$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft File: M5P50HCy5wlJrKKqzI5l6JDnQJk.mft (raw, json) Hash identifier: Oe9SmX/RSdiZtz/nWBx3aJB6qPb2JUfcLzFSGAkFdUg= Subject key identifier: 4B:7D:6F:AC:32:93:25:9A:E8:54:89:2F:31:F2:FC:CE:31:F4:8F:8A Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99 Certificate issuer: /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft Manifest number: A6 Signing time: Sun 11 May 2025 04:54:50 +0000 Manifest this update: Sun 11 May 2025 04:54:50 +0000 Manifest next update: Sun 18 May 2025 04:54:50 +0000 Files and hashes: 1: M5P50HCy5wlJrKKqzI5l6JDnQJk.crl (hash: Llp1s1rv/8jT9S4PbBurjIj2KQ0I3ch5lC7GfEuUZqk=) 2: 92F925C231F511EFA1744F0EC4F9AE02.roa (hash: ys7Tf3/LcQFVZYWL3i7WWzdqMmvmM++iU4ympKZhLhE=) 3: 81C87DDE6C8311EFB20D5276C4F9AE02.roa (hash: tsoBMusAYtzjMEQt6uZAdSSMkNs5iOHuJdHdIDa6SSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB72, serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099 Validity Not Before: May 11 04:54:50 2025 GMT Not After : May 18 04:54:50 2025 GMT Subject: CN=68202d9a-8bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:51:02:35:83:4c:bb:66:5b:47:8c:c5:13:6d: 9c:2c:28:72:32:10:bf:c7:03:f2:dc:b5:27:5d:53: fb:1a:81:f9:43:78:7f:ca:f0:8d:a7:ad:59:cf:0e: da:f1:cd:7a:ab:6c:15:b2:b0:56:87:e6:c8:9d:62: d4:d2:53:f2:ea:47:7f:7f:f1:8b:3f:d3:d7:87:db: 7d:46:b3:68:a3:48:f7:2e:ff:2b:4c:68:ac:4b:6e: ad:10:d6:00:b2:78:88:f8:b8:68:8b:53:5a:23:8d: 4f:22:09:b6:92:36:d2:ff:61:85:eb:1d:97:d8:7c: 68:7f:01:37:95:91:09:6b:6d:bf:c0:8c:d1:95:23: 01:76:ad:4d:f8:07:cb:db:45:26:69:c6:d4:bb:b0: c1:42:a8:9f:93:63:af:a9:fd:36:50:f3:7d:49:da: be:89:cc:c4:7a:35:7d:10:59:fd:8a:b3:bc:db:da: a0:2f:34:89:be:07:93:84:b5:7a:e7:6f:2c:2f:65: 62:4d:38:ab:6a:86:76:73:71:ea:74:fa:cf:f5:94: cb:5f:8c:d5:28:62:83:8f:07:c8:66:3b:18:a3:47: 05:a7:5c:d0:83:12:e5:63:a2:e8:5b:12:3d:13:46: 1e:b7:08:f1:4f:36:2f:1e:e8:c2:de:d4:c0:5c:23: b0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7D:6F:AC:32:93:25:9A:E8:54:89:2F:31:F2:FC:CE:31:F4:8F:8A X509v3 Authority Key Identifier: keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:8e:b9:2a:6c:de:f4:37:28:90:6f:91:44:d5:4a:6f:d3:1d: 48:2e:4a:8f:76:18:9d:b3:9d:15:a7:b6:c9:06:95:e1:b9:03: