
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
File: n7dBtymAPGtDKbw7QOduUqvYufg.mft (raw, json)
Hash identifier: 2VUUWKyZNXV8mFVkXX/c7xtELfG0YAii0/WER8ZI+S8=
Subject key identifier: DD:AB:FD:18:74:76:47:91:74:33:39:71:2A:4A:80:D5:5A:7B:6B:26
Authority key identifier: 9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8
Certificate issuer: /CN=A91A7F56/serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8
Certificate serial: 015B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
Manifest number: 0158
Signing time: Wed 05 Nov 2025 04:15:49 +0000
Manifest this update: Wed 05 Nov 2025 04:15:48 +0000
Manifest next update: Wed 12 Nov 2025 04:15:48 +0000
Files and hashes: 1: n7dBtymAPGtDKbw7QOduUqvYufg.crl (hash: 3yPcP9xc/Stbw5ymi6t/epH0y4MsGmMEGLiqyQz5clo=)
2: 1FFCF508ADF211EE93DC0A12C4F9AE02.roa (hash: kN/JSLj9TvzMzCv/SkXvYZbvfv6T8T6WGICKq1DXwxA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl
rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7F56, serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8
Validity
Not Before: Nov 5 04:15:48 2025 GMT
Not After : Nov 12 04:15:48 2025 GMT
Subject: CN=690acf75-576a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2c:b5:a0:4e:5a:2a:4b:05:66:09:00:2a:64:
67:2c:17:82:0f:f5:9a:6b:8b:11:ad:5b:21:ac:c3:
68:9e:25:1e:05:0d:96:38:45:85:92:fa:ef:47:0e:
bd:0e:5a:36:3a:b0:7e:1f:5c:db:2a:4f:07:43:ae:
5b:99:0d:62:2b:6b:7d:d2:86:e7:6c:14:b7:9d:11:
08:23:01:2d:fe:cc:06:78:6d:92:49:54:05:b9:0b:
d2:3a:17:c5:48:bb:dd:b5:24:f9:f7:c1:e5:d5:fb:
7a:3a:b4:28:4c:b9:a6:aa:87:f3:fa:cf:81:18:fe:
97:c5:73:16:84:a3:f5:e7:56:1e:13:ea:65:fb:d8:
f4:0a:7e:07:b7:2c:22:d2:f5:a5:b2:f5:10:a5:5f:
ea:6c:40:db:10:0f:f5:7a:b1:01:ae:a0:be:20:22:
10:0d:c6:4c:35:36:45:57:ab:09:4e:b2:d2:17:15:
33:4a:1f:b1:e1:4e:54:57:72:e3:b4:49:da:e0:b3:
40:20:a8:e9:a9:cc:33:fd:12:a7:4e:3d:5e:a9:61:
f6:38:80:60:87:54:77:93:da:d5:42:22:76:f9:46:
e4:41:da:32:d6:4e:89:b8:57:74:fa:49:41:eb:4c:
71:d3:36:32:ef:12:8b:a3:21:f4:3a:cb:07:63:21:
08:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AB:FD:18:74:76:47:91:74:33:39:71:2A:4A:80:D5:5A:7B:6B:26
X509v3 Authority Key Identifier:
keyid:9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:80:e7:3c:9d:84:c5:90:0c:e9:ad:72:a3:17:d5:40:0d:93:
d2:ed:f3:32:3e:c2:90:ad:c2:30:90:f9:d7:0f:e4:b4:50:25:
c2:49:13:bc:9e:51:34:80:41:bc:f1:cf:ca:39:fd:82:05:1d:
9e:ad:27:3e:ad:8e:9e:6c:d2:8a:bc:ea:93:a8:cd:ff:09:77:
50:a2:6d:2f:45:b3:df:f3:c3:67:53:f2:d1:22:53:83:4d:42:
34:e3:bb:fd:36:94:a2:e7:dd:56:f0:5b:07:89:88:31:26:fe:
97:1d:54:54:e4:2c:3a:77:52:9a:0e:48:ca:4e:2a:4a:d6:33:
d1:0d:88:54:90:a1:e5:87:3f:7f:0e:19:0d:51:26:80:27:97:
5c:c9:e3:49:17:40:d9:0b:3f:ac:08:cf:76:01:4a:14:cb:2a:
ab:46:64:fd:a2:55:f4:60:0a:00:08:53:b2:fb:b5:bd:8f:69:
26:1e:5c:6e:fc:33:8a:b0:2e:e2:0b:08:7c:f7:4b:0c:a6:bd:
ab:b3:5c:c8:73:b3:6d:9a:09:ab:48:c6:be:70:db:ae:83:d5:
70:18:2e:10:fe:54:8b:e7:13:44:80:b5:c2:b7:2c:a4:dc:84:
e8:c9:1e:1c:e5:03:57:f4:a2:11:4e:c9:17:fb:bb:8d:88:ab:
a5:74:67:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTdGNTYxMTAvBgNVBAUTKDlGQjc0MUI3Mjk4MDNDNkI0MzI5QkMzQjQwRTc2RTUy
QUJEOEI5RjgwHhcNMjUxMTA1MDQxNTQ4WhcNMjUxMTEyMDQxNTQ4WjAYMRYwFAYD
VQQDEw02OTBhY2Y3NS01NzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzyy1oE5aKksFZgkAKmRnLBeCD/Waa4sRrVshrMNoniUeBQ2WOEWFkvrvRw69
Dlo2OrB+H1zbKk8HQ65bmQ1iK2t90obnbBS3nREIIwEt/swGeG2SSVQFuQvSOhfF
SLvdtST598Hl1ft6OrQoTLmmqofz+s+BGP6XxXMWhKP151YeE+pl+9j0Cn4Htywi
0vWlsvUQpV/qbEDbEA/1erEBrqC+ICIQDcZMNTZFV6sJTrLSFxUzSh+x4U5UV3Lj
tEna4LNAIKjpqcwz/RKnTj1eqWH2OIBgh1R3k9rVQiJ2+UbkQdoy1k6JuFd0+klB
60xx0zYy7xKLoyH0OssHYyEIMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2r/Rh0
dkeRdDM5cSpKgNVae2smMB8GA1UdIwQYMBaAFJ+3QbcpgDxrQym8O0DnblKr2Ln4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y1Ni85NEQ1NzIzNkFD
Q0QxMUVFODEwNjkwNTBDNEY5QUUwMi9uN2RCdHltQVBHdERLYnc3UU9kdVVxdll1
ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL243ZEJ0eW1BUEd0REtidzdRT2R1VXF2WXVmZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
N0Y1Ni85NEQ1NzIzNkFDQ0QxMUVFODEwNjkwNTBDNEY5QUUwMi9uN2RCdHltQVBH
dERLYnc3UU9kdVVxdll1ZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAsgOc8nYTFkAzprXKjF9VADZPS7fMyPsKQrcIwkPnXD+S0UCXCSRO8
nlE0gEG88c/KOf2CBR2erSc+rY6ebNKKvOqTqM3/CXdQom0vRbPf88NnU/LRIlOD
TUI047v9NpSi591W8FsHiYgxJv6XHVRU5Cw6d1KaDkjKTipK1jPRDYhUkKHlhz9/
DhkNUSaAJ5dcyeNJF0DZCz+sCM92AUoUyyqrRmT9olX0YAoACFOy+7W9j2kmHlxu
/DOKsC7iCwh890sMpr2rs1zIc7NtmgmrSMa+cNuug9VwGC4Q/lSL5xNEgLXCtyyk
3IToyR4c5QNX9KIRTskX+7uNiKuldGdD
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:34:14 2025 by rpki-client