$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft File: msuAZmP7D89uvEPAELk14FIU_J8.mft (raw, json) Hash identifier: cx1Hqww9vVrhs5XXtMlfKdWE+uexiDh5Y/Q3JBHSg1Y= Subject key identifier: 87:2E:00:67:59:77:9B:BF:F7:40:82:97:36:DB:81:3C:11:7F:08:4B Authority key identifier: 9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F Certificate issuer: /CN=A91C7B68/serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft Manifest number: 0A30 Signing time: Fri 22 Aug 2025 20:28:31 +0000 Manifest this update: Fri 22 Aug 2025 20:28:30 +0000 Manifest next update: Fri 29 Aug 2025 20:28:30 +0000 Files and hashes: 1: msuAZmP7D89uvEPAELk14FIU_J8.crl (hash: MY9VyMNp4GupW7PbN7fAXijaxq8pwLc3SmEeAbQKqbw=) 2: 2EC10CF4071C11EFAD19C863C4F9AE02.roa (hash: AouPneIWQOQT+MiZ1EFTYVEBe2qBFNyX5KIDaJtu+qM=) 3: C4DB3710B0BC11EFA44BCA7DC4F9AE02.roa (hash: BXig7jt+N7fBjNwAkzGpIGTBV5qbb0dfgi5McDSf5Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68, serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Validity Not Before: Aug 22 20:28:30 2025 GMT Not After : Aug 29 20:28:30 2025 GMT Subject: CN=68a8d2ef-1684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cc:81:b0:8e:66:3f:b2:7f:6b:9b:a0:b2:85: 9a:13:99:e6:f2:b3:5d:11:73:f5:60:24:0d:c9:43: 29:50:ad:68:f8:ac:e1:a0:bd:db:5e:7c:ff:54:04: 69:d9:e3:91:e2:8d:48:38:4c:e0:52:58:79:ac:3b: 1b:5e:04:cb:dd:90:15:c3:e4:c9:a8:07:b1:c0:1a: f6:14:26:c6:75:5b:e3:79:94:ab:2b:62:43:8f:40: 26:4c:25:0e:39:91:5d:07:56:10:5c:90:1f:49:53: e4:98:2d:5f:20:c2:62:fb:3e:fe:fd:c0:a2:82:a2: bd:4d:60:f7:b5:a5:a3:01:df:d0:88:eb:6d:2e:2b: 50:ab:be:1e:77:80:5a:38:89:11:15:d4:8e:a1:19: c0:82:ea:f4:c8:ca:3b:52:24:76:e9:61:e5:94:21: c5:dd:74:de:bf:26:87:36:8e:9d:1c:2b:46:89:c9: 09:53:50:97:38:90:35:02:f5:2b:aa:dc:5c:b9:ae: c1:8f:a4:20:1e:6c:0b:0b:b6:93:9c:0d:d3:84:e8: f7:4b:50:04:8e:c1:29:41:2f:55:6b:d7:87:9b:20: 57:ab:f7:1e:50:8c:a1:e5:03:77:d0:e9:2e:e3:bd: aa:96:11:b8:55:50:db:11:78:e1:53:2f:50:aa:6b: 62:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2E:00:67:59:77:9B:BF:F7:40:82:97:36:DB:81:3C:11:7F:08:4B X509v3 Authority Key Identifier: keyid:9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:5b:db:5a:d1:52:af:e8:22:71:8b:1d:00:40:05:b8:b7:f7: 8e:48:35:16:57:1a:79:07:5f:b8:69:d5:61:1f:84:6e:d0:4a: c8:aa:b0:96:d0:b4:3f:1f:78:c0:19:2d:0a:b8:64:c5:18:bd: dc:f5:c4:ef:53:6c:7c:2a:cb:c3:dd:ce:06:2b:23:17:e0:e4: 18:52:29:c5:18:c4:51:7a:c8:72:73:60:6d:35:43:6a:d1:87: e1:d8:61:fd:72:ce:a9:5c:6e:97:f5:e3:53:fc:e8:64:08:d0: 46:10:46:62:07:f7:ee:2c:7c:f2:e1:78:10:92:a6:57:92:39: 5a:96:c5:40:f7:05:5f:7a:80:5c:86:5e:a8:e8:b7:d0:03:7c: 08:97:4e:cb:82:e4:dd:1c:ad:00:03:b1:87:01:a7:74:ea:88: 37:92:bc:29:71:14:46:16:dc:e4:f1:58:a1:29:bb:b3:bd:40: 36:b5:72:f3:08:f9:d9:65:94:07:d5:78:a7:48:70:42:63:19: 80:f9:fc:2b:9f:2e:ab:77:e5:dc:59:18:29:b3:4a:94:78:d8: c7:73:02:5e:0d:86:24:86:ea:85:cd:3e:5e:2c:9a:25:3b:5a: 85:53:43:12:9e:2e:ba:67:b7:c5:c0:4e:2e:f1:3e:23:0c:16: bd:c5:ea:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCNjgxMTAvBgNVBAUTKDlBQ0I4MDY2NjNGQjBGQ0Y2RUJDNDNDMDEwQjkzNUUw NTIxNEZDOUYwHhcNMjUwODIyMjAyODMwWhcNMjUwODI5MjAyODMwWjAYMRYwFAYD VQQDEw02OGE4ZDJlZi0xNjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMyBsI5mP7J/a5ugsoWaE5nm8rNdEXP1YCQNyUMpUK1o+KzhoL3bXnz/VARp 2eOR4o1IOEzgUlh5rDsbXgTL3ZAVw+TJqAexwBr2FCbGdVvjeZSrK2JDj0AmTCUO OZFdB1YQXJAfSVPkmC1fIMJi+z7+/cCigqK9TWD3taWjAd/QiOttLitQq74ed4Ba OIkRFdSOoRnAgur0yMo7UiR26WHllCHF3XTevyaHNo6dHCtGickJU1CXOJA1AvUr qtxcua7Bj6QgHmwLC7aTnA3ThOj3S1AEjsEpQS9Va9eHmyBXq/ceUIyh5QN30Oku 472qlhG4VVDbEXjhUy9Qqmti7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcuAGdZ d5u/90CClzbbgTwRfwhLMB8GA1UdIwQYMBaAFJrLgGZj+w/PbrxDwBC5NeBSFPyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0I2OC81M0E3QjkyQ0Iw QTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tc3VBWm1QN0Q4OXV2RVBBRUxrMTRGSVVf SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21zdUFabVA3RDg5dXZFUEFFTGsxNEZJVV9KOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0I2OC81M0E3QjkyQ0IwQTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tc3VBWm1QN0Q4 OXV2RVBBRUxrMTRGSVVfSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvW9ta0VKv6CJxix0AQAW4t/eOSDUWVxp5B1+4adVhH4Ru0ErIqrCW 0LQ/H3jAGS0KuGTFGL3c9cTvU2x8KsvD3c4GKyMX4OQYUinFGMRReshyc2BtNUNq 0Yfh2GH9cs6pXG6X9eNT/OhkCNBGEEZiB/fuLHzy4XgQkqZXkjlalsVA9wVfeoBc hl6o6LfQA3wIl07LguTdHK0AA7GHAad06og3krwpcRRGFtzk8VihKbuzvUA2tXLz CPnZZZQH1XinSHBCYxmA+fwrny6rd+XcWRgps0qUeNjHcwJeDYYkhuqFzT5eLJol O1qFU0MSni66Z7fFwE4u8T4jDBa9xeq5 -----END CERTIFICATE-----Generated at Sun Aug 24 07:02:19 2025 by rpki-client