$ rpki-client -vvf rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft File: 5DMXblmum0dk6179BKQ2hWKrXiE.mft (raw, json) Hash identifier: 8ITg7V97q5sL/1GJ4XR8HpNFaNDdInDjb89+8IefhDo= Subject key identifier: F0:2A:FC:CC:4A:9C:BC:76:7A:EE:11:59:D9:B9:6F:24:BB:3C:98:02 Authority key identifier: E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21 Certificate issuer: /CN=A9180318/serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21 Certificate serial: 3498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft Manifest number: 3498 Signing time: Wed 02 Jul 2025 14:42:56 +0000 Manifest this update: Wed 02 Jul 2025 14:42:56 +0000 Manifest next update: Wed 09 Jul 2025 14:42:56 +0000 Files and hashes: 1: 5DMXblmum0dk6179BKQ2hWKrXiE.crl (hash: LJEH6+rW9wKDAbAokLw/3coI9FAF6Ql/eVgMRekJPQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13464 (0x3498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180318, serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21 Validity Not Before: Jul 2 14:42:56 2025 GMT Not After : Jul 9 14:42:56 2025 GMT Subject: CN=68654570-bb0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3b:80:22:a6:05:2b:6c:ea:83:8d:74:4f:ed: 1b:3a:29:6e:a9:9d:5b:c6:08:1a:c3:a4:6f:6c:fb: 60:2f:69:3c:b7:61:52:53:c3:46:ae:26:5a:b6:79: de:c5:ae:38:a8:32:3a:50:98:3c:e5:c4:26:c5:dd: c5:1f:48:65:25:f0:00:72:13:f1:be:3a:b0:91:f0: d9:4e:5d:94:2b:c3:cf:0f:88:03:9b:51:bf:1a:32: bc:df:ca:58:5e:2d:b8:fe:cc:a9:59:c7:59:8f:1f: 3c:12:6a:0a:7d:e2:3d:00:97:b3:d1:5c:e6:84:de: 24:f9:9a:20:0e:bd:09:3d:f3:ee:0a:fd:44:7a:31: ac:b0:68:83:b5:8c:6a:24:75:67:39:8f:68:90:f8: 5c:3b:88:43:91:31:3b:43:84:55:f4:6c:a4:a2:27: 6b:ed:39:08:e1:b1:8c:7c:a8:93:7d:df:e4:14:57: 29:78:9b:3e:1c:c4:44:78:38:0f:b1:03:1d:c7:f7: 63:52:65:88:6b:bb:d3:e7:37:12:37:3f:90:89:c1: c1:b1:04:2d:63:0c:a4:2e:ff:b3:2f:53:95:7d:86: 50:0a:bf:bd:68:01:cf:40:06:c7:41:7d:04:2c:12: e4:aa:eb:70:cf:2c:1c:7f:4b:24:13:98:f5:4b:62: de:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2A:FC:CC:4A:9C:BC:76:7A:EE:11:59:D9:B9:6F:24:BB:3C:98:02 X509v3 Authority Key Identifier: keyid:E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:5c:d5:31:db:00:6d:b5:1d:d3:51:89:ff:83:9d:78:5d:18: e6:35:d7:ab:ca:74:39:9e:52:fe:df:cd:21:6f:ed:05:2a:ab: 00:d6:ba:99:55:1c:76:c3:ea:6b:aa:82:a3:e5:61:91:ca:0a: 13:b5:9b:86:6e:b0:63:58:72:07:2a:78:8b:7f:55:88:4c:35: e2:aa:9e:90:79:8c:f2:93:84:56:cc:8e:ed:52:18:a9:86:a8: 43:22:e8:f9:c4:31:e3:e4:b4:9a:75:3e:2d:76:e9:14:8c:f7: a8:dd:2c:87:68:b6:aa:71:9e:34:6c:a7:b2:97:5e:63:bc:5a: 58:37:82:ea:c5:d3:5d:d5:9b:7b:d5:02:20:7d:6d:e9:90:fd: 47:46:65:6c:fc:ea:4f:67:e6:31:f3:c0:b1:4f:2a:00:f1:9a: 3b:98:74:09:ec:50:60:b2:97:94:fe:be:2c:9d:b1:ea:06:fc: ee:75:34:83:18:56:82:87:32:ab:56:41:a8:ca:5b:76:e5:da: 11:47:01:16:4c:4f:c2:e9:2c:a5:79:74:c2:2e:98:1f:b4:81: 45:be:11:de:57:1b:ea:62:fa:81:31:9e:fc:6a:38:bb:40:d2: 0e:40:a9:e9:c4:80:59:37:62:fe:8f:3a:e0:7e:25:99:2b:f3: 5d:e8:f3:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzMTgxMTAvBgNVBAUTKEU0MzMxNzZFNTlBRTlCNDc2NEVCNUVGRDA0QTQzNjg1 NjJBQjVFMjEwHhcNMjUwNzAyMTQ0MjU2WhcNMjUwNzA5MTQ0MjU2WjAYMRYwFAYD VQQDEw02ODY1NDU3MC1iYjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjuAIqYFK2zqg410T+0bOiluqZ1bxggaw6RvbPtgL2k8t2FSU8NGriZatnne xa44qDI6UJg85cQmxd3FH0hlJfAAchPxvjqwkfDZTl2UK8PPD4gDm1G/GjK838pY Xi24/sypWcdZjx88EmoKfeI9AJez0VzmhN4k+ZogDr0JPfPuCv1EejGssGiDtYxq JHVnOY9okPhcO4hDkTE7Q4RV9Gykoidr7TkI4bGMfKiTfd/kFFcpeJs+HMREeDgP sQMdx/djUmWIa7vT5zcSNz+QicHBsQQtYwykLv+zL1OVfYZQCr+9aAHPQAbHQX0E LBLkqutwzywcf0skE5j1S2LeuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAq/MxK nLx2eu4RWdm5byS7PJgCMB8GA1UdIwQYMBaAFOQzF25ZrptHZOte/QSkNoViq14h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMxOC9CNTcxOUREMjFE OEYxMUUyQjA1NzA3RUYwOEIwMkNEMi81RE1YYmxtdW0wZGs2MTc5QktRMmhXS3JY aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVETVhibG11bTBkazYxNzlCS1EyaFdLclhpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDMxOC9CNTcxOUREMjFEOEYxMUUyQjA1NzA3RUYwOEIwMkNEMi81RE1YYmxtdW0w ZGs2MTc5QktRMmhXS3JYaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLXNUx2wBttR3TUYn/g514XRjmNderynQ5nlL+380hb+0FKqsA1rqZ VRx2w+prqoKj5WGRygoTtZuGbrBjWHIHKniLf1WITDXiqp6QeYzyk4RWzI7tUhip hqhDIuj5xDHj5LSadT4tdukUjPeo3SyHaLaqcZ40bKeyl15jvFpYN4LqxdNd1Zt7 1QIgfW3pkP1HRmVs/OpPZ+Yx88CxTyoA8Zo7mHQJ7FBgspeU/r4snbHqBvzudTSD GFaChzKrVkGoylt25doRRwEWTE/C6SyleXTCLpgftIFFvhHeVxvqYvqBMZ78aji7 QNIOQKnpxIBZN2L+jzrgfiWZK/Nd6PMY -----END CERTIFICATE-----Generated at Thu Jul 3 10:03:30 2025 by rpki-client