$ rpki-client -vvf rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft File: MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft (raw, json) Hash identifier: pTyWInmuEeBKM2d4j2gGVFOIDdmuRl9l0xEgXJbKY0E= Subject key identifier: 59:43:45:6E:D3:CA:50:5F:8D:60:FB:DC:3D:96:95:DB:03:91:D5:70 Authority key identifier: 32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43 Certificate issuer: /CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43 Certificate serial: 198A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft Manifest number: 1965 Signing time: Sat 28 Jun 2025 16:18:01 +0000 Manifest this update: Sat 28 Jun 2025 16:18:01 +0000 Manifest next update: Sat 05 Jul 2025 16:18:01 +0000 Files and hashes: 1: MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl (hash: xhweZo6l9S41u8WaGf4qtLNHhKYTf+RpEY7v1dASWv0=) 2: 936822385BDA11EF98C26511C4F9AE02.roa (hash: BQO+L5CjncNKOL7DHEh52oeMX9m7mfWjBtWMWgb03Vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 16:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6538 (0x198a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FB7F, serialNumber=32C42045EA0B516551224D808F0D5550A0473B43 Validity Not Before: Jun 28 16:18:01 2025 GMT Not After : Jul 5 16:18:01 2025 GMT Subject: CN=686015b9-2871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:43:1e:0c:8e:1c:73:b5:39:93:58:11:db:0c: 3f:78:16:cc:6f:90:a6:10:96:66:1e:fd:4f:e0:9b: 04:05:fd:e9:08:88:22:4b:1f:15:01:27:28:aa:ad: fb:a4:2d:5d:bd:c0:61:d1:f8:d1:f1:83:2b:4b:5c: b7:11:5f:d9:0c:a1:57:2f:64:53:d9:b7:3d:72:11: 72:ab:d7:64:84:08:4f:8e:85:5c:66:be:cd:5d:98: 88:3f:a7:52:2b:18:4a:b4:f2:c0:73:f4:fc:5f:6d: 9a:e4:0f:6a:c4:31:58:6e:e4:6c:78:27:b3:f7:44: f3:1f:de:88:52:55:bd:5f:a0:03:82:16:fc:d0:4a: cc:7d:f4:ee:d3:8f:11:9b:2d:25:cb:85:7c:e6:eb: 3a:b9:eb:5f:26:47:2d:87:9e:5b:17:47:f6:70:d3: 5b:ed:02:11:37:d7:8e:92:d5:33:99:37:7a:36:6e: 7b:4b:69:7b:73:3b:c9:c1:88:c7:6f:8f:51:27:b5: 02:16:01:c9:86:5e:c2:c9:50:ec:d6:fa:80:52:9d: e7:1e:0f:56:67:83:b0:67:ae:84:98:63:04:d7:2f: 4b:72:a3:6c:14:ef:d8:48:7b:39:f4:d0:ac:39:0e: 8c:98:8f:7e:0e:f7:89:92:50:2e:5e:56:0e:5f:57: 86:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:43:45:6E:D3:CA:50:5F:8D:60:FB:DC:3D:96:95:DB:03:91:D5:70 X509v3 Authority Key Identifier: keyid:32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:5d:c1:f0:36:29:2f:7c:3c:be:b6:30:53:50:ef:9a:3e:65: d5:7d:36:3d:22:f0:8a:88:c8:12:61:3a:28:2a:87:c3:33:d1: 44:33:ae:8e:29:e6:44:cd:96:4a:48:9f:9c:5b:8e:37:76:00: 8f:8a:e3:1e:e0:af:fc:31:d8:7c:76:57:55:c9:25:d1:54:73: 29:0c:b8:9f:59:6b:3d:31:a4:04:ff:cc:87:f7:bd:30:17:0b: ff:34:ca:61:e3:57:3f:1e:f4:a3:f6:00:10:d1:74:fa:14:f8: a5:a5:e0:56:5c:73:17:7c:52:c8:f7:b4:83:2d:50:43:c4:ff: 76:95:83:3d:61:b0:be:20:8c:a4:66:d2:bd:00:e5:7b:0a:70: f6:cd:ed:45:3e:56:30:57:41:12:a0:a7:9a:0e:be:0d:26:a4: a3:f8:fd:7e:05:19:ce:c2:c5:7a:03:89:3e:72:6a:24:aa:2c: 11:71:b8:2c:c5:7d:0c:5a:df:8d:0b:c9:9a:ef:56:ae:b4:e2: 62:37:c9:5e:80:9f:04:5c:43:b6:96:2a:e6:6e:58:86:df:cb: 75:96:a2:f9:4d:25:ca:53:85:ce:e4:44:6e:72:82:f7:10:b9: 82:2f:11:01:0e:5d:d8:ed:ec:73:64:c1:17:d8:b1:81:a6:c6: 91:88:16:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZCN0YxMTAvBgNVBAUTKDMyQzQyMDQ1RUEwQjUxNjU1MTIyNEQ4MDhGMEQ1NTUw QTA0NzNCNDMwHhcNMjUwNjI4MTYxODAxWhcNMjUwNzA1MTYxODAxWjAYMRYwFAYD VQQDEw02ODYwMTViOS0yODcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UMeDI4cc7U5k1gR2ww/eBbMb5CmEJZmHv1P4JsEBf3pCIgiSx8VAScoqq37 pC1dvcBh0fjR8YMrS1y3EV/ZDKFXL2RT2bc9chFyq9dkhAhPjoVcZr7NXZiIP6dS KxhKtPLAc/T8X22a5A9qxDFYbuRseCez90TzH96IUlW9X6ADghb80ErMffTu048R my0ly4V85us6uetfJkcth55bF0f2cNNb7QIRN9eOktUzmTd6Nm57S2l7czvJwYjH b49RJ7UCFgHJhl7CyVDs1vqAUp3nHg9WZ4OwZ66EmGME1y9LcqNsFO/YSHs59NCs OQ6MmI9+DveJklAuXlYOX1eG7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFlDRW7T ylBfjWD73D2WldsDkdVwMB8GA1UdIwQYMBaAFDLEIEXqC1FlUSJNgI8NVVCgRztD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkI3Ri8xQkFFMjY1NDdD QzkxMUU3OTJDQkE5NDRDNEY5QUUwMi9Nc1FnUmVvTFVXVlJJazJBancxVlVLQkhP ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01zUWdSZW9MVVdWUklrMkFqdzFWVUtCSE8wTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkI3Ri8xQkFFMjY1NDdDQzkxMUU3OTJDQkE5NDRDNEY5QUUwMi9Nc1FnUmVvTFVX VlJJazJBancxVlVLQkhPME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYXcHwNikvfDy+tjBTUO+aPmXVfTY9IvCKiMgSYTooKofDM9FEM66O KeZEzZZKSJ+cW443dgCPiuMe4K/8Mdh8dldVySXRVHMpDLifWWs9MaQE/8yH970w Fwv/NMph41c/HvSj9gAQ0XT6FPilpeBWXHMXfFLI97SDLVBDxP92lYM9YbC+IIyk ZtK9AOV7CnD2ze1FPlYwV0ESoKeaDr4NJqSj+P1+BRnOwsV6A4k+cmokqiwRcbgs xX0MWt+NC8ma71autOJiN8legJ8EXEO2lirmbliG38t1lqL5TSXKU4XO5ERucoL3 ELmCLxEBDl3Y7exzZMEX2LGBpsaRiBZl -----END CERTIFICATE-----Generated at Sun Jun 29 17:52:27 2025 by rpki-client