$ rpki-client -vvf rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft File: M50SzjfjomH20PRT5ZlQqEvI_qI.mft (raw, json) Hash identifier: QyGfN9sv3CWtrblbSwl27h5b4729KLCr2tYaC0nhLpA= Subject key identifier: 20:69:30:72:BE:96:F8:7B:61:2B:CF:8D:99:F4:3D:00:CC:01:0F:54 Authority key identifier: 33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2 Certificate issuer: /CN=A912D20C/serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2 Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft Manifest number: 018F Signing time: Sat 29 Mar 2025 03:00:45 +0000 Manifest this update: Sat 29 Mar 2025 03:00:45 +0000 Manifest next update: Sat 05 Apr 2025 03:00:45 +0000 Files and hashes: 1: M50SzjfjomH20PRT5ZlQqEvI_qI.crl (hash: 1Pe/cSRIPpkGOo81AJQrE6eo7wTRMpZH/eC3YFEGy8M=) 2: AC623530A86211ED9ED67945C4F9AE02.roa (hash: MyxZujcbakOxBmEwfvS0Za/TiquqSe0s4Vw8//EffqM=) 3: ABCAF01CA86211ED9ED67945C4F9AE02.roa (hash: pCFkiRXMRg9FOPKtz2Gf1bOU3S2ZHbxwwV0mMwR4Ado=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D20C Validity Not Before: Mar 29 03:00:45 2025 GMT Not After : Apr 5 03:00:45 2025 GMT Subject: CN=67e7625d-375a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:db:00:1a:d4:97:17:83:b6:b5:eb:fa:5c:e2: cd:d2:57:e3:d3:c5:7c:b2:10:0d:ca:a3:a7:67:ad: 86:32:fc:36:6d:56:a6:65:64:6d:1a:b8:ac:d4:6f: 89:62:f2:f8:82:6e:f2:cc:d4:7e:05:02:14:88:15: c6:9a:5b:2c:77:b9:f8:81:e5:c6:fe:e9:9e:f2:3e: 15:8d:f5:64:51:be:2e:50:81:0f:c3:aa:12:c7:f9: 1a:65:df:21:3f:cb:3d:09:71:f1:38:dc:e1:b7:d3: 21:02:7b:6b:95:d6:97:7a:d9:eb:48:01:70:ac:97: 56:56:96:9d:d6:8e:d4:36:d8:f1:98:d6:6c:eb:69: 7f:36:76:70:ff:12:76:81:a5:eb:c5:c0:3b:e8:57: fe:3a:96:40:bf:e5:7a:9c:10:89:f6:81:66:0d:32: 17:00:dd:9d:a0:99:83:7a:ae:45:12:4f:86:5a:52: e7:0b:5d:6c:ae:8b:10:1d:87:1b:0b:78:c7:62:13: 48:69:60:5c:3f:ac:6d:e1:78:bd:a5:ef:f9:eb:08: 4a:f9:c9:9b:06:d3:a0:ab:df:9c:f9:3e:2d:a9:b7: 9c:ca:75:38:ac:78:c3:7e:e5:0e:b0:88:58:31:3e: 97:11:e0:86:43:59:49:17:62:13:eb:cd:e5:66:bd: 7a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:69:30:72:BE:96:F8:7B:61:2B:CF:8D:99:F4:3D:00:CC:01:0F:54 X509v3 Authority Key Identifier: keyid:33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d1:0c:2c:90:e6:a4:a5:66:c5:2d:01:2f:40:64:55:c0:c2: a2:7b:77:11:71:76:65:4e:59:b1:7b:35:d6:52:1f:37:a7:fe: 4e:4f:ac:29:64:92:b7:25:22:84:bc:bd:0e:4c:d8:4f:33:9f: d2:f8:6a:01:f7:35:3e:ce:6d:42:e7:5a:2c:bb:45:49:23:5b: 80:e9:e8:6c:3f:d5:20:be:ae:05:40:8c:3b:31:f4:6d:92:89: 14:dc:da:83:00:d3:76:8a:2d:bd:2e:68:30:7d:0c:d0:33:be: 62:08:4e:6e:04:60:bf:80:87:4b:a0:7c:0c:4e:86:e5:f6:15: d0:f7:8a:fd:3b:47:df:70:17:ff:30:6a:c6:3e:df:78:03:8d: 2f:a7:09:d8:25:44:3f:78:c7:59:4c:ec:ec:47:c8:4c:de:02: aa:f2:93:2e:7f:40:f7:52:30:ad:a3:50:59:50:b5:14:4b:b2: 95:c3:76:bc:13:dd:2d:ed:96:fb:f6:b2:69:0c:eb:93:50:f5: d9:49:1b:88:d6:79:4c:39:5c:e1:8c:bb:11:a8:d6:9e:9b:25: 0f:64:6a:93:d9:ab:aa:a2:b5:80:06:4a:28:df:83:92:8b:20: 78:72:ca:14:8a:de:5b:fa:24:54:f0:66:4d:e7:88:03:66:37: 0e:aa:00:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQyMEMxMTAvBgNVBAUTKDMzOUQxMkNFMzdFM0EyNjFGNkQwRjQ1M0U1OTk1MEE4 NEJDOEZFQTIwHhcNMjUwMzI5MDMwMDQ1WhcNMjUwNDA1MDMwMDQ1WjAYMRYwFAYD VQQDEw02N2U3NjI1ZC0zNzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNsAGtSXF4O2tev6XOLN0lfj08V8shANyqOnZ62GMvw2bVamZWRtGris1G+J YvL4gm7yzNR+BQIUiBXGmlssd7n4geXG/ume8j4VjfVkUb4uUIEPw6oSx/kaZd8h P8s9CXHxONzht9MhAntrldaXetnrSAFwrJdWVpad1o7UNtjxmNZs62l/NnZw/xJ2 gaXrxcA76Ff+OpZAv+V6nBCJ9oFmDTIXAN2doJmDeq5FEk+GWlLnC11srosQHYcb C3jHYhNIaWBcP6xt4Xi9pe/56whK+cmbBtOgq9+c+T4tqbecynU4rHjDfuUOsIhY MT6XEeCGQ1lJF2IT683lZr16QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBpMHK+ lvh7YSvPjZn0PQDMAQ9UMB8GA1UdIwQYMBaAFDOdEs4346Jh9tD0U+WZUKhLyP6i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDIwQy9ENDBFRkY4RUE4 NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempmam9tSDIwUFJUNVpsUXFFdklf cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001MFN6amZqb21IMjBQUlQ1WmxRcUV2SV9xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDIwQy9ENDBFRkY4RUE4NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempmam9t SDIwUFJUNVpsUXFFdklfcUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL0QwskOakpWbFLQEvQGRVwMKie3cRcXZlTlmxezXWUh83p/5OT6wp ZJK3JSKEvL0OTNhPM5/S+GoB9zU+zm1C51osu0VJI1uA6ehsP9Ugvq4FQIw7MfRt kokU3NqDANN2ii29LmgwfQzQM75iCE5uBGC/gIdLoHwMTobl9hXQ94r9O0ffcBf/ MGrGPt94A40vpwnYJUQ/eMdZTOzsR8hM3gKq8pMuf0D3UjCto1BZULUUS7KVw3a8 E90t7Zb79rJpDOuTUPXZSRuI1nlMOVzhjLsRqNaemyUPZGqT2auqorWABkoo34OS iyB4csoUit5b+iRU8GZN54gDZjcOqgBl -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:12 2025 by rpki-client