$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft File: MSRAIBsu90t8rGwx-4X0HpxGhqA.mft (raw, json) Hash identifier: bLLedB2M9ITkpwHyVdEJSEb3QHnRXcQHmdIV71Z1AhI= Subject key identifier: D9:4D:F4:E6:AD:23:28:66:91:30:E1:2E:4A:61:3C:DE:F8:C6:18:2A Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0 Certificate issuer: /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft Manifest number: 67 Signing time: Sun 07 Sep 2025 07:37:14 +0000 Manifest this update: Sun 07 Sep 2025 07:37:14 +0000 Manifest next update: Sun 14 Sep 2025 07:37:14 +0000 Files and hashes: 1: MSRAIBsu90t8rGwx-4X0HpxGhqA.crl (hash: JT3c3eu2COeeK4dUsC0d4HuGBXbxkA8j31+KyAYXGGA=) 2: 070DB3BAFB6D11EFA5E39678C4F9AE02.roa (hash: q1x47yUs6U+uQS9ousQECTrxQCfwChHW+mjdafLrJuY=) 3: F14B18CE64C611F0A7F4DB79C4F9AE02.roa (hash: 1OAyMVa0XBUo/ryUsoyI81mxhEqjOM4w6I8EktKs9g0=) 4: 2178DCD2FF3E11EF8D834053C4F9AE02.roa (hash: JSwC8LvkFFx+csBawa+WzjqR/g3wGIngxuIt67ID3sc=) 5: F5FC39B600F811F0BD702A69C4F9AE02.roa (hash: 8uwpV2NMP0utQgRKFvrYO1IhjVauGOu4rc/6wACuwjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 07:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA80C, serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0 Validity Not Before: Sep 7 07:37:14 2025 GMT Not After : Sep 14 07:37:14 2025 GMT Subject: CN=68bd362a-4ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:19:bc:61:81:db:43:ad:0f:26:eb:2e:d7:9d: da:29:fa:a7:d9:25:1d:f4:c5:5b:81:b5:5a:6f:4f: 69:14:ee:5c:3b:83:3f:be:77:da:cc:1b:fa:22:fa: 4a:45:dd:f4:70:5e:20:53:76:32:32:e5:45:26:fd: 68:b0:1b:2e:2e:56:75:8e:6e:f3:d4:52:93:b7:79: 8d:9b:6f:07:a9:f9:26:08:be:68:31:19:05:29:40: 1f:6a:25:ea:7b:6a:dc:2a:05:d1:f4:98:3f:95:07: d1:a4:fe:da:2e:06:fd:88:c5:7d:c8:6f:cc:32:b8: c2:63:fc:a8:e7:28:cf:f2:fc:dc:9d:87:fb:11:ae: bd:0d:5f:ae:2e:95:cc:18:a3:47:4d:53:e1:ff:d5: 37:bd:40:4f:e9:de:57:f3:44:ad:1c:33:c9:e6:41: fe:7e:6a:88:e1:ce:15:6b:e3:81:68:25:96:8f:36: 15:15:61:41:73:9f:7d:e2:ec:f1:aa:47:73:84:3c: 9d:00:14:2c:0e:26:e2:40:a7:b5:62:5b:9c:6a:a0: b5:bb:8a:14:dc:49:93:ca:87:c5:d4:ed:ef:23:21: 09:b4:e3:70:7a:f3:46:3b:88:80:e1:da:25:08:7c: 19:bb:f8:13:00:37:91:7e:9b:03:34:f5:a8:bb:72: 1b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4D:F4:E6:AD:23:28:66:91:30:E1:2E:4A:61:3C:DE:F8:C6:18:2A X509v3 Authority Key Identifier: keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:9e:c2:d0:8a:92:ea:23:4d:fe:28:ae:b8:2d:7f:14:a4:61: