$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft File: MsAhMRti_kUAvI5OD0hSxkvF2ss.mft (raw, json) Hash identifier: Q5vMyeKqF0D6TXT5eURGXwC94ltH25Q4yydhyloRrNM= Subject key identifier: 4A:53:2A:19:76:E3:21:6F:80:0E:36:68:81:CE:CE:1B:4A:DE:25:A1 Authority key identifier: 32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB Certificate issuer: /CN=A915D8F3/serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft Manifest number: BE Signing time: Wed 05 Nov 2025 04:41:55 +0000 Manifest this update: Wed 05 Nov 2025 04:41:55 +0000 Manifest next update: Wed 12 Nov 2025 04:41:55 +0000 Files and hashes: 1: MsAhMRti_kUAvI5OD0hSxkvF2ss.crl (hash: uY/Bz+dJW4AADlCtzV5DtWU5RebX65KOSRXYSs/Vmfk=) 2: 37DEC83C9DEC11EFB004850FC4F9AE02.roa (hash: AzFl0RFcs8OJznRZfBYgmDybc5F7V12CS5camGFMWxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8F3, serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB Validity Not Before: Nov 5 04:41:55 2025 GMT Not After : Nov 12 04:41:55 2025 GMT Subject: CN=690ad593-b81b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:a5:7f:91:32:de:5c:c7:f9:b0:59:7c:eb: cc:2c:e1:7b:81:c4:e9:a2:b8:8a:bd:99:73:25:dc: b0:d0:1c:eb:f1:75:7e:32:f2:91:50:ee:57:77:be: ee:c1:89:8d:f0:b2:7f:50:cb:e7:65:74:12:8b:d9: ea:93:f3:2d:b7:8e:bd:51:94:26:2e:49:47:85:ac: 93:38:a3:19:37:3b:9c:ab:f5:70:d6:ac:27:28:50: c5:86:66:75:39:2f:ef:f5:3d:80:83:6d:80:9f:38: af:6d:a7:3e:f1:23:a4:69:99:e4:bc:52:a3:7d:2b: 86:43:95:bc:ed:b7:60:1f:d9:e3:93:d5:2e:09:99: 49:b0:83:fe:f1:07:31:df:33:a4:77:0e:28:ca:9e: 63:65:ea:40:c2:47:19:12:da:a4:a1:b6:63:69:15: 84:d3:c0:7e:13:67:25:7f:62:36:6b:76:cb:19:a4: 2e:bd:61:7e:17:0a:87:44:db:a7:eb:26:d2:e8:07: 5c:26:b4:33:ed:b3:97:fb:d5:af:c4:8d:72:d8:b6: 28:d2:e4:5e:ac:fd:8b:77:98:23:6f:3c:e5:fb:0e: 53:b6:70:34:77:0a:8a:58:f1:16:f1:71:5a:2c:ae: b3:e9:63:8e:9b:49:9b:be:26:af:fd:3c:8d:06:b4: 86:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:53:2A:19:76:E3:21:6F:80:0E:36:68:81:CE:CE:1B:4A:DE:25:A1 X509v3 Authority Key Identifier: keyid:32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:54:d0:d7:4e:e0:9b:9a:a5:cb:47:af:19:50:79:88:b3:27: f5:37:0c:c5:48:68:a3:ad:dd:06:ee:28:56:e5:bf:8a:70:64: 9d:10:40:2a:26:92:88:1d:9d:33:51:b7:fe:62:5d:e8:46:96: 4a:4c:d7:43:fe:7c:af:ec:3c:6b:fa:b5:31:c9:4a:73:c0:52: be:dd:ad:24:09:1c:a0:7a:aa:1f:87:f1:d4:9b:25:b4:e6:29: ff:09:3d:be:e6:c2:49:b7:78:6c:5e:c0:9a:9a:d6:b7:ea:ce: fd:fe:2a:61:78:3a:bd:d9:87:71:6e:c4:e9:d5:b6:2f:ea:b3: fd:65:5a:72:cc:d4:b3:8d:01:f5:c7:28:fc:1d:b5:b7:1c:0e: 58:2d:9e:80:e3:59:e1:51:14:77:a6:a4:f6:67:62:a1:eb:c9: b8:a3:69:74:12:95:16:6f:d5:79:85:2a:f2:0c:7f:71:cf:03: 79:8f:b7:e0:a0:cd:cc:0d:13:cf:e7:5b:0d:e2:ca:a6:91:0a: ce:cd:3d:5a:35:fa:2a:ad:9e:63:ed:f5:a7:c2:27:34:dc:40: e3:bb:55:ec:dc:17:72:03:f6:17:60:66:b5:7e:39:66:73:21: 05:5a:47:75:82:bd:89:2a:1a:26:df:ba:a1:61:97:61:71:ec: 23:af:27:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RjMxMTAvBgNVBAUTKDMyQzAyMTMxMUI2MkZFNDUwMEJDOEU0RTBGNDg1MkM2 NEJDNURBQ0IwHhcNMjUxMTA1MDQ0MTU1WhcNMjUxMTEyMDQ0MTU1WjAYMRYwFAYD VQQDEw02OTBhZDU5My1iODFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwy+lf5Ey3lzH+bBZfOvMLOF7gcTporiKvZlzJdyw0Bzr8XV+MvKRUO5Xd77u wYmN8LJ/UMvnZXQSi9nqk/Mtt469UZQmLklHhayTOKMZNzucq/Vw1qwnKFDFhmZ1 OS/v9T2Ag22Anzivbac+8SOkaZnkvFKjfSuGQ5W87bdgH9njk9UuCZlJsIP+8Qcx 3zOkdw4oyp5jZepAwkcZEtqkobZjaRWE08B+E2clf2I2a3bLGaQuvWF+FwqHRNun 6ybS6AdcJrQz7bOX+9WvxI1y2LYo0uRerP2Ld5gjbzzl+w5TtnA0dwqKWPEW8XFa LK6z6WOOm0mbviav/TyNBrSGfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpTKhl2 4yFvgA42aIHOzhtK3iWhMB8GA1UdIwQYMBaAFDLAITEbYv5FALyOTg9IUsZLxdrL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhGMy9DNTdGMjNBRTlC MDcxMUVGODM3RUEwMTJDNEY5QUUwMi9Nc0FoTVJ0aV9rVUF2STVPRDBoU3hrdkYy c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01zQWhNUnRpX2tVQXZJNU9EMGhTeGt2RjJzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhGMy9DNTdGMjNBRTlCMDcxMUVGODM3RUEwMTJDNEY5QUUwMi9Nc0FoTVJ0aV9r VUF2STVPRDBoU3hrdkYyc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWVNDXTuCbmqXLR68ZUHmIsyf1NwzFSGijrd0G7ihW5b+KcGSdEEAq JpKIHZ0zUbf+Yl3oRpZKTNdD/nyv7Dxr+rUxyUpzwFK+3a0kCRygeqofh/HUmyW0 5in/CT2+5sJJt3hsXsCamta36s79/ipheDq92YdxbsTp1bYv6rP9ZVpyzNSzjQH1 xyj8HbW3HA5YLZ6A41nhURR3pqT2Z2Kh68m4o2l0EpUWb9V5hSryDH9xzwN5j7fg oM3MDRPP51sN4sqmkQrOzT1aNfoqrZ5j7fWnwic03EDju1Xs3BdyA/YXYGa1fjlm cyEFWkd1gr2JKhom37qhYZdhcewjryfo -----END CERTIFICATE-----Generated at Wed Nov 5 18:00:25 2025 by rpki-client