
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
File: JAYggSHro_x0NhyJ5jVgtJht3wg.mft (raw, json)
Hash identifier: pqppsryNrm975JUvdYGTpzUWv/tVvSx8I8RH4N+/6UI=
Subject key identifier: BC:FF:DA:CD:96:39:9B:A3:38:6B:C9:B1:FC:D5:E1:8E:6A:77:99:8C
Authority key identifier: 24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08
Certificate issuer: /CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
Certificate serial: 0819
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
Manifest number: 07FF
Signing time: Sat 18 Oct 2025 22:15:09 +0000
Manifest this update: Sat 18 Oct 2025 22:15:08 +0000
Manifest next update: Sat 25 Oct 2025 22:15:08 +0000
Files and hashes: 1: JAYggSHro_x0NhyJ5jVgtJht3wg.crl (hash: P/hbz/IQf15LPwEO9xmg5+gv92aJkpkgZ5MeU4icnXs=)
2: 997C96220CC211ED8C32645BC4F9AE02.roa (hash: 5DLrlaEwDnRAYVGqsc8MbRxK5SZfYcfygcKSB5RewQw=)
3: DE46CA6A97A311F08969C53CC4F9AE02.roa (hash: 7554mFxBVOIG3xrGK5/XH9r15TjJMKV/ts6aEHUGI6E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl
rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 22:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2073 (0x819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D35E, serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
Validity
Not Before: Oct 18 22:15:08 2025 GMT
Not After : Oct 25 22:15:08 2025 GMT
Subject: CN=68f4116d-be75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:11:2b:10:97:96:36:c3:26:a2:44:f7:72:
a8:85:7b:a4:8e:c2:c3:72:45:8b:42:db:45:b6:fe:
01:4c:6e:93:b8:ea:61:db:fd:57:d3:f0:90:5c:9e:
0a:a3:c8:93:f0:26:1b:c2:ef:aa:62:42:d8:e7:d3:
42:6d:d3:10:6e:50:49:3f:bc:7c:3d:7c:7b:fb:54:
8a:68:4a:8a:91:4f:54:64:02:11:06:af:f6:2d:1e:
35:b2:5f:29:c3:60:0d:07:fb:0e:0d:37:c2:ce:ef:
ac:fe:0e:5c:16:f5:cc:63:76:d0:84:2a:87:27:9b:
e7:ce:0d:a0:29:e5:66:88:93:8d:52:2b:9e:da:88:
eb:c9:bd:7d:a4:fd:87:5d:e6:6c:f4:51:6f:96:58:
b6:6d:cc:b1:67:d4:84:e5:88:78:2a:1e:75:7f:9f:
bf:44:f2:77:bc:d8:48:aa:6e:fe:b7:db:29:b0:74:
2f:2f:94:6e:ec:25:25:12:e1:57:33:4c:91:3a:ea:
32:22:22:b1:95:39:6b:c1:cb:78:d7:7e:2e:5d:a8:
81:c7:27:30:58:01:2c:a3:27:b4:2a:e1:97:0d:1a:
c8:35:0a:d2:12:b8:1d:8f:d6:e7:78:97:85:05:36:
e7:3c:6c:93:79:8e:f7:0e:e0:f3:89:7d:43:65:37:
1c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FF:DA:CD:96:39:9B:A3:38:6B:C9:B1:FC:D5:E1:8E:6A:77:99:8C
X509v3 Authority Key Identifier:
