$ rpki-client -vvf rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft File: MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft (raw, json) Hash identifier: ntpsXtfVCzBSpYLpxM1ch2dmtxdf8qsMyYrIG1ZPl4I= Subject key identifier: 8E:E8:8E:84:06:CC:58:C2:98:BB:F8:26:C9:54:92:BC:DA:0A:B1:81 Authority key identifier: 32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43 Certificate issuer: /CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43 Certificate serial: 19C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft Manifest number: 199E Signing time: Sat 18 Oct 2025 16:46:11 +0000 Manifest this update: Sat 18 Oct 2025 16:46:10 +0000 Manifest next update: Sat 25 Oct 2025 16:46:10 +0000 Files and hashes: 1: MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl (hash: O1PPHcHM8RL6QC+5u+g3ZuSFxN8UIM4at5DLUvI4u9M=) 2: 936822385BDA11EF98C26511C4F9AE02.roa (hash: BQO+L5CjncNKOL7DHEh52oeMX9m7mfWjBtWMWgb03Vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6595 (0x19c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FB7F, serialNumber=32C42045EA0B516551224D808F0D5550A0473B43 Validity Not Before: Oct 18 16:46:10 2025 GMT Not After : Oct 25 16:46:10 2025 GMT Subject: CN=68f3c453-707f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:55:6e:04:c9:db:5f:7a:c4:8c:35:c1:e6: 06:32:cb:c6:49:35:da:15:f7:f2:35:14:bb:72:35: d0:c7:89:66:f8:f6:8e:98:de:5a:18:ff:ed:eb:e4: 2b:ad:59:ca:af:a0:e2:d5:f0:2a:fd:0a:ba:b8:e3: c2:79:63:f6:7d:ba:ca:6f:84:50:61:f6:36:ed:a4: 31:6d:f1:30:43:e2:bc:30:bb:1d:10:a6:9b:36:a0: 90:2b:8c:75:0c:22:ee:63:cf:be:33:78:e3:84:55: 5f:0d:b1:4f:14:ad:ad:cd:5e:c9:cb:b0:b7:f8:5f: fe:88:b9:f8:f0:d4:48:e0:1f:0c:6b:6d:68:52:a9: b4:c5:0b:04:2a:8a:15:5f:17:e4:f9:0f:54:be:1b: ce:db:11:27:65:60:ba:c0:a0:7b:90:ab:3e:ec:45: 7a:96:36:b7:9d:13:d1:91:8f:4b:04:31:5b:86:ab: 7d:e5:09:bf:b8:2c:6c:71:7f:85:35:85:e1:e8:df: 3f:ce:91:b1:43:0e:62:1b:9d:2d:12:c5:b3:01:61: 65:5e:51:e0:4f:d5:7d:a2:45:a5:2f:9a:78:f2:ed: b8:66:74:5b:86:63:73:64:54:da:e5:af:a5:d3:09: 2d:68:a2:90:d8:2c:2a:ee:55:2c:9d:c8:d5:1e:67: fd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E8:8E:84:06:CC:58:C2:98:BB:F8:26:C9:54:92:BC:DA:0A:B1:81 X509v3 Authority Key Identifier: keyid:32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:21:c2:84:5b:68:ee:46:d4:5c:83:20:b0:7f:61:d6:64:e9: 2e:d2:23:ce:3a:6e:ae:7e:ae:3f:ff:5c:53:77:bd:0e:d0:20: d0:17:1a:de:31:19:88:c2:9f:fc:1e:e7:34:64:2b:ba:b1:24: c6:86:af:74:b0:71:64:4b:5b:75:ca:43:a8:24:52:33:72:e3: fd:b0:97:b6:43:35:3c:28:a3:68:5d:79:6a:c9:fd:1a:e5:52: 4e:66:61:fe:9f:f9:a1:9a:6a:70:f8:d6:1a:98:ad:22:1f:b6: 7a:35:b2:8d:11:2b:89:26:d3:f4:f9:a0:6e:7d:a4:47:3c:85: d3:03:ed:f3:66:6b:cf:51:25:9f:5e:7e:83:14:fd:f2:da:19: 52:75:89:88:65:49:9f:44:68:c3:ae:5d:3e:6e:95:f2:05:a5: 01:ce:75:cd:74:1e:ed:f5:49:b9:d2:da:39:c6:46:0e:c1:3f: 21:4d:9a:f3:67:9f:bb:f9:54:90:0f:66:33:d3:11:c7:ac:af: c9:f8:9c:91:7b:bd:4a:73:d6:64:75:80:fa:64:0a:bf:33:9f: 3b:51:24:25:34:7c:1f:f0:c7:53:37:84:f2:c7:00:f0:a8:86: e9:f5:32:3b:dd:da:ff:5a:ed:f9:f9:c7:9f:f2:b1:e0:42:9d: 51:b9:de:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZCN0YxMTAvBgNVBAUTKDMyQzQyMDQ1RUEwQjUxNjU1MTIyNEQ4MDhGMEQ1NTUw QTA0NzNCNDMwHhcNMjUxMDE4MTY0NjEwWhcNMjUxMDI1MTY0NjEwWjAYMRYwFAYD VQQDEw02OGYzYzQ1My03MDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwpVbgTJ2196xIw1weYGMsvGSTXaFffyNRS7cjXQx4lm+PaOmN5aGP/t6+Qr rVnKr6Di1fAq/Qq6uOPCeWP2fbrKb4RQYfY27aQxbfEwQ+K8MLsdEKabNqCQK4x1 DCLuY8++M3jjhFVfDbFPFK2tzV7Jy7C3+F/+iLn48NRI4B8Ma21oUqm0xQsEKooV Xxfk+Q9UvhvO2xEnZWC6wKB7kKs+7EV6lja3nRPRkY9LBDFbhqt95Qm/uCxscX+F NYXh6N8/zpGxQw5iG50tEsWzAWFlXlHgT9V9okWlL5p48u24ZnRbhmNzZFTa5a+l 0wktaKKQ2Cwq7lUsncjVHmf9mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7ojoQG zFjCmLv4JslUkrzaCrGBMB8GA1UdIwQYMBaAFDLEIEXqC1FlUSJNgI8NVVCgRztD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkI3Ri8xQkFFMjY1NDdD QzkxMUU3OTJDQkE5NDRDNEY5QUUwMi9Nc1FnUmVvTFVXVlJJazJBancxVlVLQkhP ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01zUWdSZW9MVVdWUklrMkFqdzFWVUtCSE8wTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkI3Ri8xQkFFMjY1NDdDQzkxMUU3OTJDQkE5NDRDNEY5QUUwMi9Nc1FnUmVvTFVX VlJJazJBancxVlVLQkhPME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcIcKEW2juRtRcgyCwf2HWZOku0iPOOm6ufq4//1xTd70O0CDQFxre MRmIwp/8Huc0ZCu6sSTGhq90sHFkS1t1ykOoJFIzcuP9sJe2QzU8KKNoXXlqyf0a 5VJOZmH+n/mhmmpw+NYamK0iH7Z6NbKNESuJJtP0+aBufaRHPIXTA+3zZmvPUSWf Xn6DFP3y2hlSdYmIZUmfRGjDrl0+bpXyBaUBznXNdB7t9Um50to5xkYOwT8hTZrz Z5+7+VSQD2Yz0xHHrK/J+JyRe71Kc9ZkdYD6ZAq/M587USQlNHwf8MdTN4TyxwDw qIbp9TI73dr/Wu35+cef8rHgQp1Rud7c -----END CERTIFICATE-----Generated at Mon Oct 20 15:55:35 2025 by rpki-client