$ rpki-client -vvf rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft File: c5PammDgEK2QIFHzC9pJc3T4UaQ.mft (raw, json) Hash identifier: fbc4JKvBOc5Uc/i9FqfIEIWBdDzG0YqJ9jzL9r0XAGI= Subject key identifier: 3D:20:A7:BE:94:C6:79:5E:09:A1:F1:2B:14:14:E5:9B:AA:D2:45:7B Authority key identifier: 73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4 Certificate issuer: /CN=A9182545/serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4 Certificate serial: 055B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft Manifest number: 0540 Signing time: Mon 02 Jun 2025 23:48:45 +0000 Manifest this update: Mon 02 Jun 2025 23:48:44 +0000 Manifest next update: Mon 09 Jun 2025 23:48:44 +0000 Files and hashes: 1: c5PammDgEK2QIFHzC9pJc3T4UaQ.crl (hash: Eg9cZeuNdTji3ruP1exi3vFEO5+6jmGsIpSpsVQxOYA=) 2: 58AAED74E1E211ED8F1ACF4DC4F9AE02.roa (hash: J4bjJ7hQ5fLz6+3zFmcF7l6WC9eO2YDHrGDEilJ+wvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 23:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1371 (0x55b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182545, serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4 Validity Not Before: Jun 2 23:48:44 2025 GMT Not After : Jun 9 23:48:44 2025 GMT Subject: CN=683e385c-a14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:36:98:9d:ac:2a:dd:18:5c:3f:e0:15:e4:96: 05:35:0b:22:35:c2:3a:d0:e3:a6:3a:b8:4f:1a:12: c2:12:3d:9b:d3:d0:0e:39:f6:35:95:c6:0b:43:0f: 05:48:ff:77:1e:af:aa:a7:65:59:50:72:9b:34:99: c2:de:d0:de:20:6b:f9:27:92:fa:a9:4a:ef:fa:35: c9:54:8f:5d:87:41:2b:de:7d:56:c6:fe:d7:43:40: 39:80:50:90:cf:93:8c:e8:1a:b6:45:44:9b:60:98: ef:12:06:b2:2f:72:a2:6c:0a:3b:7a:f7:c3:a1:cb: ed:0f:99:dc:a9:aa:0d:2f:3f:94:ff:ff:b3:84:c9: 78:76:c0:74:50:47:bf:8f:4c:cc:8b:d1:4a:60:e0: 04:ec:40:4d:b4:29:06:be:1c:4f:c4:6b:7a:6e:18: 5a:0c:66:86:74:24:0d:9a:6b:e6:94:c2:8f:b8:e3: 1e:86:23:0c:99:f2:52:b3:59:10:11:03:90:7d:03: b9:19:82:93:b7:f7:6a:02:db:9a:6f:52:44:c1:6d: ce:99:dd:d9:e9:b5:16:98:ab:dc:b7:a8:46:80:e5: c5:a2:cc:91:5c:a7:b6:95:e9:ef:22:6b:f0:0a:a8: b8:d9:af:8e:0f:23:fe:d5:83:c0:1f:20:f4:c8:f8: c0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:20:A7:BE:94:C6:79:5E:09:A1:F1:2B:14:14:E5:9B:AA:D2:45:7B X509v3 Authority Key Identifier: keyid:73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:79:27:ae:cc:5f:8a:7e:d3:a1:f2:52:52:d7:6a:f0:c0:0e: 