$ rpki-client -vvf rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft File: c5PammDgEK2QIFHzC9pJc3T4UaQ.mft (raw, json) Hash identifier: Tfkd+Ky1uj2eij5MV0CbTp8RFKweu5bqnEZr/k2bs1o= Subject key identifier: 02:64:D4:FD:F7:31:BE:FE:AB:9A:60:09:C8:26:1B:37:4D:0A:19:87 Authority key identifier: 73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4 Certificate issuer: /CN=A9182545/serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4 Certificate serial: 0548 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft Manifest number: 052D Signing time: Thu 24 Apr 2025 23:25:30 +0000 Manifest this update: Thu 24 Apr 2025 23:25:29 +0000 Manifest next update: Thu 01 May 2025 23:25:29 +0000 Files and hashes: 1: c5PammDgEK2QIFHzC9pJc3T4UaQ.crl (hash: D6v1KRlg1vKj2sXoL8R4ig324jW3WOdHGBsrP/puaYc=) 2: 58AAED74E1E211ED8F1ACF4DC4F9AE02.roa (hash: J4bjJ7hQ5fLz6+3zFmcF7l6WC9eO2YDHrGDEilJ+wvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1352 (0x548) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182545, serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4 Validity Not Before: Apr 24 23:25:29 2025 GMT Not After : May 1 23:25:29 2025 GMT Subject: CN=680ac869-36ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8f:43:cd:d3:c9:17:28:ba:f9:ec:32:aa:ba: 90:ca:83:b1:66:fb:26:47:bb:67:a6:c0:9d:41:43: 22:01:9d:08:6c:da:f0:51:7e:9c:88:e0:9b:b2:95: 1a:c4:6c:6e:51:67:4b:ac:b0:b2:d7:82:4f:17:d6: 03:8b:dc:37:26:d1:81:5b:eb:56:be:47:02:0e:98: f3:cb:48:46:25:d3:47:e1:7d:e0:30:06:bb:35:24: 2a:02:f1:77:db:e8:d6:63:8b:87:ea:fa:62:72:7e: 73:ed:08:8e:9e:95:65:a0:4a:34:30:7c:68:67:90: 8c:97:43:fa:26:8b:54:60:60:77:8c:0e:e1:51:7a: a1:70:67:5f:4c:c6:c5:da:d3:aa:19:5d:02:e9:1a: ff:2c:17:d9:f4:45:a5:39:a4:e9:af:ad:6a:2d:5c: 10:2b:24:d3:37:92:35:a4:40:68:fb:55:ae:6e:6c: 5d:37:88:e5:23:10:89:f8:aa:d9:55:a4:92:53:1f: 08:71:c9:0a:02:c5:9c:b6:e5:3d:31:a8:b0:f6:46: 87:d4:94:cc:cf:56:f5:1b:00:a2:a9:08:95:73:b6: 70:bc:2c:05:a6:c2:fe:a5:ec:6e:4b:a8:8c:04:17: ed:31:83:75:a5:8f:a5:ef:8c:9f:c2:3b:85:e5:3f: 87:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:64:D4:FD:F7:31:BE:FE:AB:9A:60:09:C8:26:1B:37:4D:0A:19:87 X509v3 Authority Key Identifier: keyid:73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:7b:c2:0b:87:3e:f7:a1:e7:27:b1:10:db:2a:ae:a1:2c:62: cb:de:6e:2d:6c:57:d5:e3:17:ce:ac:db:d7:65:da:ad:cf:4c: 46:ea:d0:cb:76:ab:64:bd:5b:f5:ce:41:07:d2:e4:30:62:c7: c7:7a:b1:e9:4e:72:60:33:c7:c9:c1:19:6f:05:c4:a9:48:e1: 88:87:77:77:13:ce:7b:3e:13:77:3b:3d:c9:49:7e:46:a7:bf: 90:d1:d7:f0:22:0a:8d:d9:96:44:16:49:b2:86:b6:40:d5:da: 21:d3:99:dd:56:91:f8:53:de:05:34:4a:3d:7c:ae:1d:5c:bf: 64:33:e1:f4:45:b3:54:aa:3f:78:79:97:19:65:5e:f4:1b:77: 2d:74:e8:2b:17:fb:36:f9:71:9a:a3:7b:e1:46:04:8e:f3:27: 58:45:34:69:8d:f4:8b:e3:6a:42:17:e8:8b:a8:11:77:e9:fa: 9d:4b:5a:95:81:5b:6d:43:09:1d:fb:08:b6:a3:0d:8f:16:54: b2:59:24:a0:21:4c:47:25:ea:61:a3:b7:ca:f8:5f:4b:10:7c: fd:46:3a:23:32:75:a4:5f:11:1d:3f:97:96:11:33:b8:28:ef: bd:2f:fd:da:68:21:fc:da:22:2e:63:72:95:ae:72:dd:0d:20: 32:b2:97:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1NDUxMTAvBgNVBAUTKDczOTNEQTlBNjBFMDEwQUQ5MDIwNTFGMzBCREE0OTcz NzRGODUxQTQwHhcNMjUwNDI0MjMyNTI5WhcNMjUwNTAxMjMyNTI5WjAYMRYwFAYD VQQDEw02ODBhYzg2OS0zNmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAro9DzdPJFyi6+ewyqrqQyoOxZvsmR7tnpsCdQUMiAZ0IbNrwUX6ciOCbspUa xGxuUWdLrLCy14JPF9YDi9w3JtGBW+tWvkcCDpjzy0hGJdNH4X3gMAa7NSQqAvF3 2+jWY4uH6vpicn5z7QiOnpVloEo0MHxoZ5CMl0P6JotUYGB3jA7hUXqhcGdfTMbF 2tOqGV0C6Rr/LBfZ9EWlOaTpr61qLVwQKyTTN5I1pEBo+1WubmxdN4jlIxCJ+KrZ VaSSUx8IcckKAsWctuU9Maiw9kaH1JTMz1b1GwCiqQiVc7ZwvCwFpsL+pexuS6iM BBftMYN1pY+l74yfwjuF5T+HxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJk1P33 Mb7+q5pgCcgmGzdNChmHMB8GA1UdIwQYMBaAFHOT2ppg4BCtkCBR8wvaSXN0+FGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjU0NS9COTBCQTE5MjAz MkExMUVDOEI0RkM4NEZDNEY5QUUwMi9jNVBhbW1EZ0VLMlFJRkh6QzlwSmMzVDRV YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1UGFtbURnRUsyUUlGSHpDOXBKYzNUNFVhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjU0NS9COTBCQTE5MjAzMkExMUVDOEI0RkM4NEZDNEY5QUUwMi9jNVBhbW1EZ0VL MlFJRkh6QzlwSmMzVDRVYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0e8ILhz73oecnsRDbKq6hLGLL3m4tbFfV4xfOrNvXZdqtz0xG6tDL dqtkvVv1zkEH0uQwYsfHerHpTnJgM8fJwRlvBcSpSOGIh3d3E857PhN3Oz3JSX5G p7+Q0dfwIgqN2ZZEFkmyhrZA1doh05ndVpH4U94FNEo9fK4dXL9kM+H0RbNUqj94 eZcZZV70G3ctdOgrF/s2+XGao3vhRgSO8ydYRTRpjfSL42pCF+iLqBF36fqdS1qV gVttQwkd+wi2ow2PFlSyWSSgIUxHJepho7fK+F9LEHz9RjojMnWkXxEdP5eWETO4 KO+9L/3aaCH82iIuY3KVrnLdDSAyspcA -----END CERTIFICATE-----Generated at Sat Apr 26 15:04:01 2025 by rpki-client