$ rpki-client -vvf rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft File: M50SzjfjomH20PRT5ZlQqEvI_qI.mft (raw, json) Hash identifier: yzRmit8kJdr4j/3HWvFr8/8mDObOM4J5madUXNnNdOA= Subject key identifier: 8F:0B:04:B4:7F:36:7B:26:77:F1:5B:AA:A6:B0:43:0A:7C:E3:B5:DD Authority key identifier: 33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2 Certificate issuer: /CN=A912D20C/serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2 Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft Manifest number: 01B5 Signing time: Fri 13 Jun 2025 02:08:19 +0000 Manifest this update: Fri 13 Jun 2025 02:08:18 +0000 Manifest next update: Fri 20 Jun 2025 02:08:18 +0000 Files and hashes: 1: M50SzjfjomH20PRT5ZlQqEvI_qI.crl (hash: RLNigT+wESVlyotWcE9eB1Wt12v3bjvcxQB27aFYI7A=) 2: AC623530A86211ED9ED67945C4F9AE02.roa (hash: MyxZujcbakOxBmEwfvS0Za/TiquqSe0s4Vw8//EffqM=) 3: ABCAF01CA86211ED9ED67945C4F9AE02.roa (hash: pCFkiRXMRg9FOPKtz2Gf1bOU3S2ZHbxwwV0mMwR4Ado=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D20C, serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2 Validity Not Before: Jun 13 02:08:18 2025 GMT Not After : Jun 20 02:08:18 2025 GMT Subject: CN=684b8813-20b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ea:ee:81:8d:33:95:b4:1e:41:4b:8a:c4:e2: 1d:d3:4a:d3:c1:f2:32:1c:e6:86:55:3f:f4:c5:3d: 63:ae:b2:b7:7e:a5:ba:69:28:03:5a:8e:d3:b0:ef: 5b:16:fb:0b:2f:ff:69:35:23:9e:64:a4:e0:3a:5c: eb:4a:d1:67:16:8c:f2:ad:50:f1:44:bc:75:9e:98: 32:a4:7c:7e:14:29:2c:21:90:d9:f2:06:04:37:bf: 3a:5a:6d:09:b4:38:a7:6c:21:60:97:67:43:a8:f3: 79:1f:bb:6e:a5:c7:42:80:33:ee:da:92:26:f0:5e: a2:e3:6f:65:dd:96:3a:75:5e:07:06:ee:08:14:3e: fa:e3:fc:a3:cf:f2:c9:e3:37:35:f2:9a:93:de:62: 68:5f:ae:d4:9f:6f:5f:80:2d:f3:ff:51:ff:4c:a7: 89:06:d9:79:ac:a2:b9:04:f9:29:74:c9:d0:09:09: b7:79:8a:98:37:34:33:38:a6:02:a7:c8:a3:49:b7: 57:11:02:5a:5a:3e:0a:be:67:79:22:cc:89:ca:9c: 8b:6e:65:f6:05:04:45:90:5f:6d:7c:1e:3d:f5:a9: 7b:03:22:aa:c4:62:be:df:91:d9:28:a1:d0:f1:7e: f7:b1:d9:88:a2:64:be:ec:0a:8a:ab:a0:91:e1:9d: 15:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0B:04:B4:7F:36:7B:26:77:F1:5B:AA:A6:B0:43:0A:7C:E3:B5:DD X509v3 Authority Key Identifier: keyid:33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:7f:29:31:bc:40:9a:fc:73:5a:f0:33:da:84:94:f9:0a:2f: c1:b8:81:16:4a:81:36:e8:a7:f7:ec:c2:14:c4:49:67:73:9a: cf:cf:87:e3:71:ee:25:fc:49:8c:20:40:8e:8a:0e:78:fa:ef: e0:4f:b3:b8:a2:29:b1:bc:fd:2e:69:06:0c:67:8d:b7:7b:96: 81:5e:8c:bf:33:13:ce:27:98:0a:ed:12:87:30:1b:53:05:5c: 17:4f:b0:d2:27:0e:e6:c5:9b:8b:49:49:e8:37:20:70:7f:dc: 36:23:33:65:b5:4d:b4:81:c0:9f:ea:7c:d0:2c:c7:23:0c:4f: 5b:8f:83:61:9d:fd:19:2d:12:7c:ef:38:ca:c1:62:03:f5:13: 1e:19:bd:94:ae:c8:58:01:de:15:e3:26:a9:dd:c8:ba:42:86: 9d:ee:91:6d:47:2f:ad:2e:ee:6a:79:ef:0c:92:b3:34:1f:23: 4b:9b:69:58:d5:6e:b0:f8:7b:4c:9a:1c:a5:1f:7a:b7:f5:8f: 6b:59:36:d4:60:64:04:9e:14:c1:37:3e:e4:01:4e:57:d6:e7: cb:39:1d:8e:6a:4d:7e:ff:fc:40:1d:9e:ff:a2:fc:93:ef:19: f7:f4:a5:5d:89:12:ea:01:64:58:7f:81:1a:aa:5d:a1:6b:bf: 63:84:a0:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQyMEMxMTAvBgNVBAUTKDMzOUQxMkNFMzdFM0EyNjFGNkQwRjQ1M0U1OTk1MEE4 NEJDOEZFQTIwHhcNMjUwNjEzMDIwODE4WhcNMjUwNjIwMDIwODE4WjAYMRYwFAYD VQQDEw02ODRiODgxMy0yMGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3erugY0zlbQeQUuKxOId00rTwfIyHOaGVT/0xT1jrrK3fqW6aSgDWo7TsO9b FvsLL/9pNSOeZKTgOlzrStFnFozyrVDxRLx1npgypHx+FCksIZDZ8gYEN786Wm0J tDinbCFgl2dDqPN5H7tupcdCgDPu2pIm8F6i429l3ZY6dV4HBu4IFD764/yjz/LJ 4zc18pqT3mJoX67Un29fgC3z/1H/TKeJBtl5rKK5BPkpdMnQCQm3eYqYNzQzOKYC p8ijSbdXEQJaWj4Kvmd5IsyJypyLbmX2BQRFkF9tfB499al7AyKqxGK+35HZKKHQ 8X73sdmIomS+7AqKq6CR4Z0VKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8LBLR/ Nnsmd/FbqqawQwp847XdMB8GA1UdIwQYMBaAFDOdEs4346Jh9tD0U+WZUKhLyP6i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDIwQy9ENDBFRkY4RUE4 NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempmam9tSDIwUFJUNVpsUXFFdklf cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001MFN6amZqb21IMjBQUlQ1WmxRcUV2SV9xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDIwQy9ENDBFRkY4RUE4NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempmam9t SDIwUFJUNVpsUXFFdklfcUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/fykxvECa/HNa8DPahJT5Ci/BuIEWSoE26Kf37MIUxElnc5rPz4fj ce4l/EmMIECOig54+u/gT7O4oimxvP0uaQYMZ423e5aBXoy/MxPOJ5gK7RKHMBtT BVwXT7DSJw7mxZuLSUnoNyBwf9w2IzNltU20gcCf6nzQLMcjDE9bj4Nhnf0ZLRJ8 7zjKwWID9RMeGb2UrshYAd4V4yap3ci6Qoad7pFtRy+tLu5qee8MkrM0HyNLm2lY 1W6w+HtMmhylH3q39Y9rWTbUYGQEnhTBNz7kAU5X1ufLOR2Oak1+//xAHZ7/ovyT 7xn39KVdiRLqAWRYf4Eaql2ha79jhKDW -----END CERTIFICATE-----Generated at Sat Jun 14 19:32:24 2025 by rpki-client