$ rpki-client -vvf rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft File: H50_mRdMazcKDlEAAMo997Z0DHs.mft (raw, json) Hash identifier: bv6UXL3YggmYsGfpNrSmoAmvrknNh0RmMzOkL/3GSy8= Subject key identifier: 1B:EA:62:7D:69:FD:DA:11:68:47:31:9B:96:B5:59:5F:7E:8D:CC:D3 Authority key identifier: 1F:9D:3F:99:17:4C:6B:37:0A:0E:51:00:00:CA:3D:F7:B6:74:0C:7B Certificate issuer: /CN=A9154388/serialNumber=1F9D3F99174C6B370A0E510000CA3DF7B6740C7B Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft Manifest number: A0 Signing time: Sat 23 Aug 2025 06:30:14 +0000 Manifest this update: Sat 23 Aug 2025 06:30:14 +0000 Manifest next update: Sat 30 Aug 2025 06:30:14 +0000 Files and hashes: 1: H50_mRdMazcKDlEAAMo997Z0DHs.crl (hash: 91eOx/qfz9WQ0frSypzYIGPaSAP1A8nfDkqLJKS6whY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.crl rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154388, serialNumber=1F9D3F99174C6B370A0E510000CA3DF7B6740C7B Validity Not Before: Aug 23 06:30:14 2025 GMT Not After : Aug 30 06:30:14 2025 GMT Subject: CN=68a95ff6-22a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ee:7e:33:06:ee:7e:26:d6:7f:b0:a7:a0:b6: 62:2b:df:cf:76:0f:ab:f7:90:18:90:16:60:63:a3: 76:68:e4:02:2a:59:93:28:65:b8:e0:ee:4f:21:e5: b2:77:97:26:af:d8:1b:7e:64:f1:c7:c7:91:8f:ef: 81:6d:4e:c2:35:9d:fb:c1:60:29:19:52:01:3a:47: a8:49:14:19:38:88:0e:fe:6e:9f:27:37:df:ab:b7: da:6a:14:05:af:6f:fb:1c:15:9b:60:a2:71:6f:b8: 37:e3:78:8f:b0:7f:fb:e9:73:e5:14:be:81:e5:49: 2d:a1:bd:cf:03:ef:68:8c:14:a0:1a:7d:63:d7:e2: 20:4c:7a:ca:4b:b8:e7:85:0e:f6:52:30:7f:c1:12: 37:8c:65:f3:10:4f:23:c1:60:df:00:b7:cc:f7:10: ad:c4:54:eb:95:83:84:86:df:3a:f1:3c:9d:83:a6: fe:a7:f8:a2:03:41:3c:58:e6:01:12:71:6d:3e:75: 26:9e:14:ce:d3:92:95:74:1d:b1:95:5a:26:c9:9f: 94:67:1d:fc:80:60:fd:9c:0a:e7:6e:89:25:84:9b: 53:8c:ee:fe:5a:57:23:d5:42:8e:d9:ce:d2:c0:09: 48:82:e2:7f:f2:a9:7f:9e:51:47:d0:03:eb:b4:be: 57:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EA:62:7D:69:FD:DA:11:68:47:31:9B:96:B5:59:5F:7E:8D:CC:D3 X509v3 Authority Key Identifier: keyid:1F:9D:3F:99:17:4C:6B:37:0A:0E:51:00:00:CA:3D:F7:B6:74:0C:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ac:e9:e3:6b:6c:83:58:eb:53:c6:b9:3e:66:1e:6a:bb:04: 94:04:35:0c:21:76:1f:a8:4d:0a:9c:64:91:d1:cc:f5:07:94: 