$ rpki-client -vvf rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft File: MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft (raw, json) Hash identifier: SND6dzIZDsdoAvicPQFLfLqVr+4aDq1OG14rB/WsqV8= Subject key identifier: 58:C6:DA:BC:E2:8D:1C:34:9A:25:73:6B:B7:61:6E:C3:13:EE:1E:31 Authority key identifier: 32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43 Certificate issuer: /CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43 Certificate serial: 19CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft Manifest number: 19A7 Signing time: Tue 04 Nov 2025 16:29:32 +0000 Manifest this update: Tue 04 Nov 2025 16:29:31 +0000 Manifest next update: Tue 11 Nov 2025 16:29:31 +0000 Files and hashes: 1: MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl (hash: RrT//3vdYmy7CFd4K7S1IVZaQfrRJkkOBXKYGYjL68E=) 2: 936822385BDA11EF98C26511C4F9AE02.roa (hash: BQO+L5CjncNKOL7DHEh52oeMX9m7mfWjBtWMWgb03Vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6604 (0x19cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FB7F, serialNumber=32C42045EA0B516551224D808F0D5550A0473B43 Validity Not Before: Nov 4 16:29:31 2025 GMT Not After : Nov 11 16:29:31 2025 GMT Subject: CN=690a29ec-3fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:61:e4:ad:e7:01:37:83:0e:24:1e:9e:fc:9c: 0b:2f:93:e4:a2:67:3c:74:f8:f0:c6:34:1a:1a:1c: 82:31:b5:3d:66:91:b3:f9:f1:ae:9f:69:13:5b:ee: f0:7b:c3:91:03:4e:db:b8:45:94:d0:b5:d4:b6:2b: 01:6b:76:a4:25:52:c7:88:7a:99:8b:be:a4:9e:c8: f6:56:60:ec:62:2c:1c:5b:bf:4f:07:72:0d:0a:93: 42:8b:93:a3:0a:4f:d8:de:a8:10:38:88:ea:97:31: 3b:0f:99:d0:bf:0e:0f:10:2b:65:1e:8d:44:88:b2: ce:8b:ea:6a:18:70:e2:57:7d:a1:f0:cf:24:87:e2: 47:3a:ee:2b:89:cf:a5:48:1e:3f:0f:e7:ee:59:0b: 8c:8c:51:27:0d:2c:9e:9c:8a:e7:a3:c2:15:c7:b3: 44:f3:3f:15:08:15:68:58:d8:b1:35:6c:ec:0c:64: 68:ae:2f:49:3c:cf:97:2f:a5:7d:41:a8:36:43:08: 43:d4:a9:96:f1:29:37:b8:dc:9f:ac:20:fd:45:93: 6c:23:c9:05:bb:aa:aa:e6:9f:da:d6:6e:f1:3f:4d: 51:4d:c7:db:5b:cc:b6:b3:cc:10:8e:b3:ad:15:74: 1c:71:8d:be:27:52:44:07:2f:44:d3:b3:f9:0d:97: 87:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C6:DA:BC:E2:8D:1C:34:9A:25:73:6B:B7:61:6E:C3:13:EE:1E:31 X509v3 Authority Key Identifier: keyid:32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:91:bf:fc:fe:a5:78:fb:03:c8:15:9f:03:e9:e9:06:76:a9: 0c:38:ab:53:04:9c:64:0c:b4:91:e4:e4:a9:28:e2:55:d1:76: 1c:e5:49:c4:fa:f2:02:a0:61:b4:02:c0:fb:ee:b3:cf:c2:f3: 35:89:ec:ff:ee:82:dd:ed:20:4b:58:17:55:07:a3:bf:fa:63: ff:41:0a:ed:d4:1c:ce:1d:05:c6:6d:3f:a1:b4:de:9f:a2:df: f2:19:51:a3:b0:29:e0:7d:d9:6e:1e:ca:8c:e3:52:26:5c:50: 6f:89:08:a0:c8:d1:49:9c:e2:d1:a9:81:99:bf:4a:57:3d:01: 92:11:2b:f6:b2:51:1d:b8:b3:0b:93:3a:63:44:af:be:5b:12: c7:34:06:94:e4:6a:a8:67:54:67:56:92:a5:75:b9:bf:1b:55: 1a:81:21:ed:46:ec:b4:2e:20:65:a3:d9:d1:4c:3a:e9:95:bf: be:96:72:7d:6d:ed:04:54:c5:f2:b9:da:70:56:4a:3c:eb:e7: 4d:89:80:87:e8:fe:8d:5b:c6:c4:78:78:3f:76:0b:52:aa:d0: 82:ee:ed:1c:c1:dc:25:56:9a:ac:87:0b:02:a1:0c:20:45:64: 9a:cc:7a:20:63:83:f0:0f:c1:10:b7:96:f5:a9:d6:b7:58:de: 32:5c:86:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZCN0YxMTAvBgNVBAUTKDMyQzQyMDQ1RUEwQjUxNjU1MTIyNEQ4MDhGMEQ1NTUw QTA0NzNCNDMwHhcNMjUxMTA0MTYyOTMxWhcNMjUxMTExMTYyOTMxWjAYMRYwFAYD VQQDEw02OTBhMjllYy0zZmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmmHkrecBN4MOJB6e/JwLL5Pkomc8dPjwxjQaGhyCMbU9ZpGz+fGun2kTW+7w e8ORA07buEWU0LXUtisBa3akJVLHiHqZi76knsj2VmDsYiwcW79PB3INCpNCi5Oj Ck/Y3qgQOIjqlzE7D5nQvw4PECtlHo1EiLLOi+pqGHDiV32h8M8kh+JHOu4ric+l SB4/D+fuWQuMjFEnDSyenIrno8IVx7NE8z8VCBVoWNixNWzsDGRori9JPM+XL6V9 Qag2QwhD1KmW8Sk3uNyfrCD9RZNsI8kFu6qq5p/a1m7xP01RTcfbW8y2s8wQjrOt FXQccY2+J1JEBy9E07P5DZeH6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjG2rzi jRw0miVza7dhbsMT7h4xMB8GA1UdIwQYMBaAFDLEIEXqC1FlUSJNgI8NVVCgRztD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkI3Ri8xQkFFMjY1NDdD QzkxMUU3OTJDQkE5NDRDNEY5QUUwMi9Nc1FnUmVvTFVXVlJJazJBancxVlVLQkhP ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01zUWdSZW9MVVdWUklrMkFqdzFWVUtCSE8wTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkI3Ri8xQkFFMjY1NDdDQzkxMUU3OTJDQkE5NDRDNEY5QUUwMi9Nc1FnUmVvTFVX VlJJazJBancxVlVLQkhPME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtkb/8/qV4+wPIFZ8D6ekGdqkMOKtTBJxkDLSR5OSpKOJV0XYc5UnE +vICoGG0AsD77rPPwvM1iez/7oLd7SBLWBdVB6O/+mP/QQrt1BzOHQXGbT+htN6f ot/yGVGjsCngfdluHsqM41ImXFBviQigyNFJnOLRqYGZv0pXPQGSESv2slEduLML kzpjRK++WxLHNAaU5GqoZ1RnVpKldbm/G1UagSHtRuy0LiBlo9nRTDrplb++lnJ9 be0EVMXyudpwVko86+dNiYCH6P6NW8bEeHg/dgtSqtCC7u0cwdwlVpqshwsCoQwg RWSazHogY4PwD8EQt5b1qda3WN4yXIYY -----END CERTIFICATE-----Generated at Wed Nov 5 07:32:14 2025 by rpki-client