$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft File: M5P50HCy5wlJrKKqzI5l6JDnQJk.mft (raw, json) Hash identifier: pqXMaauS7RTMmuRljJWPAt7zZ8EElZ06//vA870uRkI= Subject key identifier: 06:23:2E:35:3D:7A:AC:0E:3E:C0:20:D8:13:05:15:65:51:87:B3:B0 Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99 Certificate issuer: /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft Manifest number: F9 Signing time: Sun 19 Oct 2025 08:06:24 +0000 Manifest this update: Sun 19 Oct 2025 08:06:23 +0000 Manifest next update: Sun 26 Oct 2025 08:06:23 +0000 Files and hashes: 1: M5P50HCy5wlJrKKqzI5l6JDnQJk.crl (hash: UVx/JgkKX2sq9T8FTZQsVdipEADOmkR/PjF4yrs7c64=) 2: 92F925C231F511EFA1744F0EC4F9AE02.roa (hash: 4w86q6EWxPppGmN3WAH7cTrMdPvhFQ2gE3GzQQWS4ck=) 3: 81C87DDE6C8311EFB20D5276C4F9AE02.roa (hash: wTzR2Kl8HLux7RLKUCKwWDVl26livIquwtiZpHpO5LA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB72, serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099 Validity Not Before: Oct 19 08:06:23 2025 GMT Not After : Oct 26 08:06:23 2025 GMT Subject: CN=68f49bff-84ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:04:ac:74:70:20:0d:7f:27:64:41:dd:c6:19: 58:31:7e:7c:68:b3:ef:98:90:8b:fd:bc:33:06:bb: 07:06:e8:f8:f7:65:f3:1a:c6:67:36:cf:a4:a8:6e: aa:d4:db:7f:ff:99:b8:89:b6:8b:24:7d:b2:42:35: 33:18:68:a6:c0:ca:a7:f3:17:70:03:8b:b2:18:1c: b5:ff:f7:45:61:5e:3e:c7:96:ba:d0:fd:98:74:34: a2:eb:a7:9d:87:3a:36:74:d2:72:6e:6a:46:b6:59: c4:1c:9f:a1:fd:23:d7:c9:6c:9b:67:c6:44:db:e5: ec:f8:b7:cc:8f:95:8d:0e:07:82:e5:ff:50:67:3f: 50:23:e8:cc:a1:8f:d5:66:f2:05:7b:1b:de:04:87: d1:dd:d2:ba:94:4d:57:be:65:7d:c2:22:db:ed:f7: 1f:9d:89:6d:4a:0e:40:6f:89:fb:db:4c:63:34:52: a3:7d:55:65:c5:c0:a7:4e:14:24:9a:ae:c0:7f:9c: be:47:4b:f0:64:f7:79:bf:dc:08:a7:e1:32:33:db: b6:ad:08:70:d2:1c:0e:d5:52:13:e8:0e:90:7b:4d: 1d:81:84:ad:7e:58:0e:7b:52:23:3e:e7:1a:90:7a: df:e3:a9:b4:a6:b0:51:5e:bd:96:6a:b5:91:09:57: 86:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:23:2E:35:3D:7A:AC:0E:3E:C0:20:D8:13:05:15:65:51:87:B3:B0 X509v3 Authority Key Identifier: keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:75:cc:41:e8:54:17:db:01:40:c3:06:87:83:02:e4:ff:9d: 70:5c:12:0d:ff:e7:1b:9d:19:c2:19:e5:5e:03:3c:ec:1e:6f: 