$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft File: MsAhMRti_kUAvI5OD0hSxkvF2ss.mft (raw, json) Hash identifier: CCFXU1oZmNcqQiCsAHXhbj+6GBpj5bvST5Fid380Lq4= Subject key identifier: 72:F6:29:3A:48:A0:D6:41:4C:24:31:6D:13:F5:1E:C2:66:02:62:BE Authority key identifier: 32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB Certificate issuer: /CN=A915D8F3/serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft Manifest number: 99 Signing time: Sat 23 Aug 2025 05:07:12 +0000 Manifest this update: Sat 23 Aug 2025 05:07:12 +0000 Manifest next update: Sat 30 Aug 2025 05:07:12 +0000 Files and hashes: 1: MsAhMRti_kUAvI5OD0hSxkvF2ss.crl (hash: 5SpN/YLD5ar7OwXeMhz/bozFpefznXbztGNPZRAfH6o=) 2: 37DEC83C9DEC11EFB004850FC4F9AE02.roa (hash: AzFl0RFcs8OJznRZfBYgmDybc5F7V12CS5camGFMWxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8F3, serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB Validity Not Before: Aug 23 05:07:12 2025 GMT Not After : Aug 30 05:07:12 2025 GMT Subject: CN=68a94c80-6dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4e:ff:f5:c7:f5:ce:d1:65:26:aa:19:1a:e4: 70:a6:64:a3:8d:e9:a1:db:ae:f8:d6:3b:f5:7b:b9: 55:33:90:f7:76:1c:cc:d7:2c:e9:9b:2a:8e:b5:ae: 77:29:65:5d:21:95:63:1b:75:b9:0f:01:d2:f6:b6: 07:06:1d:56:61:90:f2:4a:f4:bc:ee:56:0d:0e:d2: 50:cc:ae:b5:36:49:94:80:29:b1:ab:d1:22:cc:72: 9b:3e:e0:39:67:a2:b2:b1:ee:8e:78:da:31:a8:f1: 7f:89:57:e9:bd:45:fc:d9:86:f1:6b:97:18:84:6e: 9d:be:3c:c0:0c:e8:0e:ae:30:12:e6:d5:85:69:aa: 22:f5:fb:61:5a:36:89:7c:db:d2:ea:57:71:f6:8f: 8d:75:ee:7e:d7:a2:f9:1e:5d:e1:fd:29:7f:86:12: 5a:27:6d:d5:97:63:39:92:dd:5d:08:b6:df:5a:5d: 37:a0:8a:a7:7b:42:d7:3e:c7:87:ad:34:d2:07:93: f5:4f:2a:14:11:ce:70:78:d9:85:2e:dd:90:f8:7a: 8c:17:b9:69:ef:43:47:6f:ad:22:7a:65:d9:11:c9: 66:e9:a2:bf:31:ae:6f:4f:25:ac:ae:bb:2b:80:f7: a5:14:ea:96:68:b2:b6:ef:5f:eb:a5:b3:49:d2:53: 2e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F6:29:3A:48:A0:D6:41:4C:24:31:6D:13:F5:1E:C2:66:02:62:BE X509v3 Authority Key Identifier: keyid:32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:44:93:12:df:1b:e4:ef:45:f3:a4:de:80:1d:b0:21:40:ec: fd:ed:38:b9:ad:6f:e6:3d:cd:90:6d:50:e2:94:26:2a:39:49: ef:1f:26:22:4b:9d:7a:58:53:04:56:c7:64:44:be:33:91:86: 56:94:9d:d9:72:83:23:6a:53:6d:8a:54:3a:06:a5:a8:23:28: 86:14:12:b3:bb:d0:29:f6:e7:ac:99:3e:42:c9:ab:72:7e:6d: 61:5f:3b:de:cf:cb:35:5f:c8:f0:8f:d5:1d:b2:ba:52:34:bc: b0:68:f8:44:86:66:35:85:57:23:0c:44:76:a2:42:af:d5:dd: 28:5f:01:f5:25:9f:d8:6b:23:96:ec:b8:90:ce:bf:dc:b4:9f: 93:89:16:5b:1f:71:33:d4:50:39:74:02:a1:d6:46:29:ff:b9: 1a:59:e7:a4:fe:04:0a:9f:9e:a5:ad:75:95:e8:dd:ea:87:dd: 46:ae:0f:0a:b5:64:e0:92:9f:f6:ed:b5:20:ed:be:ff:72:5e: 0b:ba:49:1c:d2:73:44:82:6d:cf:24:fc:cd:cd:23:f1:6e:2f: ed:bc:d3:2c:63:6c:cb:f6:30:43:65:09:bd:e7:f5:30:e6:62: 2f:f2:a4:38:33:ab:2e:c3:4d:2b:58:1f:b7:8f:ba:e0:25:a9: c6:4d:e9:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RjMxMTAvBgNVBAUTKDMyQzAyMTMxMUI2MkZFNDUwMEJDOEU0RTBGNDg1MkM2 NEJDNURBQ0IwHhcNMjUwODIzMDUwNzEyWhcNMjUwODMwMDUwNzEyWjAYMRYwFAYD VQQDEw02OGE5NGM4MC02ZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw07/9cf1ztFlJqoZGuRwpmSjjemh26741jv1e7lVM5D3dhzM1yzpmyqOta53 KWVdIZVjG3W5DwHS9rYHBh1WYZDySvS87lYNDtJQzK61NkmUgCmxq9EizHKbPuA5 Z6Kyse6OeNoxqPF/iVfpvUX82Ybxa5cYhG6dvjzADOgOrjAS5tWFaaoi9fthWjaJ fNvS6ldx9o+Nde5+16L5Hl3h/Sl/hhJaJ23Vl2M5kt1dCLbfWl03oIqne0LXPseH rTTSB5P1TyoUEc5weNmFLt2Q+HqMF7lp70NHb60iemXZEclm6aK/Ma5vTyWsrrsr gPelFOqWaLK271/rpbNJ0lMu3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHL2KTpI oNZBTCQxbRP1HsJmAmK+MB8GA1UdIwQYMBaAFDLAITEbYv5FALyOTg9IUsZLxdrL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhGMy9DNTdGMjNBRTlC MDcxMUVGODM3RUEwMTJDNEY5QUUwMi9Nc0FoTVJ0aV9rVUF2STVPRDBoU3hrdkYy c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01zQWhNUnRpX2tVQXZJNU9EMGhTeGt2RjJzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhGMy9DNTdGMjNBRTlCMDcxMUVGODM3RUEwMTJDNEY5QUUwMi9Nc0FoTVJ0aV9r VUF2STVPRDBoU3hrdkYyc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABRJMS3xvk70XzpN6AHbAhQOz97Ti5rW/mPc2QbVDilCYqOUnvHyYi S516WFMEVsdkRL4zkYZWlJ3ZcoMjalNtilQ6BqWoIyiGFBKzu9Ap9uesmT5Cyaty fm1hXzvez8s1X8jwj9UdsrpSNLywaPhEhmY1hVcjDER2okKv1d0oXwH1JZ/YayOW 7LiQzr/ctJ+TiRZbH3Ez1FA5dAKh1kYp/7kaWeek/gQKn56lrXWV6N3qh91Grg8K tWTgkp/27bUg7b7/cl4Lukkc0nNEgm3PJPzNzSPxbi/tvNMsY2zL9jBDZQm95/Uw 5mIv8qQ4M6suw00rWB+3j7rgJanGTemU -----END CERTIFICATE-----Generated at Sat Aug 23 20:33:53 2025 by rpki-client