
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
File: JYXaC5gKR_66DiNSBd7uQC8gs8s.mft (raw, json)
Hash identifier: HY8O8nihMUs5H/odUUAN93oBKYME2i9rpkV4cN/hVX0=
Subject key identifier: 6B:8A:90:84:BB:02:DF:53:D8:0B:A7:1E:C4:75:D5:3A:E7:A4:E6:54
Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB
Certificate issuer: /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
Certificate serial: 351A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
Manifest number: 34F1
Signing time: Sun 02 Nov 2025 14:53:40 +0000
Manifest this update: Sun 02 Nov 2025 14:53:39 +0000
Manifest next update: Sun 09 Nov 2025 14:53:39 +0000
Files and hashes: 1: JYXaC5gKR_66DiNSBd7uQC8gs8s.crl (hash: sXM2LAYdOoeJPwEdB56iaFVNGne4lOM1EMtUfAicdvc=)
2: AE0AC88EBBF511ECAA816D52C4F9AE02.roa (hash: 5AL2LBzCru+E3YFyKW2P0tt8Zy0ls3uab/1OsnqWv48=)
3: B054EA98BBF511ECAA816D52C4F9AE02.roa (hash: q930PNLNWH/Z46J1d9nklohyp9ezYTSOPJVhEtOZ6aE=)
4: AF00AECABBF511ECAA816D52C4F9AE02.roa (hash: GKpbMiXXQOymixNs7kIDcgllt5ej3XEvlSe8jG36fFc=)
5: 547D2C14BBDF11ECA1F12A0DC4F9AE02.roa (hash: y580eZMTmYYpiPdGANCgGD9h1bATBcJx0pEL7nWorJ4=)
6: 9343CE6EE07211E7995BD42EC4F9AE02.roa (hash: RmtTkfUtODi3Cy7Cko14SjhPi0et23qfIOBSZSmBkOI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl
rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 14:53:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13594 (0x351a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B63C, serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
Validity
Not Before: Nov 2 14:53:39 2025 GMT
Not After : Nov 9 14:53:39 2025 GMT
Subject: CN=69077073-fa19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:88:58:20:d7:49:7d:b5:86:57:21:f8:9f:b4:
0a:58:cf:52:86:83:88:c2:b1:e8:d5:1d:69:2f:46:
29:2b:88:09:a6:2f:35:d0:8d:7d:8d:5a:71:3d:b9:
6e:da:61:3e:fa:33:42:fc:58:fc:ae:0f:c1:cf:a2:
1d:96:75:c3:b6:39:3e:2d:df:49:4b:de:6d:1d:94:
cf:5d:e0:83:b3:9b:0e:d2:5c:75:37:ab:98:9f:ba:
60:99:3b:3b:b8:11:79:85:82:15:65:9d:26:b2:a9:
e9:3c:c0:13:ae:dc:cb:6a:d6:bf:68:40:22:ab:1b:
2a:59:d9:a4:4a:83:7f:25:dc:f6:e3:5e:1b:d7:a2:
43:e9:57:92:96:47:ab:e2:19:a4:a5:22:2f:b6:88:
ff:5d:bb:fc:06:ae:b2:fb:38:86:62:0c:46:10:1d:
1e:28:ac:b5:60:c2:a5:bc:9b:65:2d:75:54:3a:81:
4f:d8:8a:f5:14:6f:11:3c:bf:90:b6:14:ce:a3:ca:
b1:b6:f8:c2:a1:11:c7:cf:ee:95:b4:3c:7e:41:6f:
ba:dd:2c:96:77:dd:bd:46:fe:f1:1d:4b:95:97:cd:
75:f0:f7:1f:70:65:3a:89:ba:d8:e3:20:bd:f7:74:
76:9e:bf:97:11:32:81:81:0a:65:13:9f:8f:a7:8e:
1a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8A:90:84:BB:02:DF:53:D8:0B:A7:1E:C4:75:D5:3A:E7:A4:E6:54
X509v3 Authority Key Identifier:
keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d6:4e:d7:93:3e:26:a5:fc:da:c2:30:4d:49:47:52:bd:76:
0e:ba:00:93:57:34:99:d3:97:c2:39:ae:19:7d:2b:6c:ea:b6:
16:74:5f:78:61:0e:ea:b7:a9:58:a3:af:4e:14:ad:73:47:1a:
9c:bd:f3:4a:cf:3f:e5:d3:b2:fb:45:50:3d:f2:c9:14:7c:6b:
d4:f2:b9:03:92:07:88:96:d1:37:d6:a5:99:93:6f:07:10:ec:
82:7d:e1:6e:e7:d6:46:5b:ec:52:fb:59:c4:39:8a:4b:9f:53:
95:3a:62:db:96:87:1c:fd:44:3e:9a:ef:68:8e:9c:c9:46:36:
79:3e:e2:34:c4:26:c9:23:c6:4b:de:c5:83:58:93:a6:49:35:
45:18:a3:14:24:ef:3d:ae:21:9d:bc:8d:07:9c:57:81:8b:ec:
ee:08:a4:29:f8:5c:37:c7:d1:cd:ef:50:57:b3:30:03:e9:ef:
cf:87:9d:60:6d:f9:e3:eb:13:69:a0:6f:92:8c:13:62:cb:4a:
b9:0a:60:73:db:94:fa:37:e1:7e:aa:28:e6:07:8d:80:23:ba:
3d:12:fb:7f:59:51:56:51:a7:b8:3d:cd:3f:f4:fd:9a:91:2e:
9c:4a:fd:74:04:8a:9e:8d:ef:b3:8e:f5:d5:2b:d8:40:e6:0a:
45:6e:5b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:16:34 2025 by rpki-client