$ rpki-client -vvf rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft File: c5PammDgEK2QIFHzC9pJc3T4UaQ.mft (raw, json) Hash identifier: oCrw9CbfZVdG//anUTiLth0grbUw1FfyeP0E8Rr4NK0= Subject key identifier: 1B:6D:81:0F:10:30:BD:74:A9:E3:0D:F3:66:40:7A:E3:99:80:7A:6E Authority key identifier: 73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4 Certificate issuer: /CN=A9182545/serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4 Certificate serial: 057D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft Manifest number: 0562 Signing time: Fri 08 Aug 2025 23:56:29 +0000 Manifest this update: Fri 08 Aug 2025 23:56:29 +0000 Manifest next update: Fri 15 Aug 2025 23:56:29 +0000 Files and hashes: 1: c5PammDgEK2QIFHzC9pJc3T4UaQ.crl (hash: VCdiZrnweU1BhMHg3PEYzLyJK5jIIDyORfW7yyLG2ks=) 2: 58AAED74E1E211ED8F1ACF4DC4F9AE02.roa (hash: J4bjJ7hQ5fLz6+3zFmcF7l6WC9eO2YDHrGDEilJ+wvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1405 (0x57d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182545, serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4 Validity Not Before: Aug 8 23:56:29 2025 GMT Not After : Aug 15 23:56:29 2025 GMT Subject: CN=68968ead-ecb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:11:af:1e:c8:4f:3f:3d:54:60:65:6c:97:73: 03:cd:19:9b:f2:ad:22:39:44:c6:13:63:98:c9:e1: 22:96:58:a4:fd:9f:38:84:86:ca:28:5b:db:c1:e7: fd:6f:70:06:9e:26:a8:ae:43:18:20:76:08:7d:0f: eb:be:79:e3:59:16:af:4f:e7:c8:8a:33:6e:85:f6: 0f:d8:09:97:47:38:d2:e7:30:94:b0:54:ca:3f:8d: dd:0c:71:da:d7:7c:1f:90:61:02:04:cf:09:81:a4: b4:5e:d2:70:8b:79:59:ea:01:03:51:06:3c:46:28: cd:a4:5d:cb:0a:57:9e:6f:24:be:e5:8f:39:e8:8b: 72:9a:88:2e:bc:c8:b1:0e:c0:d7:17:43:c6:61:b6: ef:e9:dd:6c:85:c0:05:16:01:01:f9:8c:6c:44:74: 06:9f:e1:4f:67:5a:d3:23:eb:9f:fe:db:3b:6d:27: d9:38:f0:67:a9:02:05:1d:f9:09:a4:aa:c4:8b:0f: 69:77:c3:f4:b0:09:8b:1d:d8:01:1c:23:72:c7:77: de:d5:de:c2:9b:47:37:40:bd:cb:b0:70:07:0e:a3: 18:07:92:5f:7c:0d:1c:6c:92:b4:88:8e:1b:c0:4a: 53:12:23:e5:5f:6d:57:2a:21:c6:18:86:62:de:ce: de:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6D:81:0F:10:30:BD:74:A9:E3:0D:F3:66:40:7A:E3:99:80:7A:6E X509v3 Authority Key Identifier: keyid:73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:01:a9:4e:49:94:30:ec:79:0f:dd:c6:52:ab:a0:27:5c:b6: fb:21:42:04:65:12:d3:ce:bb:f3:92:b1:92:a7:83:d0:34:80: c2:db:73:4a:8a:3a:24:8a:d7:9e:08:23:06:5f:6e:51:56:29: 5d:51:af:0b:8d:e8:e8:fe:36:71:7b:1b:24:a1:a1:f2:2b:8c: 39:02:ba:37:07:0c:27:41:43:22:d3:c9:dc:af:b3:d5:0d:ce: 45:1a:92:c8:70:6e:f6:7c:bf:f5:6d:43:41:4c:95:a2:8c:21: 2a:a6:3f:70:ce:b7:a3:e2:77:ba:e1:29:30:59:3b:c8:e9:60: af:9c:99:a0:48:64:00:64:5c:ef:3c:2a:f7:e8:3c:9f:55:83: 7b:3b:cc:ee:19:d8:09:6c:e0:3c:57:e1:96:59:70:e4:fe:cb: 69:93:24:a1:96:5a:87:dd:07:58:8c:a0:3b:03:1e:a6:c3:2d: 9d:d0:c9:aa:c7:73:61:0c:60:6f:72:9a:b2:9b:69:a4:8c:80: 08:79:59:a1:e7:13:f7:84:c9:89:c1:20:46:f2:62:04:2f:66: ce:ce:4e:2a:ef:e0:30:4d:7a:12:22:cd:4d:f4:2d:56:03:51: b3:a6:82:83:df:61:85:00:54:fb:64:0e:c4:09:28:1f:d5:9d: 1f:7f:e3:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1NDUxMTAvBgNVBAUTKDczOTNEQTlBNjBFMDEwQUQ5MDIwNTFGMzBCREE0OTcz NzRGODUxQTQwHhcNMjUwODA4MjM1NjI5WhcNMjUwODE1MjM1NjI5WjAYMRYwFAYD VQQDEw02ODk2OGVhZC1lY2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRGvHshPPz1UYGVsl3MDzRmb8q0iOUTGE2OYyeEillik/Z84hIbKKFvbwef9 b3AGniaorkMYIHYIfQ/rvnnjWRavT+fIijNuhfYP2AmXRzjS5zCUsFTKP43dDHHa 13wfkGECBM8JgaS0XtJwi3lZ6gEDUQY8RijNpF3LCleebyS+5Y856ItymoguvMix DsDXF0PGYbbv6d1shcAFFgEB+YxsRHQGn+FPZ1rTI+uf/ts7bSfZOPBnqQIFHfkJ pKrEiw9pd8P0sAmLHdgBHCNyx3fe1d7Cm0c3QL3LsHAHDqMYB5JffA0cbJK0iI4b wEpTEiPlX21XKiHGGIZi3s7eoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBttgQ8Q ML10qeMN82ZAeuOZgHpuMB8GA1UdIwQYMBaAFHOT2ppg4BCtkCBR8wvaSXN0+FGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjU0NS9COTBCQTE5MjAz MkExMUVDOEI0RkM4NEZDNEY5QUUwMi9jNVBhbW1EZ0VLMlFJRkh6QzlwSmMzVDRV YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1UGFtbURnRUsyUUlGSHpDOXBKYzNUNFVhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjU0NS9COTBCQTE5MjAzMkExMUVDOEI0RkM4NEZDNEY5QUUwMi9jNVBhbW1EZ0VL MlFJRkh6QzlwSmMzVDRVYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuAalOSZQw7HkP3cZSq6AnXLb7IUIEZRLTzrvzkrGSp4PQNIDC23NK ijokiteeCCMGX25RVildUa8Ljejo/jZxexskoaHyK4w5Aro3BwwnQUMi08ncr7PV Dc5FGpLIcG72fL/1bUNBTJWijCEqpj9wzrej4ne64SkwWTvI6WCvnJmgSGQAZFzv PCr36DyfVYN7O8zuGdgJbOA8V+GWWXDk/stpkyShllqH3QdYjKA7Ax6mwy2d0Mmq x3NhDGBvcpqym2mkjIAIeVmh5xP3hMmJwSBG8mIEL2bOzk4q7+AwTXoSIs1N9C1W A1GzpoKD32GFAFT7ZA7ECSgf1Z0ff+MA -----END CERTIFICATE-----Generated at Sun Aug 10 16:07:42 2025 by rpki-client