$ rpki-client -vvf rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft File: 5DMXblmum0dk6179BKQ2hWKrXiE.mft (raw, json) Hash identifier: xas2dqzmJH0k6IpGqUkzvAkLiU3wXjjBtgcN66YN1MU= Subject key identifier: E1:0A:71:C5:FF:DE:85:59:19:24:51:A5:BF:B7:DA:B6:0D:1E:5F:E7 Authority key identifier: E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21 Certificate issuer: /CN=A9180318/serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21 Certificate serial: 34B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft Manifest number: 34B3 Signing time: Sun 24 Aug 2025 14:40:26 +0000 Manifest this update: Sun 24 Aug 2025 14:40:25 +0000 Manifest next update: Sun 31 Aug 2025 14:40:25 +0000 Files and hashes: 1: 5DMXblmum0dk6179BKQ2hWKrXiE.crl (hash: /tZR3mNu+FB2/718EvGh2TeBo5BQtvt6mh2EvJu70qo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13491 (0x34b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180318, serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21 Validity Not Before: Aug 24 14:40:25 2025 GMT Not After : Aug 31 14:40:25 2025 GMT Subject: CN=68ab2459-c47f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d6:0e:01:79:1e:94:bc:75:14:a8:43:73:3c: 7a:26:52:b4:70:ad:2b:ed:4c:74:95:43:93:aa:4f: b2:82:60:6c:c4:c8:ee:37:09:2b:6b:9e:26:6d:f4: a9:fa:2a:25:29:4e:ad:62:ac:5d:59:60:65:67:d6: e5:f8:62:47:cf:c1:dd:fd:50:10:4d:c0:77:39:97: f8:f8:1a:6b:87:bc:e4:6a:32:7f:26:64:e1:2b:37: b6:1a:78:b1:29:d1:35:ed:82:21:c0:14:38:ea:73: e1:10:22:08:1c:ca:d1:a3:7a:c1:61:9f:b5:70:d8: 86:ed:83:54:ff:94:c6:a3:e4:50:80:99:96:2d:9c: 9a:9d:f6:6e:97:64:93:87:58:d5:79:b5:b4:46:2d: 7e:91:cf:e4:1a:cb:59:fb:52:07:48:24:49:d6:0e: fd:cf:bd:4c:03:72:5b:9f:0b:aa:af:c9:98:8b:bc: 8a:80:55:af:98:b0:98:67:ae:04:63:94:27:9b:3f: d0:74:8f:6c:cd:db:41:55:10:53:bb:f1:50:49:aa: 16:aa:26:36:98:3e:16:8d:d1:2e:71:a3:a4:24:d2: fe:31:4c:92:dd:ad:75:df:57:09:81:96:58:6d:0a: be:c0:e0:9c:ee:f4:56:bd:df:e4:cf:50:38:1c:59: 5b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0A:71:C5:FF:DE:85:59:19:24:51:A5:BF:B7:DA:B6:0D:1E:5F:E7 X509v3 Authority Key Identifier: keyid:E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:45:c9:32:5f:39:e5:e6:87:88:16:de:14:f8:fc:ab:15:fe: 28:2f:94:d0:d7:aa:ba:bb:32:fc:cd:63:c9:4e:2f:35:14:94: 64:02:36:5c:dc:20:33:24:0b:a2:ef:ac:99:e9:c8:9d:90:8d: 65:28:a0:e6:1a:67:3f:2f:31:9f:5c:9b:7d:2d:35:bc:10:22: fc:c0:b7:73:6e:9f:dc:ca:bc:56:0a:d2:54:33:96:0c:76:04: bf:18:5e:8d:81:40:3f:20:8a:b3:b1:54:a8:ad:ea:e4:4f:0d: 7d:03:63:01:97:0e:c5:5c:25:e2:5e:a2:30:08:a4:d5:f1:a7: 0c:a2:1b:ed:23:0b:a7:bb:ef:ee:79:57:1c:a7:c3:3e:76:c3: c2:51:06:b6:3d:d9:ee:1d:9b:ef:36:91:26:f5:8b:21:65:96: 31:2c:e3:ad:1b:0c:59:91:83:c9:a1:13:20:81:ca:13:7b:f6: 61:38:cf:f9:2a:dd:69:6a:35:ef:5b:75:54:8e:30:34:f7:b6: eb:12:9c:90:ee:a4:56:28:d0:15:7d:df:8d:44:bc:08:ea:2b: aa:12:ac:55:17:5f:9b:a2:b4:67:f0:31:b1:4d:72:d3:46:87: e9:6e:31:50:f9:8a:95:e0:cf:97:2b:ba:0d:be:9c:8d:1d:4c: 71:39:53:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzMTgxMTAvBgNVBAUTKEU0MzMxNzZFNTlBRTlCNDc2NEVCNUVGRDA0QTQzNjg1 NjJBQjVFMjEwHhcNMjUwODI0MTQ0MDI1WhcNMjUwODMxMTQ0MDI1WjAYMRYwFAYD VQQDEw02OGFiMjQ1OS1jNDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9YOAXkelLx1FKhDczx6JlK0cK0r7Ux0lUOTqk+ygmBsxMjuNwkra54mbfSp +iolKU6tYqxdWWBlZ9bl+GJHz8Hd/VAQTcB3OZf4+Bprh7zkajJ/JmThKze2Gnix KdE17YIhwBQ46nPhECIIHMrRo3rBYZ+1cNiG7YNU/5TGo+RQgJmWLZyanfZul2ST h1jVebW0Ri1+kc/kGstZ+1IHSCRJ1g79z71MA3Jbnwuqr8mYi7yKgFWvmLCYZ64E Y5Qnmz/QdI9szdtBVRBTu/FQSaoWqiY2mD4WjdEucaOkJNL+MUyS3a1131cJgZZY bQq+wOCc7vRWvd/kz1A4HFlbbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEKccX/ 3oVZGSRRpb+32rYNHl/nMB8GA1UdIwQYMBaAFOQzF25ZrptHZOte/QSkNoViq14h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMxOC9CNTcxOUREMjFE OEYxMUUyQjA1NzA3RUYwOEIwMkNEMi81RE1YYmxtdW0wZGs2MTc5QktRMmhXS3JY aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVETVhibG11bTBkazYxNzlCS1EyaFdLclhpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDMxOC9CNTcxOUREMjFEOEYxMUUyQjA1NzA3RUYwOEIwMkNEMi81RE1YYmxtdW0w ZGs2MTc5QktRMmhXS3JYaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmRckyXznl5oeIFt4U+PyrFf4oL5TQ16q6uzL8zWPJTi81FJRkAjZc 3CAzJAui76yZ6cidkI1lKKDmGmc/LzGfXJt9LTW8ECL8wLdzbp/cyrxWCtJUM5YM dgS/GF6NgUA/IIqzsVSorerkTw19A2MBlw7FXCXiXqIwCKTV8acMohvtIwunu+/u eVccp8M+dsPCUQa2PdnuHZvvNpEm9YshZZYxLOOtGwxZkYPJoRMggcoTe/ZhOM/5 Kt1pajXvW3VUjjA097brEpyQ7qRWKNAVfd+NRLwI6iuqEqxVF1+borRn8DGxTXLT RofpbjFQ+YqV4M+XK7oNvpyNHUxxOVMN -----END CERTIFICATE-----Generated at Sun Aug 24 22:02:53 2025 by rpki-client