$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft File: M5P50HCy5wlJrKKqzI5l6JDnQJk.mft (raw, json) Hash identifier: J1PAd1t1MYzQ2a31lXqW9qBnXO9y4l/zV9EGR3Uwc2s= Subject key identifier: 0F:C9:B6:47:72:38:9A:06:E9:14:8B:D4:3F:E3:49:E3:99:49:6A:94 Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99 Certificate issuer: /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft Manifest number: DC Signing time: Sat 23 Aug 2025 05:39:51 +0000 Manifest this update: Sat 23 Aug 2025 05:39:50 +0000 Manifest next update: Sat 30 Aug 2025 05:39:50 +0000 Files and hashes: 1: M5P50HCy5wlJrKKqzI5l6JDnQJk.crl (hash: Ge3E048rT4RWvDSAmJzMjwvsvRmPnLZfcrWUsEoezAc=) 2: 92F925C231F511EFA1744F0EC4F9AE02.roa (hash: 4w86q6EWxPppGmN3WAH7cTrMdPvhFQ2gE3GzQQWS4ck=) 3: 81C87DDE6C8311EFB20D5276C4F9AE02.roa (hash: wTzR2Kl8HLux7RLKUCKwWDVl26livIquwtiZpHpO5LA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB72, serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099 Validity Not Before: Aug 23 05:39:50 2025 GMT Not After : Aug 30 05:39:50 2025 GMT Subject: CN=68a95426-1bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c5:03:d9:15:52:e7:75:69:8b:02:70:ce:9e: 0f:9e:fc:a2:db:6c:25:c8:f8:7e:13:a8:c4:c8:72: df:7b:28:0f:86:bb:de:38:ab:43:a6:8f:b8:ed:02: 97:2b:4f:59:62:ce:6b:7d:98:26:e7:e0:d7:9e:b2: 86:b2:90:e4:36:99:16:c3:44:6c:cf:d6:6a:9e:9f: ed:aa:d4:a3:b6:c2:a4:eb:43:6c:dc:4a:fa:e0:74: 83:e5:0b:24:81:89:b5:ca:a7:27:99:da:b3:1f:a8: 8c:31:4a:14:c2:7b:85:28:cc:d3:07:75:44:8e:6c: 83:87:b2:bd:d7:52:80:83:cf:ea:57:99:c8:7a:e5: 54:5a:09:31:cd:b6:c2:b3:5b:c6:96:9c:fa:3c:ef: 35:b2:ef:be:cf:62:c1:dd:92:ed:c1:35:96:e9:87: 4d:af:d0:bc:92:d9:ca:dc:f7:a2:c4:73:de:58:a9: de:43:6c:e6:cf:f7:8f:d4:c5:36:4e:d9:3a:6d:6a: d3:ee:42:71:4e:97:d8:ae:e5:78:b9:06:48:81:fe: 9f:7f:dc:c6:df:0e:36:c7:eb:d1:1c:53:54:5f:ed: 08:e2:46:9f:6c:3b:c0:3c:08:40:5f:ff:1a:c3:e2: e6:ac:3f:f8:b0:07:86:9d:5b:75:e6:5e:3d:bb:f5: e0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C9:B6:47:72:38:9A:06:E9:14:8B:D4:3F:E3:49:E3:99:49:6A:94 X509v3 Authority Key Identifier: keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:4c:84:50:c8:36:0f:07:93:f4:aa:df:de:a7:69:4a:61:d0: eb:ca:bd:8f:42:8f:3a:bf:38:75:97:74:21:ab:d9:a7:4c:a5: 