
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
File: JhOQ197eXRxAsfPigPOKCNqv3N4.mft (raw, json)
Hash identifier: FeAwpl6ANIF7sEGlwpN1Rc3k3Nz+w4E6EabvlNAHugE=
Subject key identifier: 9A:BA:74:0F:2F:13:A5:0C:FC:BA:EC:FB:62:67:D9:AF:12:FF:A8:C0
Authority key identifier: 26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE
Certificate issuer: /CN=A912E367/serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
Certificate serial: 0201
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
Manifest number: 01FD
Signing time: Wed 05 Nov 2025 02:31:50 +0000
Manifest this update: Wed 05 Nov 2025 02:31:49 +0000
Manifest next update: Wed 12 Nov 2025 02:31:49 +0000
Files and hashes: 1: JhOQ197eXRxAsfPigPOKCNqv3N4.crl (hash: w8HWIY2TKsKvwc1cpG20iv1zAEoO2I9I8m2U3C9pT+Y=)
2: 738195EEB11811ED997EA457C4F9AE02.roa (hash: Dw2hET0XKkDZSavlAvohxfv8vlQxG1CLusRdITgzUP8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl
rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E367, serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
Validity
Not Before: Nov 5 02:31:49 2025 GMT
Not After : Nov 12 02:31:49 2025 GMT
Subject: CN=690ab716-19b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:19:fe:63:6d:95:e2:c8:6c:92:d0:d9:10:04:
a5:6e:09:9f:73:f0:f7:7b:c1:84:f3:47:55:ae:30:
82:1c:b1:6f:e6:33:1a:26:b2:48:23:8a:7a:30:22:
0d:b8:da:8e:3b:49:14:91:a9:8d:79:f1:6e:9b:d5:
3e:6d:58:1d:67:7b:51:fa:5d:90:17:e3:fd:93:64:
c9:98:e3:9d:7a:21:01:de:61:ec:6a:4a:ed:6a:c0:
73:5f:2c:aa:59:9f:5d:cd:af:ae:8b:fd:b4:4e:e9:
4e:98:7a:9e:de:8a:a7:4d:63:6d:3c:c2:89:2a:93:
96:18:b8:ca:ac:f7:e8:aa:ae:14:f5:bd:ce:ab:c1:
ea:eb:51:ec:1b:37:a2:92:74:92:20:05:2e:e1:9b:
18:6d:a9:f5:df:5a:2d:1b:4e:c9:09:2f:9e:8a:fa:
ee:09:bc:b3:72:de:76:33:f6:a7:4d:78:48:76:8f:
5c:25:4c:c9:5b:83:05:46:08:51:91:01:ef:4e:63:
71:2a:27:4c:11:d7:03:73:0e:ee:8c:34:7c:fe:45:
9f:b4:a0:f1:38:c0:73:f5:b0:39:c5:16:dc:21:2a:
fa:b1:0f:7c:57:15:ff:c4:6e:df:8c:72:2c:6a:9c:
4e:3b:fb:1f:71:b0:fd:b2:a1:90:c3:4f:51:72:78:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BA:74:0F:2F:13:A5:0C:FC:BA:EC:FB:62:67:D9:AF:12:FF:A8:C0
X509v3 Authority Key Identifier:
keyid:26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:c1:69:ef:11:96:05:01:38:f5:f4:02:97:b1:26:4a:43:4b:
12:9e:fd:60:32:f0:d3:59:34:59:bd:8c:f8:f7:03:95:b0:b6:
03:01:a1:80:c0:29:2d:ad:b9:67:25:fd:94:20:1c:ee:2b:8c:
3a:a4:2e:1a:56:a6:f3:55:c1:99:13:6f:ed:e8:b1:63:3d:ae:
99:70:48:b7:5d:ca:14:cd:9c:80:35:40:18:80:48:b3:e8:b7:
e4:3d:1e:55:2e:af:cd:25:e1:65:a0:bf:57:3a:21:24:6a:56:
90:ec:e6:ca:5c:43:48:1b:ee:53:de:27:7a:31:43:3b:70:f7:
c2:c8:94:06:e3:7f:ea:29:45:a5:4b:b6:06:fa:bc:62:6f:3f:
f2:81:54:a7:39:89:1a:87:d8:59:65:18:9b:cb:6d:b6:25:ec:
aa:f4:6f:79:7f:8e:47:0a:98:20:69:64:89:be:9b:da:9c:84:
56:e5:63:04:c9:77:77:d5:da:bd:e0:2d:03:e3:af:be:ce:61:
90:31:6c:83:7e:c2:e6:ac:10:20:b7:ff:27:62:cf:e9:59:7c:
48:35:d1:16:d9:cb:73:06:c5:d5:d6:55:b5:53:9a:e7:22:c9:
91:fe:c0:6d:45:ce:a7:9a:c0:65:5f:c8:b2:27:6f:8b:c0:29:
f7:17:ea:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:09:35 2025 by rpki-client