
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
File: JYXaC5gKR_66DiNSBd7uQC8gs8s.mft (raw, json)
Hash identifier: Wxr5QS4kKV1fOqP+FFrlSjyofxd5Kz0k702mbrIsujQ=
Subject key identifier: F9:E7:35:EC:F9:D4:A5:0B:D4:B8:02:1E:10:59:67:86:95:99:1A:DB
Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB
Certificate issuer: /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
Certificate serial: 351B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
Manifest number: 34F2
Signing time: Tue 04 Nov 2025 14:56:49 +0000
Manifest this update: Tue 04 Nov 2025 14:56:48 +0000
Manifest next update: Tue 11 Nov 2025 14:56:48 +0000
Files and hashes: 1: JYXaC5gKR_66DiNSBd7uQC8gs8s.crl (hash: TBxMyuSPmNIFLgYADuedyzd9slMGghxrXnRwvRm2E/Q=)
2: AE0AC88EBBF511ECAA816D52C4F9AE02.roa (hash: 5AL2LBzCru+E3YFyKW2P0tt8Zy0ls3uab/1OsnqWv48=)
3: B054EA98BBF511ECAA816D52C4F9AE02.roa (hash: q930PNLNWH/Z46J1d9nklohyp9ezYTSOPJVhEtOZ6aE=)
4: AF00AECABBF511ECAA816D52C4F9AE02.roa (hash: GKpbMiXXQOymixNs7kIDcgllt5ej3XEvlSe8jG36fFc=)
5: 547D2C14BBDF11ECA1F12A0DC4F9AE02.roa (hash: y580eZMTmYYpiPdGANCgGD9h1bATBcJx0pEL7nWorJ4=)
6: 9343CE6EE07211E7995BD42EC4F9AE02.roa (hash: RmtTkfUtODi3Cy7Cko14SjhPi0et23qfIOBSZSmBkOI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl
rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13595 (0x351b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B63C, serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
Validity
Not Before: Nov 4 14:56:48 2025 GMT
Not After : Nov 11 14:56:48 2025 GMT
Subject: CN=690a1431-6179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:57:e6:2d:53:23:07:ed:c7:48:9b:8a:47:4c:
ec:8e:7f:d2:4d:b2:67:d5:cd:42:10:92:35:76:73:
a2:70:f3:30:c9:c3:89:fd:13:1b:63:16:f7:71:07:
bd:82:b8:d4:fb:27:9a:d9:36:de:07:cd:04:3a:c7:
a1:a4:15:48:8a:cf:ab:e1:86:a2:a1:8c:bd:50:e7:
5c:b6:16:b9:18:9c:78:ec:b8:2e:ac:e2:2e:fb:b4:
b3:1a:14:5b:2f:59:cf:7f:5e:20:84:43:54:bc:1f:
af:4b:4b:a3:e0:7a:c2:ed:0e:93:19:cf:14:08:86:
e6:a8:8c:41:84:90:62:e6:32:14:5f:21:85:ac:02:
41:7d:9d:0c:38:d9:9f:f9:e9:b2:07:65:1a:68:11:
8e:9c:52:1b:e5:22:7e:d2:1b:5e:2b:2c:cb:01:47:
5e:69:b2:db:fc:75:96:43:3c:91:d9:2e:96:83:bd:
db:a0:b1:50:8c:28:fe:41:61:e8:5f:6e:64:49:32:
35:99:2f:0b:ee:98:1b:db:87:a8:b4:2a:81:a8:03:
48:b5:5d:21:9c:3b:fb:97:bb:d3:24:8c:22:c0:d6:
c4:c7:c6:2d:11:d7:52:b1:4b:fa:73:6c:3a:97:6c:
da:47:62:f6:ec:44:1d:d1:fa:cd:50:98:ea:8c:af:
b0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E7:35:EC:F9:D4:A5:0B:D4:B8:02:1E:10:59:67:86:95:99:1A:DB
X509v3 Authority Key Identifier:
keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:af:04:a4:bc:91:9f:d1:f0:2c:98:ad:a2:ed:4a:c5:9a:55:
d0:bf:d8:f5:79:e2:1d:59:52:49:ec:c7:fc:a4:15:a4:14:15:
29:9e:05:d7:c7:ea:ad:6b:da:9c:45:5a:23:37:51:3e:10:6f:
1a:9e:d4:74:e9:2d:04:c0:28:b3:3e:13:02:e4:72:ea:c4:ec:
15:ae:62:52:33:3b:81:27:7e:15:d5:65:8e:bf:4d:b1:a3:4d:
61:e0:10:5a:d4:94:d1:b2:a7:ed:1a:bb:8e:f9:18:bb:ea:52:
d9:99:97:8f:88:70:b9:f1:e4:c8:96:62:ec:db:56:4d:0f:79:
ad:59:c5:b1:29:5a:b8:d2:d8:88:1a:4e:03:02:fc:56:ee:ad:
91:bd:5a:01:1e:91:f5:a6:54:a0:bd:4c:2d:81:4f:56:c5:54:
8a:f0:67:31:46:8b:a6:fb:d0:85:bf:1a:6e:92:49:6c:c4:d7:
c8:82:b7:31:ce:f9:3b:23:23:d2:39:ef:c8:3b:cc:5b:91:17:
e7:8a:13:5e:fc:67:e9:ae:55:4b:40:22:93:1f:ea:7a:be:82:
bc:31:4d:60:89:05:bc:37:ef:b8:c4:e6:ad:4e:68:e0:53:e0:
6c:86:59:d5:d3:76:cb:5e:41:12:f3:fd:b7:2a:f4:2a:6e:b2:
c6:cd:02:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:00:25 2025 by rpki-client