
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft
File: jyvv1VgTCCTgHroVr4ntXdyetho.mft (raw, json)
Hash identifier: 6gye9UpdgABPAw/201s1kWH8zvF9wVTCIDreq9ueL4Q=
Subject key identifier: F1:65:73:BE:F4:69:15:6E:3D:C5:14:20:0D:E0:4C:13:13:8B:87:B6
Authority key identifier: 8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A
Certificate issuer: /CN=A914BAE3/serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A
Certificate serial: 0AA8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft
Manifest number: 0A9C
Signing time: Sun 02 Nov 2025 19:30:34 +0000
Manifest this update: Sun 02 Nov 2025 19:30:33 +0000
Manifest next update: Sun 09 Nov 2025 19:30:33 +0000
Files and hashes: 1: jyvv1VgTCCTgHroVr4ntXdyetho.crl (hash: yLduKJwONDCdws4OpkCMID9hRVjnxTffFMlsVQnknVA=)
2: 86F9BD94674311EA8AB4D96BC4F9AE02.roa (hash: hMv9fBk1Ra6uR7Y0gqdPJ+C+iXxo/tfwAVFp8JPwJHs=)
3: 986F1F9AD64711ECA2924B5FC4F9AE02.roa (hash: CL7yrdAISxhJB7yG8/BlyE8quqQeawuuzae4gw5zbws=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl
rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 19:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2728 (0xaa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BAE3, serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A
Validity
Not Before: Nov 2 19:30:33 2025 GMT
Not After : Nov 9 19:30:33 2025 GMT
Subject: CN=6907b159-bd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1f:4d:22:ae:c4:23:93:65:39:46:87:87:59:
0c:e5:a2:b7:a0:cb:fb:b6:e7:27:5f:37:61:13:7e:
bc:fd:e7:12:55:6d:78:53:82:6e:01:b7:33:1a:d5:
b7:71:f9:de:88:e5:6f:03:23:de:b2:b9:f4:93:01:
52:6a:70:7b:57:e6:3e:b0:31:dd:98:4b:7f:50:db:
40:30:cf:64:68:94:4a:ce:ab:d0:bf:a6:7e:a4:04:
b1:ad:06:90:23:90:1b:e6:44:c9:33:ba:c1:69:25:
81:c8:4e:51:3c:df:27:2d:60:6b:66:89:de:84:01:
11:eb:f4:b6:52:f9:a6:02:84:81:b8:bf:9c:3b:98:
0e:6e:e7:2f:ec:be:35:ab:0b:c3:46:7a:69:22:b0:
12:c0:7f:45:d4:bc:3e:d5:75:d6:f6:45:28:a1:ca:
27:28:88:e7:d8:b1:9a:65:84:94:a6:c8:ae:71:a8:
87:64:f7:84:2d:bf:49:3c:df:e6:79:6d:22:15:4f:
82:6c:2e:dc:61:24:22:50:99:25:72:00:9c:5c:43:
d7:09:a4:ac:0d:8c:e5:e6:bd:26:87:fd:ef:23:54:
e1:56:d5:0a:77:1e:e0:f0:bc:2d:97:a1:9b:a5:cb:
c6:69:5b:a3:d1:43:c8:d2:a3:9b:4f:39:68:ed:3c:
23:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:65:73:BE:F4:69:15:6E:3D:C5:14:20:0D:E0:4C:13:13:8B:87:B6
X509v3 Authority Key Identifier:
keyid:8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:cb:21:9c:1a:c3:b4:4f:64:48:97:63:34:93:a0:99:24:ac:
11:b7:3a:7e:f2:89:31:64:8e:87:08:2b:c1:6f:8c:42:2a:c3:
ed:60:a1:22:64:a1:e8:f2:89:78:1b:f5:2e:bc:8e:9d:56:0c:
72:36:82:35:84:e5:f8:23:50:af:ab:c7:7e:75:2d:04:0a:26:
c5:cc:c8:05:e2:54:97:21:55:63:49:c1:86:b2:6a:33:70:f9:
12:ef:e4:d7:17:48:8e:1c:8e:8d:bf:37:e9:fd:62:b4:bd:9c:
58:24:67:dc:d3:46:20:1e:8e:de:47:fc:e8:0c:d9:55:bf:76:
49:3c:6e:0a:24:5e:78:30:10:89:dc:8f:f3:0c:08:83:f8:92:
44:b4:af:14:f3:9a:d8:d9:05:4a:71:10:c3:b6:26:ce:c3:92:
cf:ee:f7:63:3c:cb:cf:e3:9e:d9:10:c7:ef:9b:ad:4a:8e:53:
8e:61:6d:dc:5e:c3:8c:7e:df:70:46:d5:a0:43:43:3b:a6:90:
24:00:6f:7f:76:e8:4b:c0:e4:c0:d5:3b:aa:bd:48:1f:09:56:
3e:5c:11:56:33:54:90:cf:37:4f:44:e0:c5:51:98:c0:e6:7a:
0c:bd:f5:ca:93:8b:94:94:01:27:1d:ec:25:8d:46:1e:a2:ec:
54:40:f9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:08:18 2025 by rpki-client