$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft File: MsAhMRti_kUAvI5OD0hSxkvF2ss.mft (raw, json) Hash identifier: /eFsaXsu2NvpPMAc5JYyRVII8ealnU5p3439a9Yc/Ew= Subject key identifier: DE:EB:6B:E4:60:F0:3F:C3:1C:81:EF:99:83:6E:18:13:8E:6E:E7:F9 Authority key identifier: 32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB Certificate issuer: /CN=A915D8F3/serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft Manifest number: A0 Signing time: Fri 05 Sep 2025 05:16:04 +0000 Manifest this update: Fri 05 Sep 2025 05:16:03 +0000 Manifest next update: Fri 12 Sep 2025 05:16:03 +0000 Files and hashes: 1: MsAhMRti_kUAvI5OD0hSxkvF2ss.crl (hash: euzJjF9xBEzubdKAgK8S5cKX7brPCvAFWUnawAF6eAo=) 2: 37DEC83C9DEC11EFB004850FC4F9AE02.roa (hash: AzFl0RFcs8OJznRZfBYgmDybc5F7V12CS5camGFMWxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8F3, serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB Validity Not Before: Sep 5 05:16:03 2025 GMT Not After : Sep 12 05:16:03 2025 GMT Subject: CN=68ba7213-dae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4f:c6:49:ea:1d:7d:39:90:2a:3d:5a:c8:6c: dd:6e:b6:59:e6:5e:a8:b9:d4:cb:72:ff:0a:0b:a6: bb:17:9e:c9:7d:ab:63:da:eb:ac:29:88:a9:ab:93: 43:19:df:22:29:04:c6:1c:09:34:bb:0b:33:51:ce: 62:83:45:51:44:b9:bf:57:a6:49:86:0e:0c:33:b1: 1e:fd:be:a2:59:b7:7d:bf:88:27:fa:fc:6f:ba:61: 84:d1:23:f3:90:08:f0:22:1c:6c:99:1c:23:4c:ed: b8:13:de:f4:9e:00:49:d0:df:33:eb:30:4a:1e:0f: 4e:ad:49:e4:db:eb:ee:8e:08:64:6a:1f:43:e4:ee: 48:06:65:ad:98:70:15:4f:75:63:09:25:83:37:d6: f8:72:fc:f3:12:e8:c8:44:d7:07:d4:a0:54:80:f9: 55:5e:9c:6d:ca:60:a7:38:7b:a5:1f:03:af:4b:19: ff:b8:59:58:e7:dd:d3:39:0a:8c:3e:2e:a9:1e:8a: c6:f4:0b:eb:5a:29:26:01:06:df:82:c8:f1:9b:f9: 25:18:69:57:2d:e9:2b:9d:bb:b2:d5:fb:01:57:5b: db:89:ac:73:35:9a:34:12:83:4b:f5:dc:fb:d5:b9: aa:f3:08:6a:e0:69:94:db:da:7d:ac:b3:c2:f7:f1: 42:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EB:6B:E4:60:F0:3F:C3:1C:81:EF:99:83:6E:18:13:8E:6E:E7:F9 X509v3 Authority Key Identifier: keyid:32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:6c:ad:61:f5:11:3f:9f:27:0e:20:35:ff:12:d1:0e:68:fa: 7f:b2:32:eb:88:06:14:cc:ba:34:46:de:54:e0:b0:9c:41:9b: 04:c4:df:ff:67:9c:36:41:26:97:4a:58:be:9c:1b:96:70:9b: 94:18:fb:8e:a2:e4:c8:b4:31:d8:71:58:0a:f3:a1:45:7f:50: 33:b3:9f:1c:a2:49:15:7d:83:48:81:dd:b3:5c:c5:1a:a8:0a: bb:b5:d1:49:3e:c7:77:4b:00:8c:62:fe:6c:e9:42:68:bb:c7: 8a:3e:cc:19:c2:91:e8:5a:d2:4d:c2:9e:f0:4b:ce:3f:00:6f: 31:ec:f1:84:f2:4d:67:ba:78:e2:e2:32:d2:00:07:1c:5a:c4: 88:97:3d:02:fc:45:07:87:6a:66:03:d7:5b:5b:08:a8:9f:42: 5a:ad:bc:01:93:e7:97:a1:9f:80:3a:fb:4d:2f:87:30:d7:3f: 36:81:6b:0b:79:c9:73:6d:e0:c0:0e:b3:71:2d:5a:2f:34:97: d4:9c:5a:05:d4:b2:3e:5d:09:7f:2c:f1:0a:35:e8:e6:b8:f7: a5:6b:9b:58:b7:a4:c2:c7:46:a7:69:e6:8d:84:1f:f7:cb:37: 41:41:75:6b:bd:d7:56:6f:3a:8e:45:43:3a:a7:89:fb:4f:c2: 3e:cb:cf:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RjMxMTAvBgNVBAUTKDMyQzAyMTMxMUI2MkZFNDUwMEJDOEU0RTBGNDg1MkM2 NEJDNURBQ0IwHhcNMjUwOTA1MDUxNjAzWhcNMjUwOTEyMDUxNjAzWjAYMRYwFAYD VQQDEw02OGJhNzIxMy1kYWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0/GSeodfTmQKj1ayGzdbrZZ5l6oudTLcv8KC6a7F57Jfatj2uusKYipq5ND Gd8iKQTGHAk0uwszUc5ig0VRRLm/V6ZJhg4MM7Ee/b6iWbd9v4gn+vxvumGE0SPz kAjwIhxsmRwjTO24E970ngBJ0N8z6zBKHg9OrUnk2+vujghkah9D5O5IBmWtmHAV T3VjCSWDN9b4cvzzEujIRNcH1KBUgPlVXpxtymCnOHulHwOvSxn/uFlY593TOQqM Pi6pHorG9AvrWikmAQbfgsjxm/klGGlXLekrnbuy1fsBV1vbiaxzNZo0EoNL9dz7 1bmq8whq4GmU29p9rLPC9/FCpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7ra+Rg 8D/DHIHvmYNuGBOObuf5MB8GA1UdIwQYMBaAFDLAITEbYv5FALyOTg9IUsZLxdrL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhGMy9DNTdGMjNBRTlC MDcxMUVGODM3RUEwMTJDNEY5QUUwMi9Nc0FoTVJ0aV9rVUF2STVPRDBoU3hrdkYy c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01zQWhNUnRpX2tVQXZJNU9EMGhTeGt2RjJzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhGMy9DNTdGMjNBRTlCMDcxMUVGODM3RUEwMTJDNEY5QUUwMi9Nc0FoTVJ0aV9r VUF2STVPRDBoU3hrdkYyc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgbK1h9RE/nycOIDX/EtEOaPp/sjLriAYUzLo0Rt5U4LCcQZsExN// Z5w2QSaXSli+nBuWcJuUGPuOouTItDHYcVgK86FFf1Azs58cokkVfYNIgd2zXMUa qAq7tdFJPsd3SwCMYv5s6UJou8eKPswZwpHoWtJNwp7wS84/AG8x7PGE8k1nunji 4jLSAAccWsSIlz0C/EUHh2pmA9dbWwion0JarbwBk+eXoZ+AOvtNL4cw1z82gWsL eclzbeDADrNxLVovNJfUnFoF1LI+XQl/LPEKNejmuPela5tYt6TCx0anaeaNhB/3 yzdBQXVrvddWbzqORUM6p4n7T8I+y89A -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:08 2025 by rpki-client