$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft File: MsAhMRti_kUAvI5OD0hSxkvF2ss.mft (raw, json) Hash identifier: frW1cA6l+t4H+/jZt5CBVldiZYFN3eA07cfEYl14JFA= Subject key identifier: 71:7A:0B:BD:B2:B2:B7:FC:16:AD:0D:9C:24:73:0C:E1:40:5D:86:8B Authority key identifier: 32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB Certificate issuer: /CN=A915D8F3/serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft Manifest number: 7F Signing time: Thu 03 Jul 2025 05:27:00 +0000 Manifest this update: Thu 03 Jul 2025 05:27:00 +0000 Manifest next update: Thu 10 Jul 2025 05:27:00 +0000 Files and hashes: 1: MsAhMRti_kUAvI5OD0hSxkvF2ss.crl (hash: 8jOTVp6bayz+f6zl6GO5eushZE8bpIridYPA84I8vOI=) 2: 37DEC83C9DEC11EFB004850FC4F9AE02.roa (hash: AzFl0RFcs8OJznRZfBYgmDybc5F7V12CS5camGFMWxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8F3, serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB Validity Not Before: Jul 3 05:27:00 2025 GMT Not After : Jul 10 05:27:00 2025 GMT Subject: CN=686614a4-73ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:6e:8a:2c:88:d9:62:68:c0:e1:0e:ba:ba: d6:5e:8f:e3:12:0d:8e:a8:c1:98:a4:9a:32:9e:a5: 3b:3a:a9:41:50:db:9a:c3:3f:40:71:e0:c4:c3:22: c3:15:20:d2:2d:c8:ed:04:2f:21:45:1b:9b:43:6d: ff:99:8f:2d:81:2e:21:c3:98:e0:6b:1b:03:82:16: 0f:e8:13:67:ab:b5:78:ab:98:90:a2:2e:f0:3b:4b: b1:2a:3a:f4:bd:7e:9e:7e:4d:12:b7:e8:10:6a:88: dd:6f:b2:b9:c3:5b:12:bc:cf:51:2c:d3:89:c3:4c: 23:ae:c6:90:7c:45:1b:ed:d1:b4:9b:b5:77:ad:ea: d7:ed:e7:62:0d:7f:82:c8:16:5e:94:dc:b9:a1:bb: 33:fc:76:ac:8e:24:0a:d1:a3:d5:64:6c:be:4c:5c: b6:47:46:9f:8e:2d:26:0d:fe:c8:d0:da:5b:bb:40: 08:bf:5c:60:b4:c5:e5:0e:eb:4f:6f:11:6a:10:88: 0b:0f:dd:e3:4e:01:41:97:37:c1:b4:15:23:61:f8: 51:fc:95:9c:64:ec:8b:00:98:3f:65:6c:85:2a:e7: 67:cd:24:79:80:77:fb:41:59:ee:34:76:fb:aa:19: 6f:62:06:3f:b5:21:94:c5:21:8a:52:33:fc:2a:2b: 43:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7A:0B:BD:B2:B2:B7:FC:16:AD:0D:9C:24:73:0C:E1:40:5D:86:8B X509v3 Authority Key Identifier: keyid:32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ae:2e:86:ee:fe:94:ea:02:50:82:9f:3a:6e:13:e0:ef:fc: 6e:41:ca:60:28:59:83:cf:75:cb:e1:7d:6b:0f:ce:8f:2d:63: eb:a6:5a:76:96:17:37:fd:b2:ab:31:f0:7b:4c:88:a3:dc:0c: 1a:07:9c:56:c8:89:4d:b0:ae:2b:cd:ef:0a:8d:12:3e:a3:8d: e4:48:35:9e:f8:82:52:bd:b7:d5:fd:ed:49:9a:db:a1:88:62: 6a:37:c7:ad:ad:d0:ab:d8:48:70:e3:de:89:be:be:e9:15:56: c2:99:0f:83:0d:bf:63:4f:09:25:c2:af:2b:16:16:fc:7b:2b: 9f:8c:5e:22:c3:6d:23:b4:ca:fc:04:71:12:11:85:82:ae:a2: ba:62:83:72:ab:dd:9c:95:e2:56:0a:c4:61:15:bb:66:aa:96: 0f:22:6f:c5:aa:75:5c:1b:98:3b:42:6b:d2:bf:bd:8e:ae:eb: b3:a4:10:8c:51:0d:5d:43:c5:83:53:22:11:5a:22:ba:09:62: 58:34:26:57:3a:6c:b8:38:ab:97:3e:f8:93:75:86:c6:f8:21: 9f:36:fb:68:23:24:a3:46:c6:a8:6b:49:2b:6b:34:43:74:42: 40:17:fa:7b:a1:4f:63:d2:19:76:47:92:1e:e0:4a:5c:97:cc: f8:28:94:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RjMxMTAvBgNVBAUTKDMyQzAyMTMxMUI2MkZFNDUwMEJDOEU0RTBGNDg1MkM2 NEJDNURBQ0IwHhcNMjUwNzAzMDUyNzAwWhcNMjUwNzEwMDUyNzAwWjAYMRYwFAYD VQQDEw02ODY2MTRhNC03M2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEBuiiyI2WJowOEOurrWXo/jEg2OqMGYpJoynqU7OqlBUNuawz9AceDEwyLD FSDSLcjtBC8hRRubQ23/mY8tgS4hw5jgaxsDghYP6BNnq7V4q5iQoi7wO0uxKjr0 vX6efk0St+gQaojdb7K5w1sSvM9RLNOJw0wjrsaQfEUb7dG0m7V3rerX7ediDX+C yBZelNy5obsz/HasjiQK0aPVZGy+TFy2R0afji0mDf7I0Npbu0AIv1xgtMXlDutP bxFqEIgLD93jTgFBlzfBtBUjYfhR/JWcZOyLAJg/ZWyFKudnzSR5gHf7QVnuNHb7 qhlvYgY/tSGUxSGKUjP8KitDFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHF6C72y srf8Fq0NnCRzDOFAXYaLMB8GA1UdIwQYMBaAFDLAITEbYv5FALyOTg9IUsZLxdrL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhGMy9DNTdGMjNBRTlC MDcxMUVGODM3RUEwMTJDNEY5QUUwMi9Nc0FoTVJ0aV9rVUF2STVPRDBoU3hrdkYy c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01zQWhNUnRpX2tVQXZJNU9EMGhTeGt2RjJzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhGMy9DNTdGMjNBRTlCMDcxMUVGODM3RUEwMTJDNEY5QUUwMi9Nc0FoTVJ0aV9r VUF2STVPRDBoU3hrdkYyc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuri6G7v6U6gJQgp86bhPg7/xuQcpgKFmDz3XL4X1rD86PLWPrplp2 lhc3/bKrMfB7TIij3AwaB5xWyIlNsK4rze8KjRI+o43kSDWe+IJSvbfV/e1Jmtuh iGJqN8etrdCr2Ehw496Jvr7pFVbCmQ+DDb9jTwklwq8rFhb8eyufjF4iw20jtMr8 BHESEYWCrqK6YoNyq92cleJWCsRhFbtmqpYPIm/FqnVcG5g7QmvSv72OruuzpBCM UQ1dQ8WDUyIRWiK6CWJYNCZXOmy4OKuXPviTdYbG+CGfNvtoIySjRsaoa0krazRD dEJAF/p7oU9j0hl2R5Ie4Epcl8z4KJSv -----END CERTIFICATE-----Generated at Fri Jul 4 08:29:06 2025 by rpki-client