$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft File: dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft (raw, json) Hash identifier: Q4aj35G3SKRBLA6Nki9Wu8A3B/HblXX5pWy0zAzVS1I= Subject key identifier: 11:9C:86:CF:4F:BC:2B:C1:15:DB:07:9D:44:67:6C:EA:26:11:3D:0B Authority key identifier: 76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69 Certificate issuer: /CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369 Certificate serial: 0634 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft Manifest number: 0631 Signing time: Fri 22 Aug 2025 22:54:20 +0000 Manifest this update: Fri 22 Aug 2025 22:54:19 +0000 Manifest next update: Fri 29 Aug 2025 22:54:19 +0000 Files and hashes: 1: dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl (hash: wOSYiwYYBgZgI+Dbo49RciDEHGlyk4/3fUl8ZFUe/Hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1588 (0x634) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DF5, serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369 Validity Not Before: Aug 22 22:54:19 2025 GMT Not After : Aug 29 22:54:19 2025 GMT Subject: CN=68a8f51b-6ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:61:65:03:0b:5f:dd:f0:d7:ae:01:e4:ef:fa: 07:e4:79:f7:a9:33:f3:5d:5c:73:e4:ee:f4:df:8f: 9f:1c:e2:bf:4c:3c:12:68:60:17:d7:db:99:63:a1: 99:13:24:37:63:04:b8:1f:2b:8d:03:bd:c6:a7:81: 58:9c:83:5e:58:78:fc:c2:b7:e2:c6:09:81:d8:be: 99:f3:62:77:7e:cc:59:dc:4c:e1:e3:99:1c:69:ec: 02:47:e9:ca:ab:34:08:f6:24:f8:94:08:5d:e6:3c: ce:05:c4:4e:02:12:6b:d1:c3:1d:b0:75:58:cb:fd: b9:6c:a2:a8:50:94:13:44:51:7b:22:05:50:33:00: aa:67:d7:be:81:22:22:e5:5f:a3:ed:7e:f8:9b:a5: f9:77:0b:76:0f:16:67:e9:7c:3c:8e:11:92:35:48: 34:cf:ac:6c:50:02:a6:bf:8a:43:74:2e:fb:89:e6: 81:61:4f:58:60:59:56:a3:d4:fa:82:9d:97:3a:b6: f2:60:34:8a:f0:b5:c7:e8:3d:e8:df:2d:57:63:61: cb:6c:b9:d3:d4:6a:6f:45:37:8d:73:66:9f:56:88: 4b:45:c4:e9:43:d4:a2:c4:21:ca:9a:47:f9:ad:c2: b0:14:d5:15:47:fb:b8:47:97:8c:36:b3:01:9f:93: 6e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9C:86:CF:4F:BC:2B:C1:15:DB:07:9D:44:67:6C:EA:26:11:3D:0B X509v3 Authority Key Identifier: keyid:76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:f9:14:ec:d7:d3:70:be:b8:65:85:53:5d:bd:ea:4e:90:ee: 88:b4:ec:fd:0d:5a:4c:d7:9c:cc:c3:85:a8:90:e4:8c:a1:be: f9:20:ce:32:43:1a:35:08:08:3d:41:04:75:13:8e:3b:3c:6a: fc:f5:87:8e:08:12:4e:cb:c0:4d:a1:e6:b5:9b:fd:68:bd:14: 7f:b7:8f:15:d5:33:20:2d:73:e9:b8:0d:2a:5b:8d:83:e1:ac: 6d:7f:04:51:39:5d:5b:fe:18:ba:69:ad:c8:05:04:27:32:20: 8b:a9:12:b3:d1:04:9c:f9:06:e9:0c:19:bd:04:46:6e:65:f4: c1:db:4a:fd:7b:0c:70:f6:48:d4:47:13:be:41:22:68:60:fa: 53:de:86:e5:83:12:79:fb:2d:21:51:e6:26:ac:7b:d8:50:ff: c6:f3:80:13:0f:d1:2e:e3:c5:d8:02:ef:fd:4c:0c:9c:e3:5b: bb:35:40:32:8c:dc:ad:c0:41:ea:2d:54:f3:56:47:c5:f3:d4: 9c:c5:f1:28:6b:84:97:a4:43:51:24:b4:0a:2a:c0:ac:49:ea: 45:fb:1d:ff:73:7a:a1:93:24:db:f6:87:25:07:b5:41:e7:51: dc:b9:a6:6d:5a:c5:be:6f:bc:0d:5b:c4:4f:0f:ca:0c:2d:ff: b5:ca:f9:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBERjUxMTAvBgNVBAUTKDc2Nzg2MjVEOTE1NEZDREYxQjAwMEE0M0QxRjg5MkZC MUQ1ODgzNjkwHhcNMjUwODIyMjI1NDE5WhcNMjUwODI5MjI1NDE5WjAYMRYwFAYD VQQDEw02OGE4ZjUxYi02Y2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGFlAwtf3fDXrgHk7/oH5Hn3qTPzXVxz5O7034+fHOK/TDwSaGAX19uZY6GZ EyQ3YwS4HyuNA73Gp4FYnINeWHj8wrfixgmB2L6Z82J3fsxZ3Ezh45kcaewCR+nK qzQI9iT4lAhd5jzOBcROAhJr0cMdsHVYy/25bKKoUJQTRFF7IgVQMwCqZ9e+gSIi 5V+j7X74m6X5dwt2DxZn6Xw8jhGSNUg0z6xsUAKmv4pDdC77ieaBYU9YYFlWo9T6 gp2XOrbyYDSK8LXH6D3o3y1XY2HLbLnT1GpvRTeNc2afVohLRcTpQ9SixCHKmkf5 rcKwFNUVR/u4R5eMNrMBn5NuoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGchs9P vCvBFdsHnURnbOomET0LMB8GA1UdIwQYMBaAFHZ4Yl2RVPzfGwAKQ9H4kvsdWINp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERGNS9GNEZEMjI3QUE2 MzIxMUVCQjNFMTc5NjlDNEY5QUUwMi9kbmhpWFpGVV9OOGJBQXBEMGZpUy14MVln MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RuaGlYWkZVX044YkFBcEQwZmlTLXgxWWcyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MERGNS9GNEZEMjI3QUE2MzIxMUVCQjNFMTc5NjlDNEY5QUUwMi9kbmhpWFpGVV9O OGJBQXBEMGZpUy14MVlnMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3+RTs19NwvrhlhVNdvepOkO6ItOz9DVpM15zMw4WokOSMob75IM4y Qxo1CAg9QQR1E447PGr89YeOCBJOy8BNoea1m/1ovRR/t48V1TMgLXPpuA0qW42D 4axtfwRROV1b/hi6aa3IBQQnMiCLqRKz0QSc+QbpDBm9BEZuZfTB20r9ewxw9kjU RxO+QSJoYPpT3oblgxJ5+y0hUeYmrHvYUP/G84ATD9Eu48XYAu/9TAyc41u7NUAy jNytwEHqLVTzVkfF89ScxfEoa4SXpENRJLQKKsCsSepF+x3/c3qhkyTb9oclB7VB 51HcuaZtWsW+b7wNW8RPD8oMLf+1yvki -----END CERTIFICATE-----Generated at Sun Aug 24 00:16:35 2025 by rpki-client