$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft File: M5P50HCy5wlJrKKqzI5l6JDnQJk.mft (raw, json) Hash identifier: psVINjxmavE0Crd8uGDhobKuHE+IKG8TwYpXqO2oz5s= Subject key identifier: E3:17:8E:54:32:50:67:82:52:F7:0F:15:DA:21:40:23:93:0C:25:83 Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99 Certificate issuer: /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft Manifest number: D3 Signing time: Tue 05 Aug 2025 06:06:47 +0000 Manifest this update: Tue 05 Aug 2025 06:06:46 +0000 Manifest next update: Tue 12 Aug 2025 06:06:46 +0000 Files and hashes: 1: M5P50HCy5wlJrKKqzI5l6JDnQJk.crl (hash: cnTJY2d7K+lNdfGMmB+zFMdB+xVFfhdY3lKaFrFtt5I=) 2: 92F925C231F511EFA1744F0EC4F9AE02.roa (hash: 4w86q6EWxPppGmN3WAH7cTrMdPvhFQ2gE3GzQQWS4ck=) 3: 81C87DDE6C8311EFB20D5276C4F9AE02.roa (hash: wTzR2Kl8HLux7RLKUCKwWDVl26livIquwtiZpHpO5LA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB72, serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099 Validity Not Before: Aug 5 06:06:46 2025 GMT Not After : Aug 12 06:06:46 2025 GMT Subject: CN=68919f76-b4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:95:ac:91:7d:bb:8f:d1:f4:c6:1d:1a:5b:08: b5:71:21:a1:a4:d8:ca:c0:79:24:93:52:ba:3c:49: ed:b9:09:4a:26:6e:2b:f1:d8:8b:f4:e6:36:03:c6: e9:df:45:87:8c:05:eb:44:f8:77:a1:0b:cc:dc:80: 68:59:c2:09:d9:37:6c:8e:1e:66:95:95:bf:6c:fa: b5:94:16:e1:fc:86:03:e6:97:57:75:b9:b4:27:58: 09:6d:b0:e2:0e:cd:49:79:0e:bc:64:5d:ec:8c:d6: fb:32:e6:c4:41:fa:9b:eb:d6:16:ce:14:31:97:7c: 36:05:4b:70:b0:61:1d:db:38:db:b0:a4:b5:2e:1f: f8:bf:a5:92:8c:df:e8:91:b8:f9:a1:84:44:8c:7c: 6f:f6:22:58:ea:08:7f:78:b5:21:ad:b7:bf:f5:83: 85:f0:0b:73:85:8e:91:62:a8:98:29:3c:28:46:1c: 17:b0:b9:7f:4b:aa:99:8e:eb:69:70:d0:cc:ca:66: 5c:79:21:70:3d:c9:44:9f:0d:11:d5:15:30:06:c1: 97:f9:5a:56:92:0c:b3:ff:24:3a:55:9d:20:de:60: 24:9b:99:fa:61:c5:2b:74:b0:62:78:88:54:01:de: 95:45:81:39:e5:da:ff:75:7c:8e:27:47:9c:ce:4a: 65:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:17:8E:54:32:50:67:82:52:F7:0F:15:DA:21:40:23:93:0C:25:83 X509v3 Authority Key Identifier: keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:5a:d2:24:98:09:6e:9f:d8:b0:55:2f:c0:15:f2:45:ba:39: 22:c7:7e:09:01:ad:2a:ed:9c:52:46:3c:19:65:5b:2c:77:9f: de:f1:e3:74:2d:bb:c3:2c:3a:63:84:a3:0b:c2:e7:31:72:10: f1:ab:59:e5:b0:77:e8:ab:59:a8:57:9c:1d:c1:8a:fd:65:1d: b1:27:f3:4c:15:39:48:06:44:2b:a3:bb:f2:52:4e:62:1b:25: ed:9a:4e:82:88:25:18:7f:e5:6b:c6:3f:45:66:19:73:9a:d3: 95:76:24:d6:07:3f:16:a6:e9:e6:e5:d5:d9:6a:2b:a9:91:6d: c8:15:d2:b2:49:fe:01:39:d1:52:40:9e:db:d5:9e:f1:19:84: 68:58:5d:c3:ff:ab:94:31:39:f2:12:f5:c2:0f:25:e1:29:92: fc:b4:d2:1f:c7:65:c3:de:75:81:01:12:a0:ae:34:ff:17:1d: d5:9d:c7:1d:f3:0e:39:a9:5c:0c:85:0b:98:a2:c2:d3:d3:d1: 36:99:79:88:99:69:4d:55:97:08:1b:e9:c3:67:88:9f:82:ab: f0:dd:f2:0f:a4:d2:00:ac:6e:1e:f0:0e:5e:6b:f2:26:e3:4c: 38:b6:eb:70:94:7f:bc:b6:f8:67:47:c8:d8:fb:19:56:83:62: 1c:25:66:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCNzIxMTAvBgNVBAUTKDMzOTNGOUQwNzBCMkU3MDk0OUFDQTJBQUNDOEU2NUU4 OTBFNzQwOTkwHhcNMjUwODA1MDYwNjQ2WhcNMjUwODEyMDYwNjQ2WjAYMRYwFAYD VQQDEw02ODkxOWY3Ni1iNGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspWskX27j9H0xh0aWwi1cSGhpNjKwHkkk1K6PEntuQlKJm4r8diL9OY2A8bp 30WHjAXrRPh3oQvM3IBoWcIJ2Tdsjh5mlZW/bPq1lBbh/IYD5pdXdbm0J1gJbbDi Ds1JeQ68ZF3sjNb7MubEQfqb69YWzhQxl3w2BUtwsGEd2zjbsKS1Lh/4v6WSjN/o kbj5oYREjHxv9iJY6gh/eLUhrbe/9YOF8AtzhY6RYqiYKTwoRhwXsLl/S6qZjutp cNDMymZceSFwPclEnw0R1RUwBsGX+VpWkgyz/yQ6VZ0g3mAkm5n6YcUrdLBieIhU Ad6VRYE55dr/dXyOJ0eczkplHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMXjlQy UGeCUvcPFdohQCOTDCWDMB8GA1UdIwQYMBaAFDOT+dBwsucJSayiqsyOZeiQ50CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI3Mi84NjExRTYyRTMx RjQxMUVGQUU5MUEwMENDNEY5QUUwMi9NNVA1MEhDeTV3bEpyS0txekk1bDZKRG5R SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001UDUwSEN5NXdsSnJLS3F6STVsNkpEblFKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REI3Mi84NjExRTYyRTMxRjQxMUVGQUU5MUEwMENDNEY5QUUwMi9NNVA1MEhDeTV3 bEpyS0txekk1bDZKRG5RSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgWtIkmAlun9iwVS/AFfJFujkix34JAa0q7ZxSRjwZZVssd5/e8eN0 LbvDLDpjhKMLwucxchDxq1nlsHfoq1moV5wdwYr9ZR2xJ/NMFTlIBkQro7vyUk5i GyXtmk6CiCUYf+Vrxj9FZhlzmtOVdiTWBz8Wpunm5dXZaiupkW3IFdKySf4BOdFS QJ7b1Z7xGYRoWF3D/6uUMTnyEvXCDyXhKZL8tNIfx2XD3nWBARKgrjT/Fx3Vnccd 8w45qVwMhQuYosLT09E2mXmImWlNVZcIG+nDZ4ifgqvw3fIPpNIArG4e8A5ea/Im 40w4tutwlH+8tvhnR8jY+xlWg2IcJWbd -----END CERTIFICATE-----Generated at Thu Aug 7 04:40:18 2025 by rpki-client