a8:c1:66:57:b7:2b:08:a3:bf:fd:fd:4d:b0:7b:eb:c8:75:12: 8c:18:3d:9d:a8:ef:3e:1d:67:e3:aa:47:d8:e0:c8:52:9a:07: 39:bf:d9:29:8b:e1:65:9f:cc:a7:69:b9:83:25:dd:63:6a:b7: bc:eb:3a:4b:45:ab:b4:32:17:15:11:8e:97:08:8c:9f:ff:bc: 49:8d:c9:b6:83:87:81:97:b4:63:0f:dc:6b:0e:61:c5:ea:ba: 29:04:b0:fd:b8:ec:1f:c5:ac:88:6b:6b:7d:07:1b:77:44:d1: 1c:b8:6b:f0:90:28:5f:a9:8c:88:ce:e9:67:91:61:9f:d8:59: 16:79:88:a0:36:1a:1f:15:52:69:e0:38:d0:01:89:54:d2:18: 08:05:e1:4e:7d:5f:01:20:6e:c0:4f:25:28:4e:46:81:7c:dc: c1:49:06:6b:37:4a:e5:c7:a3:e5:e5:a6:ea:5f:63:98:03:9e: 7f:7f:6c:f9:4a:6c:21:ae:ae:8a:7f:b1:3b:67:1f:2b:39:a8: 32:1b:38:c9:cb:f4:54:45:00:04:ca:f6:3d:10:0a:4b:6f:bc: 46:be:19:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCNzIxMTAvBgNVBAUTKDMzOTNGOUQwNzBCMkU3MDk0OUFDQTJBQUNDOEU2NUU4 OTBFNzQwOTkwHhcNMjUwNTExMDQ1NDUwWhcNMjUwNTE4MDQ1NDUwWjAYMRYwFAYD VQQDEw02ODIwMmQ5YS04YmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVECNYNMu2ZbR4zFE22cLChyMhC/xwPy3LUnXVP7GoH5Q3h/yvCNp61Zzw7a 8c16q2wVsrBWh+bInWLU0lPy6kd/f/GLP9PXh9t9RrNoo0j3Lv8rTGisS26tENYA sniI+Lhoi1NaI41PIgm2kjbS/2GF6x2X2HxofwE3lZEJa22/wIzRlSMBdq1N+AfL 20UmacbUu7DBQqifk2Ovqf02UPN9Sdq+iczEejV9EFn9irO829qgLzSJvgeThLV6 528sL2ViTTiraoZ2c3HqdPrP9ZTLX4zVKGKDjwfIZjsYo0cFp1zQgxLlY6LoWxI9 E0YetwjxTzYvHujC3tTAXCOwwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEt9b6wy kyWa6FSJLzHy/M4x9I+KMB8GA1UdIwQYMBaAFDOT+dBwsucJSayiqsyOZeiQ50CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI3Mi84NjExRTYyRTMx RjQxMUVGQUU5MUEwMENDNEY5QUUwMi9NNVA1MEhDeTV3bEpyS0txekk1bDZKRG5R SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001UDUwSEN5NXdsSnJLS3F6STVsNkpEblFKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REI3Mi84NjExRTYyRTMxRjQxMUVGQUU5MUEwMENDNEY5QUUwMi9NNVA1MEhDeTV3 bEpyS0txekk1bDZKRG5RSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpjrkqbN70NyiQb5FE1Upv0x1ILkqPdhids50Vp7bJBpXhuQOowWZX tysIo7/9/U2we+vIdRKMGD2dqO8+HWfjqkfY4MhSmgc5v9kpi+Fln8ynabmDJd1j are86zpLRau0MhcVEY6XCIyf/7xJjcm2g4eBl7RjD9xrDmHF6ropBLD9uOwfxayI a2t9Bxt3RNEcuGvwkChfqYyIzulnkWGf2FkWeYigNhofFVJp4DjQAYlU0hgIBeFO fV8BIG7ATyUoTkaBfNzBSQZrN0rlx6Pl5abqX2OYA55/f2z5Smwhrq6Kf7E7Zx8r OagyGzjJy/RURQAEyvY9EApLb7xGvhli -----END CERTIFICATE-----Generated at Sun May 11 14:53:31 2025 by rpki-client