$ rpki-client -vvf rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft File: u7bmAQQ3QyUFSIC308E15vx8yrE.mft (raw, json) Hash identifier: QTWa2vE2glEeTRZdJqkDKYrWuKTfNpIO9mrExdpGbFM= Subject key identifier: 32:8C:0E:54:D8:E0:18:A5:80:38:36:C4:AE:75:FC:41:66:B4:16:75 Authority key identifier: BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1 Certificate issuer: /CN=A912804A/serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1 Certificate serial: 0238 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft Manifest number: 0233 Signing time: Sun 19 Oct 2025 04:08:59 +0000 Manifest this update: Sun 19 Oct 2025 04:08:58 +0000 Manifest next update: Sun 26 Oct 2025 04:08:58 +0000 Files and hashes: 1: u7bmAQQ3QyUFSIC308E15vx8yrE.crl (hash: JpWc13Ed8QH8n17ci2yn5nkfqHOs6pGHdyoGXgeqG4M=) 2: CCB0DBA8CB2911EE9CE70483C4F9AE02.roa (hash: +L4H64N18c7HC9b7a2kMN0oPwzUDs4ByILHmodSVj7c=) 3: 003D7FEE15E811F0841B1A7DC4F9AE02.roa (hash: NzfvN2nV9saQebWeBwyNL6bb8Qj6DnzhJ2bxOu8Ukwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 568 (0x238) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912804A, serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1 Validity Not Before: Oct 19 04:08:58 2025 GMT Not After : Oct 26 04:08:58 2025 GMT Subject: CN=68f4645b-6679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8b:bf:98:d2:bd:39:d7:db:77:d6:46:15:cd: 78:5b:37:ba:de:f6:89:02:4c:8a:27:21:4e:f7:e0: c1:17:56:de:72:9c:fe:f6:f3:94:71:aa:7f:ca:f1: 8f:01:43:50:89:6e:4e:da:c9:ee:c0:2b:b1:89:18: f9:dc:dc:c7:c3:a2:29:8e:4b:d7:2f:6a:8c:73:6f: cc:48:5e:9e:80:31:5c:83:6c:ee:c6:ec:a3:62:26: 32:70:4a:96:ae:97:41:48:95:18:6a:4b:d4:f5:c8: 63:2e:63:f6:15:3b:f0:c8:89:f8:64:f2:c5:84:c7: a3:ab:d0:01:bb:7c:7d:30:02:a6:d9:03:dd:70:d3: d1:ce:83:81:f2:4d:2f:d0:fa:f6:c3:3e:6a:bf:88: 70:14:42:b6:9f:be:eb:84:79:36:b0:e9:03:1a:75: 00:01:58:dc:4d:fc:88:db:52:28:a0:a1:6f:14:25: aa:bb:c9:94:1c:e6:d7:57:ac:c3:12:9a:5b:f7:f5: ef:bc:c7:9e:55:4b:51:e5:28:a0:08:84:3f:60:88: ff:c6:f7:ec:e6:ce:31:f0:19:6f:f8:6f:7c:41:60: 19:11:fe:9d:ca:fd:12:94:02:90:e4:c9:bb:01:57: 21:4f:1a:a5:38:24:85:d6:26:6e:15:ea:09:e3:0a: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8C:0E:54:D8:E0:18:A5:80:38:36:C4:AE:75:FC:41:66:B4:16:75 X509v3 Authority Key Identifier: keyid:BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b8:57:de:ee:b1:80:cc:4e:24:0c:04:c1:04:cb:80:7f:7a: