$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft File: n7dBtymAPGtDKbw7QOduUqvYufg.mft (raw, json) Hash identifier: yKQb12kFuCFGHY7ZJRCQYYz/R9X1h/1T9jOf/RaILCw= Subject key identifier: 1F:B6:1E:BD:D7:25:B9:AC:1F:8C:25:AF:40:77:64:D7:76:61:E8:1F Authority key identifier: 9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8 Certificate issuer: /CN=A91A7F56/serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft Manifest number: 0150 Signing time: Sun 19 Oct 2025 06:55:39 +0000 Manifest this update: Sun 19 Oct 2025 06:55:39 +0000 Manifest next update: Sun 26 Oct 2025 06:55:39 +0000 Files and hashes: 1: n7dBtymAPGtDKbw7QOduUqvYufg.crl (hash: XJ7+rmlW5PD6T0Xn67lFTDGVB7azQRxRrsJCzaJXCD8=) 2: 1FFCF508ADF211EE93DC0A12C4F9AE02.roa (hash: kN/JSLj9TvzMzCv/SkXvYZbvfv6T8T6WGICKq1DXwxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F56, serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8 Validity Not Before: Oct 19 06:55:39 2025 GMT Not After : Oct 26 06:55:39 2025 GMT Subject: CN=68f48b6b-7216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2c:e7:6a:3b:f3:8b:55:2e:f2:1a:bf:02:78: c7:b3:b8:4e:8e:d0:4d:26:5c:12:fe:44:0a:0b:b9: 9f:6b:4a:ae:94:a5:7f:56:0e:a5:74:a2:4d:ee:48: f0:98:4b:f8:ba:a0:a1:08:09:90:00:55:15:61:82: 11:84:95:d8:77:8f:c1:2f:ef:07:f5:5b:8c:72:6e: 53:e1:39:20:ca:49:12:de:b2:22:15:74:ea:dc:92: b0:35:66:d1:f4:93:f1:d2:fa:95:b1:cb:78:24:6b: 60:6c:7d:80:96:78:a7:de:b8:42:25:87:67:9c:9d: 14:c9:ea:0d:23:88:db:72:12:ec:8d:ce:16:82:81: 60:60:40:82:c5:22:6a:0c:07:46:b4:d3:34:21:2f: 47:67:b7:bd:c2:b9:9c:5c:40:a1:11:36:dc:b5:b3: 7e:8b:23:15:c5:99:64:13:ae:ab:d7:b9:ec:41:98: 29:e9:e8:05:b3:42:b7:65:1c:3b:79:a6:7e:07:8e: d0:15:d0:15:a7:61:fe:84:8b:5d:9f:3b:fc:d2:39: 8e:43:14:8f:88:98:aa:56:0d:25:8c:49:89:0a:10: a5:31:b0:8e:3e:2a:22:93:0b:bd:86:e4:5e:04:a3: 01:a8:3d:88:5e:d7:53:2b:96:f1:22:ef:58:3d:80: 8b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B6:1E:BD:D7:25:B9:AC:1F:8C:25:AF:40:77:64:D7:76:61:E8:1F X509v3 Authority Key Identifier: keyid:9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ba:67:3f:3e:f5:7d:5f:7b:ba:0c:48:de:89:ec:ee:d5:5b: b9:89:6b:d6:e4:47:89:07:7d:35:f6:1b:33:59:8b:9e:6a:48: 21:35:15:c0:3f:cd:12:62:b7:33:e7:c6:63:de:78:45:63:55: 68:b5:8e:d9:86:da:28:3c:c4:f9:30:3f:1b:bc:7f:96:c0:14: f1:fc:84:4e:61:d0:46:e2:a3:b3:96:3d:76:29:d6:f1:90:d8: c8:12:32:ef:0f:7c:84:4f:8d:48:66:5f:a8:3a:77:9b:b0:c0: 8a:25:ad:ca:e3:8a:25:c1:8f:80:87:9c:a5:9e:43:d1:f7:ce: 1e:1f:2d:46:b2:5a:c7:ae:21:b4:cf:d2:14:6d:47:35:4c:56: 39:23:b8:95:ae:c4:68:04:28:c3:ef:97:1d:27:7e:d0:ea:2d: e1:a0:5f:70:92:1b:0d:56:2c:82:8f:d9:27:49:08:54:66:d1: 4f:98:be:46:d6:4a:07:5f:bc:45:8a:05:1a:62:11:33:8f:29: d3:f9:27:ee:e3:5e:ad:54:b3:48:3c:67:b8:99:d7:cf:e3:77: de:e5:ed:b0:c2:64:43:93:ac:74:07:d9:fc:5b:fa:0c:7e:22: e0:0b:a6:d0:65:90:73:5a:e2:4a:02:f9:83:7d:7f:7d:05:0c: da:4d:01:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGNTYxMTAvBgNVBAUTKDlGQjc0MUI3Mjk4MDNDNkI0MzI5QkMzQjQwRTc2RTUy QUJEOEI5RjgwHhcNMjUxMDE5MDY1NTM5WhcNMjUxMDI2MDY1NTM5WjAYMRYwFAYD VQQDEw02OGY0OGI2Yi03MjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCznajvzi1Uu8hq/AnjHs7hOjtBNJlwS/kQKC7mfa0qulKV/Vg6ldKJN7kjw mEv4uqChCAmQAFUVYYIRhJXYd4/BL+8H9VuMcm5T4TkgykkS3rIiFXTq3JKwNWbR 9JPx0vqVsct4JGtgbH2Alnin3rhCJYdnnJ0UyeoNI4jbchLsjc4WgoFgYECCxSJq DAdGtNM0IS9HZ7e9wrmcXEChETbctbN+iyMVxZlkE66r17nsQZgp6egFs0K3ZRw7 eaZ+B47QFdAVp2H+hItdnzv80jmOQxSPiJiqVg0ljEmJChClMbCOPioikwu9huRe BKMBqD2IXtdTK5bxIu9YPYCLRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+2Hr3X JbmsH4wlr0B3ZNd2YegfMB8GA1UdIwQYMBaAFJ+3QbcpgDxrQym8O0DnblKr2Ln4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y1Ni85NEQ1NzIzNkFD Q0QxMUVFODEwNjkwNTBDNEY5QUUwMi9uN2RCdHltQVBHdERLYnc3UU9kdVVxdll1 ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL243ZEJ0eW1BUEd0REtidzdRT2R1VXF2WXVmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y1Ni85NEQ1NzIzNkFDQ0QxMUVFODEwNjkwNTBDNEY5QUUwMi9uN2RCdHltQVBH dERLYnc3UU9kdVVxdll1ZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyumc/PvV9X3u6DEjeiezu1Vu5iWvW5EeJB3019hszWYueakghNRXA P80SYrcz58Zj3nhFY1VotY7ZhtooPMT5MD8bvH+WwBTx/IROYdBG4qOzlj12Kdbx kNjIEjLvD3yET41IZl+oOnebsMCKJa3K44olwY+Ah5ylnkPR984eHy1GslrHriG0 z9IUbUc1TFY5I7iVrsRoBCjD75cdJ37Q6i3hoF9wkhsNViyCj9knSQhUZtFPmL5G 1koHX7xFigUaYhEzjynT+Sfu416tVLNIPGe4mdfP43fe5e2wwmRDk6x0B9n8W/oM fiLgC6bQZZBzWuJKAvmDfX99BQzaTQFW -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:47 2025 by rpki-client