
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft
File: JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft (raw, json)
Hash identifier: NH6kFOqJZtEnvQ3aP/vgb3/2rMrfIo39whpnWZ7lmDw=
Subject key identifier: DC:CD:8F:25:34:E4:F4:63:E4:49:87:51:FB:95:90:D7:F2:07:7B:06
Authority key identifier: 24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D
Certificate issuer: /CN=A9110592/serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D
Certificate serial: 03B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft
Manifest number: 03AE
Signing time: Thu 23 Oct 2025 02:00:50 +0000
Manifest this update: Thu 23 Oct 2025 02:00:50 +0000
Manifest next update: Thu 30 Oct 2025 02:00:50 +0000
Files and hashes: 1: JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl (hash: B3+sRc/kvJXyBN+bAEdpK0aySDnNlaZf3vMIeaR30vc=)
2: F02F57CCB0F911EC95467362C4F9AE02.roa (hash: TgC8njz7XAqotwRNJaTfWisoZBj1zQf6Kl2b8Uk9SOE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl
rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948 (0x3b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110592, serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D
Validity
Not Before: Oct 23 02:00:50 2025 GMT
Not After : Oct 30 02:00:50 2025 GMT
Subject: CN=68f98c52-2e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:30:5f:9a:5d:16:bc:a6:c0:8a:48:3b:92:
7a:ad:b3:43:ad:0b:74:d8:e3:9b:97:dc:df:0f:38:
4b:d5:79:22:f2:e6:4b:b3:fb:d5:ec:36:dc:96:b3:
d1:07:3a:25:93:be:91:11:fb:af:cd:57:e9:09:9c:
4c:2c:ce:e7:ad:41:7c:0d:de:56:f7:e4:ad:94:20:
9b:16:15:f9:d2:3e:66:8c:6b:f4:b5:a9:a7:50:b2:
f0:83:39:b9:48:0c:23:c3:38:72:95:03:34:0d:15:
b7:58:77:26:69:17:88:cc:9e:ea:7e:c4:52:6b:9d:
b2:25:91:24:ab:37:f5:b7:c9:55:7b:da:fc:a9:fb:
6b:93:85:ac:4c:eb:05:e6:31:07:27:07:af:cc:cc:
8c:73:5a:17:cc:0a:a4:23:8a:80:aa:85:0c:97:89:
07:e7:13:0d:1a:50:a7:25:d8:95:28:2e:85:ea:15:
e2:51:0e:7b:29:94:b0:c8:e2:8f:0a:8c:af:74:7c:
f1:1b:95:e3:45:fa:0a:d8:23:e6:83:7c:24:24:3c:
cb:21:f4:0b:5e:ef:2a:3a:f3:ce:04:a6:57:7f:7c:
a3:00:37:86:a6:10:f5:24:3e:4a:80:50:4e:94:d8:
a2:a7:b3:53:b7:71:df:a3:41:3a:a2:b6:3c:4a:1a:
5d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CD:8F:25:34:E4:F4:63:E4:49:87:51:FB:95:90:D7:F2:07:7B:06
X509v3 Authority Key Identifier:
keyid:24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1e:6e:2a:4a:6c:ee:d8:74:91:fc:5e:1a:84:80:7a:93:f6:
24:8b:d4:8d:8c:76:2f:08:03:4c:e5:c9:d7:87:74:1f:9e:66:
d0:aa:29:28:e1:ce:05:a2:b3:85:5c:f3:7d:a5:6a:ed:e5:dd:
1c:c6:55:cb:b6:6c:c6:94:14:dd:2a:5b:f8:87:5d:d6:32:c0:
69:e0:cc:e1:9c:52:42:99:52:f5:94:b9:99:2b:91:29:9b:71:
96:f2:c9:a0:de:e0:78:c1:0c:5c:e4:e2:59:e5:03:f9:66:31:
10:fd:6b:07:2c:32:56:7a:c5:ef:af:a6:96:3a:9d:da:11:98:
5f:47:02:41:19:b8:89:da:69:c3:17:6d:62:29:c8:25:d6:a1:
4a:54:23:58:b8:66:3f:16:95:bf:1a:1d:f4:c1:dc:54:5c:eb:
02:37:28:49:13:5c:7b:57:0b:26:b6:f8:eb:6c:7a:87:ee:61:
f7:f3:08:4b:85:7f:9c:a9:47:ac:2d:7e:12:7f:cb:3f:df:7a:
f2:4a:b4:28:a5:c6:a4:b2:38:0f:af:7c:a6:fc:ba:93:e8:d8:
27:a7:26:d6:f9:2f:3f:00:87:f6:c4:ff:a8:0f:60:19:09:3e:
6a:30:ba:f6:dd:3b:1e:c5:98:83:fb:23:bc:f6:48:c9:b9:78:
a1:06:da:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 09:11:43 2025 by rpki-client