$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft File: dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft (raw, json) Hash identifier: 4Zrb22sv93O8Xz+++yNlLaUyIxAuWW3fXhXiwH/x4n4= Subject key identifier: 51:0D:07:88:4B:62:A9:05:24:67:38:87:EA:13:88:B9:A5:50:44:ED Authority key identifier: 76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69 Certificate issuer: /CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369 Certificate serial: 061A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft Manifest number: 0617 Signing time: Wed 02 Jul 2025 23:07:07 +0000 Manifest this update: Wed 02 Jul 2025 23:07:07 +0000 Manifest next update: Wed 09 Jul 2025 23:07:07 +0000 Files and hashes: 1: dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl (hash: vekYfu7c0L/VAMKXnlM4DMiLcOAddLtzVuTdKrbUIU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1562 (0x61a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DF5, serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369 Validity Not Before: Jul 2 23:07:07 2025 GMT Not After : Jul 9 23:07:07 2025 GMT Subject: CN=6865bb9b-d9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:62:25:44:dd:b8:13:4e:4d:17:6e:b0:bd:c7: 78:9b:af:08:58:4f:d3:5e:55:54:53:95:d3:21:2c: c5:8f:71:47:12:d9:86:99:fe:f4:95:63:e0:b9:30: 57:f0:f4:f0:8e:da:8c:d6:9c:3f:9e:d7:e6:7d:01: 10:1b:78:c3:6c:a3:6c:35:98:b2:c9:59:f8:70:56: 05:e6:47:25:4f:ed:ce:c8:57:5e:ff:2e:fd:69:c7: 5c:a0:90:dd:a2:f6:1d:37:c7:1a:f7:15:bf:62:9d: 09:1f:87:c8:38:4c:7b:01:24:4a:8a:ae:4f:b7:76: df:b0:7a:03:e6:63:40:6b:c7:1b:e5:d6:0d:7a:84: 10:f9:39:b3:7d:16:80:af:bf:c2:fd:9c:1c:41:3d: 47:fd:24:08:34:f6:3d:28:97:e9:07:c3:c4:9f:21: 5d:32:20:b2:ac:e0:56:5e:87:8c:10:0b:a5:62:a4: 43:9e:50:09:0a:d1:af:7b:5d:c7:af:60:93:1e:44: 85:06:e6:c4:a1:fe:64:91:f3:df:1e:68:f4:55:ee: 36:e6:08:d8:8c:5f:ed:34:54:cf:8e:64:04:c2:cd: 9a:2c:db:af:3b:a3:21:5f:5b:30:3a:9b:d4:39:90: fa:a1:2e:c1:3c:58:f3:37:49:e2:1b:03:bf:43:0e: ce:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0D:07:88:4B:62:A9:05:24:67:38:87:EA:13:88:B9:A5:50:44:ED X509v3 Authority Key Identifier: keyid:76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:a8:fd:33:69:4b:26:70:56:c7:47:16:70:fd:af:df:ea:ac: d8:30:62:74:4a:fc:93:56:da:cc:b2:e8:11:ad:8c:e2:19:1f: 1a:35:9f:fc:24:68:d6:a7:e1:2e:ce:25:8f:e2:b6:b7:15:4a: b2:82:4e:b9:aa:52:24:f6:04:65:fa:ad:54:50:a0:93:3c:bc: d3:58:de:5b:ca:5f:12:bb:14:f1:6a:d4:82:cc:58:2b:a5:c9: 4f:3c:d4:68:76:c2:f1:a6:b2:9e:f5:ef:22:1b:13:77:c8:8d: d8:0c:b8:6e:7c:77:12:db:f3:d1:56:7d:ae:45:dd:98:8d:64: 19:37:62:68:ef:84:6f:e8:52:3c:0d:35:92:18:6f:a3:5d:41: 9d:c2:92:b7:af:ed:3c:a1:31:a3:11:9a:79:e7:5c:0e:4f:8c: 30:2b:14:be:d8:06:18:13:83:30:2e:0e:56:5b:55:9f:f7:81: e0:40:d5:2a:52:1f:19:00:cb:b1:54:9f:ab:89:84:f8:4c:f2: 2d:e6:2b:4f:03:b7:9a:3e:73:e7:98:ab:3d:9f:fa:31:de:d4: 90:35:09:58:b7:a0:27:80:7d:ac:c0:38:72:67:2d:57:26:9a: 0d:09:82:f4:b3:ab:89:cf:82:e4:e2:a8:fd:ca:e6:d1:6f:b1: 89:25:84:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBERjUxMTAvBgNVBAUTKDc2Nzg2MjVEOTE1NEZDREYxQjAwMEE0M0QxRjg5MkZC MUQ1ODgzNjkwHhcNMjUwNzAyMjMwNzA3WhcNMjUwNzA5MjMwNzA3WjAYMRYwFAYD VQQDEw02ODY1YmI5Yi1kOWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymIlRN24E05NF26wvcd4m68IWE/TXlVUU5XTISzFj3FHEtmGmf70lWPguTBX 8PTwjtqM1pw/ntfmfQEQG3jDbKNsNZiyyVn4cFYF5kclT+3OyFde/y79acdcoJDd ovYdN8ca9xW/Yp0JH4fIOEx7ASRKiq5Pt3bfsHoD5mNAa8cb5dYNeoQQ+TmzfRaA r7/C/ZwcQT1H/SQINPY9KJfpB8PEnyFdMiCyrOBWXoeMEAulYqRDnlAJCtGve13H r2CTHkSFBubEof5kkfPfHmj0Ve425gjYjF/tNFTPjmQEws2aLNuvO6MhX1swOpvU OZD6oS7BPFjzN0niGwO/Qw7OCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFENB4hL YqkFJGc4h+oTiLmlUETtMB8GA1UdIwQYMBaAFHZ4Yl2RVPzfGwAKQ9H4kvsdWINp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERGNS9GNEZEMjI3QUE2 MzIxMUVCQjNFMTc5NjlDNEY5QUUwMi9kbmhpWFpGVV9OOGJBQXBEMGZpUy14MVln MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RuaGlYWkZVX044YkFBcEQwZmlTLXgxWWcyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MERGNS9GNEZEMjI3QUE2MzIxMUVCQjNFMTc5NjlDNEY5QUUwMi9kbmhpWFpGVV9O OGJBQXBEMGZpUy14MVlnMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4qP0zaUsmcFbHRxZw/a/f6qzYMGJ0SvyTVtrMsugRrYziGR8aNZ/8 JGjWp+EuziWP4ra3FUqygk65qlIk9gRl+q1UUKCTPLzTWN5byl8SuxTxatSCzFgr pclPPNRodsLxprKe9e8iGxN3yI3YDLhufHcS2/PRVn2uRd2YjWQZN2Jo74Rv6FI8 DTWSGG+jXUGdwpK3r+08oTGjEZp551wOT4wwKxS+2AYYE4MwLg5WW1Wf94HgQNUq Uh8ZAMuxVJ+riYT4TPIt5itPA7eaPnPnmKs9n/ox3tSQNQlYt6AngH2swDhyZy1X JpoNCYL0s6uJz4Lk4qj9yubRb7GJJYTb -----END CERTIFICATE-----Generated at Thu Jul 3 00:34:55 2025 by rpki-client