$ rpki-client -vvf rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft File: H50_mRdMazcKDlEAAMo997Z0DHs.mft (raw, json) Hash identifier: DZL3b5vH+hv0FKnUBrehHX/igLhHbbIZLGGRnXbq4cs= Subject key identifier: F8:D1:7B:2D:77:5C:A4:32:0B:2C:EC:30:6A:87:11:02:EA:E5:72:8B Authority key identifier: 1F:9D:3F:99:17:4C:6B:37:0A:0E:51:00:00:CA:3D:F7:B6:74:0C:7B Certificate issuer: /CN=A9154388/serialNumber=1F9D3F99174C6B370A0E510000CA3DF7B6740C7B Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft Manifest number: 7D Signing time: Sun 15 Jun 2025 05:48:25 +0000 Manifest this update: Sun 15 Jun 2025 05:48:24 +0000 Manifest next update: Sun 22 Jun 2025 05:48:24 +0000 Files and hashes: 1: H50_mRdMazcKDlEAAMo997Z0DHs.crl (hash: j2NRakDs2eT5DXJZxcU13thl1i3oL4GB/oH+vODsrlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.crl rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154388, serialNumber=1F9D3F99174C6B370A0E510000CA3DF7B6740C7B Validity Not Before: Jun 15 05:48:24 2025 GMT Not After : Jun 22 05:48:24 2025 GMT Subject: CN=684e5ea9-6181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bc:45:a1:34:6c:11:d3:12:b6:01:97:8e:a1: d2:7b:be:16:0d:ad:d7:00:36:16:95:23:03:c9:cc: cb:13:bf:6e:ba:69:bf:99:76:ac:e8:d7:fa:5e:7d: ee:2e:1b:77:15:ef:77:46:15:76:ae:33:62:ae:8c: 88:61:0b:30:88:bb:69:6d:52:81:09:58:74:fe:89: f6:83:4f:8a:3d:da:3b:a9:a8:92:a3:ea:dd:71:52: e5:a5:f7:94:a0:d5:e3:5e:89:3d:0d:89:bb:74:e4: a9:45:9d:0c:1d:97:0a:ab:b5:16:d0:3a:87:87:ad: 32:9a:74:16:0b:87:e8:2e:a5:dc:5b:e0:08:cd:58: 5f:5a:5a:b9:12:24:06:33:6f:83:7a:99:d9:3d:81: 25:00:bd:78:6a:f6:90:c5:49:74:51:04:23:08:22: 7c:7e:3e:84:4d:37:88:17:86:6b:01:11:f0:25:9c: f9:48:95:fb:1e:e5:6b:3c:7c:6e:45:16:11:9b:82: 41:5c:59:3c:4f:1b:bb:d7:9f:96:d7:6c:15:b5:b2: 31:f1:c4:37:ae:de:0d:48:03:99:23:3b:35:2b:a2: 5a:94:3e:87:1b:03:5a:e4:53:63:1b:ee:e1:7a:6a: e5:a3:91:7e:1b:15:1f:5b:4b:8b:99:c1:b7:b3:2f: 76:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D1:7B:2D:77:5C:A4:32:0B:2C:EC:30:6A:87:11:02:EA:E5:72:8B X509v3 Authority Key Identifier: keyid:1F:9D:3F:99:17:4C:6B:37:0A:0E:51:00:00:CA:3D:F7:B6:74:0C:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:75:8b:8c:11:df:41:63:ca:cb:55:5f:1b:e6:ac:77:f2:9a: 5d:fd:22:a9:5f:42:cf:a0:3f:f2:07:7f:90:f3:5d:65:35:67: 