$ rpki-client -vvf rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft File: M50SzjfjomH20PRT5ZlQqEvI_qI.mft (raw, json) Hash identifier: ot3zFNPBZoEvuATK+ttfcVzv+0oHPuFyahTL+10r5xc= Subject key identifier: 8B:F7:A7:E7:4E:32:FB:3E:CA:9B:B8:E2:A9:4A:BF:B9:2D:39:B1:DE Authority key identifier: 33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2 Certificate issuer: /CN=A912D20C/serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2 Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft Manifest number: 01D9 Signing time: Sat 23 Aug 2025 02:49:29 +0000 Manifest this update: Sat 23 Aug 2025 02:49:28 +0000 Manifest next update: Sat 30 Aug 2025 02:49:28 +0000 Files and hashes: 1: M50SzjfjomH20PRT5ZlQqEvI_qI.crl (hash: R/sasU8kzFXvTcd57VElQ+/LO8PBFsZfJLN8163cpgg=) 2: AC623530A86211ED9ED67945C4F9AE02.roa (hash: MyxZujcbakOxBmEwfvS0Za/TiquqSe0s4Vw8//EffqM=) 3: ABCAF01CA86211ED9ED67945C4F9AE02.roa (hash: pCFkiRXMRg9FOPKtz2Gf1bOU3S2ZHbxwwV0mMwR4Ado=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D20C, serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2 Validity Not Before: Aug 23 02:49:28 2025 GMT Not After : Aug 30 02:49:28 2025 GMT Subject: CN=68a92c39-638b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fa:2f:e4:ce:7a:d1:d3:90:3f:03:ba:19:bf: d9:ba:3b:08:8f:65:b9:86:0a:99:9b:e1:32:c1:a6: 58:67:86:4c:96:50:1b:8e:ed:6a:eb:c8:5b:cf:29: 01:ae:d8:88:d5:15:f0:58:07:54:4e:3d:bb:87:83: 7d:21:8d:31:e8:83:9a:b8:f7:00:1a:78:86:3f:cf: 36:96:70:2f:d9:00:df:74:43:34:7b:e3:b7:de:3c: 27:76:71:c3:3d:56:83:67:3b:a8:9d:7e:db:d4:d4: 35:9c:c9:7c:11:b1:0a:09:c5:f6:9f:ea:d6:90:4a: 72:de:62:f2:cf:ae:9e:d1:7d:79:39:c3:5d:13:0a: e6:ac:53:a4:cd:f8:87:ac:ef:fc:83:2e:aa:ec:b6: 0e:c8:92:64:08:c9:1c:97:c0:cf:de:be:c0:af:51: 77:0d:a6:d8:6c:a2:39:a4:36:f6:66:9e:fd:ff:6d: 21:bd:bf:94:42:72:c2:8d:72:44:9e:51:ee:d8:c8: 53:82:e7:7d:c0:3e:c6:a5:e3:69:1a:0c:6a:1b:88: fc:06:8b:f8:49:8c:6a:ad:b3:f0:23:e2:76:9e:08: 35:f3:b5:31:78:ec:5c:87:d9:27:90:1a:8a:a7:04: 2f:73:62:ad:bb:04:9b:48:ad:24:dd:69:fa:21:7d: 4d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F7:A7:E7:4E:32:FB:3E:CA:9B:B8:E2:A9:4A:BF:B9:2D:39:B1:DE X509v3 Authority Key Identifier: keyid:33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3b:5f:65:a2:f0:5e:60:fc:ba:2f:19:52:10:72:41:ca:04: 