
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
File: JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft (raw, json)
Hash identifier: E0hspjZSgzGSsdbvT3FAdgMrWfa1hhiJhr/dluBlPgE=
Subject key identifier: 13:B2:54:B5:64:BD:10:51:EC:C6:D4:5C:5D:F9:2C:55:3F:82:30:61
Authority key identifier: 25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE
Certificate issuer: /CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
Certificate serial: 0E3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
Manifest number: 0E13
Signing time: Sun 02 Nov 2025 17:23:08 +0000
Manifest this update: Sun 02 Nov 2025 17:23:07 +0000
Manifest next update: Sun 09 Nov 2025 17:23:07 +0000
Files and hashes: 1: JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl (hash: LSLIHGiAXeA7Stx6ZvBZ4P7FKcI97w10Nc7Mx3GqMs0=)
2: 331C6A2C66DF11F0A3F38136C4F9AE02.roa (hash: kor8/NDnBK7P8dppMp/iyuN21sK3KmR3jpyTrgrDBxc=)
3: 525D3FA866D811F0A962E05FC4F9AE02.roa (hash: z09k51nzzFDblGF1ujAcm9UkE2oGVdDnqzxyRLL8JQk=)
4: FDAC7EBA26D811EE86689D0EC4F9AE02.roa (hash: MeekIL6so4gjZtd7naeHv/pTHtXC6CO9tqXsAjmLWMY=)
5: 5CBAC63066DF11F0935CCC36C4F9AE02.roa (hash: MMhTJwyUJmHa7Fchm2S5tYiwrlXSG8WD1IWktZLzhpI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl
rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 17:23:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3643 (0xe3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9E19, serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
Validity
Not Before: Nov 2 17:23:07 2025 GMT
Not After : Nov 9 17:23:07 2025 GMT
Subject: CN=6907937b-2d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2e:8d:e4:3a:75:a2:78:49:0b:12:96:04:2b:
b4:97:6a:91:8d:9d:6e:2f:41:23:82:66:15:4f:a4:
9d:1e:08:1a:82:c1:bb:a6:bd:e1:b4:df:dd:a0:f9:
2b:c7:d6:9c:ab:39:02:28:81:79:95:11:7b:b8:69:
c0:75:3d:56:9e:78:e6:36:d2:ee:09:d4:d3:8f:4c:
ed:17:da:f7:a6:ef:bb:8a:b4:08:a0:48:4c:43:fd:
6e:70:56:0d:32:50:2b:41:1d:f1:5c:66:e8:65:96:
68:35:74:53:aa:4c:8e:a6:d9:38:59:e7:77:99:41:
ef:c6:62:80:ea:7d:5a:fa:a2:4b:3c:72:a5:f7:a8:
8c:20:cc:33:35:53:9b:a9:b2:0d:f7:f8:4f:15:ff:
df:c9:6d:a8:40:80:ab:d5:36:3f:e2:be:31:6f:67:
00:f5:14:5d:4b:0f:f8:fb:50:7e:21:56:bb:a8:d4:
2f:ad:53:5f:55:99:16:ac:f2:85:21:92:41:09:3c:
80:24:0a:2e:2c:eb:c3:18:e3:35:22:36:2a:c9:96:
79:e6:bc:34:66:43:78:c1:2f:f4:44:af:51:2c:de:
cc:1f:fd:44:5c:7f:6a:32:13:f9:82:34:a2:0c:bd:
f6:2f:de:e4:68:5e:7c:94:05:0a:5c:2f:5f:de:29:
46:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B2:54:B5:64:BD:10:51:EC:C6:D4:5C:5D:F9:2C:55:3F:82:30:61
X509v3 Authority Key Identifier:
keyid:25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:5f:42:15:1c:75:7f:9c:ff:eb:7d:54:61:8d:9f:c8:9e:b6:
13:f0:f6:85:f4:07:4e:04:ae:30:de:d2:86:5c:80:9d:89:e8:
6d:fe:f9:ae:2e:20:42:51:bb:c6:99:01:e8:22:56:7a:4a:98:
28:1a:24:3b:b0:ec:66:c6:93:ff:cf:1f:ba:c2:2c:7b:e5:c3:
73:94:76:08:ab:52:bd:84:04:09:37:23:7d:b0:4b:3b:a3:fc:
df:64:c9:33:1d:98:1e:a5:b1:0d:8d:66:34:02:4d:2b:be:bf:
1c:3e:68:cd:90:6d:92:3a:44:ff:18:58:91:c9:f3:5b:76:a3:
0b:33:76:7b:11:3e:f5:18:b9:b5:7b:48:91:2d:72:b9:7d:a4:
27:ec:af:a5:31:13:1f:18:1c:14:6c:05:ec:ef:e2:6c:a0:6e:
f2:c4:12:f4:6c:8a:71:ec:b4:5b:51:e0:2e:7e:84:cf:c1:f5:
b9:b9:18:b3:7a:01:e1:d4:fe:ea:67:ea:09:cb:43:03:d1:45:
46:f2:30:c8:31:4b:5a:49:89:00:01:44:66:b6:bf:2d:a0:fe:
07:76:b6:2f:3e:93:61:58:0f:f6:aa:13:bd:63:0f:57:02:d8:
55:87:ce:6e:93:f3:54:31:e8:37:d7:95:8a:56:1f:07:c6:c9:
9b:61:ef:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:19:32 2025 by rpki-client