0e:fe:88:08:d3:3d:a0:f0:4e:70:9d:88:be:bf:cd:68:6f:a7: 1e:15:42:af:9e:d4:31:a5:98:29:27:2b:55:d9:29:80:a3:e8: 5e:d5:cb:25:17:1d:cf:6d:09:d5:cd:d4:8d:49:a5:b7:7d:bb: 74:78:e2:73:84:41:03:7c:63:71:74:7c:83:ea:2f:c3:37:78: 87:4a:64:f0:73:e3:16:ee:56:93:9f:df:8a:13:a0:51:3b:74: a8:51:f6:4a:0f:e4:dd:79:9b:a2:e4:9f:8a:9c:d5:c8:80:85: 06:b7:cd:31:88:6c:8b:c3:17:5f:3b:01:ac:de:82:12:fa:04: b8:73:72:6d:76:fb:c1:89:d2:7f:c3:4d:88:62:61:e1:c2:43: 79:b6:5c:09:25:79:e6:35:ec:e5:99:d1:eb:35:43:fb:40:11: 4c:75:03:7c:15:f9:05:ca:a9:a8:76:3d:d9:b0:13:dc:3f:b6: ed:59:78:3c:d8:f8:ec:6f:5c:ec:c2:07:96:87:88:d3:32:0e: d7:13:81:46:82:57:ed:aa:de:07:2f:bb:c6:fc:b7:07:3d:a5: 43:14:d8:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzODgxMTAvBgNVBAUTKDFGOUQzRjk5MTc0QzZCMzcwQTBFNTEwMDAwQ0EzREY3 QjY3NDBDN0IwHhcNMjUwODIzMDYzMDE0WhcNMjUwODMwMDYzMDE0WjAYMRYwFAYD VQQDEw02OGE5NWZmNi0yMmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+5+MwbufibWf7CnoLZiK9/Pdg+r95AYkBZgY6N2aOQCKlmTKGW44O5PIeWy d5cmr9gbfmTxx8eRj++BbU7CNZ37wWApGVIBOkeoSRQZOIgO/m6fJzffq7faahQF r2/7HBWbYKJxb7g343iPsH/76XPlFL6B5Uktob3PA+9ojBSgGn1j1+IgTHrKS7jn hQ72UjB/wRI3jGXzEE8jwWDfALfM9xCtxFTrlYOEht868Tydg6b+p/iiA0E8WOYB EnFtPnUmnhTO05KVdB2xlVomyZ+UZx38gGD9nArnboklhJtTjO7+Wlcj1UKO2c7S wAlIguJ/8ql/nlFH0APrtL5XWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvqYn1p /doRaEcxm5a1WV9+jczTMB8GA1UdIwQYMBaAFB+dP5kXTGs3Cg5RAADKPfe2dAx7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM4OC80MTM5Rjg5NjhD MzcxMUVGODA5MDFDMkVDNEY5QUUwMi9INTBfbVJkTWF6Y0tEbEVBQU1vOTk3WjBE SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g1MF9tUmRNYXpjS0RsRUFBTW85OTdaMERIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDM4OC80MTM5Rjg5NjhDMzcxMUVGODA5MDFDMkVDNEY5QUUwMi9INTBfbVJkTWF6 Y0tEbEVBQU1vOTk3WjBESHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcrOnja2yDWOtTxrk+Zh5quwSUBDUMIXYfqE0KnGSR0cz1B5QO/ogI 0z2g8E5wnYi+v81ob6ceFUKvntQxpZgpJytV2SmAo+he1cslFx3PbQnVzdSNSaW3 fbt0eOJzhEEDfGNxdHyD6i/DN3iHSmTwc+MW7laTn9+KE6BRO3SoUfZKD+TdeZui 5J+KnNXIgIUGt80xiGyLwxdfOwGs3oIS+gS4c3JtdvvBidJ/w02IYmHhwkN5tlwJ JXnmNezlmdHrNUP7QBFMdQN8FfkFyqmodj3ZsBPcP7btWXg82Pjsb1zswgeWh4jT Mg7XE4FGglftqt4HL7vG/LcHPaVDFNg7 -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:55 2025 by rpki-client