$ rpki-client -vvf rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft File: M50SzjfjomH20PRT5ZlQqEvI_qI.mft (raw, json) Hash identifier: +GsU6EswJICRW7BKKHX04Jm01+fQtwh3XFGMfkep8js= Subject key identifier: 93:60:DF:1A:E6:27:10:5D:66:FC:A9:F3:AB:6A:D2:0A:5A:A0:E0:1B Authority key identifier: 33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2 Certificate issuer: /CN=A912D20C/serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2 Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft Manifest number: 01E2 Signing time: Tue 09 Sep 2025 02:40:14 +0000 Manifest this update: Tue 09 Sep 2025 02:40:14 +0000 Manifest next update: Tue 16 Sep 2025 02:40:14 +0000 Files and hashes: 1: M50SzjfjomH20PRT5ZlQqEvI_qI.crl (hash: 3QBOFE2j5PPUj4BY+9XO9Xa9cs+uGa74tryh7U/I2zM=) 2: AC623530A86211ED9ED67945C4F9AE02.roa (hash: MyxZujcbakOxBmEwfvS0Za/TiquqSe0s4Vw8//EffqM=) 3: ABCAF01CA86211ED9ED67945C4F9AE02.roa (hash: pCFkiRXMRg9FOPKtz2Gf1bOU3S2ZHbxwwV0mMwR4Ado=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D20C, serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2 Validity Not Before: Sep 9 02:40:14 2025 GMT Not After : Sep 16 02:40:14 2025 GMT Subject: CN=68bf938e-29c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e2:1b:06:1d:bd:f2:ea:8a:ea:5e:0f:fa:6e: 1c:4f:89:76:d5:ec:ab:5f:0c:f5:70:5c:5b:b5:91: 75:79:ef:f7:46:6a:b7:28:2b:c5:cb:5d:b3:a6:85: a9:1e:49:22:0d:93:8d:2e:3a:a6:8f:a3:bc:b3:41: f0:28:cd:27:db:ea:7c:4a:a9:9d:57:7a:20:04:6a: ed:d1:0b:e9:1d:71:22:9b:01:47:1b:bd:4a:09:5b: 65:c0:8b:9c:46:0d:5f:73:ca:77:59:16:1a:78:37: 4f:b9:dd:30:6f:69:3a:9e:da:35:36:3a:9e:c4:4c: 8b:5c:88:24:87:f3:fb:14:f4:e3:7a:fd:61:5f:86: f2:d7:f5:e5:dc:18:23:c6:81:30:7f:73:b8:fe:04: 08:97:7e:e8:b2:f5:2d:e6:64:1d:05:e2:2e:62:be: e8:7c:4e:d6:f0:d2:11:aa:e5:fb:88:de:e9:2a:f1: 2a:1b:bd:bc:9b:55:10:f9:e6:0b:9f:af:ac:14:22: ca:c4:b6:1d:52:f0:12:a7:82:7c:3f:a2:b1:02:fb: e9:63:29:7f:0a:04:a3:f0:94:49:46:fd:1e:76:d8: 56:8c:c3:a9:3d:ea:46:bc:9d:85:b4:47:85:3c:0b: 8f:05:87:5f:ca:8d:1d:57:3a:1d:e6:28:48:6d:7a: 4d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:60:DF:1A:E6:27:10:5D:66:FC:A9:F3:AB:6A:D2:0A:5A:A0:E0:1B X509v3 Authority Key Identifier: keyid:33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:e2:1d:35:b2:d7:21:df:1f:37:f5:28:a1:c4:a5:d9:2c:a2: