$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft File: M5P50HCy5wlJrKKqzI5l6JDnQJk.mft (raw, json) Hash identifier: dddxw4ruWOlUyZtEyYh/xY+gaKRU9AbHMdY8gjygjuU= Subject key identifier: 9D:81:9E:88:FB:54:16:E8:2E:E1:E6:2C:93:E3:F6:8B:DB:FB:9F:C5 Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99 Certificate issuer: /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft Manifest number: 9E Signing time: Fri 25 Apr 2025 05:14:41 +0000 Manifest this update: Fri 25 Apr 2025 05:14:40 +0000 Manifest next update: Fri 02 May 2025 05:14:40 +0000 Files and hashes: 1: M5P50HCy5wlJrKKqzI5l6JDnQJk.crl (hash: N9MRJXEZt9pFNnq13AZzGAaQR6CKouCrs3zASoAgMwo=) 2: 92F925C231F511EFA1744F0EC4F9AE02.roa (hash: ys7Tf3/LcQFVZYWL3i7WWzdqMmvmM++iU4ympKZhLhE=) 3: 81C87DDE6C8311EFB20D5276C4F9AE02.roa (hash: tsoBMusAYtzjMEQt6uZAdSSMkNs5iOHuJdHdIDa6SSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB72, serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099 Validity Not Before: Apr 25 05:14:40 2025 GMT Not After : May 2 05:14:40 2025 GMT Subject: CN=680b1a40-a149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:7d:d0:80:32:fa:63:dc:5e:01:a7:58:b3: 98:f0:73:47:d4:36:5e:b3:39:97:ef:3b:dd:06:80: 52:36:b6:ea:79:ac:c6:f5:ff:c1:b7:f4:34:41:14: 38:d4:ac:7e:bd:b2:d5:c9:42:4f:66:c7:a7:00:37: f9:3e:33:f2:df:f8:59:88:13:dc:1a:48:e8:5a:63: 7c:48:24:a4:78:c9:ab:67:84:7d:cb:71:ab:1c:60: e1:f0:38:8e:57:f3:f7:ed:27:72:97:bd:dd:ae:42: 86:11:ad:c8:69:b4:f7:a6:eb:2d:23:2a:a5:78:c7: e3:4e:f8:18:76:94:71:00:ed:c8:04:75:df:d4:10: a2:1b:7a:f9:36:0f:8c:da:2d:0e:63:54:88:6c:f8: 24:77:94:d6:44:9c:8d:b7:d9:21:a5:89:fe:67:d3: a9:a1:20:b3:a2:98:2e:14:b3:35:77:7d:a7:2a:f8: a7:b0:89:60:9a:5e:41:19:b8:22:79:fa:c5:f1:35: 61:ef:5b:ce:e3:2a:6b:9c:0b:1c:b3:13:1a:47:d5: dd:2f:03:8f:d8:5d:0b:1b:c6:9b:5c:80:ce:2a:f4: ab:87:05:f5:f0:d6:e5:39:f4:7b:49:95:ad:58:fc: 50:df:8f:11:4b:14:70:44:a3:6f:e4:42:2e:a9:a4: e2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:81:9E:88:FB:54:16:E8:2E:E1:E6:2C:93:E3:F6:8B:DB:FB:9F:C5 X509v3 Authority Key Identifier: keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:99:d9:5d:10:dd:6a:f4:fa:1f:f5:0c:28:f7:a2:11:ec:98: 20:6a:8c:ee:4f:b2:58:76:d0:9d:dc:cb:37:a9:bf:95:34:3a: