
$ rpki-client -vvf rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
File: JieQzZFM6o7BHiWGm4mN4AAfvQk.mft (raw, json)
Hash identifier: nR3bSv8KfxlswN3WDWOA7VqYxJf/tcjZv9X8tbnpXwE=
Subject key identifier: F7:45:93:72:31:E5:BE:91:D5:CE:A5:CC:70:34:7B:12:4C:44:88:CD
Authority key identifier: 26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09
Certificate issuer: /CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
Certificate serial: 19CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
Manifest number: 1999
Signing time: Sun 02 Nov 2025 16:24:31 +0000
Manifest this update: Sun 02 Nov 2025 16:24:30 +0000
Manifest next update: Sun 09 Nov 2025 16:24:30 +0000
Files and hashes: 1: JieQzZFM6o7BHiWGm4mN4AAfvQk.crl (hash: XanaQvhbspaOJGOY6IxdpmDd4Etn73G/BiCkRNdHlTc=)
2: 7F716274C95611E9A630AC3DC4F9AE02.roa (hash: S0mQJNnoeIQivjNGK241Vh1RV7TRfPYTUWmyHatSyzQ=)
3: BE466468B8D611ED876CBD7CC4F9AE02.roa (hash: eEZPHr2hyWyjDlWLggbbTEM+Nbw1nk3y4RJyg3r84y0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl
rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 16:24:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6603 (0x19cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914589A, serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
Validity
Not Before: Nov 2 16:24:30 2025 GMT
Not After : Nov 9 16:24:30 2025 GMT
Subject: CN=690785bf-53a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:4d:93:8d:b8:41:c0:81:a7:b5:2a:0f:c1:
28:30:96:87:a9:65:4a:ba:1d:40:f9:66:24:ae:69:
f8:56:34:79:a9:62:7a:7d:3f:c5:a7:de:91:c7:e9:
31:66:bb:c2:75:50:ef:77:63:74:f4:cf:34:6f:27:
0d:b7:b6:fb:b8:cb:94:54:60:39:43:63:86:62:fd:
66:4a:37:51:cd:cc:50:5b:c2:b0:53:7a:0f:94:13:
e3:b4:87:82:e2:0f:49:2b:7e:73:5e:d1:d1:92:c6:
89:a8:f4:59:eb:2d:7b:13:ff:79:29:bd:0c:08:05:
fa:1b:8b:ce:e8:67:e6:3b:fb:a6:d0:62:e5:41:10:
86:db:5e:25:05:6c:11:e8:45:08:07:c1:70:a1:37:
f9:d2:27:dc:47:a2:24:2f:f7:50:6e:9f:68:0e:a2:
b8:28:68:7e:96:ee:e7:c3:e7:2a:00:cd:50:ec:5d:
49:f6:3f:70:28:34:d2:30:4c:ca:f0:52:40:af:9b:
cb:8c:57:19:be:b0:5d:9b:00:a4:72:3e:e7:74:5d:
6e:e2:d1:a9:43:9d:d5:0c:ac:c1:b3:14:7f:05:0f:
8a:20:cb:0c:89:7c:06:7a:f8:b1:af:e5:86:88:73:
b1:15:2f:39:ce:f8:d1:b9:ad:36:79:b6:14:60:c9:
52:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:45:93:72:31:E5:BE:91:D5:CE:A5:CC:70:34:7B:12:4C:44:88:CD
X509v3 Authority Key Identifier:
