$ rpki-client -vvf rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft File: c5PammDgEK2QIFHzC9pJc3T4UaQ.mft (raw, json) Hash identifier: h/Tmfz1Sh8jxdwtIQDwBMjJEnlTW4RT43xRdi71Xcn0= Subject key identifier: FB:E7:41:84:EB:6E:7F:70:57:D9:E1:D5:C5:26:12:FB:28:04:2E:59 Authority key identifier: 73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4 Certificate issuer: /CN=A9182545/serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4 Certificate serial: 056B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft Manifest number: 0550 Signing time: Fri 04 Jul 2025 23:59:24 +0000 Manifest this update: Fri 04 Jul 2025 23:59:23 +0000 Manifest next update: Fri 11 Jul 2025 23:59:23 +0000 Files and hashes: 1: c5PammDgEK2QIFHzC9pJc3T4UaQ.crl (hash: K3wv/WZ1QK5a1Xtf6+a/jCmtFEl9Cx5PXC4E1ucr2dc=) 2: 58AAED74E1E211ED8F1ACF4DC4F9AE02.roa (hash: J4bjJ7hQ5fLz6+3zFmcF7l6WC9eO2YDHrGDEilJ+wvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1387 (0x56b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182545, serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4 Validity Not Before: Jul 4 23:59:23 2025 GMT Not After : Jul 11 23:59:23 2025 GMT Subject: CN=68686adb-bbd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9e:72:fa:7b:e9:fe:f7:1e:e2:67:da:4b:17: 61:e2:8d:ab:d7:a6:1f:1f:1a:49:b0:31:42:72:4d: 5f:91:2f:a3:49:a2:65:8b:17:2f:b5:15:14:b0:8b: 5b:39:2e:f9:73:5a:12:5b:31:e1:7e:58:9e:69:0c: ec:09:fc:bf:e3:06:fe:c7:21:ec:46:c2:d7:a4:6e: 73:cd:88:f7:b0:d8:30:4c:fc:cd:e8:53:4b:e0:78: aa:65:bc:3a:fe:11:4d:67:2c:2d:80:ce:fd:e4:1e: 7d:dd:be:69:b0:95:59:e8:99:fd:93:e8:ea:3f:dc: 6c:09:0b:c8:6e:9b:e1:98:0e:d7:0d:54:84:37:ad: 6a:4e:9c:91:13:57:31:b0:2d:8f:68:fe:16:e9:c2: f0:4a:46:16:d4:be:c7:38:4a:13:91:81:9c:0c:5f: 1e:25:d5:da:31:b1:5a:ce:f2:6b:f2:13:d5:b8:92: 6e:d2:ec:57:47:e8:61:e6:ce:54:23:bb:38:c9:61: 7a:4c:6e:fe:75:b7:8b:b6:7b:42:cd:35:43:ab:9a: b8:2c:c4:eb:d1:31:d6:ed:99:45:92:3d:84:7a:58: 96:f9:34:c1:77:35:34:62:37:31:72:5f:78:f1:49: d0:8e:22:2a:f7:ab:45:29:8b:96:d8:03:01:c3:4b: 5a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E7:41:84:EB:6E:7F:70:57:D9:E1:D5:C5:26:12:FB:28:04:2E:59 X509v3 Authority Key Identifier: keyid:73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:07:da:2b:22:dd:6f:95:b8:23:6b:1e:05:7c:f3:5f:08:17: