$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft File: msuAZmP7D89uvEPAELk14FIU_J8.mft (raw, json) Hash identifier: G/PC6dJM9X7UDxRI5voHFEHsvqEIG+OTG85DMnlUsas= Subject key identifier: 73:40:D5:53:6E:A6:25:47:F9:96:E3:94:20:3B:8A:CD:60:24:3A:E0 Authority key identifier: 9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F Certificate issuer: /CN=A91C7B68/serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft Manifest number: 0A22 Signing time: Fri 08 Aug 2025 20:42:44 +0000 Manifest this update: Fri 08 Aug 2025 20:42:44 +0000 Manifest next update: Fri 15 Aug 2025 20:42:44 +0000 Files and hashes: 1: msuAZmP7D89uvEPAELk14FIU_J8.crl (hash: MkAqfY5jBQ3//icGTIN28PVARQt91FdHB0h/7O+rC6U=) 2: 2EC10CF4071C11EFAD19C863C4F9AE02.roa (hash: AouPneIWQOQT+MiZ1EFTYVEBe2qBFNyX5KIDaJtu+qM=) 3: C4DB3710B0BC11EFA44BCA7DC4F9AE02.roa (hash: BXig7jt+N7fBjNwAkzGpIGTBV5qbb0dfgi5McDSf5Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68, serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Validity Not Before: Aug 8 20:42:44 2025 GMT Not After : Aug 15 20:42:44 2025 GMT Subject: CN=68966144-869b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:68:de:77:68:4e:d4:02:89:c2:fb:af:2b:7b: 4d:5d:a3:56:37:32:5d:f2:01:cf:78:bc:28:90:66: ca:13:6d:dd:50:3f:8e:27:38:c1:7e:79:7a:36:6e: 73:e0:af:30:ad:53:5a:68:a6:d5:d8:f5:d3:8e:ac: 28:da:6e:f0:ef:70:c7:30:cd:99:e6:ec:0f:ec:ee: a9:1a:fc:29:05:8f:68:ba:a5:a7:c8:55:81:cb:b6: ad:98:56:ac:4a:ab:77:29:a9:db:6f:2e:e7:40:0c: e7:ae:66:9d:c5:0e:2a:f3:35:ff:80:aa:db:c9:b6: 04:d9:b4:14:f8:0b:d5:f8:34:ad:71:9e:38:0d:ef: ec:23:48:3d:0e:aa:9e:7c:72:5c:e7:f6:74:e4:a7: ac:19:7d:2a:b3:45:7c:c1:47:2c:58:d0:4a:7f:12: a8:17:15:bf:9b:ff:ba:ce:3e:06:64:83:95:d2:65: 66:86:ea:17:df:bb:d3:8e:f7:c7:61:ff:ba:41:14: d6:23:9c:ff:ea:62:33:fe:c4:04:88:5f:fc:6c:0c: 22:f8:5a:2b:19:21:49:10:39:88:44:2d:ad:34:64: 17:67:4b:d2:4a:51:62:26:67:ff:04:4f:b8:0f:23: 92:bf:d0:8c:42:39:4e:bb:9b:c5:5e:d9:e7:70:3f: 44:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:40:D5:53:6E:A6:25:47:F9:96:E3:94:20:3B:8A:CD:60:24:3A:E0 X509v3 Authority Key Identifier: keyid:9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:09:69:e1:77:06:91:c1:48:8f:b0:48:e7:4f:71:c2:67:7b: a8:3b:e9:71:1a:54:d6:62:a2:3f:ff:99:d0:5c:69:e1:4b:68: 99:e4:7a:5e:3c:b6:95:00:19:e7:e9:3a:eb:d1:8a:b3:ec:a8: 31:8a:99:ea:b3:c2:9f:6a:10:69:fe:9f:a0:4c:eb:90:30:b0: 96:3b:6d:9e:89:14:41:d2:c4:f6:ea:91:38:62:5d:1c:a4:42: 08:95:75:35:fd:2f:48:90:08:e3:3b:eb:5b:7c:13:0d:e6:d0: e3:1d:1d:76:92:77:39:49:27:63:b5:03:91:cc:a9:6e:2f:50: 8d:98:f3:b1:f1:da:22:10:b7:5b:48:e4:00:e6:1e:65:d2:6c: 6a:81:08:09:97:1d:45:03:7b:2e:11:0f:61:55:6d:1d:07:b9: f9:ba:75:ca:bf:8d:06:18:db:74:c4:00:a8:a0:3c:e1:5c:79: 73:16:12:00:71:1b:b1:00:c9:4f:11:10:73:7d:98:52:5a:fe: 9c:11:6e:1f:3f:37:fa:d7:d0:61:22:c5:5b:5a:53:07:d0:fd: 5a:ed:ea:0d:9c:dc:75:0e:07:2a:16:85:77:57:5e:75:93:5d: 45:20:41:21:58:66:a3:2b:1a:5d:32:0f:6f:0e:0a:e4:54:06: 73:87:63:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCNjgxMTAvBgNVBAUTKDlBQ0I4MDY2NjNGQjBGQ0Y2RUJDNDNDMDEwQjkzNUUw NTIxNEZDOUYwHhcNMjUwODA4MjA0MjQ0WhcNMjUwODE1MjA0MjQ0WjAYMRYwFAYD VQQDEw02ODk2NjE0NC04NjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmjed2hO1AKJwvuvK3tNXaNWNzJd8gHPeLwokGbKE23dUD+OJzjBfnl6Nm5z 4K8wrVNaaKbV2PXTjqwo2m7w73DHMM2Z5uwP7O6pGvwpBY9ouqWnyFWBy7atmFas Sqt3Kanbby7nQAznrmadxQ4q8zX/gKrbybYE2bQU+AvV+DStcZ44De/sI0g9Dqqe fHJc5/Z05KesGX0qs0V8wUcsWNBKfxKoFxW/m/+6zj4GZIOV0mVmhuoX37vTjvfH Yf+6QRTWI5z/6mIz/sQEiF/8bAwi+ForGSFJEDmIRC2tNGQXZ0vSSlFiJmf/BE+4 DyOSv9CMQjlOu5vFXtnncD9ElwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNA1VNu piVH+ZbjlCA7is1gJDrgMB8GA1UdIwQYMBaAFJrLgGZj+w/PbrxDwBC5NeBSFPyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0I2OC81M0E3QjkyQ0Iw QTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tc3VBWm1QN0Q4OXV2RVBBRUxrMTRGSVVf SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21zdUFabVA3RDg5dXZFUEFFTGsxNEZJVV9KOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0I2OC81M0E3QjkyQ0IwQTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tc3VBWm1QN0Q4 OXV2RVBBRUxrMTRGSVVfSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfCWnhdwaRwUiPsEjnT3HCZ3uoO+lxGlTWYqI//5nQXGnhS2iZ5Hpe PLaVABnn6Trr0Yqz7Kgxipnqs8KfahBp/p+gTOuQMLCWO22eiRRB0sT26pE4Yl0c pEIIlXU1/S9IkAjjO+tbfBMN5tDjHR12knc5SSdjtQORzKluL1CNmPOx8doiELdb SOQA5h5l0mxqgQgJlx1FA3suEQ9hVW0dB7n5unXKv40GGNt0xACooDzhXHlzFhIA cRuxAMlPERBzfZhSWv6cEW4fPzf619BhIsVbWlMH0P1a7eoNnNx1DgcqFoV3V151 k11FIEEhWGajKxpdMg9vDgrkVAZzh2OH -----END CERTIFICATE-----Generated at Sun Aug 10 04:50:04 2025 by rpki-client