
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
File: JijmqJTN_JNz89uc_PvFFD_6Kj4.mft (raw, json)
Hash identifier: dTVD6o95Yv6q7HLVfb7fthoR2ay23UHC0k3kDg4BiIA=
Subject key identifier: C3:55:91:82:D1:88:72:4B:20:9D:6A:58:DD:37:83:1A:4D:3F:29:FD
Authority key identifier: 26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E
Certificate issuer: /CN=A91F98D7/serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E
Certificate serial: BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
Manifest number: B8
Signing time: Mon 03 Nov 2025 06:05:13 +0000
Manifest this update: Mon 03 Nov 2025 06:05:13 +0000
Manifest next update: Mon 10 Nov 2025 06:05:13 +0000
Files and hashes: 1: JijmqJTN_JNz89uc_PvFFD_6Kj4.crl (hash: reOw3xjobGNxvLzAT1FZdpysPxy8Aa+jmEAavwRa4AQ=)
2: D1E8FCF6A87111EF96B74932C4F9AE02.roa (hash: enXEkpBa0eGlKzSX90hnhUrWxqZsAsvyTyWFjRwdRIY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl
rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F98D7, serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E
Validity
Not Before: Nov 3 06:05:13 2025 GMT
Not After : Nov 10 06:05:13 2025 GMT
Subject: CN=69084619-3a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e1:8a:57:c6:14:dd:0d:da:a1:0f:9a:c7:8a:
e0:4b:58:58:b3:1d:af:2a:f9:04:f0:6b:79:98:eb:
7c:b7:d9:b5:ec:62:fa:f7:29:47:73:5d:47:1c:1e:
69:40:17:b2:70:02:36:ec:c7:80:d5:56:93:4e:27:
d7:cf:77:39:7f:85:64:12:57:aa:ac:02:05:d2:23:
64:33:b7:4e:7b:22:a3:48:f0:a8:74:84:2a:e0:b4:
8c:60:47:c2:66:72:e1:6a:5d:41:24:43:78:73:93:
4e:1d:e1:f1:57:8f:b5:86:dd:8a:68:cd:3b:cf:96:
84:e9:69:f8:05:55:fc:ca:c4:27:72:e9:ea:b9:f4:
ca:b1:db:3d:5f:21:ef:78:57:5a:39:e7:68:39:00:
6d:4f:94:89:77:20:57:38:a7:6f:3e:a7:52:ef:be:
2c:99:37:57:59:dc:4f:cb:06:60:f5:c5:04:57:6a:
95:d1:49:f6:a8:61:7d:0f:1b:4c:0a:f9:3f:b6:b5:
f0:2c:fa:f9:3c:fb:6e:5f:e2:bb:34:99:59:98:28:
93:b8:d1:74:b5:93:7c:58:0f:97:db:a3:f9:ac:18:
29:ea:30:da:e6:79:8e:b0:90:a4:2c:22:30:26:a6:
f8:51:c9:5c:97:8d:48:27:ee:a3:41:19:36:78:f5:
58:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:55:91:82:D1:88:72:4B:20:9D:6A:58:DD:37:83:1A:4D:3F:29:FD
X509v3 Authority Key Identifier:
keyid:26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:89:bf:1a:04:ae:1e:82:e7:aa:d1:f4:1a:ae:20:b3:07:2d:
a5:bb:96:15:f5:27:34:6f:87:ec:43:64:7d:7a:c7:76:04:ee:
14:57:5c:53:23:3e:31:fc:be:0c:5f:9c:b2:de:6d:d0:52:60:
6b:03:fa:63:b6:35:4c:0a:0f:77:f8:c3:54:9d:28:bd:55:21:
e1:8e:42:37:5c:55:34:21:4c:86:5b:58:dd:ae:f6:24:2f:d9:
ce:c2:4b:4f:90:37:de:15:5a:e9:6c:90:03:b1:86:10:be:69:
1c:8f:6a:b0:28:d9:4a:59:34:b6:ea:bc:c6:9f:f8:26:ab:b3:
0c:a2:49:d0:bf:5f:b2:03:2a:79:66:86:93:ec:8c:82:2e:d7:
d9:b1:6d:85:22:5e:06:9d:73:99:ab:ad:6a:2e:3d:47:96:8a:
ef:2c:ff:4f:ff:11:af:e8:ae:86:7a:89:e3:6b:df:55:1e:49:
29:4d:38:6b:7d:26:b9:30:34:69:4a:bc:f5:5d:31:91:00:be:
e7:b1:73:d6:69:44:76:d3:b9:fc:3b:bb:b0:6d:06:e9:99:47:
1c:2b:3e:ca:45:45:7d:33:96:a9:6c:29:d5:19:f2:49:29:cb:
bd:5a:3d:82:7d:22:fe:22:f1:f8:3f:50:61:b7:cf:76:05:65:
a0:98:78:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:20:02 2025 by rpki-client