$ rpki-client -vvf rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft File: M50SzjfjomH20PRT5ZlQqEvI_qI.mft (raw, json) Hash identifier: WtRYztXwcMCr14MMR1jJY/0GUdVzZTYCcU1Ez3mMAUc= Subject key identifier: 2A:2E:FD:7A:45:56:C9:73:9F:11:05:1B:3A:C2:6D:CD:D0:02:45:38 Authority key identifier: 33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2 Certificate issuer: /CN=A912D20C/serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft Manifest number: 01AE Signing time: Sat 31 May 2025 02:52:25 +0000 Manifest this update: Sat 31 May 2025 02:52:24 +0000 Manifest next update: Sat 07 Jun 2025 02:52:24 +0000 Files and hashes: 1: M50SzjfjomH20PRT5ZlQqEvI_qI.crl (hash: VynZB0nT5DjozDwYRf7FSWSpL3sTsx0Ve0hgDplorhg=) 2: AC623530A86211ED9ED67945C4F9AE02.roa (hash: MyxZujcbakOxBmEwfvS0Za/TiquqSe0s4Vw8//EffqM=) 3: ABCAF01CA86211ED9ED67945C4F9AE02.roa (hash: pCFkiRXMRg9FOPKtz2Gf1bOU3S2ZHbxwwV0mMwR4Ado=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D20C, serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2 Validity Not Before: May 31 02:52:24 2025 GMT Not After : Jun 7 02:52:24 2025 GMT Subject: CN=683a6ee8-47ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:48:36:4d:47:de:08:c9:91:ea:55:c2:4f:d3: be:5c:ac:a2:3d:a2:36:0e:72:16:cb:00:17:0d:01: d4:40:2b:5f:4a:19:0f:57:23:e3:2a:36:e9:1c:a6: 6e:19:e9:5e:3a:48:dc:23:e3:84:81:d1:a6:43:bd: f1:9a:39:e9:b3:31:22:3a:37:1a:48:cc:68:a9:b4: fd:af:bd:4f:73:5e:f7:b2:1a:a8:fb:41:4e:7c:d3: 8f:b9:4f:d9:02:6d:e4:48:23:7e:b0:ac:59:e1:d2: 3d:31:94:9b:3a:be:69:4a:8d:d8:b9:74:78:13:3a: 65:9f:fc:fe:52:7b:59:3c:03:d2:d5:59:19:b8:be: bf:c3:42:2e:95:68:6d:ac:64:17:f6:a1:e6:39:fe: d8:c3:00:56:69:c9:3d:da:68:22:fa:25:dd:7e:20: 05:cf:0e:31:f7:15:e7:43:c2:5c:5e:0a:5e:a4:69: 8a:90:93:4b:ac:38:9f:a1:a0:81:17:2b:33:47:c4: 7f:54:73:e8:3b:ad:dd:10:1e:5a:f2:8e:b9:0c:65: 7e:de:ac:06:22:44:33:64:d8:fa:3a:7b:27:34:de: b4:0c:87:79:f7:51:4d:ce:a1:e2:f4:36:63:03:53: 38:b0:62:e3:4a:bb:d0:9c:47:d3:32:1b:a7:2e:5e: 6c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2E:FD:7A:45:56:C9:73:9F:11:05:1B:3A:C2:6D:CD:D0:02:45:38 X509v3 Authority Key Identifier: keyid:33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:8a:cf:b3:7f:5f:b9:ae:f2:6b:18:fd:7b:47:f9:47:cc:e6: 34:e2:75:d6:6e:f7:0e:8d:b0:7b:33:0a:8d:f1:08:f5:df:ee: 40:88:21:6a:1f:2b:05:b8:a7:ff:ba:bf:86:a4:50:ca:77:7a: 56:3d:f0:ac:5e:e1:33:6a:91:e3:81:f8:ed:7a:90:72:83:0c: c0:95:4d:a3:23:9c:54:1f:29:31:b0:c8:56:a8:b7:cb:46:54: e5:a1:fb:d1:4f:2c:a6:52:b7:6e:3b:b5:6e:d3:68:a9:ae:32: 46:0e:e6:69:25:b5:24:0d:2c:b6:0f:b4:e1:10:f3:fa:c9:50: 93:fb:99:f7:9b:99:04:36:b5:5f:4e:2e:f9:e0:ee:fa:66:84: f9:40:c5:c6:c4:cc:88:29:83:02:cc:a0:89:3d:98:12:12:04: 55:39:be:f1:48:7a:32:22:7a:1e:af:21:99:ba:62:32:cb:52: 70:51:e9:a3:30:e8:71:2c:fe:bd:90:b4:8c:78:46:54:da:73: 11:75:f4:7c:c2:73:c4:a3:44:71:8a:1f:8f:32:11:41:4d:99: 59:f2:2d:b1:04:90:30:b4:6c:16:0d:f5:35:0e:a4:07:eb:15: 1e:52:b1:1a:4c:54:51:79:a9:7d:0e:b1:21:a1:b9:3e:ac:cd: 98:fc:a1:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQyMEMxMTAvBgNVBAUTKDMzOUQxMkNFMzdFM0EyNjFGNkQwRjQ1M0U1OTk1MEE4 NEJDOEZFQTIwHhcNMjUwNTMxMDI1MjI0WhcNMjUwNjA3MDI1MjI0WjAYMRYwFAYD VQQDEw02ODNhNmVlOC00N2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kg2TUfeCMmR6lXCT9O+XKyiPaI2DnIWywAXDQHUQCtfShkPVyPjKjbpHKZu GeleOkjcI+OEgdGmQ73xmjnpszEiOjcaSMxoqbT9r71Pc173shqo+0FOfNOPuU/Z Am3kSCN+sKxZ4dI9MZSbOr5pSo3YuXR4Ezpln/z+UntZPAPS1VkZuL6/w0IulWht rGQX9qHmOf7YwwBWack92mgi+iXdfiAFzw4x9xXnQ8JcXgpepGmKkJNLrDifoaCB FyszR8R/VHPoO63dEB5a8o65DGV+3qwGIkQzZNj6OnsnNN60DId591FNzqHi9DZj A1M4sGLjSrvQnEfTMhunLl5s+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCou/XpF VslznxEFGzrCbc3QAkU4MB8GA1UdIwQYMBaAFDOdEs4346Jh9tD0U+WZUKhLyP6i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDIwQy9ENDBFRkY4RUE4 NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempmam9tSDIwUFJUNVpsUXFFdklf cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001MFN6amZqb21IMjBQUlQ1WmxRcUV2SV9xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDIwQy9ENDBFRkY4RUE4NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempmam9t SDIwUFJUNVpsUXFFdklfcUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChis+zf1+5rvJrGP17R/lHzOY04nXWbvcOjbB7MwqN8Qj13+5AiCFq HysFuKf/ur+GpFDKd3pWPfCsXuEzapHjgfjtepBygwzAlU2jI5xUHykxsMhWqLfL RlTlofvRTyymUrduO7Vu02iprjJGDuZpJbUkDSy2D7ThEPP6yVCT+5n3m5kENrVf Ti754O76ZoT5QMXGxMyIKYMCzKCJPZgSEgRVOb7xSHoyInoeryGZumIyy1JwUemj MOhxLP69kLSMeEZU2nMRdfR8wnPEo0Rxih+PMhFBTZlZ8i2xBJAwtGwWDfU1DqQH 6xUeUrEaTFRReal9DrEhobk+rM2Y/KGj -----END CERTIFICATE-----Generated at Sat May 31 17:45:05 2025 by rpki-client