ff:2d:44:7f:5d:d3:23:e5:65:30:b1:37:61:29:1f:56:47:ba: d7:f7:d8:bc:6e:35:53:69:30:1d:e6:3f:98:95:57:23:61:5f: ff:44:ab:b1:0a:fa:44:ac:1f:9b:19:55:1e:b3:6d:28:7a:0e: a1:c0:ca:6a:0c:e6:fd:e0:6f:8d:3d:7d:d7:52:22:c8:55:91: 41:67:24:27:5d:fc:5a:82:17:16:bf:c8:f2:2b:69:f8:cf:ee: 08:cc:52:9e:7f:b6:f7:f5:ed:5f:8c:fe:05:9c:25:5c:0d:22: 75:0a:b1:27:a6:eb:11:b1:c1:10:b7:e8:b7:ab:86:68:4e:78: 34:bf:2c:f2:5c:f4:ac:0d:69:a4:39:d5:19:be:27:44:12:e5: 27:2e:45:7e:10:48:d4:14:a4:2e:e1:7e:c8:8d:a8:47:39:68: 80:fa:08:03:e4:f9:5f:c3:49:cd:aa:ca:a0:26:3c:e1:76:54: d8:99:d0:e8:02:0b:c2:a6:4d:da:54:a8:52:aa:d6:69:29:71: 54:3d:63:ad:6a:4d:d0:0b:73:25:90:e8:85:b3:41:11:56:03: 6a:6c:b0:57:90:02:77:4c:8c:28:f9:de:df:db:c7:9a:1a:c7: c7:6c:ad:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1NDUxMTAvBgNVBAUTKDczOTNEQTlBNjBFMDEwQUQ5MDIwNTFGMzBCREE0OTcz NzRGODUxQTQwHhcNMjUwNzA0MjM1OTIzWhcNMjUwNzExMjM1OTIzWjAYMRYwFAYD VQQDEw02ODY4NmFkYi1iYmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsp5y+nvp/vce4mfaSxdh4o2r16YfHxpJsDFCck1fkS+jSaJlixcvtRUUsItb OS75c1oSWzHhflieaQzsCfy/4wb+xyHsRsLXpG5zzYj3sNgwTPzN6FNL4HiqZbw6 /hFNZywtgM795B593b5psJVZ6Jn9k+jqP9xsCQvIbpvhmA7XDVSEN61qTpyRE1cx sC2PaP4W6cLwSkYW1L7HOEoTkYGcDF8eJdXaMbFazvJr8hPVuJJu0uxXR+hh5s5U I7s4yWF6TG7+dbeLtntCzTVDq5q4LMTr0THW7ZlFkj2EeliW+TTBdzU0Yjcxcl94 8UnQjiIq96tFKYuW2AMBw0taDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvnQYTr bn9wV9nh1cUmEvsoBC5ZMB8GA1UdIwQYMBaAFHOT2ppg4BCtkCBR8wvaSXN0+FGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjU0NS9COTBCQTE5MjAz MkExMUVDOEI0RkM4NEZDNEY5QUUwMi9jNVBhbW1EZ0VLMlFJRkh6QzlwSmMzVDRV YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1UGFtbURnRUsyUUlGSHpDOXBKYzNUNFVhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjU0NS9COTBCQTE5MjAzMkExMUVDOEI0RkM4NEZDNEY5QUUwMi9jNVBhbW1EZ0VL MlFJRkh6QzlwSmMzVDRVYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtB9orIt1vlbgjax4FfPNfCBf/LUR/XdMj5WUwsTdhKR9WR7rX99i8 bjVTaTAd5j+YlVcjYV//RKuxCvpErB+bGVUes20oeg6hwMpqDOb94G+NPX3XUiLI VZFBZyQnXfxaghcWv8jyK2n4z+4IzFKef7b39e1fjP4FnCVcDSJ1CrEnpusRscEQ t+i3q4ZoTng0vyzyXPSsDWmkOdUZvidEEuUnLkV+EEjUFKQu4X7IjahHOWiA+ggD 5Plfw0nNqsqgJjzhdlTYmdDoAgvCpk3aVKhSqtZpKXFUPWOtak3QC3MlkOiFs0ER VgNqbLBXkAJ3TIwo+d7f28eaGsfHbK0O -----END CERTIFICATE-----Generated at Sat Jul 5 22:14:03 2025 by rpki-client