50:c7:b2:dc:b2:2b:cf:74:bb:b6:4c:b4:c1:bf:3b:32:f9:50: d8:76:47:b6:fa:b1:66:78:65:05:ca:ea:6b:aa:f4:14:90:d2: a8:38:5e:b9:43:60:0c:b6:1e:d5:a2:6a:21:c3:5f:29:e0:70: 97:75:30:d9:58:11:67:1a:e9:2b:2a:4f:df:58:05:74:22:69: 83:0f:aa:ed:3c:68:82:de:ea:6a:70:a1:28:e6:18:a6:94:1b: 21:54:79:cc:e3:92:3c:e3:3b:b6:07:3d:a2:87:e5:50:28:c0: a8:c6:8a:9e:fd:8f:7c:ab:f3:34:1a:2c:d8:0e:34:56:3f:38: b8:f2:bd:b5:96:2b:a7:19:d6:0d:a6:79:56:1c:5e:e9:bf:b5: 3f:70:84:21:1f:78:56:63:f8:bb:21:8b:50:ab:e6:d3:0e:b6: 6b:bf:5d:21:91:a8:27:93:18:e1:52:4b:a9:d9:63:19:3a:72: 3b:b3:44:09:41:30:13:d7:95:35:d6:a5:52:bb:de:50:50:2b: bf:97:84:fb:6a:04:37:12:c2:64:ba:05:06:5b:e1:f7:ca:61: f2:f5:c7:dc:fe:93:ca:1b:d9:21:29:c3:c5:6f:32:23:c3:16: fb:41:86:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1NDUxMTAvBgNVBAUTKDczOTNEQTlBNjBFMDEwQUQ5MDIwNTFGMzBCREE0OTcz NzRGODUxQTQwHhcNMjUwNjAyMjM0ODQ0WhcNMjUwNjA5MjM0ODQ0WjAYMRYwFAYD VQQDEw02ODNlMzg1Yy1hMTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jaYnawq3RhcP+AV5JYFNQsiNcI60OOmOrhPGhLCEj2b09AOOfY1lcYLQw8F SP93Hq+qp2VZUHKbNJnC3tDeIGv5J5L6qUrv+jXJVI9dh0Er3n1Wxv7XQ0A5gFCQ z5OM6Bq2RUSbYJjvEgayL3KibAo7evfDocvtD5ncqaoNLz+U//+zhMl4dsB0UEe/ j0zMi9FKYOAE7EBNtCkGvhxPxGt6bhhaDGaGdCQNmmvmlMKPuOMehiMMmfJSs1kQ EQOQfQO5GYKTt/dqAtuab1JEwW3Omd3Z6bUWmKvct6hGgOXFosyRXKe2lenvImvw Cqi42a+ODyP+1YPAHyD0yPjAYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0gp76U xnleCaHxKxQU5Zuq0kV7MB8GA1UdIwQYMBaAFHOT2ppg4BCtkCBR8wvaSXN0+FGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjU0NS9COTBCQTE5MjAz MkExMUVDOEI0RkM4NEZDNEY5QUUwMi9jNVBhbW1EZ0VLMlFJRkh6QzlwSmMzVDRV YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1UGFtbURnRUsyUUlGSHpDOXBKYzNUNFVhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjU0NS9COTBCQTE5MjAzMkExMUVDOEI0RkM4NEZDNEY5QUUwMi9jNVBhbW1EZ0VL MlFJRkh6QzlwSmMzVDRVYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWeSeuzF+KftOh8lJS12rwwA5Qx7LcsivPdLu2TLTBvzsy+VDYdke2 +rFmeGUFyuprqvQUkNKoOF65Q2AMth7Vomohw18p4HCXdTDZWBFnGukrKk/fWAV0 ImmDD6rtPGiC3upqcKEo5himlBshVHnM45I84zu2Bz2ih+VQKMCoxoqe/Y98q/M0 GizYDjRWPzi48r21liunGdYNpnlWHF7pv7U/cIQhH3hWY/i7IYtQq+bTDrZrv10h kagnkxjhUkup2WMZOnI7s0QJQTAT15U11qVSu95QUCu/l4T7agQ3EsJkugUGW+H3 ymHy9cfc/pPKG9khKcPFbzIjwxb7QYYo -----END CERTIFICATE-----Generated at Wed Jun 4 00:07:30 2025 by rpki-client