
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
File: JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft (raw, json)
Hash identifier: KbyYTDwjn+xSwVjeReAZAp2QXnazzHpwCFIhYBaUyQA=
Subject key identifier: 45:8C:45:18:61:3D:44:CF:9A:D0:C0:C8:DE:B1:04:C4:F7:A1:90:9E
Authority key identifier: 25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE
Certificate issuer: /CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
Certificate serial: 0E3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
Manifest number: 0E14
Signing time: Tue 04 Nov 2025 17:27:15 +0000
Manifest this update: Tue 04 Nov 2025 17:27:15 +0000
Manifest next update: Tue 11 Nov 2025 17:27:15 +0000
Files and hashes: 1: JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl (hash: QN0/sOvOEYfGcG1w0KlzBywaQbD0mSVqARA8Fw1uPmc=)
2: 331C6A2C66DF11F0A3F38136C4F9AE02.roa (hash: kor8/NDnBK7P8dppMp/iyuN21sK3KmR3jpyTrgrDBxc=)
3: 525D3FA866D811F0A962E05FC4F9AE02.roa (hash: z09k51nzzFDblGF1ujAcm9UkE2oGVdDnqzxyRLL8JQk=)
4: FDAC7EBA26D811EE86689D0EC4F9AE02.roa (hash: MeekIL6so4gjZtd7naeHv/pTHtXC6CO9tqXsAjmLWMY=)
5: 5CBAC63066DF11F0935CCC36C4F9AE02.roa (hash: MMhTJwyUJmHa7Fchm2S5tYiwrlXSG8WD1IWktZLzhpI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl
rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3644 (0xe3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9E19, serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
Validity
Not Before: Nov 4 17:27:15 2025 GMT
Not After : Nov 11 17:27:15 2025 GMT
Subject: CN=690a3773-8cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e1:44:67:e5:67:b6:e3:0e:57:79:b8:61:67:
5c:a5:9b:48:48:c3:b1:38:af:00:91:55:03:13:aa:
39:7a:dd:b2:f2:6c:6c:b2:91:02:6a:89:80:b3:ed:
a4:13:ed:16:88:49:19:9d:99:63:c7:b1:10:59:2b:
e8:fd:0a:1b:a3:a3:9e:da:ce:83:fe:3f:3c:cc:6b:
45:65:eb:2e:9e:55:18:3f:5b:b6:e3:91:5b:53:b9:
3d:eb:7e:e5:44:15:23:09:af:b1:0e:2a:f4:b7:1b:
66:a6:65:d0:1d:5a:1c:85:a7:e1:27:a6:95:a3:13:
72:58:22:54:f6:17:8e:a9:c0:43:58:5e:7c:7f:a2:
1a:8e:16:b4:f1:08:e5:e6:72:91:b5:57:80:1f:c8:
1d:e1:72:a7:98:d1:d0:fa:a6:64:27:6b:7b:3f:46:
ae:45:45:63:92:2e:3f:59:a8:54:9d:41:c9:c9:ae:
62:7e:18:88:12:42:a5:e1:e7:b3:d8:23:89:4b:47:
e6:4a:c4:da:26:14:fc:fa:32:ca:fe:8e:ea:d5:c8:
2a:85:b6:5b:f1:8c:40:ca:dc:7f:62:29:c7:ef:59:
a3:00:b0:8c:da:ad:1d:30:90:c6:39:a7:66:a4:50:
cb:1e:46:42:1e:10:33:2b:04:84:de:03:27:bb:b4:
90:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8C:45:18:61:3D:44:CF:9A:D0:C0:C8:DE:B1:04:C4:F7:A1:90:9E
X509v3 Authority Key Identifier:
keyid:25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:93:51:2f:8a:d8:8a:7b:8f:d1:ee:cb:b8:40:fb:b2:b3:3a:
9a:a8:3a:e9:4a:34:50:44:d5:39:c9:c8:ef:d8:13:55:00:4a:
6f:4b:16:69:90:f0:33:17:98:c9:8c:a7:12:8d:d2:ef:7d:e3:
5b:69:73:bf:d8:67:14:7e:73:07:fa:ba:9e:e4:7c:32:e2:c2:
c0:09:dd:a1:c4:47:15:0d:61:8d:7b:ab:f8:23:d7:e7:b7:39:
ef:1e:d8:cd:82:2b:3b:be:a6:e8:9f:78:03:e6:04:af:99:95:
03:31:43:62:b1:97:c9:77:7b:b1:4f:af:f7:a1:fb:24:63:9f:
89:ea:dc:f2:35:29:4a:b7:57:a4:59:a7:57:95:69:76:cb:0a:
ea:b0:28:08:8f:43:34:e4:7a:d9:fa:fe:81:41:c9:8a:3b:03:
31:ec:df:8c:83:08:24:2d:5f:da:96:8e:a8:11:54:36:03:7d:
0c:96:aa:c0:9e:cc:30:34:22:74:bd:cc:98:31:ae:c0:1d:97:
67:6b:bd:d4:c2:52:52:48:05:e8:c5:5e:92:a7:81:9f:e2:4c:
ab:23:6a:48:3d:bc:dd:7a:55:f4:f0:85:06:c0:11:a5:c0:22:
65:7b:db:66:43:32:58:4f:c3:05:41:e4:b4:03:63:61:85:ed:
55:78:a9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:11:15 2025 by rpki-client