$ rpki-client -vvf rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft File: c5PammDgEK2QIFHzC9pJc3T4UaQ.mft (raw, json) Hash identifier: HDHgMjn0posC3j3zFdSgJDFFlq6jIGAikCRAiFVABcs= Subject key identifier: BE:DD:FC:7E:AE:94:5D:DB:F1:80:85:4B:20:C0:BC:BF:EC:4D:2E:68 Authority key identifier: 73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4 Certificate issuer: /CN=A9182545/serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4 Certificate serial: 0584 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft Manifest number: 0569 Signing time: Fri 22 Aug 2025 23:39:13 +0000 Manifest this update: Fri 22 Aug 2025 23:39:13 +0000 Manifest next update: Fri 29 Aug 2025 23:39:13 +0000 Files and hashes: 1: c5PammDgEK2QIFHzC9pJc3T4UaQ.crl (hash: 0JNLi3XJG+pUndJuE1bgLnTmeJCi8Igya3yFfXwDDMA=) 2: 58AAED74E1E211ED8F1ACF4DC4F9AE02.roa (hash: J4bjJ7hQ5fLz6+3zFmcF7l6WC9eO2YDHrGDEilJ+wvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1412 (0x584) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182545, serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4 Validity Not Before: Aug 22 23:39:13 2025 GMT Not After : Aug 29 23:39:13 2025 GMT Subject: CN=68a8ffa1-0f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e3:ae:26:a0:a2:78:db:6b:e2:ce:82:79:78: 83:ab:d6:d2:2f:ca:77:c3:fb:2d:8c:fa:9b:fa:7d: 35:1a:1c:3e:f6:b2:8b:f3:62:f0:74:ee:a4:5c:52: a4:06:b9:46:3d:82:b6:aa:8b:31:d0:68:8c:80:e7: 41:a5:4e:38:38:d5:84:b2:d1:0d:10:90:53:5e:94: 60:7c:f9:b0:e4:65:1d:d8:6b:32:07:19:82:67:83: 7e:22:82:f9:1c:25:5f:35:23:46:4c:d1:bd:6b:3b: 8c:66:8e:0f:cb:ff:bf:b7:21:26:e4:44:9c:c1:2d: 06:4a:65:95:b3:8b:51:2f:36:83:3a:1b:e2:06:83: 85:eb:79:aa:6c:22:c4:41:da:d1:64:a5:37:ae:8f: 5d:85:5c:42:ff:93:3c:21:73:5e:18:49:19:ec:ce: 63:3d:58:65:7d:6b:a0:39:30:1a:26:c6:67:cd:2d: a1:d3:19:96:72:db:29:e1:f3:01:f6:19:d7:46:d2: ab:c4:eb:6a:cd:e0:42:ae:eb:b1:08:cd:77:b5:98: 71:f1:66:96:41:8c:59:67:da:af:80:2a:d0:0e:44: 58:3e:4c:8f:7c:ee:a5:c1:46:92:88:7a:eb:ea:72: c0:ce:5a:34:ef:05:9b:b8:b8:bb:35:49:45:d6:77: be:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DD:FC:7E:AE:94:5D:DB:F1:80:85:4B:20:C0:BC:BF:EC:4D:2E:68 X509v3 Authority Key Identifier: keyid:73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:72:f0:38:22:ec:4b:2d:53:f6:87:db:01:87:30:3b:e8:b3: 