$ rpki-client -vvf rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft File: MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft (raw, json) Hash identifier: D/IPbm3+NdjzXEk9I79Jy4lA3T8Cz368zZcH6ceXo20= Subject key identifier: 33:23:02:6C:C4:D7:7B:11:AF:26:EA:78:A3:9E:48:AF:6E:61:7E:34 Authority key identifier: 32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43 Certificate issuer: /CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43 Certificate serial: 19A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft Manifest number: 1981 Signing time: Fri 22 Aug 2025 16:30:09 +0000 Manifest this update: Fri 22 Aug 2025 16:30:09 +0000 Manifest next update: Fri 29 Aug 2025 16:30:09 +0000 Files and hashes: 1: MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl (hash: yPOmOnzf3kdhyTZkcruL9BEUfF3UYT2qIRxPK27Cp1k=) 2: 936822385BDA11EF98C26511C4F9AE02.roa (hash: BQO+L5CjncNKOL7DHEh52oeMX9m7mfWjBtWMWgb03Vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6566 (0x19a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FB7F, serialNumber=32C42045EA0B516551224D808F0D5550A0473B43 Validity Not Before: Aug 22 16:30:09 2025 GMT Not After : Aug 29 16:30:09 2025 GMT Subject: CN=68a89b11-2b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:73:d8:c6:3b:e7:bd:ab:af:64:c5:ce:83:1a: 81:33:d4:80:1e:7e:ac:28:47:aa:ab:cb:dd:b6:73: d5:52:9b:58:49:98:df:de:5e:b7:6f:3f:c2:e6:82: aa:04:d5:65:4d:76:34:bc:f6:f9:bb:0f:0d:48:2b: 2e:b5:3e:0b:f7:79:17:cc:2c:09:92:2d:d1:c7:f3: 30:90:42:1a:a8:ca:b6:d5:df:07:7d:a9:78:2c:19: e6:8b:09:b6:43:cd:6b:42:1e:9a:f7:0a:da:96:67: 04:e6:c8:01:57:ec:00:5e:ca:49:b9:70:06:0a:a3: 1f:4c:cd:94:fe:d1:31:01:42:a0:56:87:c2:fe:56: 06:ab:f8:38:0e:67:4e:5d:3d:9d:2b:8e:ed:71:b6: ad:94:a7:ba:cf:12:ce:31:5f:f4:73:22:a9:e4:75: 4c:13:f1:aa:ad:ca:ec:e7:8f:f0:a6:86:a9:9f:4d: 14:e2:f3:ba:d8:e0:0b:77:d9:3c:57:88:8b:2c:14: ad:5b:1e:aa:98:13:7c:a1:5c:60:7c:e3:aa:31:ac: 58:6d:33:82:bc:c9:3e:13:75:fd:1a:fb:50:3e:85: b3:65:b8:a1:97:46:6a:24:6c:b4:48:e5:ba:b1:2b: 30:de:18:ba:80:ef:ca:a2:a6:9b:70:80:ff:a2:6f: 5c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:23:02:6C:C4:D7:7B:11:AF:26:EA:78:A3:9E:48:AF:6E:61:7E:34 X509v3 Authority Key Identifier: keyid:32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:96:5e:5a:fa:3b:7a:35:0c:4a:b3:36:87:14:8d:38:18:38: fe:f5:91:83:3c:78:0c:9b:32:4b:a1:d1:9e:91:f1:fd:1f:ae: 3e:31:c0:ce:9e:ec:e5:13:db:c0:23:8b:41:03:72:7d:83:9a: 9c:b4:0d:d7:11:29:1f:51:03:b8:ff:c4:40:db:2c:00:f0:2a: 1d:47:cd:30:38:b6:55:e3:a0:ce:b8:a5:5c:59:66:ab:7c:29: 9f:2c:d5:2c:21:ac:ee:4b:5d:50:26:f5:5a:a1:d5:09:f7:0f: a6:48:93:42:f2:54:fd:4e:c5:80:09:d8:52:bc:d4:f7:08:16: 72:ec:4c:77:9b:cb:6a:55:e8:9e:db:17:84:4e:aa:b6:45:35: 7e:19:8e:e4:8e:36:43:a5:a4:25:35:b9:63:fc:99:6c:55:7b: 65:a5:18:dc:c9:8f:93:09:92:da:69:91:6c:56:d9:7c:21:16: fd:63:85:de:15:1a:e8:0a:c0:99:6e:38:f7:1e:76:0f:31:55: 90:04:2e:0f:22:47:6d:7d:cd:d2:10:41:bb:f5:dc:ff:1a:ee: 85:61:97:c5:19:41:81:ea:9a:bb:cb:67:91:f1:a8:6b:4b:c1: 5d:43:e0:76:14:3f:d2:f8:2f:1d:18:58:2e:87:68:7f:9a:eb: 35:70:6a:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZCN0YxMTAvBgNVBAUTKDMyQzQyMDQ1RUEwQjUxNjU1MTIyNEQ4MDhGMEQ1NTUw QTA0NzNCNDMwHhcNMjUwODIyMTYzMDA5WhcNMjUwODI5MTYzMDA5WjAYMRYwFAYD VQQDEw02OGE4OWIxMS0yYjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnPYxjvnvauvZMXOgxqBM9SAHn6sKEeqq8vdtnPVUptYSZjf3l63bz/C5oKq BNVlTXY0vPb5uw8NSCsutT4L93kXzCwJki3Rx/MwkEIaqMq21d8Hfal4LBnmiwm2 Q81rQh6a9wralmcE5sgBV+wAXspJuXAGCqMfTM2U/tExAUKgVofC/lYGq/g4DmdO XT2dK47tcbatlKe6zxLOMV/0cyKp5HVME/Gqrcrs54/wpoapn00U4vO62OALd9k8 V4iLLBStWx6qmBN8oVxgfOOqMaxYbTOCvMk+E3X9GvtQPoWzZbihl0ZqJGy0SOW6 sSsw3hi6gO/KoqabcID/om9cywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMjAmzE 13sRrybqeKOeSK9uYX40MB8GA1UdIwQYMBaAFDLEIEXqC1FlUSJNgI8NVVCgRztD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkI3Ri8xQkFFMjY1NDdD QzkxMUU3OTJDQkE5NDRDNEY5QUUwMi9Nc1FnUmVvTFVXVlJJazJBancxVlVLQkhP ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01zUWdSZW9MVVdWUklrMkFqdzFWVUtCSE8wTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkI3Ri8xQkFFMjY1NDdDQzkxMUU3OTJDQkE5NDRDNEY5QUUwMi9Nc1FnUmVvTFVX VlJJazJBancxVlVLQkhPME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEll5a+jt6NQxKszaHFI04GDj+9ZGDPHgMmzJLodGekfH9H64+McDO nuzlE9vAI4tBA3J9g5qctA3XESkfUQO4/8RA2ywA8CodR80wOLZV46DOuKVcWWar fCmfLNUsIazuS11QJvVaodUJ9w+mSJNC8lT9TsWACdhSvNT3CBZy7Ex3m8tqVeie 2xeETqq2RTV+GY7kjjZDpaQlNblj/JlsVXtlpRjcyY+TCZLaaZFsVtl8IRb9Y4Xe FRroCsCZbjj3HnYPMVWQBC4PIkdtfc3SEEG79dz/Gu6FYZfFGUGB6pq7y2eR8ahr S8FdQ+B2FD/S+C8dGFguh2h/mus1cGpo -----END CERTIFICATE-----Generated at Sat Aug 23 18:01:20 2025 by rpki-client