e1:5d:41:9e:2a:87:71:60:ff:a3:62:e7:d2:a7:68:0f:f0:9c: 90:95:09:25:be:9f:99:21:da:7f:30:6b:e5:23:54:fe:5c:db: 99:fe:ba:ac:0e:19:8a:d4:25:f3:5a:4f:ac:61:ab:a3:01:52: 38:2a:e5:57:28:f4:4e:0e:9c:4a:e9:40:48:ae:86:f6:49:cf: 4a:e1:47:dd:0b:bd:8f:05:34:d5:11:e4:10:9e:d4:bd:49:50: a2:54:47:1a:06:28:3d:29:51:c6:f4:f9:72:ef:c4:4e:a4:f6: 53:f7:8c:11:8d:9d:2c:79:16:b0:e2:f4:1c:32:2c:35:96:52: 43:9d:aa:c2:c4:14:c8:3a:8f:02:e4:55:5f:75:52:02:90:7d: f6:dd:30:a3:8b:b2:aa:5c:da:ff:70:45:1c:0c:3c:65:11:0e: ae:c2:7d:84:b9:52:22:3a:ce:46:47:ea:3a:39:e4:8a:6e:c7: 6d:76:e7:ef:41:eb:fb:4b:77:4c:12:f8:0b:ec:9e:1b:43:a7: b9:4b:43:6e:18:ee:cb:6e:b3:59:95:cd:b2:98:24:22:f6:5d: 2e:6c:0f:17:e9:20:5d:24:55:62:2e:44:21:c3:14:bc:08:06: cb:8c:d8:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTgwQzExMC8GA1UEBRMoMzEyNDQwMjAxQjJFRjc0QjdDQUM2QzMxRkI4NUY0MUU5 QzQ2ODZBMDAeFw0yNTA5MDcwNzM3MTRaFw0yNTA5MTQwNzM3MTRaMBgxFjAUBgNV BAMTDTY4YmQzNjJhLTRlZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoGbxhgdtDrQ8m6y7Xndop+qfZJR30xVuBtVpvT2kU7lw7gz++d9rMG/oi+kpF 3fRwXiBTdjIy5UUm/WiwGy4uVnWObvPUUpO3eY2bbwep+SYIvmgxGQUpQB9qJep7 atwqBdH0mD+VB9Gk/touBv2IxX3Ib8wyuMJj/KjnKM/y/Nydh/sRrr0NX64ulcwY o0dNU+H/1Te9QE/p3lfzRK0cM8nmQf5+aojhzhVr44FoJZaPNhUVYUFzn33i7PGq R3OEPJ0AFCwOJuJAp7ViW5xqoLW7ihTcSZPKh8XU7e8jIQm043B680Y7iIDh2iUI fBm7+BMAN5F+mwM09ai7chuVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2U305q0j KGaRMOEuSmE83vjGGCowHwYDVR0jBBgwFoAUMSRAIBsu90t8rGwx+4X0HpxGhqAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBODBDL0RFOThFQUYwRkI2 NTExRUZBMzc2RTQ0OUM0RjlBRTAyL01TUkFJQnN1OTB0OHJHd3gtNFgwSHB4R2hx QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTVNSQUlCc3U5MHQ4ckd3eC00WDBIcHhHaHFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB ODBDL0RFOThFQUYwRkI2NTExRUZBMzc2RTQ0OUM0RjlBRTAyL01TUkFJQnN1OTB0 OHJHd3gtNFgwSHB4R2hxQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIKewtCKkuojTf4orrgtfxSkYeFdQZ4qh3Fg/6Ni59KnaA/wnJCVCSW+ n5kh2n8wa+UjVP5c25n+uqwOGYrUJfNaT6xhq6MBUjgq5Vco9E4OnErpQEiuhvZJ z0rhR90LvY8FNNUR5BCe1L1JUKJURxoGKD0pUcb0+XLvxE6k9lP3jBGNnSx5FrDi 9BwyLDWWUkOdqsLEFMg6jwLkVV91UgKQffbdMKOLsqpc2v9wRRwMPGURDq7CfYS5 UiI6zkZH6jo55Ipux2125+9B6/tLd0wS+AvsnhtDp7lLQ24Y7stus1mVzbKYJCL2 XS5sDxfpIF0kVWIuRCHDFLwIBsuM2Mc= -----END CERTIFICATE-----Generated at Sun Sep 7 21:35:07 2025 by rpki-client