$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft File: MsAhMRti_kUAvI5OD0hSxkvF2ss.mft (raw, json) Hash identifier: W9gd07e8F114As424HqHjjeywNhMQSYw84oT+zt0Nb4= Subject key identifier: A6:14:4B:A4:FF:D0:F3:40:28:32:77:2F:A0:ED:74:30:C6:6B:03:69 Authority key identifier: 32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB Certificate issuer: /CN=A915D8F3/serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft Manifest number: 67 Signing time: Thu 15 May 2025 04:53:28 +0000 Manifest this update: Thu 15 May 2025 04:53:27 +0000 Manifest next update: Thu 22 May 2025 04:53:27 +0000 Files and hashes: 1: MsAhMRti_kUAvI5OD0hSxkvF2ss.crl (hash: TYk8PkljC+wrr3iRYbA7DyObaHrrrGbWSX8Og0XFG6A=) 2: 37DEC83C9DEC11EFB004850FC4F9AE02.roa (hash: AzFl0RFcs8OJznRZfBYgmDybc5F7V12CS5camGFMWxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8F3, serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB Validity Not Before: May 15 04:53:27 2025 GMT Not After : May 22 04:53:27 2025 GMT Subject: CN=68257348-7a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:53:7c:0e:8b:01:6d:b5:16:88:28:91:a4:82: d7:62:e7:2d:29:66:76:f6:dd:f9:cd:b6:36:e2:97: a3:30:60:53:87:b1:5b:cd:cf:2e:7d:56:11:90:bd: 01:50:67:e5:18:f3:00:f8:eb:80:10:40:b4:92:1e: fe:8a:0b:0d:09:23:52:cb:cd:f3:8d:93:20:81:67: b7:5f:48:1f:6e:f5:55:40:6e:c2:70:2a:79:8e:39: a6:8c:d2:5e:cf:f6:70:7b:a7:de:94:34:aa:10:78: 95:f9:26:ec:39:07:e1:b7:d1:b6:ff:d6:ea:02:8e: 64:01:9d:87:f9:41:38:77:ac:ab:22:49:09:f1:c9: 73:dd:b8:3d:7d:53:71:c8:49:da:7e:7f:65:f7:2f: ad:5a:f3:15:3a:58:27:dd:bd:84:c1:db:c0:0b:17: b3:48:9e:5a:80:3b:f7:d3:1f:35:45:86:2f:75:1c: 58:42:68:ed:ad:68:fd:ab:13:fc:ea:7d:2a:ba:94: 8a:44:8b:70:18:a1:8c:f9:93:ab:e6:33:53:0a:8f: 53:c6:43:16:90:88:09:23:86:0a:d3:ac:26:d9:41: 68:13:28:dd:07:92:c6:ca:58:db:84:3c:52:47:41: de:83:7b:13:12:b5:d6:2a:f4:64:72:89:6d:bb:9e: 0a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:14:4B:A4:FF:D0:F3:40:28:32:77:2F:A0:ED:74:30:C6:6B:03:69 X509v3 Authority Key Identifier: keyid:32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:7b:1a:c2:87:7b:13:c7:40:3d:7c:9e:0b:fe:10:ee:58:1d: 1e:34:7a:3f:2d:36:1f:f9:08:0a:8d:32:4a:72:51:c5:d0:2f: 7f:3d:8c:9d:19:91:27:3c:b0:a1:14:e0:b1:5c:af:27:f3:38: 30:a5:f9:04:18:40:25:0b:10:05:d7:6d:82:c1:82:53:bd:48: 89:ac:d8:40:36:a1:10:3f:f8:15:30:92:c3:89:d7:fa:21:67: d7:1c:c7:c8:a6:3a:99:1a:7d:72:20:41:79:d3:3d:8b:11:0d: 52:d0:0a:0d:1c:26:97:4d:a5:11:96:03:9d:ae:a8:cb:26:ee: c0:69:46:05:6c:55:05:80:a6:f2:43:0c:55:9c:06:0c:42:71: 1b:3f:22:9f:8f:b8:6f:c2:8c:59:8b:20:e4:bb:38:ad:7c:83: 94:a3:06:ba:c9:ea:26:d8:b7:bb:1b:27:2a:e3:7c:e6:14:cd: 29:02:9d:8a:f1:04:bc:30:39:89:41:6c:30:70:9f:d2:75:73: 28:01:e8:a9:7f:1a:6c:86:fa:cb:bf:21:10:99:db:30:93:a6: d1:49:45:cd:fa:a8:07:a8:d9:89:42:db:b8:68:9e:56:4c:31: 93:3d:89:00:e4:f7:e2:64:3b:ae:4f:38:33:3e:5b:3c:12:13: 1f:f5:7f:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RDhGMzExMC8GA1UEBRMoMzJDMDIxMzExQjYyRkU0NTAwQkM4RTRFMEY0ODUyQzY0 QkM1REFDQjAeFw0yNTA1MTUwNDUzMjdaFw0yNTA1MjIwNDUzMjdaMBgxFjAUBgNV BAMTDTY4MjU3MzQ4LTdhODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfU3wOiwFttRaIKJGkgtdi5y0pZnb23fnNtjbil6MwYFOHsVvNzy59VhGQvQFQ Z+UY8wD464AQQLSSHv6KCw0JI1LLzfONkyCBZ7dfSB9u9VVAbsJwKnmOOaaM0l7P 9nB7p96UNKoQeJX5Juw5B+G30bb/1uoCjmQBnYf5QTh3rKsiSQnxyXPduD19U3HI Sdp+f2X3L61a8xU6WCfdvYTB28ALF7NInlqAO/fTHzVFhi91HFhCaO2taP2rE/zq fSq6lIpEi3AYoYz5k6vmM1MKj1PGQxaQiAkjhgrTrCbZQWgTKN0HksbKWNuEPFJH Qd6DexMStdYq9GRyiW27ngoXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUphRLpP/Q 80AoMncvoO10MMZrA2kwHwYDVR0jBBgwFoAUMsAhMRti/kUAvI5OD0hSxkvF2ssw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVEOEYzL0M1N0YyM0FFOUIw NzExRUY4MzdFQTAxMkM0RjlBRTAyL01zQWhNUnRpX2tVQXZJNU9EMGhTeGt2RjJz cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTXNBaE1SdGlfa1VBdkk1T0QwaFN4a3ZGMnNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE OEYzL0M1N0YyM0FFOUIwNzExRUY4MzdFQTAxMkM0RjlBRTAyL01zQWhNUnRpX2tV QXZJNU9EMGhTeGt2RjJzcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAl7GsKHexPHQD18ngv+EO5YHR40ej8tNh/5CAqNMkpyUcXQL389jJ0Z kSc8sKEU4LFcryfzODCl+QQYQCULEAXXbYLBglO9SIms2EA2oRA/+BUwksOJ1/oh Z9ccx8imOpkafXIgQXnTPYsRDVLQCg0cJpdNpRGWA52uqMsm7sBpRgVsVQWApvJD DFWcBgxCcRs/Ip+PuG/CjFmLIOS7OK18g5SjBrrJ6ibYt7sbJyrjfOYUzSkCnYrx BLwwOYlBbDBwn9J1cygB6Kl/GmyG+su/IRCZ2zCTptFJRc36qAeo2YlC27honlZM MZM9iQDk9+JkO65PODM+WzwSEx/1f/I= -----END CERTIFICATE-----Generated at Sat May 17 00:17:00 2025 by rpki-client