$ rpki-client -vvf rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft File: 5DMXblmum0dk6179BKQ2hWKrXiE.mft (raw, json) Hash identifier: 4uYWakoXjuS5CWEQOcWMZRLBNywsCEoKG/gjP5/T6fY= Subject key identifier: DC:F0:35:43:D3:4B:6E:A7:E4:79:A0:3E:A1:93:A2:5A:66:6B:D0:C5 Authority key identifier: E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21 Certificate issuer: /CN=A9180318/serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21 Certificate serial: 347E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft Manifest number: 347E Signing time: Mon 12 May 2025 14:39:42 +0000 Manifest this update: Mon 12 May 2025 14:39:41 +0000 Manifest next update: Mon 19 May 2025 14:39:41 +0000 Files and hashes: 1: 5DMXblmum0dk6179BKQ2hWKrXiE.crl (hash: 38DQGMM11nKbV9cqYaxbe6BfhZrCbebRFq+ZAzePryk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13438 (0x347e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180318, serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21 Validity Not Before: May 12 14:39:41 2025 GMT Not After : May 19 14:39:41 2025 GMT Subject: CN=6822082d-2193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e1:cb:2a:97:4d:13:12:03:08:a5:a0:14:2d: 08:33:93:d5:9b:c4:ac:a6:e0:ef:11:d4:d7:d3:66: b4:8d:5f:87:52:3d:30:61:d1:c5:91:b5:7d:cb:6b: c2:6a:47:f6:4d:a2:6d:7d:d4:64:a6:bd:1a:13:98: ea:d1:9e:34:ef:20:39:33:f9:db:f3:cc:de:02:c0: 43:1b:fc:b3:33:5e:7d:03:d1:60:8b:72:66:44:42: 2b:ca:ec:ed:87:68:15:ff:9e:1e:8e:70:75:85:e6: a6:62:3b:b0:d0:30:3a:0c:39:56:57:ad:73:57:aa: ac:21:60:1d:e5:a5:a1:81:1f:92:58:b6:e0:39:16: be:81:ae:f6:b5:f9:ea:87:7c:96:b1:cf:26:26:25: 6c:18:58:29:fa:44:8a:81:ea:6d:0e:7c:4f:2c:65: 5a:8a:83:8a:35:bd:bf:8e:07:e3:b4:5f:40:60:de: 31:9b:b6:a3:d4:12:52:23:7a:4a:0f:85:ec:20:b5: a6:e5:f7:4b:ff:e4:98:24:fc:07:55:4b:d9:38:73: 47:9a:f3:5b:35:bc:fb:93:b7:29:09:ec:b9:1d:5b: 29:34:a0:bb:91:d0:d1:d8:cc:c1:76:ee:75:2d:f6: 20:91:46:4f:a4:1b:ad:db:2d:d4:63:03:84:9a:45: a9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F0:35:43:D3:4B:6E:A7:E4:79:A0:3E:A1:93:A2:5A:66:6B:D0:C5 X509v3 Authority Key Identifier: keyid:E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:9e:34:04:51:22:23:cd:8c:12:5a:0e:65:00:27:49:bb:85: 37:c9:1d:6e:2b:ea:4e:1d:7d:ac:76:55:2a:dc:c9:28:84:e9: 2b:51:60:65:ec:7a:54:19:2e:53:b4:ff:20:5a:41:b5:3e:8e: 8f:5f:1c:02:31:47:84:8e:29:38:44:90:b5:f4:1e:3b:60:1f: 36:09:9a:02:ce:6f:c2:5b:99:e6:ea:5c:4b:93:f5:11:aa:13: 00:65:0b:b8:88:87:8e:b3:4a:80:5d:39:5a:7c:a6:cb:d6:33: 47:9f:7b:82:22:f5:b4:9e:85:cd:95:3f:b0:c3:88:71:8a:84: 5e:c3:77:71:b7:6e:42:d8:aa:67:cc:a9:b0:5f:08:ea:01:66: 31:64:f4:97:f2:7e:0c:f9:dc:71:f4:91:93:2e:b6:a5:21:fc: 0a:e2:43:b7:86:3a:ca:f0:6f:0c:a9:c6:e4:9a:2e:8f:9a:be: 8c:c9:31:38:cd:5f:e1:5e:77:c2:11:31:e0:81:70:5d:83:17: 9a:0b:d0:b8:7b:c7:23:e2:9d:d4:80:6c:70:b8:ac:f2:f2:6c: 2b:25:95:1b:9e:d5:3a:03:68:c2:75:93:a9:fd:e3:e4:63:27: ec:b4:c5:b8:f3:57:ef:55:ef:83:31:7d:bc:1b:d6:52:1e:6b: 75:b4:d8:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzMTgxMTAvBgNVBAUTKEU0MzMxNzZFNTlBRTlCNDc2NEVCNUVGRDA0QTQzNjg1 NjJBQjVFMjEwHhcNMjUwNTEyMTQzOTQxWhcNMjUwNTE5MTQzOTQxWjAYMRYwFAYD VQQDEw02ODIyMDgyZC0yMTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+HLKpdNExIDCKWgFC0IM5PVm8SspuDvEdTX02a0jV+HUj0wYdHFkbV9y2vC akf2TaJtfdRkpr0aE5jq0Z407yA5M/nb88zeAsBDG/yzM159A9Fgi3JmREIryuzt h2gV/54ejnB1heamYjuw0DA6DDlWV61zV6qsIWAd5aWhgR+SWLbgORa+ga72tfnq h3yWsc8mJiVsGFgp+kSKgeptDnxPLGVaioOKNb2/jgfjtF9AYN4xm7aj1BJSI3pK D4XsILWm5fdL/+SYJPwHVUvZOHNHmvNbNbz7k7cpCey5HVspNKC7kdDR2MzBdu51 LfYgkUZPpBut2y3UYwOEmkWpvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzwNUPT S26n5HmgPqGTolpma9DFMB8GA1UdIwQYMBaAFOQzF25ZrptHZOte/QSkNoViq14h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMxOC9CNTcxOUREMjFE OEYxMUUyQjA1NzA3RUYwOEIwMkNEMi81RE1YYmxtdW0wZGs2MTc5QktRMmhXS3JY aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVETVhibG11bTBkazYxNzlCS1EyaFdLclhpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDMxOC9CNTcxOUREMjFEOEYxMUUyQjA1NzA3RUYwOEIwMkNEMi81RE1YYmxtdW0w ZGs2MTc5QktRMmhXS3JYaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBnjQEUSIjzYwSWg5lACdJu4U3yR1uK+pOHX2sdlUq3MkohOkrUWBl 7HpUGS5TtP8gWkG1Po6PXxwCMUeEjik4RJC19B47YB82CZoCzm/CW5nm6lxLk/UR qhMAZQu4iIeOs0qAXTlafKbL1jNHn3uCIvW0noXNlT+ww4hxioRew3dxt25C2Kpn zKmwXwjqAWYxZPSX8n4M+dxx9JGTLralIfwK4kO3hjrK8G8Mqcbkmi6Pmr6MyTE4 zV/hXnfCETHggXBdgxeaC9C4e8cj4p3UgGxwuKzy8mwrJZUbntU6A2jCdZOp/ePk YyfstMW481fvVe+DMX28G9ZSHmt1tNgg -----END CERTIFICATE-----Generated at Tue May 13 13:41:41 2025 by rpki-client