c7:9a:52:ad:dc:5a:ee:bf:84:53:f1:ba:ad:d8:f2:cb:78:e1: c8:87:d8:c1:7e:7f:2c:4e:1c:af:bd:27:ab:6e:19:ab:08:07: 83:6a:ca:85:10:99:60:ad:b0:e2:fb:01:99:5e:4b:13:79:df: 3c:f1:bf:53:f8:a9:a2:fc:38:6d:78:49:ba:a2:1a:26:d6:ef: c0:af:51:2e:2a:51:51:bc:c5:51:2e:2f:ed:33:9e:76:3a:90: e4:0e:3c:19:b0:79:b1:e0:60:f7:70:34:49:42:27:c2:90:09: 9c:28:e0:e6:bc:c6:9b:77:e7:b5:97:45:74:25:1c:46:84:bb: e5:da:11:16:44:29:83:3c:45:ce:34:a9:90:23:40:22:ff:b7: c4:e8:e0:16:9d:6b:04:05:79:b6:2c:1b:3b:76:4e:1f:03:01: 9f:7f:f0:81:76:5b:0a:fe:04:d0:8d:f0:b2:a8:42:c7:28:4f: 5a:2a:1a:c6:5c:c9:49:0f:8c:ad:49:7c:54:6e:09:5b:61:f6: 9d:5e:93:d2:35:2b:da:7f:b2:0b:48:24:52:e5:e8:80:f8:91: bb:07:56:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCNzIxMTAvBgNVBAUTKDMzOTNGOUQwNzBCMkU3MDk0OUFDQTJBQUNDOEU2NUU4 OTBFNzQwOTkwHhcNMjUwNDI1MDUxNDQwWhcNMjUwNTAyMDUxNDQwWjAYMRYwFAYD VQQDEw02ODBiMWE0MC1hMTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrZ90IAy+mPcXgGnWLOY8HNH1DZeszmX7zvdBoBSNrbqeazG9f/Bt/Q0QRQ4 1Kx+vbLVyUJPZsenADf5PjPy3/hZiBPcGkjoWmN8SCSkeMmrZ4R9y3GrHGDh8DiO V/P37Sdyl73drkKGEa3IabT3pustIyqleMfjTvgYdpRxAO3IBHXf1BCiG3r5Ng+M 2i0OY1SIbPgkd5TWRJyNt9khpYn+Z9OpoSCzopguFLM1d32nKvinsIlgml5BGbgi efrF8TVh71vO4yprnAscsxMaR9XdLwOP2F0LG8abXIDOKvSrhwX18NblOfR7SZWt WPxQ348RSxRwRKNv5EIuqaTiuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2Bnoj7 VBboLuHmLJPj9ovb+5/FMB8GA1UdIwQYMBaAFDOT+dBwsucJSayiqsyOZeiQ50CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI3Mi84NjExRTYyRTMx RjQxMUVGQUU5MUEwMENDNEY5QUUwMi9NNVA1MEhDeTV3bEpyS0txekk1bDZKRG5R SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001UDUwSEN5NXdsSnJLS3F6STVsNkpEblFKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REI3Mi84NjExRTYyRTMxRjQxMUVGQUU5MUEwMENDNEY5QUUwMi9NNVA1MEhDeTV3 bEpyS0txekk1bDZKRG5RSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALmdldEN1q9Pof9Qwo96IR7JggaozuT7JYdtCd3Ms3qb+VNDrHmlKt 3Fruv4RT8bqt2PLLeOHIh9jBfn8sThyvvSerbhmrCAeDasqFEJlgrbDi+wGZXksT ed888b9T+Kmi/DhteEm6ohom1u/Ar1EuKlFRvMVRLi/tM552OpDkDjwZsHmx4GD3 cDRJQifCkAmcKODmvMabd+e1l0V0JRxGhLvl2hEWRCmDPEXONKmQI0Ai/7fE6OAW nWsEBXm2LBs7dk4fAwGff/CBdlsK/gTQjfCyqELHKE9aKhrGXMlJD4ytSXxUbglb YfadXpPSNSvaf7ILSCRS5eiA+JG7B1YR -----END CERTIFICATE-----Generated at Sat Apr 26 03:39:39 2025 by rpki-client