6c:e4:a8:b5:e9:c5:57:12:63:16:d2:8c:07:45:48:6a:9c:93: cb:23:b5:0f:75:c8:02:59:5d:66:cf:d8:2f:b3:f3:e1:e0:b3: e6:b2:57:14:a4:aa:d4:8c:ae:36:c9:0f:12:23:33:89:be:1d: 5e:33:08:d8:72:24:d9:29:c4:ef:f8:63:65:06:d0:66:dd:e4: ff:c7:a7:e3:d4:ef:04:cb:4e:ec:40:dc:a5:de:c9:3c:e5:3f: d4:ec:6b:9a:b9:0f:b2:ed:ff:08:a0:11:67:5a:ba:a4:17:60: 0d:87:43:b6:64:81:e5:65:fb:6c:cb:27:06:91:e1:51:91:fe: e2:37:09:65:02:cf:12:c3:f8:30:bc:58:a3:bd:65:b9:48:d9: b1:ec:85:53:ac:db:09:a8:d2:b1:2c:6d:55:13:8b:ec:7b:9b: 6b:07:18:09:39:81:df:de:ef:b4:97:08:47:9b:e6:f1:2a:23: 8f:0e:3b:3c:ca:18:6d:8f:05:b0:e9:dd:1b:fa:02:1e:fa:8a: 2f:08:59:cd:dd:7f:69:65:5d:88:33:76:7c:68:1b:76:ce:2c: 03:e6:f7:20:9a:d3:33:83:df:15:9c:76:a4:05:18:70:6d:da: 52:38:01:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1NDUxMTAvBgNVBAUTKDczOTNEQTlBNjBFMDEwQUQ5MDIwNTFGMzBCREE0OTcz NzRGODUxQTQwHhcNMjUwODIyMjMzOTEzWhcNMjUwODI5MjMzOTEzWjAYMRYwFAYD VQQDEw02OGE4ZmZhMS0wZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeOuJqCieNtr4s6CeXiDq9bSL8p3w/stjPqb+n01Ghw+9rKL82LwdO6kXFKk BrlGPYK2qosx0GiMgOdBpU44ONWEstENEJBTXpRgfPmw5GUd2GsyBxmCZ4N+IoL5 HCVfNSNGTNG9azuMZo4Py/+/tyEm5EScwS0GSmWVs4tRLzaDOhviBoOF63mqbCLE QdrRZKU3ro9dhVxC/5M8IXNeGEkZ7M5jPVhlfWugOTAaJsZnzS2h0xmWctsp4fMB 9hnXRtKrxOtqzeBCruuxCM13tZhx8WaWQYxZZ9qvgCrQDkRYPkyPfO6lwUaSiHrr 6nLAzlo07wWbuLi7NUlF1ne+qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7d/H6u lF3b8YCFSyDAvL/sTS5oMB8GA1UdIwQYMBaAFHOT2ppg4BCtkCBR8wvaSXN0+FGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjU0NS9COTBCQTE5MjAz MkExMUVDOEI0RkM4NEZDNEY5QUUwMi9jNVBhbW1EZ0VLMlFJRkh6QzlwSmMzVDRV YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1UGFtbURnRUsyUUlGSHpDOXBKYzNUNFVhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjU0NS9COTBCQTE5MjAzMkExMUVDOEI0RkM4NEZDNEY5QUUwMi9jNVBhbW1EZ0VL MlFJRkh6QzlwSmMzVDRVYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUcvA4IuxLLVP2h9sBhzA76LNs5Ki16cVXEmMW0owHRUhqnJPLI7UP dcgCWV1mz9gvs/Ph4LPmslcUpKrUjK42yQ8SIzOJvh1eMwjYciTZKcTv+GNlBtBm 3eT/x6fj1O8Ey07sQNyl3sk85T/U7GuauQ+y7f8IoBFnWrqkF2ANh0O2ZIHlZfts yycGkeFRkf7iNwllAs8Sw/gwvFijvWW5SNmx7IVTrNsJqNKxLG1VE4vse5trBxgJ OYHf3u+0lwhHm+bxKiOPDjs8yhhtjwWw6d0b+gIe+oovCFnN3X9pZV2IM3Z8aBt2 ziwD5vcgmtMzg98VnHakBRhwbdpSOAG9 -----END CERTIFICATE-----Generated at Sat Aug 23 19:33:16 2025 by rpki-client