keyid:26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:41:fc:31:af:17:29:d9:32:88:1f:9a:2d:ff:be:97:60:b6:
21:f1:eb:8d:eb:fe:a0:ed:d2:c0:b5:4e:d7:e8:0d:c8:5c:a7:
d2:15:cd:91:b5:cf:6e:96:4e:c3:c2:99:99:ce:6f:04:0f:fa:
a9:74:f7:3a:d6:c8:8b:8e:1d:31:cf:2c:4f:66:55:f5:6c:e8:
7c:b7:f7:1a:c3:91:fb:e1:4b:3c:a3:77:88:02:e4:0b:5d:c8:
3d:f0:36:39:19:71:2a:d4:9b:36:69:11:5a:a9:c0:5a:dc:97:
20:44:77:91:64:e2:44:95:41:b7:ef:be:44:60:a6:ab:9c:63:
45:ae:5c:05:a2:b3:99:8d:ca:0b:7e:cd:77:65:46:80:c8:87:
d1:90:ea:07:7e:bd:98:e6:0a:9c:75:f3:32:38:a1:27:ba:62:
f1:81:53:57:e8:87:c6:e7:73:a1:01:8b:f6:88:b0:90:df:36:
ef:c7:7a:b6:0e:67:45:08:9f:bd:0a:1a:12:04:9c:1c:58:4f:
d8:a1:9a:48:b2:cb:0e:07:2b:b4:75:a0:bb:35:a0:de:52:45:
99:42:ac:45:a4:09:c0:33:be:f3:3d:72:8d:c9:4b:9b:9f:78:
9d:2d:9a:7c:6e:23:97:fe:e3:88:dd:22:7c:92:ef:0c:6d:90:
46:37:69:2c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU4OUExMTAvBgNVBAUTKDI2Mjc5MENEOTE0Q0VBOEVDMTFFMjU4NjlCODk4REUw
MDAxRkJEMDkwHhcNMjUxMTAyMTYyNDMwWhcNMjUxMTA5MTYyNDMwWjAYMRYwFAYD
VQQDEw02OTA3ODViZi01M2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoJJNk424QcCBp7UqD8EoMJaHqWVKuh1A+WYkrmn4VjR5qWJ6fT/Fp96Rx+kx
ZrvCdVDvd2N09M80bycNt7b7uMuUVGA5Q2OGYv1mSjdRzcxQW8KwU3oPlBPjtIeC
4g9JK35zXtHRksaJqPRZ6y17E/95Kb0MCAX6G4vO6GfmO/um0GLlQRCG214lBWwR
6EUIB8FwoTf50ifcR6IkL/dQbp9oDqK4KGh+lu7nw+cqAM1Q7F1J9j9wKDTSMEzK
8FJAr5vLjFcZvrBdmwCkcj7ndF1u4tGpQ53VDKzBsxR/BQ+KIMsMiXwGevixr+WG
iHOxFS85zvjRua02ebYUYMlSRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdFk3Ix
5b6R1c6lzHA0exJMRIjNMB8GA1UdIwQYMBaAFCYnkM2RTOqOwR4lhpuJjeAAH70J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTg5QS9BQ0Q2RkI4QTdE
OTQxMUU3OTM4QkNGNEVDNEY5QUUwMi9KaWVRelpGTTZvN0JIaVdHbTRtTjRBQWZ2
UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ppZVF6WkZNNm83QkhpV0dtNG1ONEFBZnZRay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTg5QS9BQ0Q2RkI4QTdEOTQxMUU3OTM4QkNGNEVDNEY5QUUwMi9KaWVRelpGTTZv
N0JIaVdHbTRtTjRBQWZ2UWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZQfwxrxcp2TKIH5ot/76XYLYh8euN6/6g7dLAtU7X6A3IXKfSFc2R
tc9ulk7DwpmZzm8ED/qpdPc61siLjh0xzyxPZlX1bOh8t/caw5H74Us8o3eIAuQL
Xcg98DY5GXEq1Js2aRFaqcBa3JcgRHeRZOJElUG3775EYKarnGNFrlwForOZjcoL
fs13ZUaAyIfRkOoHfr2Y5gqcdfMyOKEnumLxgVNX6IfG53OhAYv2iLCQ3zbvx3q2
DmdFCJ+9ChoSBJwcWE/YoZpIsssOByu0daC7NaDeUkWZQqxFpAnAM77zPXKNyUub
n3idLZp8biOX/uOI3SJ8ku8MbZBGN2ks
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:20:07 2025 by rpki-client