$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft File: MSRAIBsu90t8rGwx-4X0HpxGhqA.mft (raw, json) Hash identifier: NDsZBCMt+9UoI2orOL8fg8d6ubyWdlMW625ZhPSzqME= Subject key identifier: 9E:87:56:3E:0B:91:6D:3C:A9:B5:5C:BF:B8:96:4D:D1:3D:ED:C0:4D Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0 Certificate issuer: /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft Manifest number: 5D Signing time: Sat 23 Aug 2025 07:26:51 +0000 Manifest this update: Sat 23 Aug 2025 07:26:50 +0000 Manifest next update: Sat 30 Aug 2025 07:26:50 +0000 Files and hashes: 1: MSRAIBsu90t8rGwx-4X0HpxGhqA.crl (hash: sj+G2enl6wvST83b84hUPdY71JEykr1H8GpoTzu2mj8=) 2: 070DB3BAFB6D11EFA5E39678C4F9AE02.roa (hash: q1x47yUs6U+uQS9ousQECTrxQCfwChHW+mjdafLrJuY=) 3: F14B18CE64C611F0A7F4DB79C4F9AE02.roa (hash: 1OAyMVa0XBUo/ryUsoyI81mxhEqjOM4w6I8EktKs9g0=) 4: 2178DCD2FF3E11EF8D834053C4F9AE02.roa (hash: JSwC8LvkFFx+csBawa+WzjqR/g3wGIngxuIt67ID3sc=) 5: F5FC39B600F811F0BD702A69C4F9AE02.roa (hash: 8uwpV2NMP0utQgRKFvrYO1IhjVauGOu4rc/6wACuwjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA80C, serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0 Validity Not Before: Aug 23 07:26:50 2025 GMT Not After : Aug 30 07:26:50 2025 GMT Subject: CN=68a96d3b-e786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8d:9e:0d:09:3f:e7:61:48:8d:a0:17:73:71: 35:72:d2:48:b5:8a:75:a8:7b:8b:62:6d:27:65:e5: b3:c4:68:2b:71:cd:b1:a1:38:43:bc:61:81:8d:a5: cf:ee:26:74:f3:dd:24:58:15:e1:94:12:a0:43:0a: a7:18:6a:a0:f7:24:de:76:50:d7:1a:de:c0:0a:ae: 65:fb:f4:98:8a:46:e2:49:94:d8:11:9a:c0:53:2d: 62:5d:3f:71:41:7c:8f:c7:2a:26:99:2f:53:77:ed: 16:56:b6:b4:58:7c:74:fe:1a:86:ff:37:1e:79:a5: ef:b4:8a:11:79:3d:2c:51:cb:16:76:23:b9:fe:0d: b3:97:0a:16:87:50:79:32:43:0b:16:6e:e2:9a:66: c5:21:36:92:70:a3:34:6e:79:f5:02:5c:4b:de:d4: cf:cd:7e:80:20:2e:93:6a:28:3f:e2:db:6e:92:d7: b9:ec:59:d0:d9:69:c8:a0:28:c0:99:88:16:8c:75: d7:bd:5a:08:ab:e3:73:c8:f7:4d:8d:86:61:ce:c5: a2:2f:e2:bc:7f:99:d2:5b:95:39:1f:88:cf:c7:f2: 3c:a7:88:b9:73:e8:00:1b:c5:06:7a:71:b3:73:c5: 9b:9b:0d:42:3d:70:7d:ae:79:21:cf:5f:0d:05:34: 53:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:87:56:3E:0B:91:6D:3C:A9:B5:5C:BF:B8:96:4D:D1:3D:ED:C0:4D X509v3 Authority Key Identifier: keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:74:bd:8f:c7:5e:7a:d9:f1:09:d4:dc:b6:c5:7e:f7:3e:2e: 