
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft
File: jxv350cnod5CAcTAU1X-sX8hviA.mft (raw, json)
Hash identifier: pQOwoJepszSY9D46XWwpG5rUidkLLAr/cRv8qy+UpGM=
Subject key identifier: 6C:FA:10:37:5F:2E:EF:93:F1:EA:21:2D:9E:79:EA:2A:9F:AF:4C:1F
Authority key identifier: 8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20
Certificate issuer: /CN=A919B7ED/serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20
Certificate serial: 07CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft
Manifest number: 07BF
Signing time: Tue 04 Nov 2025 21:28:20 +0000
Manifest this update: Tue 04 Nov 2025 21:28:20 +0000
Manifest next update: Tue 11 Nov 2025 21:28:20 +0000
Files and hashes: 1: jxv350cnod5CAcTAU1X-sX8hviA.crl (hash: 4on/yLBh11GaoZAmbWviryGsfhxrs0gwlT25YTWII40=)
2: 188F1CDC1FFD11EBAB33D75FC4F9AE02.roa (hash: NO1EJh2qKLFO5ebkuXSnG9nCqgcYg/T5QnNIaPx24Xs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl
rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1998 (0x7ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B7ED, serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20
Validity
Not Before: Nov 4 21:28:20 2025 GMT
Not After : Nov 11 21:28:20 2025 GMT
Subject: CN=690a6ff4-22a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9c:7b:21:e1:d2:79:c5:6d:90:02:94:93:82:
0b:cf:cb:da:78:05:f6:af:c7:d4:07:28:72:7e:13:
e5:05:7d:5c:07:68:a2:e4:39:27:d9:40:44:4d:fe:
dd:4a:10:01:f5:5e:b8:c0:5e:55:ff:82:d9:31:20:
eb:90:62:91:c5:d1:07:b1:8d:4e:a0:38:20:ae:6e:
e2:9a:fa:f9:c6:d9:73:bb:cd:6c:d4:06:ce:80:7a:
b7:c1:c2:a1:fa:60:83:65:41:b2:87:7e:fa:b8:9e:
b5:d1:3d:1b:8c:d8:23:07:2a:92:49:46:67:c5:2a:
6f:60:b7:14:90:2b:c0:8f:ea:48:a7:a0:01:b8:69:
cd:78:d4:b5:ac:72:e0:c4:6f:d7:8e:36:87:41:1e:
b4:70:4f:80:d7:46:bb:a8:da:2e:36:bb:ad:1d:49:
d0:38:ab:94:b1:05:1e:b1:73:b3:0b:1f:01:7a:78:
78:00:41:de:9e:54:35:ba:48:a4:2d:7c:1e:86:8e:
25:6c:f3:89:42:da:9d:a8:1c:27:35:f1:d9:a1:5f:
b1:ac:f6:e0:39:c3:a3:6d:57:35:28:34:9b:40:d3:
09:cc:0f:8b:07:79:2b:2f:4b:dc:52:c3:ba:0c:ba:
e7:ce:2f:6c:bd:b4:e3:a6:6b:3d:e1:3d:92:52:39:
3d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FA:10:37:5F:2E:EF:93:F1:EA:21:2D:9E:79:EA:2A:9F:AF:4C:1F
X509v3 Authority Key Identifier:
keyid:8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:21:e7:91:a4:77:e4:f4:b1:d2:3f:3a:a3:51:90:0b:22:88:
