
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
File: Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft (raw, json)
Hash identifier: sNjeqVBAKSwXdq82e68gd/nPmiTP7mUfr5yjQFp/dx0=
Subject key identifier: D0:7A:63:97:B6:41:3A:04:31:84:47:F8:04:65:31:1B:DB:0F:9D:32
Authority key identifier: 26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20
Certificate issuer: /CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20
Certificate serial: 051C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
Manifest number: 0512
Signing time: Tue 04 Nov 2025 23:40:31 +0000
Manifest this update: Tue 04 Nov 2025 23:40:31 +0000
Manifest next update: Tue 11 Nov 2025 23:40:31 +0000
Files and hashes: 1: Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl (hash: 9Od2fEvlv90O1mjzVhaN+HIqEG/rMiYK8ViTOZADkW4=)
2: 5E511AB293DE11ECB5262B47C4F9AE02.roa (hash: mvzxmb3Ec77hzB5jBWCPOpL7XoHBd1oX7QkZWEGZOZU=)
3: C5713632828611EC83D75A3DC4F9AE02.roa (hash: HOR2Uf7sxy7+iosGT3XdbxMdqbYBTIug6HOwedpjmIg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl
rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 23:40:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1308 (0x51c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2412, serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20
Validity
Not Before: Nov 4 23:40:31 2025 GMT
Not After : Nov 11 23:40:31 2025 GMT
Subject: CN=690a8eef-4591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:10:2f:14:85:ee:fa:8a:30:0a:a9:fc:b5:4b:
94:02:19:62:a6:a7:14:e7:b5:96:d0:8c:8a:88:0d:
f7:e3:52:77:c7:4b:1b:29:f1:ab:c0:03:ee:25:3c:
f2:ba:48:47:f5:a3:97:e3:ba:0b:4b:8c:61:ff:70:
aa:4d:0d:68:85:4f:58:3d:46:ce:92:62:9b:2d:f0:
79:cd:a9:4d:39:7e:5c:67:71:c1:fb:36:b0:e5:03:
46:c2:75:57:5e:96:51:c8:13:84:04:da:b2:f8:a2:
41:98:14:6b:1a:24:39:1a:c0:6a:b5:84:2a:5f:67:
6e:8f:13:ec:6c:b2:bb:5e:74:aa:dc:00:66:9b:9c:
a2:74:82:84:46:0d:94:f3:4e:d0:0c:ac:c5:86:7e:
39:e7:42:44:6d:40:e1:74:ba:8d:e5:5e:43:bd:4c:
0a:68:e3:28:cf:cb:e6:99:09:ea:3e:d2:6f:e0:10:
18:8f:30:de:56:38:28:d7:53:b7:8c:c6:ee:77:b9:
db:05:ae:72:42:44:df:85:fd:62:65:f7:9e:28:8b:
f4:a7:8a:85:79:b7:8f:e7:4b:f7:0a:17:86:39:94:
3c:2b:df:d7:5a:78:0c:36:05:a5:90:cd:5e:16:f5:
71:f1:e1:78:b5:dd:64:82:a9:56:39:92:3d:7b:b3:
8f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7A:63:97:B6:41:3A:04:31:84:47:F8:04:65:31:1B:DB:0F:9D:32
X509v3 Authority Key Identifier:
keyid:26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:aa:38:bd:29:62:88:5e:0d:49:0c:a2:f9:5b:12:75:b8:e5:
06:0e:d4:9e:87:1b:97:6a:bb:d9:3e:31:fe:6c:a8:38:ce:c9:
06:21:57:02:4b:6f:d3:37:b0:26:2c:01:6c:60:d0:7c:9f:9b:
c2:1e:c5:b7:0e:87:7b:ed:fd:16:ab:ed:a0:64:38:4b:af:de:
d4:93:49:aa:e1:93:b5:46:94:67:b6:4e:0b:36:40:28:6f:b1:
6f:5e:65:ec:fa:95:ce:2a:ee:e8:92:6e:33:5c:fe:57:5d:26:
ab:29:f8:5a:7e:2a:82:6c:84:e5:1e:82:83:09:12:1b:d1:fd:
3a:85:0f:4a:62:92:f1:14:37:dc:bd:3d:b1:39:b5:0f:ee:73:
98:ac:ad:44:6c:85:88:a7:07:45:a3:90:74:96:7a:35:0e:70:
df:87:49:82:7f:a5:22:56:85:99:63:85:f9:05:da:18:bb:33:
7f:09:ac:75:1a:67:42:62:27:5e:8e:4f:91:74:bb:fe:1f:aa:
57:11:b3:11:4e:86:d1:f5:c8:f7:90:35:69:82:8d:c4:3d:15:
a2:2a:c7:09:b1:94:a5:55:32:65:72:b0:56:e9:94:54:dd:c0:
37:c4:01:d0:55:21:c8:25:37:69:d8:ae:38:7b:47:f3:00:fe:
c0:9b:20:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:23:09 2025 by rpki-client