e5:69:41:6e:3a:00:81:a9:bd:a2:c5:6c:b5:b3:66:67:be:08: 40:83:08:a2:f7:be:f5:84:ba:62:35:c2:04:be:69:c0:bb:9e: 6f:5f:fa:aa:9a:7b:c6:c2:74:5c:95:e2:fd:26:db:e6:48:7c: d4:81:92:26:44:f1:0c:bd:71:fe:9a:1b:2c:29:3a:b8:56:76: d6:15:34:22:d3:75:42:37:b8:14:41:db:a0:1e:37:e8:b8:fb: 69:5c:c5:71:b3:bb:53:4d:93:32:c8:a4:3c:32:af:fb:4f:6c: 3e:a6:3b:26:7b:6f:c2:d6:50:bf:09:b8:30:76:59:d2:70:9b: a4:98:aa:dd:6a:2f:87:2f:13:55:cf:0c:8b:11:8d:d3:77:af: 9b:5f:54:78:86:36:80:25:96:91:29:23:1c:4c:fa:34:c0:74: 4c:cc:91:bb:9f:52:79:7e:15:f7:84:50:fc:92:5e:f8:3f:0c: 1e:78:5b:cb:a7:be:85:ef:80:a2:fa:c5:2d:73:fc:c0:d9:7f: 60:c1:8a:30:a7:36:9d:73:96:db:54:37:e2:52:7e:b0:2e:cb: 74:74:c6:1e:be:e0:20:f0:c7:b6:8b:59:22:eb:0c:ae:fb:8f: bb:4d:19:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgwNEExMTAvBgNVBAUTKEJCQjZFNjAxMDQzNzQzMjUwNTQ4ODBCN0QzQzEzNUU2 RkM3Q0NBQjEwHhcNMjUxMDE5MDQwODU4WhcNMjUxMDI2MDQwODU4WjAYMRYwFAYD VQQDEw02OGY0NjQ1Yi02Njc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApou/mNK9Odfbd9ZGFc14Wze63vaJAkyKJyFO9+DBF1becpz+9vOUcap/yvGP AUNQiW5O2snuwCuxiRj53NzHw6IpjkvXL2qMc2/MSF6egDFcg2zuxuyjYiYycEqW rpdBSJUYakvU9chjLmP2FTvwyIn4ZPLFhMejq9ABu3x9MAKm2QPdcNPRzoOB8k0v 0Pr2wz5qv4hwFEK2n77rhHk2sOkDGnUAAVjcTfyI21IooKFvFCWqu8mUHObXV6zD Eppb9/XvvMeeVUtR5SigCIQ/YIj/xvfs5s4x8Blv+G98QWAZEf6dyv0SlAKQ5Mm7 AVchTxqlOCSF1iZuFeoJ4wpDcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKMDlTY 4BilgDg2xK51/EFmtBZ1MB8GA1UdIwQYMBaAFLu25gEEN0MlBUiAt9PBNeb8fMqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA0QS85NUE4MTAxNDUw NzcxMUVEOUY3MjU5MjhDNEY5QUUwMi91N2JtQVFRM1F5VUZTSUMzMDhFMTV2eDh5 ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U3Ym1BUVEzUXlVRlNJQzMwOEUxNXZ4OHlyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODA0QS85NUE4MTAxNDUwNzcxMUVEOUY3MjU5MjhDNEY5QUUwMi91N2JtQVFRM1F5 VUZTSUMzMDhFMTV2eDh5ckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsuFfe7rGAzE4kDATBBMuAf3rlaUFuOgCBqb2ixWy1s2ZnvghAgwii 9771hLpiNcIEvmnAu55vX/qqmnvGwnRcleL9JtvmSHzUgZImRPEMvXH+mhssKTq4 VnbWFTQi03VCN7gUQdugHjfouPtpXMVxs7tTTZMyyKQ8Mq/7T2w+pjsme2/C1lC/ CbgwdlnScJukmKrdai+HLxNVzwyLEY3Td6+bX1R4hjaAJZaRKSMcTPo0wHRMzJG7 n1J5fhX3hFD8kl74PwweeFvLp76F74Ci+sUtc/zA2X9gwYowpzadc5bbVDfiUn6w Lst0dMYevuAg8Me2i1ki6wyu+4+7TRnX -----END CERTIFICATE-----Generated at Tue Oct 21 00:09:23 2025 by rpki-client