
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
File: JGQlARmdbB3pb6P_Lr5new4DDRA.mft (raw, json)
Hash identifier: asbS6TW2wlhyj6WSygNto0HFp9ktf3uf1w1dkbKFfbE=
Subject key identifier: A6:56:AE:FE:E2:4E:3C:F1:F4:DE:0C:9E:F8:46:11:4C:A5:13:80:51
Authority key identifier: 24:64:25:01:19:9D:6C:1D:E9:6F:A3:FF:2E:BE:67:7B:0E:03:0D:10
Certificate issuer: /CN=A9177C3F/serialNumber=24642501199D6C1DE96FA3FF2EBE677B0E030D10
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
Manifest number: 2E
Signing time: Mon 03 Nov 2025 07:38:36 +0000
Manifest this update: Mon 03 Nov 2025 07:38:36 +0000
Manifest next update: Mon 10 Nov 2025 07:38:36 +0000
Files and hashes: 1: JGQlARmdbB3pb6P_Lr5new4DDRA.crl (hash: N6PBL0lmysoK15BTH3YwYiNBvH2ETM8dKDihEdvYsfU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.crl
rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:38:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177C3F, serialNumber=24642501199D6C1DE96FA3FF2EBE677B0E030D10
Validity
Not Before: Nov 3 07:38:36 2025 GMT
Not After : Nov 10 07:38:36 2025 GMT
Subject: CN=69085bfc-bc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:41:42:1f:0d:21:5c:3d:be:6f:f6:ac:a1:
ba:27:9b:a6:fe:e3:a1:15:4d:c6:a8:54:e5:3e:fd:
b2:f5:32:72:04:be:e7:45:68:fb:cd:3c:19:2a:66:
b1:f6:18:5c:e9:dc:bf:af:24:7d:f5:4f:b2:a1:42:
15:2e:b0:eb:44:f5:4c:be:e6:76:13:6d:7d:b4:a3:
21:3c:3b:c6:05:20:96:c5:ed:90:12:37:36:18:68:
15:28:22:b2:7f:7f:46:3d:16:00:82:9a:1e:39:e8:
4d:eb:77:b3:84:e2:79:6d:cc:c3:5a:18:24:16:ec:
bf:0b:56:25:a4:7f:bc:8a:75:3c:5b:13:08:29:0e:
a5:bc:6a:fe:49:4b:25:82:27:1a:c2:33:59:3f:eb:
7b:ea:88:d4:97:ed:7e:28:4e:e1:f1:e5:b4:ab:c0:
82:62:75:16:87:1c:26:85:e9:a4:f6:e2:ce:ff:64:
51:9b:36:9b:88:49:af:ea:99:fb:ca:51:45:73:71:
19:42:b2:10:e2:fa:e9:b1:09:5f:4b:34:bf:ed:71:
11:bb:a5:26:10:fb:4c:5e:9a:c1:08:2a:05:b0:f8:
d1:c3:48:db:d0:94:c6:07:5a:a0:3a:58:49:75:c3:
b1:48:aa:04:a7:76:21:5a:5f:a7:10:92:27:cc:1b:
b9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:56:AE:FE:E2:4E:3C:F1:F4:DE:0C:9E:F8:46:11:4C:A5:13:80:51
X509v3 Authority Key Identifier:
keyid:24:64:25:01:19:9D:6C:1D:E9:6F:A3:FF:2E:BE:67:7B:0E:03:0D:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:67:ff:44:b7:00:b4:4c:e5:f9:74:31:54:51:7c:70:ae:b6:
bb:ef:17:ce:0a:19:f3:d3:82:8d:c6:40:13:53:b2:a0:eb:28:
10:27:40:62:6e:1e:59:41:07:8a:80:6d:7f:20:45:26:16:cb:
05:41:68:be:4c:fc:9c:08:7b:31:d9:23:72:b4:39:04:8f:99:
fe:e9:5f:0f:b3:03:d1:9f:a4:42:8d:d0:65:c9:88:c7:d4:3e:
53:cd:f7:14:3b:c8:cd:57:f5:32:15:20:3a:d4:0c:d9:8a:26:
b7:98:34:f0:b4:aa:82:c1:55:b6:38:a2:f8:1b:00:e9:7c:ad:
c5:37:c5:70:f9:ee:bb:70:e7:04:65:44:ff:1a:9a:68:cf:7e:
da:c8:eb:a7:1e:2b:bd:8e:52:27:f0:b4:fe:1b:1e:0a:2c:d4:
83:c3:ff:97:0b:7f:76:f8:1a:35:84:76:85:4e:08:fb:c2:73:
1e:b2:96:9f:b7:1f:13:b2:ca:0c:29:03:05:75:04:cc:2b:fd:
eb:ea:1f:9b:54:f1:64:71:8c:65:f0:7d:98:52:d8:3b:31:ed:
aa:5a:1c:83:ef:89:07:24:dd:c0:1f:fe:ca:c4:7f:e5:dd:ee:
ab:ed:79:1d:87:7f:a5:d3:c4:5a:4f:82:83:4d:1f:b8:4a:e0:
54:61:87:9a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
N0MzRjExMC8GA1UEBRMoMjQ2NDI1MDExOTlENkMxREU5NkZBM0ZGMkVCRTY3N0Iw
RTAzMEQxMDAeFw0yNTExMDMwNzM4MzZaFw0yNTExMTAwNzM4MzZaMBgxFjAUBgNV
BAMTDTY5MDg1YmZjLWJjMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDKH0FCHw0hXD2+b/asobonm6b+46EVTcaoVOU+/bL1MnIEvudFaPvNPBkqZrH2
GFzp3L+vJH31T7KhQhUusOtE9Uy+5nYTbX20oyE8O8YFIJbF7ZASNzYYaBUoIrJ/
f0Y9FgCCmh456E3rd7OE4nltzMNaGCQW7L8LViWkf7yKdTxbEwgpDqW8av5JSyWC
JxrCM1k/63vqiNSX7X4oTuHx5bSrwIJidRaHHCaF6aT24s7/ZFGbNpuISa/qmfvK
UUVzcRlCshDi+umxCV9LNL/tcRG7pSYQ+0xemsEIKgWw+NHDSNvQlMYHWqA6WEl1
w7FIqgSndiFaX6cQkifMG7kpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUplau/uJO
PPH03gye+EYRTKUTgFEwHwYDVR0jBBgwFoAUJGQlARmdbB3pb6P/Lr5new4DDRAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3QzNGL0Q3Mzc0MzdFNzMz
MzExRjA4MzlDREM4M0M0RjlBRTAyL0pHUWxBUm1kYkIzcGI2UF9McjVuZXc0RERS
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSkdRbEFSbWRiQjNwYjZQX0xyNW5ldzRERFJBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3
QzNGL0Q3Mzc0MzdFNzMzMzExRjA4MzlDREM4M0M0RjlBRTAyL0pHUWxBUm1kYkIz
cGI2UF9McjVuZXc0RERSQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADJn/0S3ALRM5fl0MVRRfHCutrvvF84KGfPTgo3GQBNTsqDrKBAnQGJu
HllBB4qAbX8gRSYWywVBaL5M/JwIezHZI3K0OQSPmf7pXw+zA9GfpEKN0GXJiMfU
PlPN9xQ7yM1X9TIVIDrUDNmKJreYNPC0qoLBVbY4ovgbAOl8rcU3xXD57rtw5wRl
RP8ammjPftrI66ceK72OUifwtP4bHgos1IPD/5cLf3b4GjWEdoVOCPvCcx6ylp+3
HxOyygwpAwV1BMwr/evqH5tU8WRxjGXwfZhS2Dsx7apaHIPviQck3cAf/srEf+Xd
7qvteR2Hf6XTxFpPgoNNH7hK4FRhh5o=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:25:17 2025 by rpki-client