$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft File: MsAhMRti_kUAvI5OD0hSxkvF2ss.mft (raw, json) Hash identifier: 5iRGdZD2w+oiE0HerKliTwdkFAvD0FJnA5BzQ2+3WHU= Subject key identifier: D2:17:DC:7C:04:7B:87:B2:40:9D:42:7D:09:E2:FF:D1:67:5E:5F:05 Authority key identifier: 32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB Certificate issuer: /CN=A915D8F3/serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft Manifest number: 87 Signing time: Sat 19 Jul 2025 05:23:23 +0000 Manifest this update: Sat 19 Jul 2025 05:23:22 +0000 Manifest next update: Sat 26 Jul 2025 05:23:22 +0000 Files and hashes: 1: MsAhMRti_kUAvI5OD0hSxkvF2ss.crl (hash: LIjMnP1jfLTKAaagioDK7MtJRmHk7+X5nS7okxHle/4=) 2: 37DEC83C9DEC11EFB004850FC4F9AE02.roa (hash: AzFl0RFcs8OJznRZfBYgmDybc5F7V12CS5camGFMWxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8F3, serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB Validity Not Before: Jul 19 05:23:22 2025 GMT Not After : Jul 26 05:23:22 2025 GMT Subject: CN=687b2bca-78aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:17:ad:08:6f:b2:22:c5:fe:4b:68:57:4d:e3: 36:61:17:f6:41:b1:3a:d2:8b:a2:c4:b1:03:d6:bb: da:45:c5:18:b7:2c:d4:2d:dd:04:9a:78:fd:e7:f7: 17:66:e4:b1:53:e9:8b:5f:ec:fb:c2:67:e5:37:f6: e0:03:72:38:66:8b:57:3f:53:c7:e3:35:0c:22:e7: 87:a2:c5:b3:b1:8e:bc:6b:00:a3:63:89:16:3c:3e: 13:2e:af:2d:bd:90:65:f7:f0:7b:ef:29:d1:18:d6: c7:fe:0c:77:d6:07:0c:88:d9:35:84:d8:aa:67:b4: e2:a6:95:5c:2e:47:86:85:11:ed:b2:92:42:64:54: 6e:c9:c7:ce:a8:f1:e7:b3:c0:e1:06:d8:b7:c8:a0: c5:53:07:c4:33:77:95:fb:9a:c4:2c:ec:52:fc:3d: 06:2f:99:61:e8:d3:ec:4b:d4:98:b8:e5:4a:0d:1c: 68:31:56:95:3d:e1:1f:c3:c2:92:b7:1f:d0:b6:d4: 63:a4:c0:42:6d:f6:3f:01:9a:10:29:4c:8b:e4:fd: d3:a3:13:b0:c1:9e:f1:9d:94:12:ef:6c:6a:20:fe: 80:b8:62:78:a1:c8:41:a8:ea:d5:82:f5:3a:37:35: 65:56:4c:ee:1d:ca:98:6b:db:a6:21:01:3d:cb:e5: d9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:17:DC:7C:04:7B:87:B2:40:9D:42:7D:09:E2:FF:D1:67:5E:5F:05 X509v3 Authority Key Identifier: keyid:32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:3f:3b:eb:b7:4a:33:01:ce:be:3d:81:07:7c:b9:8b:93:01: db:71:eb:0c:f5:4d:e5:28:07:eb:05:2a:26:06:4d:a7:31:d2: 46:59:83:a7:0f:02:84:ce:ab:fa:f2:45:7d:8f:12:fe:a1:4c: 96:f2:4e:46:39:2f:fd:b9:55:7e:6b:47:23:3c:66:cd:68:81: 16:00:fc:57:60:2f:eb:a2:f4:20:b2:ae:fe:f7:04:07:24:16: 9f:19:ac:b0:89:1d:bf:a1:d0:d9:6f:82:74:df:ca:bb:b0:c6: f4:20:80:38:80:1a:de:4c:41:93:e9:b6:4a:80:c8:a7:4a:e4: 35:54:5b:fe:59:3b:11:eb:dd:af:96:b3:d7:74:e4:90:5e:b8: 8b:b8:17:c1:d7:8e:46:d3:de:a0:c7:9d:5b:c4:f1:39:1d:a6: 45:d2:3c:14:26:70:61:36:a7:3c:b1:dc:21:b1:ba:6d:e6:e5: cb:23:e5:08:8c:b9:08:c1:40:9b:aa:fb:f9:d6:61:7a:e3:b0: 81:92:60:9c:26:f0:cb:99:40:2a:45:4d:74:64:75:71:c4:56: 03:5b:5f:78:02:0c:48:54:76:9f:9a:ca:fe:f1:dd:e5:62:8c: 3c:18:14:d1:53:f7:1c:ee:e0:f2:a5:10:73:92:30:9a:8c:43: a6:ce:31:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RjMxMTAvBgNVBAUTKDMyQzAyMTMxMUI2MkZFNDUwMEJDOEU0RTBGNDg1MkM2 NEJDNURBQ0IwHhcNMjUwNzE5MDUyMzIyWhcNMjUwNzI2MDUyMzIyWjAYMRYwFAYD VQQDEw02ODdiMmJjYS03OGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxetCG+yIsX+S2hXTeM2YRf2QbE60ouixLED1rvaRcUYtyzULd0Emnj95/cX ZuSxU+mLX+z7wmflN/bgA3I4ZotXP1PH4zUMIueHosWzsY68awCjY4kWPD4TLq8t vZBl9/B77ynRGNbH/gx31gcMiNk1hNiqZ7TippVcLkeGhRHtspJCZFRuycfOqPHn s8DhBti3yKDFUwfEM3eV+5rELOxS/D0GL5lh6NPsS9SYuOVKDRxoMVaVPeEfw8KS tx/QttRjpMBCbfY/AZoQKUyL5P3ToxOwwZ7xnZQS72xqIP6AuGJ4ochBqOrVgvU6 NzVlVkzuHcqYa9umIQE9y+XZywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIX3HwE e4eyQJ1CfQni/9FnXl8FMB8GA1UdIwQYMBaAFDLAITEbYv5FALyOTg9IUsZLxdrL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhGMy9DNTdGMjNBRTlC MDcxMUVGODM3RUEwMTJDNEY5QUUwMi9Nc0FoTVJ0aV9rVUF2STVPRDBoU3hrdkYy c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01zQWhNUnRpX2tVQXZJNU9EMGhTeGt2RjJzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhGMy9DNTdGMjNBRTlCMDcxMUVGODM3RUEwMTJDNEY5QUUwMi9Nc0FoTVJ0aV9r VUF2STVPRDBoU3hrdkYyc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVPzvrt0ozAc6+PYEHfLmLkwHbcesM9U3lKAfrBSomBk2nMdJGWYOn DwKEzqv68kV9jxL+oUyW8k5GOS/9uVV+a0cjPGbNaIEWAPxXYC/rovQgsq7+9wQH JBafGaywiR2/odDZb4J038q7sMb0IIA4gBreTEGT6bZKgMinSuQ1VFv+WTsR692v lrPXdOSQXriLuBfB145G096gx51bxPE5HaZF0jwUJnBhNqc8sdwhsbpt5uXLI+UI jLkIwUCbqvv51mF647CBkmCcJvDLmUAqRU10ZHVxxFYDW194AgxIVHafmsr+8d3l Yow8GBTRU/cc7uDypRBzkjCajEOmzjGc -----END CERTIFICATE-----Generated at Sun Jul 20 08:03:08 2025 by rpki-client