$ rpki-client -vvf rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft File: M50SzjfjomH20PRT5ZlQqEvI_qI.mft (raw, json) Hash identifier: +2TKsLS10FqUbqUFpl2190QO0IXAE8cxtpivS/S8AQY= Subject key identifier: C7:BA:24:0F:58:AB:02:DE:86:95:7F:F4:1E:44:60:EB:2F:5A:F6:42 Authority key identifier: 33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2 Certificate issuer: /CN=A912D20C/serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft Manifest number: 01C7 Signing time: Sat 19 Jul 2025 03:05:12 +0000 Manifest this update: Sat 19 Jul 2025 03:05:12 +0000 Manifest next update: Sat 26 Jul 2025 03:05:12 +0000 Files and hashes: 1: M50SzjfjomH20PRT5ZlQqEvI_qI.crl (hash: CI8rHghXRHnA+8XjEqTPMhAOhoQeDB0s5wdf9nViXxA=) 2: AC623530A86211ED9ED67945C4F9AE02.roa (hash: MyxZujcbakOxBmEwfvS0Za/TiquqSe0s4Vw8//EffqM=) 3: ABCAF01CA86211ED9ED67945C4F9AE02.roa (hash: pCFkiRXMRg9FOPKtz2Gf1bOU3S2ZHbxwwV0mMwR4Ado=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D20C, serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2 Validity Not Before: Jul 19 03:05:12 2025 GMT Not After : Jul 26 03:05:12 2025 GMT Subject: CN=687b0b68-96e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:40:9f:45:02:ab:ba:45:a4:30:9b:71:9e:cd: e3:12:a4:27:c6:e6:f1:1f:df:7e:35:84:ca:97:f8: f5:15:6f:b0:66:ee:8f:dd:47:8d:9b:6b:04:4f:c3: 5e:37:f2:6c:02:65:12:4c:b6:29:49:84:8a:a1:33: 2a:03:50:da:54:37:77:93:93:0e:7a:14:63:96:ef: 25:31:7f:a7:4f:90:12:b9:54:b0:7d:80:f3:69:18: 99:f0:20:be:e8:ce:8f:ac:0a:3a:9f:c8:e0:3d:a8: 82:03:29:8e:af:8f:03:b8:b9:63:e7:51:3a:78:1b: 13:32:54:06:75:af:4a:8a:8c:9f:f2:d2:d6:ac:1d: ee:41:41:56:5e:e1:73:d3:2c:75:45:d1:67:bf:34: 6d:f7:4b:16:ef:3d:59:36:17:a0:95:b7:e1:50:34: fe:2e:f2:9b:cb:bf:5f:18:2b:e6:4a:be:36:3b:55: 53:cd:8b:c0:d6:e4:da:4b:79:c1:e5:02:6a:ae:8e: 45:76:37:14:c5:e4:49:2e:80:8f:8e:be:ed:a7:7b: 89:43:04:52:8b:a9:54:94:91:f4:46:1b:61:13:58: f8:d2:a2:94:3a:36:fd:c2:1f:c2:d8:2a:b6:e7:5c: d7:2a:75:7e:ef:f9:ee:dd:2b:3f:50:90:ee:f8:dd: d1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:BA:24:0F:58:AB:02:DE:86:95:7F:F4:1E:44:60:EB:2F:5A:F6:42 X509v3 Authority Key Identifier: keyid:33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:ec:4d:ba:b0:c4:ea:36:8d:2c:35:97:38:29:3a:b3:13:ab: d2:7c:b8:5c:5e:00:6d:27:3a:a7:ca:11:95:a0:f1:69:70:99: af:29:7d:6b:6a:47:53:b1:ed:7d:b8:1f:f1:d3:0a:ac:b7:41: 7b:ac:1c:89:53:93:2a:19:40:b4:51:0a:65:22:80:9d:2e:cf: 94:4b:a4:27:dd:a7:ad:6b:84:b0:60:b2:93:c5:2a:58:6a:eb: 0e:47:84:3a:57:b3:87:57:29:2d:4a:f4:ac:01:1a:5a:3a:94: 47:b1:be:8a:45:65:b5:3e:11:67:ea:0c:6f:1e:92:35:4c:d5: 15:04:4c:89:08:7c:0b:9d:41:4b:b0:f0:e5:55:80:d7:57:ac: e0:df:8e:06:52:b3:f1:f5:d9:5b:ca:49:40:a5:54:c3:8b:8f: 58:a5:46:c9:32:7c:6c:18:b6:f8:35:f0:2a:92:23:7d:fc:c5: 86:c7:16:94:20:0d:51:ca:1b:b2:9c:a8:ef:9e:84:31:ac:23: ac:23:91:4c:06:77:39:6e:dc:24:b2:ed:27:7d:e4:7c:e4:56: a2:27:ea:72:e1:7f:87:2d:b9:77:2b:84:ec:6f:0c:fb:49:2a: dd:bb:e4:f1:54:49:d5:19:f6:23:4f:50:9d:ad:4f:52:19:f7: 62:29:4d:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQyMEMxMTAvBgNVBAUTKDMzOUQxMkNFMzdFM0EyNjFGNkQwRjQ1M0U1OTk1MEE4 NEJDOEZFQTIwHhcNMjUwNzE5MDMwNTEyWhcNMjUwNzI2MDMwNTEyWjAYMRYwFAYD VQQDEw02ODdiMGI2OC05NmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0CfRQKrukWkMJtxns3jEqQnxubxH99+NYTKl/j1FW+wZu6P3UeNm2sET8Ne N/JsAmUSTLYpSYSKoTMqA1DaVDd3k5MOehRjlu8lMX+nT5ASuVSwfYDzaRiZ8CC+ 6M6PrAo6n8jgPaiCAymOr48DuLlj51E6eBsTMlQGda9Kioyf8tLWrB3uQUFWXuFz 0yx1RdFnvzRt90sW7z1ZNheglbfhUDT+LvKby79fGCvmSr42O1VTzYvA1uTaS3nB 5QJqro5FdjcUxeRJLoCPjr7tp3uJQwRSi6lUlJH0RhthE1j40qKUOjb9wh/C2Cq2 51zXKnV+7/nu3Ss/UJDu+N3REQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMe6JA9Y qwLehpV/9B5EYOsvWvZCMB8GA1UdIwQYMBaAFDOdEs4346Jh9tD0U+WZUKhLyP6i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDIwQy9ENDBFRkY4RUE4 NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempmam9tSDIwUFJUNVpsUXFFdklf cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001MFN6amZqb21IMjBQUlQ1WmxRcUV2SV9xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDIwQy9ENDBFRkY4RUE4NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempmam9t SDIwUFJUNVpsUXFFdklfcUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ7E26sMTqNo0sNZc4KTqzE6vSfLhcXgBtJzqnyhGVoPFpcJmvKX1r akdTse19uB/x0wqst0F7rByJU5MqGUC0UQplIoCdLs+US6Qn3aeta4SwYLKTxSpY ausOR4Q6V7OHVyktSvSsARpaOpRHsb6KRWW1PhFn6gxvHpI1TNUVBEyJCHwLnUFL sPDlVYDXV6zg344GUrPx9dlbyklApVTDi49YpUbJMnxsGLb4NfAqkiN9/MWGxxaU IA1RyhuynKjvnoQxrCOsI5FMBnc5btwksu0nfeR85FaiJ+py4X+HLbl3K4Tsbwz7 SSrdu+TxVEnVGfYjT1CdrU9SGfdiKU2I -----END CERTIFICATE-----Generated at Sun Jul 20 07:59:12 2025 by rpki-client