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: kMLH0aZXrux27E1RrjydkAHducxB7OKoxs3uQTrKzTI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl
rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887 (0x377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B
Validity
Not Before: Nov 5 01:07:52 2025 GMT
Not After : Nov 12 01:07:52 2025 GMT
Subject: CN=690aa369-4660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:04:06:2d:90:46:40:b6:2c:bf:96:5b:d6:
8b:b2:a1:f1:ec:54:f6:95:e9:69:dd:9a:eb:0e:cd:
42:2d:f4:28:7c:9b:15:b2:a6:b2:ee:bd:5f:30:d3:
4d:64:42:03:d0:5a:c3:7b:0a:e9:ba:79:e3:ef:b6:
b2:c8:90:28:bc:d1:7b:dd:36:b4:33:80:c0:00:09:
3e:c9:92:b7:82:e7:41:dd:2d:b3:48:54:44:97:c3:
a8:58:d5:59:ad:b1:00:87:20:94:3d:60:66:1f:f9:
f6:cf:4a:73:02:98:52:1a:d9:80:6d:aa:4e:c9:dd:
64:8c:05:a8:48:4a:7a:76:31:f6:0f:70:44:ef:72:
04:89:b7:98:a4:a9:8f:38:b9:1d:a5:79:08:f8:2f:
99:a9:dc:91:be:06:09:75:17:e9:21:8d:da:54:13:
a2:1e:70:78:8f:09:04:98:cd:e3:10:56:73:d3:03:
11:f5:c1:79:71:ee:b6:d5:3f:ac:38:31:ce:59:8d:
8b:7e:ab:bb:42:42:a3:41:4d:26:e9:17:8c:04:06:
42:b0:9e:7e:18:4c:f2:18:73:7b:a8:b8:42:e6:db:
e1:61:f2:e3:39:99:82:64:95:50:6b:19:fb:07:e9:
df:f0:4a:f5:ac:f2:92:54:b9:01:69:31:2a:a0:9a:
94:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:90:19:84:4C:DE:E8:AE:BD:A3:86:6D:82:BB:22:F8:6B:86:C4:FF
X509v3 Authority Key Identifier:
keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:02:ce:b2:e0:c4:a0:23:ba:07:1b:e9:ec:1b:89:82:04:ca:
c4:85:81:24:0c:b5:c1:35:d7:c9:e5:88:64:d8:24:83:d6:86:
d8:7e:2a:81:de:bb:74:b9:c3:71:b9:b3:46:fb:c5:78:80:03:
08:a7:66:1b:e9:6a:a8:36:0b:38:95:06:25:e7:3f:31:53:11:
98:aa:78:78:39:0b:a9:a6:2b:eb:65:cc:ee:69:45:04:68:3d:
7c:dc:1f:c4:71:d3:73:92:d1:65:94:82:9b:4b:b8:4e:63:e2:
ce:6b:2b:ec:c2:8e:bd:27:74:b7:38:60:e6:37:2b:45:bb:c5:
4b:9b:dd:4f:fe:bd:86:0b:7b:36:68:b9:68:93:32:af:57:57:
b3:b4:54:5d:26:7d:42:f6:5b:f2:4a:47:d1:3e:dc:d5:28:d0:
37:a6:ec:a7:43:48:ec:2f:12:86:7e:1d:1d:e4:e8:18:2d:3d:
5e:14:31:4b:34:ce:5f:a4:2c:76:bd:88:a7:06:a5:47:08:21:
f7:9b:bc:a1:7e:e2:ab:54:1d:80:04:62:6f:58:1a:a8:73:58:
df:d9:c5:4b:4c:2d:44:7c:68:c1:7e:44:39:5d:68:27:5c:3a:
42:87:8b:69:db:be:e7:b5:c8:4c:d9:c2:62:ae:f8:e0:e4:6d:
3d:5f:8b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:04:25 2025 by rpki-client