72:19:14:bd:ba:74:29:f2:e9:7e:2d:6a:7d:5a:b8:88:20:20: de:68:e2:dc:75:99:ce:e6:b1:ce:cd:42:ab:ab:6b:e4:31:9f: 6a:52:37:cf:96:4d:c1:5a:19:0c:71:bf:8f:43:7d:58:41:d8: 32:d3:7d:eb:0e:62:cb:05:d9:5a:fa:37:51:7f:24:b7:59:90: 8f:40:79:76:d7:56:35:a3:cb:34:a8:0b:28:ba:fe:cb:2d:e5: ae:d1:5d:07:0e:77:15:76:6f:10:0b:e8:1f:53:3e:65:5b:79: 21:ef:9c:c2:bd:0a:81:71:a0:ab:5d:ac:36:11:38:95:09:93: cd:45:c7:0e:12:27:d0:7e:f6:fb:8f:3a:ca:d8:23:ec:9d:55: 0a:90:f4:a4:0f:57:eb:41:c8:28:73:d4:45:b7:26:58:16:48: bb:cb:a7:f5:e9:29:c4:85:3d:2a:07:26:2c:19:83:14:77:78: 52:c6:69:cf:63:86:4c:c7:4b:e4:57:b1:85:d0:af:ad:e6:97: 46:d3:52:58:06:7b:51:24:4a:0c:55:b9:5c:79:34:06:7a:8c: c5:31:b3:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCNzIxMTAvBgNVBAUTKDMzOTNGOUQwNzBCMkU3MDk0OUFDQTJBQUNDOEU2NUU4 OTBFNzQwOTkwHhcNMjUwODIzMDUzOTUwWhcNMjUwODMwMDUzOTUwWjAYMRYwFAYD VQQDEw02OGE5NTQyNi0xYmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8UD2RVS53VpiwJwzp4Pnvyi22wlyPh+E6jEyHLfeygPhrveOKtDpo+47QKX K09ZYs5rfZgm5+DXnrKGspDkNpkWw0Rsz9Zqnp/tqtSjtsKk60Ns3Er64HSD5Qsk gYm1yqcnmdqzH6iMMUoUwnuFKMzTB3VEjmyDh7K911KAg8/qV5nIeuVUWgkxzbbC s1vGlpz6PO81su++z2LB3ZLtwTWW6YdNr9C8ktnK3PeixHPeWKneQ2zmz/eP1MU2 Ttk6bWrT7kJxTpfYruV4uQZIgf6ff9zG3w42x+vRHFNUX+0I4kafbDvAPAhAX/8a w+LmrD/4sAeGnVt15l49u/XguwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/Jtkdy OJoG6RSL1D/jSeOZSWqUMB8GA1UdIwQYMBaAFDOT+dBwsucJSayiqsyOZeiQ50CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI3Mi84NjExRTYyRTMx RjQxMUVGQUU5MUEwMENDNEY5QUUwMi9NNVA1MEhDeTV3bEpyS0txekk1bDZKRG5R SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001UDUwSEN5NXdsSnJLS3F6STVsNkpEblFKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REI3Mi84NjExRTYyRTMxRjQxMUVGQUU5MUEwMENDNEY5QUUwMi9NNVA1MEhDeTV3 bEpyS0txekk1bDZKRG5RSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/TIRQyDYPB5P0qt/ep2lKYdDryr2PQo86vzh1l3Qhq9mnTKVyGRS9 unQp8ul+LWp9WriIICDeaOLcdZnO5rHOzUKrq2vkMZ9qUjfPlk3BWhkMcb+PQ31Y Qdgy033rDmLLBdla+jdRfyS3WZCPQHl211Y1o8s0qAsouv7LLeWu0V0HDncVdm8Q C+gfUz5lW3kh75zCvQqBcaCrXaw2ETiVCZPNRccOEifQfvb7jzrK2CPsnVUKkPSk D1frQcgoc9RFtyZYFki7y6f16SnEhT0qByYsGYMUd3hSxmnPY4ZMx0vkV7GF0K+t 5pdG01JYBntRJEoMVblceTQGeozFMbOF -----END CERTIFICATE-----Generated at Sat Aug 23 18:19:50 2025 by rpki-client