$ rpki-client -vvf rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft File: MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft (raw, json) Hash identifier: EMOyPvzjDRxfrXcKgLJs83ckaLswwhMPdNp41nxzao4= Subject key identifier: C4:AC:DB:7D:00:D2:D4:51:2A:18:63:58:CF:33:8A:63:7D:5F:AF:1C Authority key identifier: 32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43 Certificate issuer: /CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43 Certificate serial: 19A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft Manifest number: 1980 Signing time: Wed 20 Aug 2025 16:29:00 +0000 Manifest this update: Wed 20 Aug 2025 16:28:59 +0000 Manifest next update: Wed 27 Aug 2025 16:28:59 +0000 Files and hashes: 1: MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl (hash: BDVO+SQJgKwUr54IpdgW4qO148tsHj94pQLE+lQZfsE=) 2: 936822385BDA11EF98C26511C4F9AE02.roa (hash: BQO+L5CjncNKOL7DHEh52oeMX9m7mfWjBtWMWgb03Vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 16:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6565 (0x19a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FB7F, serialNumber=32C42045EA0B516551224D808F0D5550A0473B43 Validity Not Before: Aug 20 16:28:59 2025 GMT Not After : Aug 27 16:28:59 2025 GMT Subject: CN=68a5f7cc-f78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:03:f1:ad:b6:93:75:27:c5:35:88:d4:3c:a1: 1f:40:9e:5d:de:17:f4:2a:49:cf:f8:c3:0d:21:85: cd:9c:87:bb:c1:2b:c4:01:59:cd:05:d4:00:6b:be: ae:33:6a:97:36:2a:99:82:d4:64:c2:a8:0b:bf:64: c4:f9:83:57:a2:98:f2:3e:b6:db:8e:6e:04:90:4d: 56:33:d5:77:4e:92:92:49:b0:cf:ca:e4:b9:16:c4: 6c:9a:b5:16:2d:27:68:22:19:64:5d:fb:ec:f0:a8: a0:7b:c6:8d:6a:f6:d9:58:71:dd:6c:b7:c9:9d:f0: 10:61:5b:ed:2a:b0:a1:39:30:55:4d:6f:d9:1e:ed: 03:ac:4e:49:65:28:0c:6d:13:3d:ed:9c:26:02:81: b4:81:65:15:7a:7b:dc:93:8b:b2:f2:01:7c:8f:3a: 2e:0e:07:92:09:e6:fc:cb:ae:0b:61:96:4d:99:0f: 44:f2:44:36:20:11:b6:52:a0:34:eb:75:0e:ca:22: 55:d0:00:c6:7e:13:cc:e1:58:29:ff:92:d3:b7:0f: 4e:f3:a7:11:c4:da:a0:ee:c0:8e:18:3e:5b:21:b7: 1e:73:e1:06:9b:4e:dd:e0:dd:79:e2:2b:68:33:88: 29:08:a7:fd:21:e6:39:07:9f:f4:c2:ab:7d:8a:53: f6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AC:DB:7D:00:D2:D4:51:2A:18:63:58:CF:33:8A:63:7D:5F:AF:1C X509v3 Authority Key Identifier: keyid:32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:8f:e9:1b:16:f4:48:d2:eb:e0:70:31:29:4b:47:e6:26:1a: 9e:7e:c5:43:c4:aa:be:4c:6f:46:d0:1e:7c:90:39:bd:e3:1e: 1f:c1:82:9c:9b:b2:c9:6e:1a:a3:35:dd:ae:be:a8:50:42:fa: 51:63:e9:12:33:8e:2e:a8:ca:0b:1d:fc:f4:ea:79:00:de:9c: 0a:3f:24:54:86:6c:b0:99:e8:e0:25:3a:7e:2b:fb:72:b8:4b: 73:43:0c:6e:97:b9:df:a0:d5:6b:9b:bd:7a:fe:1f:5b:8c:a5: e4:4b:84:a6:1f:c7:12:cc:23:32:45:79:2a:5f:d0:3a:74:09: 80:01:87:be:ef:8a:da:9e:f8:fe:7b:a2:2e:5e:7c:5d:d5:c7: 2f:f5:c4:92:96:f6:65:9f:d1:f5:6e:a4:0d:b2:87:10:a5:f6: f0:52:66:f4:69:9e:92:53:07:27:ef:24:08:43:7c:97:1e:7c: d8:7b:82:85:df:6e:cd:8a:9a:f1:cf:ee:c1:f8:3a:8f:2a:78: fa:d3:03:da:6f:3b:41:54:62:5c:15:da:dd:8e:f0:7a:0d:26: d7:c1:c8:a4:dd:07:46:af:b9:66:29:cf:ea:00:5f:9e:91:17: 68:26:31:9c:6a:ed:f6:bc:b2:df:66:d0:2e:14:06:21:1c:04: 9d:b3:af:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZCN0YxMTAvBgNVBAUTKDMyQzQyMDQ1RUEwQjUxNjU1MTIyNEQ4MDhGMEQ1NTUw QTA0NzNCNDMwHhcNMjUwODIwMTYyODU5WhcNMjUwODI3MTYyODU5WjAYMRYwFAYD VQQDEw02OGE1ZjdjYy1mNzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1APxrbaTdSfFNYjUPKEfQJ5d3hf0KknP+MMNIYXNnIe7wSvEAVnNBdQAa76u M2qXNiqZgtRkwqgLv2TE+YNXopjyPrbbjm4EkE1WM9V3TpKSSbDPyuS5FsRsmrUW LSdoIhlkXfvs8Kige8aNavbZWHHdbLfJnfAQYVvtKrChOTBVTW/ZHu0DrE5JZSgM bRM97ZwmAoG0gWUVenvck4uy8gF8jzouDgeSCeb8y64LYZZNmQ9E8kQ2IBG2UqA0 63UOyiJV0ADGfhPM4Vgp/5LTtw9O86cRxNqg7sCOGD5bIbcec+EGm07d4N154ito M4gpCKf9IeY5B5/0wqt9ilP2hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSs230A 0tRRKhhjWM8zimN9X68cMB8GA1UdIwQYMBaAFDLEIEXqC1FlUSJNgI8NVVCgRztD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkI3Ri8xQkFFMjY1NDdD QzkxMUU3OTJDQkE5NDRDNEY5QUUwMi9Nc1FnUmVvTFVXVlJJazJBancxVlVLQkhP ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01zUWdSZW9MVVdWUklrMkFqdzFWVUtCSE8wTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkI3Ri8xQkFFMjY1NDdDQzkxMUU3OTJDQkE5NDRDNEY5QUUwMi9Nc1FnUmVvTFVX VlJJazJBancxVlVLQkhPME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIj+kbFvRI0uvgcDEpS0fmJhqefsVDxKq+TG9G0B58kDm94x4fwYKc m7LJbhqjNd2uvqhQQvpRY+kSM44uqMoLHfz06nkA3pwKPyRUhmywmejgJTp+K/ty uEtzQwxul7nfoNVrm716/h9bjKXkS4SmH8cSzCMyRXkqX9A6dAmAAYe+74ranvj+ e6IuXnxd1ccv9cSSlvZln9H1bqQNsocQpfbwUmb0aZ6SUwcn7yQIQ3yXHnzYe4KF 327Niprxz+7B+DqPKnj60wPabztBVGJcFdrdjvB6DSbXwcik3QdGr7lmKc/qAF+e kRdoJjGcau32vLLfZtAuFAYhHASds69A -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:19 2025 by rpki-client