$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft File: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft (raw, json) Hash identifier: +ng8/Xlt0YrYc7Ncin1AY1t3KxqFoOI+03ploe7/ZzU= Subject key identifier: AB:26:11:9A:04:A0:5B:0B:3F:FD:DB:32:47:14:5A:4A:5D:95:4D:F1 Authority key identifier: EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D Certificate issuer: /CN=A91A55C9/serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft Manifest number: 0142 Signing time: Mon 03 Nov 2025 04:21:52 +0000 Manifest this update: Mon 03 Nov 2025 04:21:51 +0000 Manifest next update: Mon 10 Nov 2025 04:21:51 +0000 Files and hashes: 1: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl (hash: RXms6eCE0fOTw3smXKr76DpLgcDcVAmKMPsPB/ARI90=) 2: 9DDCAB1AC9EC11EE9644540FC4F9AE02.roa (hash: u6J6SPSNjElCImZDre2hX9rdBiRV9plYfnlpPbtxhQc=) 3: 9E40D11CC9EC11EE9644540FC4F9AE02.roa (hash: hR3HemTX8sPR//njNhfSediG0DqzFMWVKhRmgOL4nRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55C9, serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D Validity Not Before: Nov 3 04:21:51 2025 GMT Not After : Nov 10 04:21:51 2025 GMT Subject: CN=69082ddf-05a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:6b:74:18:e9:b2:70:27:80:ae:f4:48:a1:ed: 7c:9b:f7:f4:16:e9:7b:55:ef:a7:78:59:c0:42:0d: f2:3b:6a:a2:5a:ef:00:85:12:30:37:b0:e3:7b:41: d7:1d:42:32:39:d0:80:e9:55:4d:7d:a8:4d:61:94: 5f:76:5c:0c:0f:33:45:93:b7:a6:dd:9f:4a:25:a6: 35:6f:02:08:97:a9:51:69:47:0a:c7:5c:2c:7b:8e: 47:ad:04:b4:6c:22:3f:ff:11:da:e8:29:89:10:14: 8e:59:df:b1:e1:3b:ee:10:35:81:69:f4:0e:ac:ae: 4a:12:6a:72:2e:b4:cc:0d:7f:11:7e:a6:ea:84:38: af:49:82:a1:49:df:58:5c:15:ca:76:85:bd:46:06: f5:c4:cd:6b:6b:28:b0:a0:92:b8:c4:78:03:56:e3: 65:0c:3a:79:dd:cb:91:77:39:0d:6f:5b:2e:75:a1: ea:dd:d7:60:5b:33:97:32:a9:4d:bd:1e:53:bc:35: 18:ea:f9:4a:ef:2e:7e:cd:12:01:88:7d:92:10:1d: 38:31:90:ac:fa:c9:c4:44:40:de:e3:f0:ea:6f:29: de:d4:5d:4c:8b:39:9b:62:2b:62:45:e4:51:33:1f: b5:54:e1:f5:b6:a0:f6:69:d2:d8:f7:4b:99:2b:a4: 90:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:26:11:9A:04:A0:5B:0B:3F:FD:DB:32:47:14:5A:4A:5D:95:4D:F1 X509v3 Authority Key Identifier: keyid:EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:5c:8c:ab:f2:88:ad:8e:0b:e6:20:8d:98:9c:12:c9:65:9d: b5:97:44:35:ec:be:cc:9f:ff:d2:3b:5b:e0:db:9f:e4:1e:84: d2:68:bf:7f:e4:d2:bd:3a:60:00:e6:df:59:87:7b:06:af:09: c5:03:ab:7f:01:25:19:0c:3b:88:fd:ed:df:0c:9c:38:f2:60: e3:c5:eb:de:d2:7e:c2:a1:91:53:02:14:5c:d4:ad:58:73:ae: 2b:ec:df:62:a1:50:80:62:0c:1f:77:d5:84:ed:d2:4f:1a:8a: c6:3e:fb:c4:18:8b:2a:83:d7:7b:73:f2:77:04:ca:0b:3d:a0: bf:c1:c7:68:2b:d2:a0:c3:41:a5:1f:fe:46:ae:b6:0b:11:44: 72:1d:ad:48:5b:3f:6f:59:95:51:ac:81:fd:a4:3d:34:bb:2a: 41:e4:9e:5f:ab:40:37:c4:47:52:46:e7:6a:2a:48:34:93:8d: b3:6c:59:23:45:99:bf:5e:41:b9:fb:80:51:49:bd:d3:a4:37: fb:06:49:ae:ea:d8:5f:da:6d:f6:f2:87:a2:af:1d:15:b6:eb: 82:4d:8e:45:0c:23:e1:5e:74:c0:60:4a:5f:61:eb:38:c7:f0: 09:57:44:38:88:b6:43:38:43:b7:6c:a3:00:2b:af:55:7e:bd: 8f:5a:d3:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1QzkxMTAvBgNVBAUTKEVDNjc4REUwRDdCQ0Y4MzlEOTk4QTBGQ0U1QzlFQjc1 RkZDODY3M0QwHhcNMjUxMTAzMDQyMTUxWhcNMjUxMTEwMDQyMTUxWjAYMRYwFAYD VQQDEw02OTA4MmRkZi0wNWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA82t0GOmycCeArvRIoe18m/f0Ful7Ve+neFnAQg3yO2qiWu8AhRIwN7Dje0HX HUIyOdCA6VVNfahNYZRfdlwMDzNFk7em3Z9KJaY1bwIIl6lRaUcKx1wse45HrQS0 bCI//xHa6CmJEBSOWd+x4TvuEDWBafQOrK5KEmpyLrTMDX8RfqbqhDivSYKhSd9Y XBXKdoW9Rgb1xM1rayiwoJK4xHgDVuNlDDp53cuRdzkNb1sudaHq3ddgWzOXMqlN vR5TvDUY6vlK7y5+zRIBiH2SEB04MZCs+snEREDe4/Dqbyne1F1MizmbYitiReRR Mx+1VOH1tqD2adLY90uZK6SQFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsmEZoE oFsLP/3bMkcUWkpdlU3xMB8GA1UdIwQYMBaAFOxnjeDXvPg52Zig/OXJ63X/yGc9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS83RTJGMTI2OEM5 RUIxMUVFOEI4NTdCMENDNEY5QUUwMi83R2VONE5lOC1EblptS0Q4NWNucmRmX0la ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdHZU40TmU4LURuWm1LRDg1Y25yZGZfSVp6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVDOS83RTJGMTI2OEM5RUIxMUVFOEI4NTdCMENDNEY5QUUwMi83R2VONE5lOC1E blptS0Q4NWNucmRmX0laejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQXIyr8oitjgvmII2YnBLJZZ21l0Q17L7Mn//SO1vg25/kHoTSaL9/ 5NK9OmAA5t9Zh3sGrwnFA6t/ASUZDDuI/e3fDJw48mDjxeve0n7CoZFTAhRc1K1Y c64r7N9ioVCAYgwfd9WE7dJPGorGPvvEGIsqg9d7c/J3BMoLPaC/wcdoK9Kgw0Gl H/5GrrYLEURyHa1IWz9vWZVRrIH9pD00uypB5J5fq0A3xEdSRudqKkg0k42zbFkj RZm/XkG5+4BRSb3TpDf7Bkmu6thf2m328oeirx0VtuuCTY5FDCPhXnTAYEpfYes4 x/AJV0Q4iLZDOEO3bKMAK69Vfr2PWtOV -----END CERTIFICATE-----Generated at Tue Nov 4 22:40:23 2025 by rpki-client