8e:d2:53:cf:d2:df:4c:b8:26:61:d8:c7:fa:b7:73:37:c8:cd: 8e:0a:20:dc:e3:de:63:66:3a:cc:06:96:0d:6e:12:fc:71:74: 3b:80:1f:24:56:67:e1:81:dc:7a:91:dc:69:f1:42:b0:64:ad: d6:94:18:54:42:10:d7:3b:6e:39:70:d7:f1:c7:e0:4d:d7:88: d2:b8:e3:e8:e2:92:12:4d:29:9f:fd:62:fe:be:6e:ef:21:a3: 8e:4a:46:30:f5:f7:45:2f:8d:08:bd:7c:71:ec:b0:ad:23:df: 56:4d:b0:ee:b7:c2:5b:cf:8f:44:4a:28:54:bf:6f:22:b6:f1: 99:8e:2d:a6:c0:0d:ba:97:f9:f7:68:e9:7e:4c:5f:5e:42:0b: 1a:7e:da:8b:88:92:5c:20:07:da:7a:8b:50:dd:27:03:d6:12: dd:d1:1d:25:e3:8b:3f:6d:82:3a:df:6a:40:80:f6:1c:5c:d9: 49:c6:37:61:2b:31:f7:28:01:95:92:8c:ef:d8:a7:5b:99:28: 2d:70:42:be:3d:4b:40:5c:e9:20:8f:0e:c6:b0:64:ed:1b:42: 8b:36:17:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCNzIxMTAvBgNVBAUTKDMzOTNGOUQwNzBCMkU3MDk0OUFDQTJBQUNDOEU2NUU4 OTBFNzQwOTkwHhcNMjUxMDE5MDgwNjIzWhcNMjUxMDI2MDgwNjIzWjAYMRYwFAYD VQQDEw02OGY0OWJmZi04NGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywSsdHAgDX8nZEHdxhlYMX58aLPvmJCL/bwzBrsHBuj492XzGsZnNs+kqG6q 1Nt//5m4ibaLJH2yQjUzGGimwMqn8xdwA4uyGBy1//dFYV4+x5a60P2YdDSi66ed hzo2dNJybmpGtlnEHJ+h/SPXyWybZ8ZE2+Xs+LfMj5WNDgeC5f9QZz9QI+jMoY/V ZvIFexveBIfR3dK6lE1XvmV9wiLb7fcfnYltSg5Ab4n720xjNFKjfVVlxcCnThQk mq7Af5y+R0vwZPd5v9wIp+EyM9u2rQhw0hwO1VIT6A6Qe00dgYStflgOe1IjPuca kHrf46m0prBRXr2WarWRCVeGOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYjLjU9 eqwOPsAg2BMFFWVRh7OwMB8GA1UdIwQYMBaAFDOT+dBwsucJSayiqsyOZeiQ50CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI3Mi84NjExRTYyRTMx RjQxMUVGQUU5MUEwMENDNEY5QUUwMi9NNVA1MEhDeTV3bEpyS0txekk1bDZKRG5R SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001UDUwSEN5NXdsSnJLS3F6STVsNkpEblFKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REI3Mi84NjExRTYyRTMxRjQxMUVGQUU5MUEwMENDNEY5QUUwMi9NNVA1MEhDeTV3 bEpyS0txekk1bDZKRG5RSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4dcxB6FQX2wFAwwaHgwLk/51wXBIN/+cbnRnCGeVeAzzsHm+O0lPP 0t9MuCZh2Mf6t3M3yM2OCiDc495jZjrMBpYNbhL8cXQ7gB8kVmfhgdx6kdxp8UKw ZK3WlBhUQhDXO245cNfxx+BN14jSuOPo4pISTSmf/WL+vm7vIaOOSkYw9fdFL40I vXxx7LCtI99WTbDut8Jbz49ESihUv28itvGZji2mwA26l/n3aOl+TF9eQgsaftqL iJJcIAfaeotQ3ScD1hLd0R0l44s/bYI632pAgPYcXNlJxjdhKzH3KAGVkozv2Kdb mSgtcEK+PUtAXOkgjw7GsGTtG0KLNhcO -----END CERTIFICATE-----Generated at Mon Oct 20 07:44:57 2025 by rpki-client