39:21:aa:6d:f4:79:87:9a:1f:73:79:b7:60:4e:0e:81:d2:4b:
57:99:8e:c5:4c:36:e9:93:b9:3d:43:0b:1a:62:dc:ca:aa:98:
21:2e:1f:83:59:8d:e5:39:99:33:6e:45:fc:69:5b:0e:e3:e8:
48:d4:49:9f:81:ef:9e:d1:ab:72:27:68:8f:da:64:9d:32:23:
4c:c8:c8:73:6d:08:17:ae:96:d5:98:02:ee:23:b1:97:68:4d:
df:96:46:84:e3:02:cd:3f:c0:74:a8:ec:39:1f:83:c3:dd:20:
98:40:56:cb:92:a8:fa:4d:61:74:59:79:1c:73:9c:98:b5:c7:
49:f6:2e:6d:6e:a4:e3:59:35:6c:a9:00:9d:6a:68:2b:16:d0:
6f:6d:93:99:0c:93:08:f4:53:d7:00:b2:72:b1:c1:4c:e9:97:
4a:4c:57:60:00:2f:4f:03:9b:5b:12:d8:94:0c:d6:33:ec:5c:
d5:3f:e6:a4:93:7d:d7:46:dc:af:13:11:02:40:1d:c2:bd:4c:
a8:a7:fc:1c:18:1b:eb:f1:77:98:0a:5f:d3:8c:12:23:47:95:
a3:ba:3c:48:d0:a0:35:4a:fe:d3:b5:60:68:a6:51:6c:51:71:
6f:8c:dd:a5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUI3RUQxMTAvBgNVBAUTKDhGMUJGN0U3NDcyN0ExREU0MjAxQzRDMDUzNTVGRUIx
N0YyMUJFMjAwHhcNMjUxMTA0MjEyODIwWhcNMjUxMTExMjEyODIwWjAYMRYwFAYD
VQQDEw02OTBhNmZmNC0yMmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmZx7IeHSecVtkAKUk4ILz8vaeAX2r8fUByhyfhPlBX1cB2ii5Dkn2UBETf7d
ShAB9V64wF5V/4LZMSDrkGKRxdEHsY1OoDggrm7imvr5xtlzu81s1AbOgHq3wcKh
+mCDZUGyh376uJ610T0bjNgjByqSSUZnxSpvYLcUkCvAj+pIp6ABuGnNeNS1rHLg
xG/XjjaHQR60cE+A10a7qNouNrutHUnQOKuUsQUesXOzCx8Benh4AEHenlQ1ukik
LXweho4lbPOJQtqdqBwnNfHZoV+xrPbgOcOjbVc1KDSbQNMJzA+LB3krL0vcUsO6
DLrnzi9svbTjpms94T2SUjk9PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGz6EDdf
Lu+T8eohLZ556iqfr0wfMB8GA1UdIwQYMBaAFI8b9+dHJ6HeQgHEwFNV/rF/Ib4g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjdFRC8zMDg4Nzg5ODFG
M0UxMUVCQUEwMjJBMjFDNEY5QUUwMi9qeHYzNTBjbm9kNUNBY1RBVTFYLXNYOGh2
aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2p4djM1MGNub2Q1Q0FjVEFVMVgtc1g4aHZpQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QjdFRC8zMDg4Nzg5ODFGM0UxMUVCQUEwMjJBMjFDNEY5QUUwMi9qeHYzNTBjbm9k
NUNBY1RBVTFYLXNYOGh2aUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPIeeRpHfk9LHSPzqjUZALIog5Iapt9HmHmh9zebdgTg6B0ktXmY7F
TDbpk7k9QwsaYtzKqpghLh+DWY3lOZkzbkX8aVsO4+hI1Emfge+e0atyJ2iP2mSd
MiNMyMhzbQgXrpbVmALuI7GXaE3flkaE4wLNP8B0qOw5H4PD3SCYQFbLkqj6TWF0
WXkcc5yYtcdJ9i5tbqTjWTVsqQCdamgrFtBvbZOZDJMI9FPXALJyscFM6ZdKTFdg
AC9PA5tbEtiUDNYz7FzVP+akk33XRtyvExECQB3CvUyop/wcGBvr8XeYCl/TjBIj
R5WjujxI0KA1Sv7TtWBoplFsUXFvjN2l
-----END CERTIFICATE-----
Generated at Thu Nov 6 00:42:14 2025 by rpki-client