
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
File: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft (raw, json)
Hash identifier: uKd8rHwv/xyk5dupLa9kJbbLtoe17hUNemXgys/ODj4=
Subject key identifier: 3F:E4:14:2C:3B:3B:8F:03:BA:70:0B:88:D2:F4:D0:C0:F9:00:71:39
Authority key identifier: 8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7
Certificate issuer: /CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
Certificate serial: 0B10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
Manifest number: 0AF9
Signing time: Sun 02 Nov 2025 19:21:27 +0000
Manifest this update: Sun 02 Nov 2025 19:21:26 +0000
Manifest next update: Sun 09 Nov 2025 19:21:26 +0000
Files and hashes: 1: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl (hash: +Fxajj1hxHQe19jSw3s474Sc1INOzoz+D4dv9g45NzA=)
2: 202A9E5E8B7811EF9E21317AC4F9AE02.roa (hash: 6eqU3D3nkl8TxNOcTzkOAZbDhLtOvIweFYcN2fOYDro=)
3: 0A9169068B7811EFB0820F7AC4F9AE02.roa (hash: DswYDUP/RD9PbGNtXcWRx0rv+yAsEjlaJqRA+mnEXlQ=)
4: C6766086579811EAA245BE5EC4F9AE02.roa (hash: E36u0CPRdhWTbG+OpjD/o5aQVXee0PchEbiLDGt9mTc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl
rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 19:21:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2832 (0xb10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132FA5, serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
Validity
Not Before: Nov 2 19:21:26 2025 GMT
Not After : Nov 9 19:21:26 2025 GMT
Subject: CN=6907af37-6f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:29:03:b7:85:ef:00:f2:1f:c0:84:b1:fb:39:
67:62:1f:fc:f7:30:41:ab:a6:f0:82:10:de:23:82:
73:e3:b2:cb:9b:0d:81:41:53:c8:a2:4e:cf:29:af:
da:84:2d:5a:57:ff:30:05:e9:f8:f7:8e:87:c8:29:
e8:c2:61:12:b3:d8:68:15:c4:f2:1a:03:c8:0b:f4:
4c:d0:c7:87:f7:d4:42:d2:20:75:36:c8:34:90:88:
af:3e:cb:5d:20:08:be:02:65:25:6a:43:e4:25:47:
72:49:71:53:90:e4:63:d3:c3:19:b0:0b:87:89:d8:
a7:bb:bb:c6:62:cf:f0:33:32:2d:62:ce:80:d3:82:
9b:eb:c5:46:03:90:b7:38:c0:e7:a8:a0:1c:90:ae:
36:a3:dd:9e:50:30:78:ba:b1:65:88:1c:84:85:92:
09:7a:5e:4b:df:b5:7e:2f:29:bf:3e:e8:00:04:3e:
8c:bd:89:80:3b:d1:8f:7e:62:bc:ec:ec:d5:17:13:
b1:2c:62:7e:f2:e1:56:7e:b2:10:ac:49:ae:82:f1:
8e:c3:05:1b:ba:13:5f:7b:0e:95:8f:da:15:3d:c9:
3a:d1:52:ae:87:ae:4f:7c:09:e4:60:66:fa:c3:c7:
07:04:f6:9e:f4:e0:cb:cf:da:05:a6:f3:68:8e:ad:
e0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E4:14:2C:3B:3B:8F:03:BA:70:0B:88:D2:F4:D0:C0:F9:00:71:39
X509v3 Authority Key Identifier:
keyid:8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:fb:1f:81:47:5b:db:59:78:65:ab:78:30:e9:4a:63:96:3d:
47:d0:e2:7c:15:dd:8c:ef:04:07:73:e0:26:64:0b:77:0e:78:
03:ae:9a:26:3d:8b:91:c4:c9:d6:ce:d4:71:6d:b6:a8:4e:0d:
2c:28:04:f2:3c:b5:ef:ac:d2:61:e9:d0:a9:19:f9:76:a5:f8:
2c:7b:37:ef:d3:a0:b6:32:39:70:e7:6b:43:35:12:54:11:b6:
d7:5d:38:5a:77:9b:11:cd:88:e1:e3:63:62:42:05:0a:f8:e5:
ab:2b:fd:b5:96:ec:17:76:c1:5e:57:34:f1:9e:77:a6:11:65:
d2:6b:59:f2:7c:a4:02:b2:b8:ef:94:12:7a:42:6c:ef:b5:55:
5e:f9:75:11:48:59:de:9e:48:cf:08:8f:47:40:0a:05:a4:b2:
51:62:07:2a:0b:1a:4f:9f:7b:bc:b0:01:0e:f3:b0:4c:a8:d6:
1f:fc:4f:c9:a6:19:13:6e:1a:50:0a:b6:dc:71:b7:b4:0d:5a:
ae:f8:d2:4d:3c:58:75:a1:f9:33:69:0d:15:7a:de:e5:ce:68:
ee:9f:96:02:0c:43:b8:d5:8f:18:e5:73:5c:50:67:0c:c7:2c:
31:ad:05:95:84:d2:4c:df:9e:6d:c2:55:31:99:4a:4e:4a:9b:
5c:88:1b:f7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJGQTUxMTAvBgNVBAUTKDhENUFGRjMyMTkwMTJBMUM5OUUyNzNDMkI3RTYzQTJE
MEMzOTYyRTcwHhcNMjUxMTAyMTkyMTI2WhcNMjUxMTA5MTkyMTI2WjAYMRYwFAYD
VQQDEw02OTA3YWYzNy02ZjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5CkDt4XvAPIfwISx+zlnYh/89zBBq6bwghDeI4Jz47LLmw2BQVPIok7PKa/a
hC1aV/8wBen4946HyCnowmESs9hoFcTyGgPIC/RM0MeH99RC0iB1Nsg0kIivPstd
IAi+AmUlakPkJUdySXFTkORj08MZsAuHidinu7vGYs/wMzItYs6A04Kb68VGA5C3
OMDnqKAckK42o92eUDB4urFliByEhZIJel5L37V+Lym/PugABD6MvYmAO9GPfmK8
7OzVFxOxLGJ+8uFWfrIQrEmugvGOwwUbuhNfew6Vj9oVPck60VKuh65PfAnkYGb6
w8cHBPae9ODLz9oFpvNojq3gpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/kFCw7
O48DunALiNL00MD5AHE5MB8GA1UdIwQYMBaAFI1a/zIZASocmeJzwrfmOi0MOWLn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkZBNS9BQkQ0NzEwODU2
OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQktoeVo0blBDdC1ZNkxRdzVZ
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pWcl9NaGtCS2h5WjRuUEN0LVk2TFF3NVl1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MkZBNS9BQkQ0NzEwODU2OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQkto
eVo0blBDdC1ZNkxRdzVZdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA1+x+BR1vbWXhlq3gw6Upjlj1H0OJ8Fd2M7wQHc+AmZAt3DngDrpom
PYuRxMnWztRxbbaoTg0sKATyPLXvrNJh6dCpGfl2pfgsezfv06C2Mjlw52tDNRJU
EbbXXThad5sRzYjh42NiQgUK+OWrK/21luwXdsFeVzTxnnemEWXSa1nyfKQCsrjv
lBJ6QmzvtVVe+XURSFnenkjPCI9HQAoFpLJRYgcqCxpPn3u8sAEO87BMqNYf/E/J
phkTbhpQCrbccbe0DVqu+NJNPFh1ofkzaQ0Vet7lzmjun5YCDEO41Y8Y5XNcUGcM
xywxrQWVhNJM355twlUxmUpOSptciBv3
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:13:38 2025 by rpki-client