$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft File: MsAhMRti_kUAvI5OD0hSxkvF2ss.mft (raw, json) Hash identifier: 5oOoMIF9n1sb/iCZSwdPfoYUUSMORJVr8j4Pdk5RL+E= Subject key identifier: 7B:99:75:56:94:1B:F7:0B:62:54:6C:FB:FD:2F:E8:76:5B:E5:75:38 Authority key identifier: 32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB Certificate issuer: /CN=A915D8F3/serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft Manifest number: 6F Signing time: Sun 01 Jun 2025 05:07:38 +0000 Manifest this update: Sun 01 Jun 2025 05:07:38 +0000 Manifest next update: Sun 08 Jun 2025 05:07:38 +0000 Files and hashes: 1: MsAhMRti_kUAvI5OD0hSxkvF2ss.crl (hash: XRhLvlL7aIFk33PPykU4Db4ulKRpoL7dmL4qOdmNd74=) 2: 37DEC83C9DEC11EFB004850FC4F9AE02.roa (hash: AzFl0RFcs8OJznRZfBYgmDybc5F7V12CS5camGFMWxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8F3, serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB Validity Not Before: Jun 1 05:07:38 2025 GMT Not After : Jun 8 05:07:38 2025 GMT Subject: CN=683be01a-0853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3b:3c:96:4d:9d:2c:64:c1:7d:fb:c4:47:4c: b0:32:89:ad:1e:65:b1:d4:6b:b5:df:8c:35:52:31: 4c:60:99:bf:d7:84:51:c8:40:98:26:e3:36:b0:bf: 61:2e:2c:9f:7e:91:75:f5:b5:3d:bb:76:a0:0a:b7: 5b:53:31:ff:37:f2:bd:b0:bb:b2:87:bc:44:17:81: 7f:01:96:a2:56:7e:a4:20:95:69:0c:7d:43:09:8c: fe:86:b0:59:a7:9f:69:e4:cb:3d:25:e6:8c:83:5d: cf:c6:9e:9d:3b:58:27:89:2a:79:04:5d:c2:ee:64: ed:fd:c2:9c:be:de:1b:ff:d7:88:e3:03:f1:19:fe: 86:ca:f5:3b:49:00:cc:c2:f0:f9:15:b5:78:f5:ba: 0c:3c:41:69:37:09:a1:5b:23:81:a8:c4:49:2f:55: 57:77:b4:1f:a6:81:4b:2f:c7:4c:3b:2d:59:dd:cc: 8e:4d:d7:e3:9f:7b:5f:3b:96:61:6f:c8:26:5d:b8: 2a:1d:c2:76:26:a7:2c:71:68:d7:53:bf:80:86:0b: 03:be:7a:a1:c5:3d:6f:9c:ed:b1:23:6d:ef:7f:7a: d8:fd:84:09:e3:dc:4a:af:27:0a:17:b9:a1:0d:77: 1a:27:7b:fa:6b:4c:78:ac:e6:29:7e:7e:dd:ea:7b: ea:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:99:75:56:94:1B:F7:0B:62:54:6C:FB:FD:2F:E8:76:5B:E5:75:38 X509v3 Authority Key Identifier: keyid:32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:31:3d:a6:c7:22:29:ef:33:f1:b4:40:17:d3:6e:ba:71:40: bf:88:75:78:f4:3f:45:74:06:73:11:72:0f:49:ed:d6:f2:a1: 13:22:e0:e8:2c:13:30:3e:f9:8d:fc:08:86:95:1c:0a:9b:f3: 61:ae:1d:d2:d0:07:50:ee:91:95:64:69:e8:e8:60:2b:6a:dc: 0a:d6:f2:a4:99:dd:a2:e3:50:7a:ea:8f:2e:0b:0f:7b:72:8d: 47:f4:fc:f7:a5:cf:ab:46:94:aa:87:63:3b:66:81:b5:a6:b9: 6f:c4:bd:c7:c1:78:d7:da:38:19:e1:39:f4:c5:49:43:64:86: db:9a:e7:b5:4e:66:34:5d:a3:89:53:a4:98:98:9e:ba:6c:31: d6:7f:fc:fa:4f:02:02:d8:07:87:f7:48:67:7d:3b:78:88:fc: e9:76:4f:3d:5d:dc:b4:0b:b6:46:0a:ba:59:58:25:26:82:36: d7:6e:4a:df:b4:39:33:82:fc:9f:d8:a6:5a:4a:1f:a9:7b:fe: 4f:f3:9f:20:e3:05:90:0a:ac:25:42:44:8f:f8:e6:f3:f2:d5: e9:42:4e:7c:27:07:cc:48:ca:cf:30:0c:0d:9b:17:a6:10:97: 34:4d:75:3c:dd:67:e0:73:c6:42:9c:a4:cf:66:45:76:f5:dd: 40:33:05:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RDhGMzExMC8GA1UEBRMoMzJDMDIxMzExQjYyRkU0NTAwQkM4RTRFMEY0ODUyQzY0 QkM1REFDQjAeFw0yNTA2MDEwNTA3MzhaFw0yNTA2MDgwNTA3MzhaMBgxFjAUBgNV BAMTDTY4M2JlMDFhLTA4NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTOzyWTZ0sZMF9+8RHTLAyia0eZbHUa7XfjDVSMUxgmb/XhFHIQJgm4zawv2Eu LJ9+kXX1tT27dqAKt1tTMf838r2wu7KHvEQXgX8BlqJWfqQglWkMfUMJjP6GsFmn n2nkyz0l5oyDXc/Gnp07WCeJKnkEXcLuZO39wpy+3hv/14jjA/EZ/obK9TtJAMzC 8PkVtXj1ugw8QWk3CaFbI4GoxEkvVVd3tB+mgUsvx0w7LVndzI5N1+Ofe187lmFv yCZduCodwnYmpyxxaNdTv4CGCwO+eqHFPW+c7bEjbe9/etj9hAnj3EqvJwoXuaEN dxone/prTHis5il+ft3qe+r/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUe5l1VpQb 9wtiVGz7/S/odlvldTgwHwYDVR0jBBgwFoAUMsAhMRti/kUAvI5OD0hSxkvF2ssw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVEOEYzL0M1N0YyM0FFOUIw NzExRUY4MzdFQTAxMkM0RjlBRTAyL01zQWhNUnRpX2tVQXZJNU9EMGhTeGt2RjJz cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTXNBaE1SdGlfa1VBdkk1T0QwaFN4a3ZGMnNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE OEYzL0M1N0YyM0FFOUIwNzExRUY4MzdFQTAxMkM0RjlBRTAyL01zQWhNUnRpX2tV QXZJNU9EMGhTeGt2RjJzcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJUxPabHIinvM/G0QBfTbrpxQL+IdXj0P0V0BnMRcg9J7dbyoRMi4Ogs EzA++Y38CIaVHAqb82GuHdLQB1DukZVkaejoYCtq3ArW8qSZ3aLjUHrqjy4LD3ty jUf0/Pelz6tGlKqHYztmgbWmuW/EvcfBeNfaOBnhOfTFSUNkhtua57VOZjRdo4lT pJiYnrpsMdZ//PpPAgLYB4f3SGd9O3iI/Ol2Tz1d3LQLtkYKullYJSaCNtduSt+0 OTOC/J/YplpKH6l7/k/znyDjBZAKrCVCRI/45vPy1elCTnwnB8xIys8wDA2bF6YQ lzRNdTzdZ+BzxkKcpM9mRXb13UAzBUU= -----END CERTIFICATE-----Generated at Mon Jun 2 22:18:04 2025 by rpki-client