keyid:24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:cc:8b:7b:c3:2a:fd:ef:b3:2c:9c:42:c3:a8:a0:14:34:ec:
1a:7b:6e:4c:18:5d:20:81:9f:5b:73:4b:81:16:d6:ae:b5:9b:
7c:c9:2e:5b:b4:dd:4b:8a:d9:24:e7:c6:d4:a9:a5:49:1f:47:
e4:0d:9c:7f:ff:44:80:a8:b8:fc:45:b0:25:94:1e:15:f4:d3:
bf:c8:a2:7f:3a:28:26:89:71:24:8d:a8:a4:5f:40:39:da:c5:
de:3d:98:92:95:3c:59:cf:b0:9a:7b:77:99:7c:6d:38:8d:4d:
ac:3c:96:e9:73:44:da:f5:c1:02:ad:61:ae:63:6f:48:a1:52:
ba:60:52:12:dd:13:b4:55:b1:5a:14:e5:50:28:de:b7:7e:11:
5d:7f:cb:11:0f:c6:bc:17:97:a3:84:f2:c9:12:46:61:2d:e5:
73:ca:e1:7a:84:a1:fc:50:55:ff:93:f4:fa:1f:a9:45:82:f3:
f1:ad:48:b6:cd:68:8f:b4:01:9a:4e:0b:62:c6:d5:7f:3d:d2:
4f:9e:ce:68:12:fc:84:34:c1:f7:9b:de:c4:7f:80:8e:fe:10:
e5:79:9d:fd:07:c7:86:dc:be:11:00:21:ba:a6:ab:49:91:e7:
8e:fb:03:a8:2b:8e:3c:ca:57:6e:cb:b6:45:d2:d0:d4:b5:23:
83:61:e4:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQzNUUxMTAvBgNVBAUTKDI0MDYyMDgxMjFFQkEzRkM3NDM2MUM4OUU2MzU2MEI0
OTg2RERGMDgwHhcNMjUxMDE4MjIxNTA4WhcNMjUxMDI1MjIxNTA4WjAYMRYwFAYD
VQQDEw02OGY0MTE2ZC1iZTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtfcRKxCXljbDJqJE93KohXukjsLDckWLQttFtv4BTG6TuOph2/1X0/CQXJ4K
o8iT8CYbwu+qYkLY59NCbdMQblBJP7x8PXx7+1SKaEqKkU9UZAIRBq/2LR41sl8p
w2ANB/sODTfCzu+s/g5cFvXMY3bQhCqHJ5vnzg2gKeVmiJONUiue2ojryb19pP2H
XeZs9FFvlli2bcyxZ9SE5Yh4Kh51f5+/RPJ3vNhIqm7+t9spsHQvL5Ru7CUlEuFX
M0yROuoyIiKxlTlrwct4134uXaiBxycwWAEsoye0KuGXDRrINQrSErgdj9bneJeF
BTbnPGyTeY73DuDziX1DZTccEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLz/2s2W
OZujOGvJsfzV4Y5qd5mMMB8GA1UdIwQYMBaAFCQGIIEh66P8dDYcieY1YLSYbd8I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDM1RS83RDM5NEM2QTAx
NkQxMUVCOEREMkMyNTlDNEY5QUUwMi9KQVlnZ1NIcm9feDBOaHlKNWpWZ3RKaHQz
d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pBWWdnU0hyb194ME5oeUo1alZndEpodDN3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDM1RS83RDM5NEM2QTAxNkQxMUVCOEREMkMyNTlDNEY5QUUwMi9KQVlnZ1NIcm9f
eDBOaHlKNWpWZ3RKaHQzd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAnzIt7wyr977MsnELDqKAUNOwae25MGF0ggZ9bc0uBFtautZt8yS5b
tN1Litkk58bUqaVJH0fkDZx//0SAqLj8RbAllB4V9NO/yKJ/OigmiXEkjaikX0A5
2sXePZiSlTxZz7Cae3eZfG04jU2sPJbpc0Ta9cECrWGuY29IoVK6YFIS3RO0VbFa
FOVQKN63fhFdf8sRD8a8F5ejhPLJEkZhLeVzyuF6hKH8UFX/k/T6H6lFgvPxrUi2
zWiPtAGaTgtixtV/PdJPns5oEvyENMH3m97Ef4CO/hDleZ39B8eG3L4RACG6pqtJ
keeO+wOoK448ylduy7ZF0tDUtSODYeRL
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:47:52 2025 by rpki-client