$ rpki-client -vvf rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft File: MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft (raw, json) Hash identifier: TF3bBNwbuEs0fbkjmgPEoz5xXkl22WVETwd0u5zpzjw= Subject key identifier: 94:11:6E:41:21:52:D5:D2:9C:24:15:82:96:F8:BA:A5:B4:03:82:EA Authority key identifier: 32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43 Certificate issuer: /CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43 Certificate serial: 19CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft Manifest number: 19A6 Signing time: Sun 02 Nov 2025 16:24:17 +0000 Manifest this update: Sun 02 Nov 2025 16:24:17 +0000 Manifest next update: Sun 09 Nov 2025 16:24:17 +0000 Files and hashes: 1: MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl (hash: 8vPndrvrYj1pWc1642P0xT3yJ4adQJsDaIUh2shetIQ=) 2: 936822385BDA11EF98C26511C4F9AE02.roa (hash: BQO+L5CjncNKOL7DHEh52oeMX9m7mfWjBtWMWgb03Vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6603 (0x19cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FB7F, serialNumber=32C42045EA0B516551224D808F0D5550A0473B43 Validity Not Before: Nov 2 16:24:17 2025 GMT Not After : Nov 9 16:24:17 2025 GMT Subject: CN=690785b1-ca2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:da:4b:e0:cd:b0:57:58:e4:d7:a0:46:70:3a: 35:a3:77:56:bc:60:26:c3:53:b7:1a:05:d4:7d:01: ce:bd:95:45:c4:e6:65:b6:70:29:15:57:5a:99:28: 36:5b:66:ef:09:20:17:af:9a:18:57:1f:b0:af:7b: f8:49:33:6b:d2:d6:8d:1c:89:f7:49:cf:43:58:b0: 7d:b2:78:76:c6:df:f9:1b:22:d7:3c:ac:2a:66:c5: 44:0a:ef:61:3e:56:e8:07:4d:aa:2f:cf:f7:2d:92: 17:7e:be:63:9e:2a:5b:03:81:38:1c:60:ea:7f:04: b0:2c:82:c8:da:0c:b0:9e:86:fd:7a:02:7b:2f:ee: 25:32:22:3b:6f:dd:ec:a0:78:ca:6b:78:4e:10:39: 89:7f:c9:ae:40:af:f0:70:43:f0:00:4f:0d:1d:1e: 5c:9b:d4:79:da:c4:ca:eb:d5:af:44:bf:92:d2:7b: 64:c4:5c:40:f7:f8:09:24:d9:6b:5f:70:bd:b5:18: bb:55:fa:af:c6:7f:bb:b6:6d:28:33:37:cb:5a:90: 9b:61:49:2b:5c:91:97:7a:b2:23:29:de:44:54:53: dc:92:0f:13:51:86:67:b0:68:39:01:bd:1c:29:0d: 03:1b:d8:99:7b:53:ac:d0:4b:3b:8a:7c:86:65:d1: 24:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:11:6E:41:21:52:D5:D2:9C:24:15:82:96:F8:BA:A5:B4:03:82:EA X509v3 Authority Key Identifier: keyid:32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:30:4c:5d:b7:a4:07:f1:ba:0e:0f:b3:cc:37:cf:f9:a4:cb: 64:33:8f:c1:60:2d:35:62:89:ce:67:c9:b7:38:54:b6:d4:44: 6e:a9:57:0d:04:d7:d6:0c:42:57:55:0b:39:13:f9:c3:5d:91: d0:5a:5a:98:31:99:e2:16:70:3e:96:7c:a1:a5:6b:42:09:9e: 0e:1f:c5:42:4c:5f:37:d3:fc:31:88:92:25:4d:2b:0a:a1:8e: 31:63:58:9c:35:51:bf:da:88:22:47:5c:eb:0d:95:78:4d:48: 97:be:f4:35:d7:13:03:40:5c:84:8c:2c:45:ed:c2:50:72:08: 35:89:6c:83:84:8e:bd:8f:c6:02:cc:d2:29:cc:53:02:37:a9: 3d:0b:cc:12:90:da:f6:a2:a1:60:1a:87:5d:f2:c2:c0:84:9a: 27:73:85:83:2d:cb:ee:87:3e:92:b8:24:7c:de:50:84:04:e8: 07:4b:55:9c:e4:44:18:92:2b:a9:3f:6e:51:71:5b:34:81:9d: 20:aa:a8:41:31:0f:f0:96:ec:45:0b:2a:a3:f1:9f:f7:7b:b1: e5:58:ed:57:98:2c:52:61:cc:6f:cc:52:ea:f0:a1:73:ac:de: 45:58:a5:89:f2:53:c4:bb:c1:62:1f:62:21:11:cc:fb:be:fe: 12:8e:70:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZCN0YxMTAvBgNVBAUTKDMyQzQyMDQ1RUEwQjUxNjU1MTIyNEQ4MDhGMEQ1NTUw QTA0NzNCNDMwHhcNMjUxMTAyMTYyNDE3WhcNMjUxMTA5MTYyNDE3WjAYMRYwFAYD VQQDEw02OTA3ODViMS1jYTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4dpL4M2wV1jk16BGcDo1o3dWvGAmw1O3GgXUfQHOvZVFxOZltnApFVdamSg2 W2bvCSAXr5oYVx+wr3v4STNr0taNHIn3Sc9DWLB9snh2xt/5GyLXPKwqZsVECu9h PlboB02qL8/3LZIXfr5jnipbA4E4HGDqfwSwLILI2gywnob9egJ7L+4lMiI7b93s oHjKa3hOEDmJf8muQK/wcEPwAE8NHR5cm9R52sTK69WvRL+S0ntkxFxA9/gJJNlr X3C9tRi7Vfqvxn+7tm0oMzfLWpCbYUkrXJGXerIjKd5EVFPckg8TUYZnsGg5Ab0c KQ0DG9iZe1Os0Es7inyGZdEk2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQRbkEh UtXSnCQVgpb4uqW0A4LqMB8GA1UdIwQYMBaAFDLEIEXqC1FlUSJNgI8NVVCgRztD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkI3Ri8xQkFFMjY1NDdD QzkxMUU3OTJDQkE5NDRDNEY5QUUwMi9Nc1FnUmVvTFVXVlJJazJBancxVlVLQkhP ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01zUWdSZW9MVVdWUklrMkFqdzFWVUtCSE8wTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkI3Ri8xQkFFMjY1NDdDQzkxMUU3OTJDQkE5NDRDNEY5QUUwMi9Nc1FnUmVvTFVX VlJJazJBancxVlVLQkhPME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZMExdt6QH8boOD7PMN8/5pMtkM4/BYC01YonOZ8m3OFS21ERuqVcN BNfWDEJXVQs5E/nDXZHQWlqYMZniFnA+lnyhpWtCCZ4OH8VCTF830/wxiJIlTSsK oY4xY1icNVG/2ogiR1zrDZV4TUiXvvQ11xMDQFyEjCxF7cJQcgg1iWyDhI69j8YC zNIpzFMCN6k9C8wSkNr2oqFgGodd8sLAhJonc4WDLcvuhz6SuCR83lCEBOgHS1Wc 5EQYkiupP25RcVs0gZ0gqqhBMQ/wluxFCyqj8Z/3e7HlWO1XmCxSYcxvzFLq8KFz rN5FWKWJ8lPEu8FiH2IhEcz7vv4SjnAB -----END CERTIFICATE-----Generated at Tue Nov 4 01:02:43 2025 by rpki-client