
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
File: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft (raw, json)
Hash identifier: yunFHKW8OyTa1BTvDrwpJcJ1fEPQ93Ilmp4y/3d8L1U=
Subject key identifier: 7A:FA:92:F5:CF:1A:95:A2:DD:72:3B:B8:63:4E:65:08:DF:83:62:84
Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
Certificate issuer: /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Certificate serial: 04BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
Manifest number: 04B1
Signing time: Wed 05 Nov 2025 00:01:07 +0000
Manifest this update: Wed 05 Nov 2025 00:01:07 +0000
Manifest next update: Wed 12 Nov 2025 00:01:07 +0000
Files and hashes: 1: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl (hash: arc2JY039pdKY4k7wSl7eChfu/Bsvem8z5l7vtNzoIU=)
2: F943257E12F511EDA9E7C939C4F9AE02.roa (hash: My/AnfHzuVQXYQgSRRC6SAXx84s6nLjdhtAzMmqyjDg=)
3: 4CC86698C4FA11EE86A51C0EC4F9AE02.roa (hash: 1L1EbJoORDKgeElorwmyrU76/atwwCYpeCr4PPGihVE=)
4: D9A7B280C4FA11EEA3AF2932C4F9AE02.roa (hash: D+FMpyZsISfccSz7KiOlQqTZgWE7m1EZKNLzF9fgEyY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl
rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215 (0x4bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C19A, serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Validity
Not Before: Nov 5 00:01:07 2025 GMT
Not After : Nov 12 00:01:07 2025 GMT
Subject: CN=690a93c3-f8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f5:89:13:81:35:22:4c:8f:37:fd:24:47:9d:
ac:31:5e:0c:0b:3e:16:e7:20:e4:3c:2c:46:d8:35:
9e:f9:3d:e9:bd:36:9a:60:61:ca:2d:d4:67:16:31:
fe:26:88:30:47:73:10:df:d0:d1:cb:2e:ca:87:2b:
cb:e6:51:fd:59:c9:fd:0d:fa:0f:93:98:cb:67:9f:
79:33:ec:72:8d:24:53:21:10:cc:ac:00:5e:85:df:
c8:aa:ea:a6:83:0f:82:ae:3c:3b:1e:3d:8b:43:9b:
6d:73:5c:b1:95:b0:99:bd:dc:86:c3:d8:88:7a:3d:
01:f2:d7:ac:8e:4f:18:25:50:91:79:c9:51:4f:99:
b3:7f:08:32:ab:c4:4d:b2:6f:14:9c:d9:20:d9:d6:
d8:36:03:7a:d6:b3:14:85:0a:ce:c5:de:e5:c0:1d:
10:1f:bc:9b:34:4d:48:9f:1f:f5:3e:cf:02:5a:1f:
b1:97:37:37:f8:a7:f5:bf:8a:2f:7c:80:0d:ee:40:
59:71:88:51:79:60:ba:c4:60:db:86:c7:b9:7a:42:
bb:49:3a:7c:e6:57:43:a8:12:49:43:7c:02:37:f2:
ec:a7:6f:02:4b:ce:2d:3e:8c:67:d3:22:74:1f:79:
3b:7a:8b:31:9e:05:06:05:64:c4:0a:71:5d:c4:74:
c0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FA:92:F5:CF:1A:95:A2:DD:72:3B:B8:63:4E:65:08:DF:83:62:84
X509v3 Authority Key Identifier:
keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ab:39:55:89:dc:ce:e2:b0:17:e4:c6:06:ee:1e:1c:96:fc:
f4:e9:6d:8b:79:3b:e6:95:34:92:6e:b1:e9:aa:ca:dc:88:3c:
4e:18:ab:6d:6b:b2:b5:7e:b8:dd:a1:6b:a4:a3:91:9b:81:77:
e5:dc:db:59:b5:0f:c4:d0:cc:95:d0:a3:e7:61:3f:c3:50:9a:
f2:ed:fc:f7:6b:bd:f4:ea:52:10:9a:4a:31:df:4c:6f:d6:ce:
3b:ac:14:7e:37:c8:de:39:5d:10:78:de:4d:18:96:64:ef:5f:
d2:25:5e:84:a1:b3:da:d0:3c:49:a0:35:75:db:70:79:73:8d:
ea:17:4e:c9:13:5a:f6:d2:9c:78:ea:d2:18:a0:17:35:68:81:
52:15:b5:b9:69:07:f6:e3:58:9e:8b:c3:16:ce:c6:0a:94:3c:
aa:2b:58:8e:30:60:b1:8a:f2:72:80:d1:cf:74:03:af:26:10:
1e:77:de:57:63:ad:df:a7:42:7d:74:18:ac:ba:e3:72:ed:12:
ef:6d:ed:5b:49:ee:9e:46:67:14:a7:a6:74:02:64:31:56:84:
76:4f:d8:35:1c:8d:3d:81:60:06:3d:82:12:29:66:3b:da:e8:
f5:70:cf:fc:5f:80:9e:0e:07:6e:73:ad:cc:8a:ed:5b:12:2b:
d4:63:bc:ce
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUMxOUExMTAvBgNVBAUTKEQ4OUNGRjZEN0Q5NTUxQUU3MDREOTNFOTc1NTM2MTZD
OERCMTNGNUUwHhcNMjUxMTA1MDAwMTA3WhcNMjUxMTEyMDAwMTA3WjAYMRYwFAYD
VQQDEw02OTBhOTNjMy1mOGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmfWJE4E1IkyPN/0kR52sMV4MCz4W5yDkPCxG2DWe+T3pvTaaYGHKLdRnFjH+
JogwR3MQ39DRyy7KhyvL5lH9Wcn9DfoPk5jLZ595M+xyjSRTIRDMrABehd/Iquqm
gw+Crjw7Hj2LQ5ttc1yxlbCZvdyGw9iIej0B8tesjk8YJVCReclRT5mzfwgyq8RN
sm8UnNkg2dbYNgN61rMUhQrOxd7lwB0QH7ybNE1Inx/1Ps8CWh+xlzc3+Kf1v4ov
fIAN7kBZcYhReWC6xGDbhse5ekK7STp85ldDqBJJQ3wCN/Lsp28CS84tPoxn0yJ0
H3k7eosxngUGBWTECnFdxHTAKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHr6kvXP
GpWi3XI7uGNOZQjfg2KEMB8GA1UdIwQYMBaAFNic/219lVGucE2T6XVTYWyNsT9e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzE5QS8yNEFCMkMzRTRG
OEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVhNXdUWlBwZFZOaGJJMnhQ
MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJKel9iWDJWVWE1d1RaUHBkVk5oYkkyeFAxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QzE5QS8yNEFCMkMzRTRGOEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVh
NXdUWlBwZFZOaGJJMnhQMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAdqzlVidzO4rAX5MYG7h4clvz06W2LeTvmlTSSbrHpqsrciDxOGKtt
a7K1frjdoWuko5GbgXfl3NtZtQ/E0MyV0KPnYT/DUJry7fz3a7306lIQmkox30xv
1s47rBR+N8jeOV0QeN5NGJZk71/SJV6EobPa0DxJoDV123B5c43qF07JE1r20px4
6tIYoBc1aIFSFbW5aQf241iei8MWzsYKlDyqK1iOMGCxivJygNHPdAOvJhAed95X
Y63fp0J9dBisuuNy7RLvbe1bSe6eRmcUp6Z0AmQxVoR2T9g1HI09gWAGPYISKWY7
2uj1cM/8X4CeDgduc63Miu1bEivUY7zO
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:05:13 2025 by rpki-client