$ rpki-client -vvf rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft File: MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft (raw, json) Hash identifier: ldFfPmKcDf70VQNLMqT0zv2eqjI7ZHGtJ+KCUZ4NTK4= Subject key identifier: 13:B1:87:91:E7:95:45:21:AE:2B:31:AC:75:E0:3E:9D:93:0E:BB:F3 Authority key identifier: 32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43 Certificate issuer: /CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43 Certificate serial: 1966 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft Manifest number: 1942 Signing time: Thu 24 Apr 2025 16:26:21 +0000 Manifest this update: Thu 24 Apr 2025 16:26:21 +0000 Manifest next update: Thu 01 May 2025 16:26:21 +0000 Files and hashes: 1: MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl (hash: hFWkY0WoGbXUhP/tYdhjDenkAbjr8FCvXiBXLJdgTcg=) 2: 936822385BDA11EF98C26511C4F9AE02.roa (hash: orcuIVQDXa55MgUEa+uvpleaNB+r/DtukKrLYo38vu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6502 (0x1966) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FB7F, serialNumber=32C42045EA0B516551224D808F0D5550A0473B43 Validity Not Before: Apr 24 16:26:21 2025 GMT Not After : May 1 16:26:21 2025 GMT Subject: CN=680a662d-8528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b7:b8:97:dc:1b:82:30:45:66:d3:b5:a3:fd: 4c:85:b5:e8:54:e5:95:e4:03:ae:14:86:e1:a7:cb: 23:8c:ab:16:50:44:62:10:db:2b:ed:ac:12:22:43: dd:8b:59:7d:53:90:09:ff:3a:ce:d1:d8:bc:fd:10: d6:c6:dd:e2:a8:38:e2:1d:3c:39:f0:f2:08:c8:a7: 14:cc:87:27:b8:36:37:58:8d:0c:74:03:61:d4:26: 85:81:58:10:0a:49:22:7e:7f:df:3b:23:4b:2b:99: 19:57:f2:78:5e:a6:35:ce:31:a3:ce:0e:4c:b9:91: 8e:de:f2:d5:31:92:3b:6a:34:94:27:d8:8f:37:05: d4:25:4d:0c:21:0f:ac:4a:27:0c:a3:9e:d7:8f:94: 6e:c3:0f:77:55:40:85:d0:58:ef:c7:d1:b7:66:39: 83:32:81:0e:ba:b1:5a:22:fe:c0:5f:1b:3d:c8:2c: be:72:69:37:e6:62:b5:f6:cd:b3:76:54:db:43:cf: 8e:f8:16:2b:74:20:20:cb:50:21:ac:3b:d9:9f:c6: b4:ea:42:36:c1:3c:4b:c6:3c:62:96:67:fc:8f:de: 7d:ba:c4:23:cb:f1:1e:fd:9e:65:88:0b:bc:56:eb: bf:60:25:c4:b4:11:1b:b4:76:42:4a:87:dd:82:2c: 6d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B1:87:91:E7:95:45:21:AE:2B:31:AC:75:E0:3E:9D:93:0E:BB:F3 X509v3 Authority Key Identifier: keyid:32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b0:ca:84:b0:20:14:ee:ee:15:32:bb:ee:a6:c1:ca:d4:b2: 24:31:d0:89:53:c4:21:2e:25:3e:5b:66:39:df:4f:cb:65:a6: 51:32:f3:1b:f6:dc:45:ac:30:b4:c7:65:cf:ce:30:24:6b:3f: 77:57:e8:c1:e5:6f:a9:9a:00:46:b7:e1:4e:df:52:63:74:b1: 22:14:cb:e0:50:00:c5:0f:c7:83:c8:2c:00:ed:97:bf:30:fd: 14:be:89:d9:1c:63:27:c8:bd:b2:f1:72:86:9e:61:06:d3:91: 1d:cd:61:5c:02:77:d0:3e:4e:13:18:a9:c1:4f:bd:77:3b:b7: 19:b3:7c:d0:5a:bc:31:1b:ca:70:12:c0:6e:87:68:0f:ae:24: 3a:30:a8:42:b4:b8:2a:de:d0:57:d9:d8:c0:68:ac:90:b0:e8: 3d:1b:06:a2:63:64:1b:e1:ed:ae:39:51:8a:b8:f9:61:9b:77: a3:f8:a2:ea:a1:a7:23:cf:0a:e2:6e:d1:6d:ed:32:98:2b:15: 89:e1:71:65:75:bd:06:2a:b0:12:14:8a:a6:d0:de:bd:f0:80: 84:d8:9b:95:7c:56:6c:f1:c8:09:ff:46:b8:31:e9:f4:4a:4a: 75:24:71:f4:eb:e8:25:7d:38:07:9a:4d:18:e1:cc:30:ab:f0: 91:b5:86:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZCN0YxMTAvBgNVBAUTKDMyQzQyMDQ1RUEwQjUxNjU1MTIyNEQ4MDhGMEQ1NTUw QTA0NzNCNDMwHhcNMjUwNDI0MTYyNjIxWhcNMjUwNTAxMTYyNjIxWjAYMRYwFAYD VQQDEw02ODBhNjYyZC04NTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnre4l9wbgjBFZtO1o/1MhbXoVOWV5AOuFIbhp8sjjKsWUERiENsr7awSIkPd i1l9U5AJ/zrO0di8/RDWxt3iqDjiHTw58PIIyKcUzIcnuDY3WI0MdANh1CaFgVgQ Ckkifn/fOyNLK5kZV/J4XqY1zjGjzg5MuZGO3vLVMZI7ajSUJ9iPNwXUJU0MIQ+s SicMo57Xj5Ruww93VUCF0Fjvx9G3ZjmDMoEOurFaIv7AXxs9yCy+cmk35mK19s2z dlTbQ8+O+BYrdCAgy1AhrDvZn8a06kI2wTxLxjxilmf8j959usQjy/Ee/Z5liAu8 Vuu/YCXEtBEbtHZCSofdgixtowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOxh5Hn lUUhrisxrHXgPp2TDrvzMB8GA1UdIwQYMBaAFDLEIEXqC1FlUSJNgI8NVVCgRztD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkI3Ri8xQkFFMjY1NDdD QzkxMUU3OTJDQkE5NDRDNEY5QUUwMi9Nc1FnUmVvTFVXVlJJazJBancxVlVLQkhP ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01zUWdSZW9MVVdWUklrMkFqdzFWVUtCSE8wTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkI3Ri8xQkFFMjY1NDdDQzkxMUU3OTJDQkE5NDRDNEY5QUUwMi9Nc1FnUmVvTFVX VlJJazJBancxVlVLQkhPME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7sMqEsCAU7u4VMrvupsHK1LIkMdCJU8QhLiU+W2Y530/LZaZRMvMb 9txFrDC0x2XPzjAkaz93V+jB5W+pmgBGt+FO31JjdLEiFMvgUADFD8eDyCwA7Ze/ MP0UvonZHGMnyL2y8XKGnmEG05EdzWFcAnfQPk4TGKnBT713O7cZs3zQWrwxG8pw EsBuh2gPriQ6MKhCtLgq3tBX2djAaKyQsOg9GwaiY2Qb4e2uOVGKuPlhm3ej+KLq oacjzwribtFt7TKYKxWJ4XFldb0GKrASFIqm0N698ICE2JuVfFZs8cgJ/0a4Men0 Skp1JHH06+glfTgHmk0Y4cwwq/CRtYYN -----END CERTIFICATE-----Generated at Sat Apr 26 12:56:43 2025 by rpki-client