$ rpki-client -vvf rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft File: M50SzjfjomH20PRT5ZlQqEvI_qI.mft (raw, json) Hash identifier: GJ701Fzb7rLwpa9lKP6tjWZpG0ZHroye325e8RzOny0= Subject key identifier: 05:A9:AC:FA:13:A4:00:41:F9:B4:3E:5A:B8:EB:08:A4:8D:E2:3A:EF Authority key identifier: 33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2 Certificate issuer: /CN=A912D20C/serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2 Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft Manifest number: 01A7 Signing time: Thu 15 May 2025 02:41:46 +0000 Manifest this update: Thu 15 May 2025 02:41:46 +0000 Manifest next update: Thu 22 May 2025 02:41:46 +0000 Files and hashes: 1: M50SzjfjomH20PRT5ZlQqEvI_qI.crl (hash: D2z/HT9p/gzoTB47L+SW4hBtLBwBhB4Z/nCYvYfntAU=) 2: AC623530A86211ED9ED67945C4F9AE02.roa (hash: MyxZujcbakOxBmEwfvS0Za/TiquqSe0s4Vw8//EffqM=) 3: ABCAF01CA86211ED9ED67945C4F9AE02.roa (hash: pCFkiRXMRg9FOPKtz2Gf1bOU3S2ZHbxwwV0mMwR4Ado=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D20C, serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2 Validity Not Before: May 15 02:41:46 2025 GMT Not After : May 22 02:41:46 2025 GMT Subject: CN=6825546a-19fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a6:69:3a:2e:aa:f1:3a:20:db:d4:57:bb:0a: a3:88:be:2e:ff:7e:ec:08:9e:0d:15:4b:5a:51:7c: 96:60:6b:37:ca:60:86:b6:20:50:e9:20:74:17:b0: 82:9b:27:af:7d:28:de:5b:27:bb:d8:b0:25:5f:0e: 17:fc:f3:57:93:d8:18:07:da:02:85:69:a8:11:20: 8e:a0:d8:d3:6a:9e:c6:9c:99:c6:67:47:60:db:00: a4:e9:ab:22:96:46:fa:6f:71:7e:c3:09:45:0a:66: 16:bd:ee:60:a4:43:a5:85:4b:c6:a2:0b:84:9e:b2: 18:ce:ce:11:68:97:8c:f9:c3:aa:06:be:9c:64:4a: d6:0d:ec:d6:d1:a0:d9:db:0c:19:f9:bd:d4:97:7a: 10:5d:52:2d:d5:28:34:18:b5:3b:8d:d3:55:13:b6: 4a:56:9a:42:aa:18:02:c6:96:a5:3b:27:14:e7:6f: 01:ae:a2:8e:f2:c2:90:34:84:af:0d:25:21:69:a2: 5b:b3:65:f2:74:47:68:98:c7:e2:db:78:0e:a6:00: 27:f1:fa:1f:9b:3d:3f:95:73:1e:ae:9b:ea:c7:5e: 84:39:0a:df:e3:78:45:f7:8b:23:7b:e4:ed:c3:5c: 8b:50:37:76:6b:9f:21:fe:21:3a:5c:f2:c7:1a:b5: 95:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A9:AC:FA:13:A4:00:41:F9:B4:3E:5A:B8:EB:08:A4:8D:E2:3A:EF X509v3 Authority Key Identifier: keyid:33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ba:bd:cb:92:69:9c:6b:49:48:c9:2d:a8:7a:b0:2b:0b:cc: 92:c0:bc:f5:df:c5:38:0b:56:fc:08:40:28:11:18:4f:eb:ed: 5d:d1:36:ee:a8:b9:35:af:1d:7b:f8:45:8c:7b:e0:95:59:9e: d2:08:45:f5:d9:6c:69:4c:8b:95:c5:59:19:9f:b0:70:84:ee: d8:70:37:71:b2:2c:c2:8e:75:d5:09:e2:47:9f:7d:6c:d5:1a: 54:50:45:1e:2d:19:0e:9b:3d:59:59:14:1a:34:3a:5f:1d:28: 0e:00:37:44:8b:af:f3:52:29:ab:86:93:1c:7a:e7:75:c6:4d: 58:48:e2:56:5b:c8:64:ba:ce:07:f1:ed:9a:62:fc:d9:e1:59: 47:8d:b0:e4:dd:5b:8f:80:3e:cc:97:c6:60:05:e5:e4:43:36: 9a:17:00:14:e8:bb:19:1e:89:b7:f1:c5:94:e2:0d:92:06:d6: c2:54:b7:f5:bd:be:b6:1a:60:f2:c4:da:ef:f1:9b:a2:2b:fe: f0:77:f2:42:1f:69:e4:af:9d:9c:a6:95:dc:78:ad:b8:48:e0: c0:b8:aa:0e:5c:e0:b9:f2:a5:33:8e:d0:ad:74:c1:ed:b2:7a: 0d:40:28:ee:e2:84:3e:49:c3:17:b9:57:5b:6e:78:5c:33:6f: f0:33:b3:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQyMEMxMTAvBgNVBAUTKDMzOUQxMkNFMzdFM0EyNjFGNkQwRjQ1M0U1OTk1MEE4 NEJDOEZFQTIwHhcNMjUwNTE1MDI0MTQ2WhcNMjUwNTIyMDI0MTQ2WjAYMRYwFAYD VQQDEw02ODI1NTQ2YS0xOWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtaZpOi6q8Tog29RXuwqjiL4u/37sCJ4NFUtaUXyWYGs3ymCGtiBQ6SB0F7CC myevfSjeWye72LAlXw4X/PNXk9gYB9oChWmoESCOoNjTap7GnJnGZ0dg2wCk6asi lkb6b3F+wwlFCmYWve5gpEOlhUvGoguEnrIYzs4RaJeM+cOqBr6cZErWDezW0aDZ 2wwZ+b3Ul3oQXVIt1Sg0GLU7jdNVE7ZKVppCqhgCxpalOycU528BrqKO8sKQNISv DSUhaaJbs2XydEdomMfi23gOpgAn8fofmz0/lXMerpvqx16EOQrf43hF94sje+Tt w1yLUDd2a58h/iE6XPLHGrWV1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWprPoT pABB+bQ+WrjrCKSN4jrvMB8GA1UdIwQYMBaAFDOdEs4346Jh9tD0U+WZUKhLyP6i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDIwQy9ENDBFRkY4RUE4 NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempmam9tSDIwUFJUNVpsUXFFdklf cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001MFN6amZqb21IMjBQUlQ1WmxRcUV2SV9xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDIwQy9ENDBFRkY4RUE4NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempmam9t SDIwUFJUNVpsUXFFdklfcUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8ur3Lkmmca0lIyS2oerArC8ySwLz138U4C1b8CEAoERhP6+1d0Tbu qLk1rx17+EWMe+CVWZ7SCEX12WxpTIuVxVkZn7BwhO7YcDdxsizCjnXVCeJHn31s 1RpUUEUeLRkOmz1ZWRQaNDpfHSgOADdEi6/zUimrhpMceud1xk1YSOJWW8hkus4H 8e2aYvzZ4VlHjbDk3VuPgD7Ml8ZgBeXkQzaaFwAU6LsZHom38cWU4g2SBtbCVLf1 vb62GmDyxNrv8ZuiK/7wd/JCH2nkr52cppXceK24SODAuKoOXOC58qUzjtCtdMHt snoNQCju4oQ+ScMXuVdbbnhcM2/wM7Mf -----END CERTIFICATE-----Generated at Fri May 16 10:07:13 2025 by rpki-client