d4:43:3b:7c:62:af:e7:98:2b:f8:0e:99:4c:a6:17:fe:a7:18: 87:d7:e5:0a:5d:ea:08:86:5a:f5:fd:b6:5d:6c:ff:53:39:f3: b1:70:22:31:e3:9c:41:9a:b3:c7:2c:71:57:ae:05:3f:32:0d: 99:b6:89:37:b4:97:a8:57:84:a1:15:d0:12:cf:fa:cc:c6:ef: 58:cf:ff:5f:c8:e5:da:02:14:0a:fa:3a:af:63:bb:7b:90:68: 00:2f:14:ff:37:e8:04:56:b5:26:41:7f:ce:2b:ef:ce:fa:49: 17:56:e2:14:31:17:3c:46:4e:2a:0f:34:0f:0b:65:fb:8e:74: 23:9a:55:6f:a8:24:c8:3b:b1:d6:23:e4:f5:f6:a5:8a:e2:c0: 89:6b:47:5e:40:8c:c1:3b:43:42:ed:2b:e7:e4:d2:d9:c3:27: e8:35:d1:fc:09:ce:56:b6:91:93:85:63:bd:6a:3c:de:f0:b6: 3e:a7:69:6a:af:25:4f:cc:f7:6b:5e:4c:36:b1:c0:8f:28:b7: 95:fe:bb:94:80:7d:45:73:dd:3a:ba:15:a9:92:18:79:93:cb: c9:76:e2:74:cd:44:aa:34:f1:f8:2e:53:e1:6f:6e:98:3a:2d: 89:27:ba:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQyMEMxMTAvBgNVBAUTKDMzOUQxMkNFMzdFM0EyNjFGNkQwRjQ1M0U1OTk1MEE4 NEJDOEZFQTIwHhcNMjUwOTA5MDI0MDE0WhcNMjUwOTE2MDI0MDE0WjAYMRYwFAYD VQQDEw02OGJmOTM4ZS0yOWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+IbBh298uqK6l4P+m4cT4l21eyrXwz1cFxbtZF1ee/3Rmq3KCvFy12zpoWp HkkiDZONLjqmj6O8s0HwKM0n2+p8SqmdV3ogBGrt0QvpHXEimwFHG71KCVtlwIuc Rg1fc8p3WRYaeDdPud0wb2k6nto1NjqexEyLXIgkh/P7FPTjev1hX4by1/Xl3Bgj xoEwf3O4/gQIl37osvUt5mQdBeIuYr7ofE7W8NIRquX7iN7pKvEqG728m1UQ+eYL n6+sFCLKxLYdUvASp4J8P6KxAvvpYyl/CgSj8JRJRv0edthWjMOpPepGvJ2FtEeF PAuPBYdfyo0dVzod5ihIbXpNlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNg3xrm JxBdZvyp86tq0gpaoOAbMB8GA1UdIwQYMBaAFDOdEs4346Jh9tD0U+WZUKhLyP6i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDIwQy9ENDBFRkY4RUE4 NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempmam9tSDIwUFJUNVpsUXFFdklf cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001MFN6amZqb21IMjBQUlQ1WmxRcUV2SV9xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDIwQy9ENDBFRkY4RUE4NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempmam9t SDIwUFJUNVpsUXFFdklfcUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw4h01stch3x839SihxKXZLKLUQzt8Yq/nmCv4DplMphf+pxiH1+UK XeoIhlr1/bZdbP9TOfOxcCIx45xBmrPHLHFXrgU/Mg2Ztok3tJeoV4ShFdASz/rM xu9Yz/9fyOXaAhQK+jqvY7t7kGgALxT/N+gEVrUmQX/OK+/O+kkXVuIUMRc8Rk4q DzQPC2X7jnQjmlVvqCTIO7HWI+T19qWK4sCJa0deQIzBO0NC7Svn5NLZwyfoNdH8 Cc5WtpGThWO9ajze8LY+p2lqryVPzPdrXkw2scCPKLeV/ruUgH1Fc906uhWpkhh5 k8vJduJ0zUSqNPH4LlPhb26YOi2JJ7qF -----END CERTIFICATE-----Generated at Thu Sep 11 01:11:04 2025 by rpki-client