6d:71:fe:67:cf:eb:6a:ca:ae:91:62:a2:ff:50:e5:89:f6:f9: 62:bd:df:c9:df:08:c3:61:f1:40:1c:cc:54:07:62:d6:ee:aa: 18:76:72:77:34:b6:9b:b6:a6:35:d3:0a:25:17:e9:5c:48:5e: 99:e1:7b:62:04:1c:f1:07:ec:95:a9:6f:cf:b9:22:7e:f8:8f: 29:5b:53:73:4d:2a:09:25:ad:92:78:85:cb:6c:46:d0:ee:73: 3c:45:54:42:b9:97:d9:1c:e7:a2:f7:28:81:16:64:1d:ca:79: 1d:12:87:ed:11:ac:10:bc:a6:92:45:15:37:6c:b7:46:17:f4: a7:36:55:d8:ee:2e:e6:77:00:fc:df:19:75:da:4b:8d:f7:b6: 32:91:94:72:78:fc:5b:b2:67:bc:7a:41:fa:39:2f:23:97:a4: 59:c0:73:b6:ee:ae:19:60:19:a5:c0:f5:dc:b9:d8:fc:c3:ac: d8:6f:1a:74:8b:b7:2e:67:fa:a0:9d:d3:95:87:ff:2e:4f:74: f9:5d:91:af:9d:de:8e:d9:6a:66:61:11:34:00:79:a8:d6:2d: ee:dc:33:11:7c:47:9a:1e:34:56:8f:ec:27:03:71:6b:d0:97: 8c:40:3a:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTgwQzExMC8GA1UEBRMoMzEyNDQwMjAxQjJFRjc0QjdDQUM2QzMxRkI4NUY0MUU5 QzQ2ODZBMDAeFw0yNTA4MjMwNzI2NTBaFw0yNTA4MzAwNzI2NTBaMBgxFjAUBgNV BAMTDTY4YTk2ZDNiLWU3ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZjZ4NCT/nYUiNoBdzcTVy0ki1inWoe4tibSdl5bPEaCtxzbGhOEO8YYGNpc/u JnTz3SRYFeGUEqBDCqcYaqD3JN52UNca3sAKrmX79JiKRuJJlNgRmsBTLWJdP3FB fI/HKiaZL1N37RZWtrRYfHT+Gob/Nx55pe+0ihF5PSxRyxZ2I7n+DbOXChaHUHky QwsWbuKaZsUhNpJwozRuefUCXEve1M/NfoAgLpNqKD/i226S17nsWdDZacigKMCZ iBaMdde9Wgir43PI902NhmHOxaIv4rx/mdJblTkfiM/H8jyniLlz6AAbxQZ6cbNz xZubDUI9cH2ueSHPXw0FNFNLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnodWPguR bTyptVy/uJZN0T3twE0wHwYDVR0jBBgwFoAUMSRAIBsu90t8rGwx+4X0HpxGhqAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBODBDL0RFOThFQUYwRkI2 NTExRUZBMzc2RTQ0OUM0RjlBRTAyL01TUkFJQnN1OTB0OHJHd3gtNFgwSHB4R2hx QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTVNSQUlCc3U5MHQ4ckd3eC00WDBIcHhHaHFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB ODBDL0RFOThFQUYwRkI2NTExRUZBMzc2RTQ0OUM0RjlBRTAyL01TUkFJQnN1OTB0 OHJHd3gtNFgwSHB4R2hxQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACV0vY/HXnrZ8QnU3LbFfvc+Lm1x/mfP62rKrpFiov9Q5Yn2+WK938nf CMNh8UAczFQHYtbuqhh2cnc0tpu2pjXTCiUX6VxIXpnhe2IEHPEH7JWpb8+5In74 jylbU3NNKgklrZJ4hctsRtDuczxFVEK5l9kc56L3KIEWZB3KeR0Sh+0RrBC8ppJF FTdst0YX9Kc2VdjuLuZ3APzfGXXaS433tjKRlHJ4/FuyZ7x6Qfo5LyOXpFnAc7bu rhlgGaXA9dy52PzDrNhvGnSLty5n+qCd05WH/y5PdPldka+d3o7ZamZhETQAeajW Le7cMxF8R5oeNFaP7CcDcWvQl4xAOg4= -----END CERTIFICATE-----Generated at Sat Aug 23 19:42:15 2025 by rpki-client