2d:88:f8:17:1b:b6:88:f1:7a:a3:e6:f9:35:07:c3:0c:ba:c8: 8f:16:26:fd:c9:57:ce:1a:36:cf:0b:25:55:3c:3b:47:fc:8d: fc:e3:a1:73:67:53:e7:a5:86:b5:b3:ac:c1:fe:1f:91:de:50: 88:a1:9c:ac:9a:d7:09:aa:98:98:43:2e:95:ca:2c:4f:49:37: 79:46:27:b6:7f:aa:23:e6:bb:a9:45:c5:c7:b1:7f:22:fa:0d: b4:6d:ec:a0:9d:d0:70:8c:a2:ed:2b:fb:a1:bf:dc:78:ab:5e: 28:d1:b7:55:14:13:4d:34:74:63:7a:ae:b2:2a:49:99:7d:d3: 5d:d1:08:e8:c2:e6:69:6b:1e:38:25:f5:e3:dc:3b:c8:1e:05: 9a:3d:dc:ad:30:3e:02:16:cf:eb:e6:bb:51:16:2b:3f:c3:0e: 96:e2:86:8e:b3:8b:b2:61:c8:8f:0a:3d:f0:0d:42:39:ec:13: d1:f8:84:1a:02:b3:c7:9a:ee:d0:c4:6e:6a:7c:bc:70:97:4d: c3:b9:ad:8c:45:45:74:b8:d0:ed:00:5f:0c:cf:e0:8a:ab:ac: 97:fc:8d:de:f6:10:ce:4b:d2:51:5a:65:92:08:c3:f4:14:b9: 71:8c:6f:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQyMEMxMTAvBgNVBAUTKDMzOUQxMkNFMzdFM0EyNjFGNkQwRjQ1M0U1OTk1MEE4 NEJDOEZFQTIwHhcNMjUwODIzMDI0OTI4WhcNMjUwODMwMDI0OTI4WjAYMRYwFAYD VQQDEw02OGE5MmMzOS02MzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/ov5M560dOQPwO6Gb/ZujsIj2W5hgqZm+EywaZYZ4ZMllAbju1q68hbzykB rtiI1RXwWAdUTj27h4N9IY0x6IOauPcAGniGP882lnAv2QDfdEM0e+O33jwndnHD PVaDZzuonX7b1NQ1nMl8EbEKCcX2n+rWkEpy3mLyz66e0X15OcNdEwrmrFOkzfiH rO/8gy6q7LYOyJJkCMkcl8DP3r7Ar1F3DabYbKI5pDb2Zp79/20hvb+UQnLCjXJE nlHu2MhTgud9wD7GpeNpGgxqG4j8Bov4SYxqrbPwI+J2ngg187UxeOxch9knkBqK pwQvc2KtuwSbSK0k3Wn6IX1NpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIv3p+dO Mvs+ypu44qlKv7ktObHeMB8GA1UdIwQYMBaAFDOdEs4346Jh9tD0U+WZUKhLyP6i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDIwQy9ENDBFRkY4RUE4 NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempmam9tSDIwUFJUNVpsUXFFdklf cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001MFN6amZqb21IMjBQUlQ1WmxRcUV2SV9xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDIwQy9ENDBFRkY4RUE4NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempmam9t SDIwUFJUNVpsUXFFdklfcUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOO19lovBeYPy6LxlSEHJBygQtiPgXG7aI8Xqj5vk1B8MMusiPFib9 yVfOGjbPCyVVPDtH/I3846FzZ1PnpYa1s6zB/h+R3lCIoZysmtcJqpiYQy6VyixP STd5Rie2f6oj5rupRcXHsX8i+g20beygndBwjKLtK/uhv9x4q14o0bdVFBNNNHRj eq6yKkmZfdNd0QjowuZpax44JfXj3DvIHgWaPdytMD4CFs/r5rtRFis/ww6W4oaO s4uyYciPCj3wDUI57BPR+IQaArPHmu7QxG5qfLxwl03Dua2MRUV0uNDtAF8Mz+CK q6yX/I3e9hDOS9JRWmWSCMP0FLlxjG9U -----END CERTIFICATE-----Generated at Sat Aug 23 20:27:57 2025 by rpki-client