$ rpki-client -vvf rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft File: M50SzjfjomH20PRT5ZlQqEvI_qI.mft (raw, json) Hash identifier: 4OlZt1vJQErqRMBfMze3R6JCOSKEBnCJvktlCBczuIM= Subject key identifier: D9:0C:EF:CA:D1:44:D6:94:D6:CA:6E:56:72:7A:F0:61:36:18:AD:EC Authority key identifier: 33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2 Certificate issuer: /CN=A912D20C/serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2 Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft Manifest number: 01F8 Signing time: Sat 25 Oct 2025 05:43:10 +0000 Manifest this update: Sat 25 Oct 2025 05:43:09 +0000 Manifest next update: Sat 01 Nov 2025 05:43:09 +0000 Files and hashes: 1: M50SzjfjomH20PRT5ZlQqEvI_qI.crl (hash: zZ+uqXdlgojQClRfXlcvOn3cqwXfpX0u1EcfL7i1SXE=) 2: AC623530A86211ED9ED67945C4F9AE02.roa (hash: MyxZujcbakOxBmEwfvS0Za/TiquqSe0s4Vw8//EffqM=) 3: ABCAF01CA86211ED9ED67945C4F9AE02.roa (hash: pCFkiRXMRg9FOPKtz2Gf1bOU3S2ZHbxwwV0mMwR4Ado=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 05:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D20C, serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2 Validity Not Before: Oct 25 05:43:09 2025 GMT Not After : Nov 1 05:43:09 2025 GMT Subject: CN=68fc636d-a5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:76:f0:ce:ef:32:31:00:bc:d9:29:51:79:b4: 14:86:e2:06:18:b0:2f:b9:15:0f:7a:a0:bf:9c:23: d0:e3:16:f6:20:ce:f9:23:51:12:b2:f7:c8:59:6a: 55:47:20:41:0d:93:49:f7:35:e2:30:0d:ef:20:2f: 14:b8:1d:e1:b8:1d:6d:cb:bb:d0:5a:96:c2:81:81: f2:e6:d2:a0:b0:88:b0:9a:74:63:c4:89:8d:b4:70: b0:53:5d:52:c1:89:39:3b:59:0a:c7:41:6a:93:e1: a1:89:31:bf:6e:b9:a3:73:72:1f:c3:ec:1c:32:c5: 6f:0f:fd:7f:e6:5b:d0:a7:db:97:ab:01:dc:ef:55: e9:eb:a5:b7:41:c1:91:f0:11:c2:b4:82:1b:5e:6e: 7b:03:2b:6c:f3:77:a5:8f:de:8d:c3:8a:7f:38:6e: 58:a5:b0:4f:f4:ee:de:a4:b7:da:68:4d:26:e8:85: ae:a0:61:bb:ee:b5:95:c9:0b:74:0d:76:96:9c:45: 9c:7f:30:65:b2:62:ad:68:92:1b:17:a1:a2:0c:d2: 98:68:2b:8d:32:5d:f4:48:fe:11:7d:3d:26:3a:53: 95:62:c0:d3:2a:c9:72:d4:19:41:20:d1:6e:74:3f: 19:64:cd:97:3e:86:4b:07:5a:73:12:1e:ec:b7:a9: 52:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0C:EF:CA:D1:44:D6:94:D6:CA:6E:56:72:7A:F0:61:36:18:AD:EC X509v3 Authority Key Identifier: keyid:33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:62:7d:2c:c8:42:77:80:cf:7f:2f:c5:b8:77:f5:ab:8b:0c: f1:cf:cf:4f:a2:35:ba:0f:b1:2d:2a:98:c8:78:b9:28:1c:1a: c6:a8:59:8a:78:d4:75:1f:8f:30:6d:b9:64:51:5b:ff:72:c7: 13:de:af:e2:4b:b0:51:f3:6d:de:7b:9f:bf:9b:c2:d4:64:65: cd:ea:48:72:65:4a:a3:ad:21:88:43:20:aa:ff:67:f3:ea:ff: c0:9f:1b:69:bf:db:b2:35:82:31:ae:4d:93:fa:37:dd:06:cd: 61:5f:96:e9:6f:1a:4d:4b:a6:35:fb:a3:96:80:41:62:1e:8d: 4f:b7:d0:ae:a7:5a:37:02:a1:e0:d0:a0:15:0e:23:69:4a:c7: 21:bc:70:05:41:f5:75:97:d1:96:75:be:04:27:f2:7d:b7:ac: 0a:f2:eb:47:32:fa:4a:00:5d:a4:58:ae:55:96:68:bb:56:23: e8:ff:43:56:02:6d:be:24:d7:df:3f:fd:a2:90:bf:f0:9c:13: ae:f4:7b:74:17:27:85:8b:06:e7:c5:de:28:42:e9:cb:55:15: f7:81:56:78:69:54:15:51:11:55:6d:18:98:f8:51:68:42:55: 01:cd:a0:d8:f3:26:60:ac:76:ef:c6:34:7c:54:c7:9f:fe:a6: 2d:77:58:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQyMEMxMTAvBgNVBAUTKDMzOUQxMkNFMzdFM0EyNjFGNkQwRjQ1M0U1OTk1MEE4 NEJDOEZFQTIwHhcNMjUxMDI1MDU0MzA5WhcNMjUxMTAxMDU0MzA5WjAYMRYwFAYD VQQDEw02OGZjNjM2ZC1hNWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXbwzu8yMQC82SlRebQUhuIGGLAvuRUPeqC/nCPQ4xb2IM75I1ESsvfIWWpV RyBBDZNJ9zXiMA3vIC8UuB3huB1ty7vQWpbCgYHy5tKgsIiwmnRjxImNtHCwU11S wYk5O1kKx0Fqk+GhiTG/brmjc3Ifw+wcMsVvD/1/5lvQp9uXqwHc71Xp66W3QcGR 8BHCtIIbXm57Ayts83elj96Nw4p/OG5YpbBP9O7epLfaaE0m6IWuoGG77rWVyQt0 DXaWnEWcfzBlsmKtaJIbF6GiDNKYaCuNMl30SP4RfT0mOlOVYsDTKsly1BlBINFu dD8ZZM2XPoZLB1pzEh7st6lS6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkM78rR RNaU1spuVnJ68GE2GK3sMB8GA1UdIwQYMBaAFDOdEs4346Jh9tD0U+WZUKhLyP6i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDIwQy9ENDBFRkY4RUE4 NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempmam9tSDIwUFJUNVpsUXFFdklf cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001MFN6amZqb21IMjBQUlQ1WmxRcUV2SV9xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDIwQy9ENDBFRkY4RUE4NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempmam9t SDIwUFJUNVpsUXFFdklfcUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApYn0syEJ3gM9/L8W4d/Wriwzxz89PojW6D7EtKpjIeLkoHBrGqFmK eNR1H48wbblkUVv/cscT3q/iS7BR823ee5+/m8LUZGXN6khyZUqjrSGIQyCq/2fz 6v/Anxtpv9uyNYIxrk2T+jfdBs1hX5bpbxpNS6Y1+6OWgEFiHo1Pt9Cup1o3AqHg 0KAVDiNpSschvHAFQfV1l9GWdb4EJ/J9t6wK8utHMvpKAF2kWK5Vlmi7ViPo/0NW Am2+JNffP/2ikL/wnBOu9Ht0FyeFiwbnxd4oQunLVRX3gVZ4aVQVURFVbRiY+FFo QlUBzaDY8yZgrHbvxjR8VMef/qYtd1gm -----END CERTIFICATE-----Generated at Mon Oct 27 04:42:09 2025 by rpki-client