9d:d5:fd:8f:85:9d:8a:a5:2d:03:a9:dc:7f:6f:f8:9d:35:d9: d8:3a:92:69:a4:4d:34:f0:5a:f0:db:be:af:cd:02:61:45:aa: 92:1b:b7:be:3f:53:de:05:e9:bb:3e:0f:06:01:c9:86:9d:c2: f4:ef:d6:c0:19:43:06:e0:b4:88:6a:f2:2f:d1:5e:d5:44:3a: c8:2e:4f:35:3e:66:15:4c:8a:6b:f0:fa:51:3b:0e:52:98:06: c8:29:92:a2:12:c3:fe:6d:7d:c8:06:e1:2e:4c:de:be:78:39: 1f:9b:eb:c8:39:78:5b:60:0a:c2:35:51:6f:0e:0e:56:67:c1: cf:1f:67:25:ad:32:f1:67:3b:e5:80:7d:73:f6:84:48:32:1c: 93:de:88:3d:08:9c:9b:ff:46:d4:36:58:f4:19:66:03:20:ba: 24:c1:f7:7e:4a:9a:f6:e0:1f:8a:52:16:f5:42:cf:a7:b8:83: f3:28:7f:71:2d:0a:e5:27:58:4c:cc:14:27:46:1f:b8:d5:bf: bc:3b:14:dc:78:d5:06:0c:83:db:8a:61:87:29:b9:85:d8:1f: bb:93:a0:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDM4ODExMC8GA1UEBRMoMUY5RDNGOTkxNzRDNkIzNzBBMEU1MTAwMDBDQTNERjdC Njc0MEM3QjAeFw0yNTA2MTUwNTQ4MjRaFw0yNTA2MjIwNTQ4MjRaMBgxFjAUBgNV BAMTDTY4NGU1ZWE5LTYxODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGvEWhNGwR0xK2AZeOodJ7vhYNrdcANhaVIwPJzMsTv266ab+Zdqzo1/pefe4u G3cV73dGFXauM2KujIhhCzCIu2ltUoEJWHT+ifaDT4o92jupqJKj6t1xUuWl95Sg 1eNeiT0Nibt05KlFnQwdlwqrtRbQOoeHrTKadBYLh+gupdxb4AjNWF9aWrkSJAYz b4N6mdk9gSUAvXhq9pDFSXRRBCMIInx+PoRNN4gXhmsBEfAlnPlIlfse5Ws8fG5F FhGbgkFcWTxPG7vXn5bXbBW1sjHxxDeu3g1IA5kjOzUrolqUPocbA1rkU2Mb7uF6 auWjkX4bFR9bS4uZwbezL3bHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+NF7LXdc pDILLOwwaocRAurlcoswHwYDVR0jBBgwFoAUH50/mRdMazcKDlEAAMo997Z0DHsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0Mzg4LzQxMzlGODk2OEMz NzExRUY4MDkwMUMyRUM0RjlBRTAyL0g1MF9tUmRNYXpjS0RsRUFBTW85OTdaMERI cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSDUwX21SZE1hemNLRGxFQUFNbzk5N1owREhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 Mzg4LzQxMzlGODk2OEMzNzExRUY4MDkwMUMyRUM0RjlBRTAyL0g1MF9tUmRNYXpj S0RsRUFBTW85OTdaMERIcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKF1i4wR30FjystVXxvmrHfyml39IqlfQs+gP/IHf5DzXWU1Z53V/Y+F nYqlLQOp3H9v+J012dg6kmmkTTTwWvDbvq/NAmFFqpIbt74/U94F6bs+DwYByYad wvTv1sAZQwbgtIhq8i/RXtVEOsguTzU+ZhVMimvw+lE7DlKYBsgpkqISw/5tfcgG 4S5M3r54OR+b68g5eFtgCsI1UW8ODlZnwc8fZyWtMvFnO+WAfXP2hEgyHJPeiD0I nJv/RtQ2WPQZZgMguiTB935KmvbgH4pSFvVCz6e4g/Mof3EtCuUnWEzMFCdGH7jV v7w7FNx41QYMg9uKYYcpuYXYH7uToIA= -----END CERTIFICATE-----Generated at Sun Jun 15 10:03:32 2025 by rpki-client