$ rpki-client -vvf rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft File: c5PammDgEK2QIFHzC9pJc3T4UaQ.mft (raw, json) Hash identifier: 3RvSV3p9hLNAfp4UM0qgZz6jenQg6G+NCvplVxOfq1E= Subject key identifier: 42:2D:C0:BF:F7:2D:3B:E1:E1:35:DF:66:3C:AE:C3:2E:87:7F:C3:91 Authority key identifier: 73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4 Certificate issuer: /CN=A9182545/serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4 Certificate serial: 0551 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft Manifest number: 0536 Signing time: Mon 12 May 2025 23:24:34 +0000 Manifest this update: Mon 12 May 2025 23:24:34 +0000 Manifest next update: Mon 19 May 2025 23:24:34 +0000 Files and hashes: 1: c5PammDgEK2QIFHzC9pJc3T4UaQ.crl (hash: zcFYjdWnJhoPFYHQi/JOOvhLH3jPbQe1FY4OGOLw7SQ=) 2: 58AAED74E1E211ED8F1ACF4DC4F9AE02.roa (hash: J4bjJ7hQ5fLz6+3zFmcF7l6WC9eO2YDHrGDEilJ+wvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1361 (0x551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182545, serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4 Validity Not Before: May 12 23:24:34 2025 GMT Not After : May 19 23:24:34 2025 GMT Subject: CN=68228332-9bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b3:82:8f:af:66:54:3a:15:97:53:de:56:64: 05:9a:ec:3c:a9:82:a2:35:9a:ec:8c:a7:34:ab:8d: f0:55:a1:af:60:05:09:d9:03:ad:fa:96:28:ab:e1: 15:44:7f:e1:c3:f9:f4:11:a2:6e:f7:9a:8c:c2:49: 84:fc:f3:e2:95:79:b2:e8:cd:37:08:5f:c6:69:45: bf:41:cb:e0:9d:83:9a:a4:93:96:ab:d8:9d:21:40: e8:9b:81:4a:0a:32:bf:18:2a:30:dc:5f:36:83:92: 5f:c6:45:bf:56:6c:9a:1e:6b:7c:dd:cd:11:20:84: f9:68:9c:8a:61:ed:d5:47:b5:09:c9:43:dd:43:a8: 0d:03:a9:a8:16:00:6b:a4:0a:26:5c:f8:a0:5b:07: 5e:dc:ff:cf:6e:bc:27:df:02:a0:4a:a2:32:09:94: 39:2d:ee:0a:e8:18:4d:5a:84:9d:ba:d7:de:0c:43: 28:9b:7c:23:b4:89:fe:f9:61:3d:03:18:b8:e4:83: 09:21:e0:6f:07:d3:36:cf:af:5c:db:4f:3d:ff:57: e3:c8:5e:77:6c:63:35:5f:26:b2:29:f9:3c:bd:a8: 06:4d:27:77:a3:a1:80:5d:b1:75:bd:70:60:8a:fa: f0:af:e0:1d:ae:e7:d5:22:56:70:d6:65:ce:c3:1b: 3f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2D:C0:BF:F7:2D:3B:E1:E1:35:DF:66:3C:AE:C3:2E:87:7F:C3:91 X509v3 Authority Key Identifier: keyid:73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:06:1f:ca:84:3a:ac:60:5e:95:f6:15:c4:3b:01:27:60:de: 98:a3:9a:34:af:6b:5d:8b:04:07:82:74:e4:91:e6:df:f1:e1: 54:a0:81:31:fc:d0:e0:c8:4c:bb:d6:3f:11:76:c1:42:0e:2c: 9d:a6:ac:05:ae:56:0a:1f:9e:f6:9a:af:56:d7:19:17:5d:47: 70:f3:8f:a3:98:7c:1d:4d:a0:48:d7:c1:00:8d:0f:7e:6d:a8: 0a:c5:95:83:43:a9:fb:ed:51:a0:bf:3f:3d:11:b9:2d:0a:6c: 57:02:b3:15:51:d8:e5:e1:4a:57:cc:b7:a3:77:b6:dc:d1:a8: 3c:8f:4a:0e:11:84:88:5c:a4:f8:b7:ca:03:48:6d:b2:dd:23: 0d:fe:ab:0f:bd:e5:0f:a3:d3:eb:2d:5e:aa:93:de:9e:ce:c5: a0:1a:38:cb:5c:bb:0f:c7:89:d5:8d:da:8f:00:91:1f:0e:c2: 56:42:92:4d:76:03:17:f1:2d:41:80:b2:89:45:e0:ad:72:de: e8:46:d4:cd:da:4a:29:9e:fa:b9:cb:2e:46:42:04:75:9a:40: e7:2d:8d:88:71:1f:4f:a6:31:dc:f1:1e:9d:58:1b:33:a9:a6: c4:7c:c7:c1:0f:cd:1f:36:26:e2:85:53:8f:b1:ea:e3:9a:1b: 61:51:db:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1NDUxMTAvBgNVBAUTKDczOTNEQTlBNjBFMDEwQUQ5MDIwNTFGMzBCREE0OTcz NzRGODUxQTQwHhcNMjUwNTEyMjMyNDM0WhcNMjUwNTE5MjMyNDM0WjAYMRYwFAYD VQQDEw02ODIyODMzMi05YmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybOCj69mVDoVl1PeVmQFmuw8qYKiNZrsjKc0q43wVaGvYAUJ2QOt+pYoq+EV RH/hw/n0EaJu95qMwkmE/PPilXmy6M03CF/GaUW/QcvgnYOapJOWq9idIUDom4FK CjK/GCow3F82g5JfxkW/VmyaHmt83c0RIIT5aJyKYe3VR7UJyUPdQ6gNA6moFgBr pAomXPigWwde3P/Pbrwn3wKgSqIyCZQ5Le4K6BhNWoSdutfeDEMom3wjtIn++WE9 Axi45IMJIeBvB9M2z69c2089/1fjyF53bGM1XyayKfk8vagGTSd3o6GAXbF1vXBg ivrwr+AdrufVIlZw1mXOwxs/JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEItwL/3 LTvh4TXfZjyuwy6Hf8ORMB8GA1UdIwQYMBaAFHOT2ppg4BCtkCBR8wvaSXN0+FGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjU0NS9COTBCQTE5MjAz MkExMUVDOEI0RkM4NEZDNEY5QUUwMi9jNVBhbW1EZ0VLMlFJRkh6QzlwSmMzVDRV YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1UGFtbURnRUsyUUlGSHpDOXBKYzNUNFVhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjU0NS9COTBCQTE5MjAzMkExMUVDOEI0RkM4NEZDNEY5QUUwMi9jNVBhbW1EZ0VL MlFJRkh6QzlwSmMzVDRVYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkBh/KhDqsYF6V9hXEOwEnYN6Yo5o0r2tdiwQHgnTkkebf8eFUoIEx /NDgyEy71j8RdsFCDiydpqwFrlYKH572mq9W1xkXXUdw84+jmHwdTaBI18EAjQ9+ bagKxZWDQ6n77VGgvz89EbktCmxXArMVUdjl4UpXzLejd7bc0ag8j0oOEYSIXKT4 t8oDSG2y3SMN/qsPveUPo9PrLV6qk96ezsWgGjjLXLsPx4nVjdqPAJEfDsJWQpJN dgMX8S1BgLKJReCtct7oRtTN2kopnvq5yy5GQgR1mkDnLY2IcR9PpjHc8R6dWBsz qabEfMfBD80fNibihVOPserjmhthUdvo -----END CERTIFICATE-----Generated at Wed May 14 20:58:41 2025 by rpki-client