$ rpki-client -vvf rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft File: 5DMXblmum0dk6179BKQ2hWKrXiE.mft (raw, json) Hash identifier: PvVtKKOW2dwxZTx/XuYlOX2LSMLy/NHQ4nE473nNaLg= Subject key identifier: 71:8F:B7:C5:5A:DA:E6:1D:48:DE:D0:D8:A4:E3:62:6B:7D:79:11:A1 Authority key identifier: E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21 Certificate issuer: /CN=A9180318/serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21 Certificate serial: 34D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft Manifest number: 34D7 Signing time: Sun 02 Nov 2025 14:41:27 +0000 Manifest this update: Sun 02 Nov 2025 14:41:27 +0000 Manifest next update: Sun 09 Nov 2025 14:41:27 +0000 Files and hashes: 1: 5DMXblmum0dk6179BKQ2hWKrXiE.crl (hash: MhCOHeUClCcuA3NlrfffDIi1nytl988shPXyRqu5Kpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13527 (0x34d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180318, serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21 Validity Not Before: Nov 2 14:41:27 2025 GMT Not After : Nov 9 14:41:27 2025 GMT Subject: CN=69076d97-a667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4b:7d:79:d4:1d:df:f5:6a:75:8c:8c:db:b5: ec:a4:b8:09:59:2d:6c:df:3f:41:b9:1e:b2:f9:d4: a7:81:1d:80:e3:35:14:47:9f:19:bc:4d:bc:1f:b8: f4:14:53:8b:06:af:8c:cb:8c:8b:a6:d2:fc:5b:05: 4c:a8:f7:88:11:56:29:b8:30:32:68:66:73:97:0d: b8:07:11:35:54:87:38:72:53:3b:a8:f9:56:5a:8b: d7:8b:63:a5:f8:45:ed:91:97:1d:a0:79:8a:b2:b8: 1b:61:0f:1c:fa:ff:e9:62:14:04:e9:c9:61:d5:02: 62:d7:73:57:15:5b:c8:a4:21:72:cf:49:12:70:81: b3:fb:58:4a:6b:53:9e:6b:14:21:22:0f:71:bb:fd: 2e:c4:0f:2d:2d:6e:f9:f3:f8:c5:d5:42:b6:d0:ca: 05:8d:fe:6b:41:c9:14:e8:15:ee:2e:b5:ab:43:88: 34:d6:76:93:97:61:6f:41:9c:05:e6:1c:ab:7d:05: 9d:b5:21:90:1d:dc:47:96:04:fd:50:6c:7e:f3:cd: 0a:50:69:37:95:15:fe:0a:52:fe:46:81:4d:13:9e: ff:40:c5:41:26:f9:d4:e4:b4:f1:a4:42:9d:53:3c: 9c:56:f9:78:07:1d:bb:d6:3b:a5:18:0e:8e:5c:ba: b6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8F:B7:C5:5A:DA:E6:1D:48:DE:D0:D8:A4:E3:62:6B:7D:79:11:A1 X509v3 Authority Key Identifier: keyid:E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:bc:26:45:bf:02:0c:8a:78:ed:da:48:a6:e5:6e:16:cf:b7: 85:c9:f1:0c:52:b1:5d:8f:17:54:5e:45:97:74:cb:3e:b9:34: b5:bd:35:c0:31:c3:6a:1b:f0:18:ce:d6:98:2f:df:74:96:4a: 47:6e:51:64:00:e6:8d:23:63:e7:89:2e:8f:c7:f1:14:c6:a7: 98:94:9f:be:fa:41:79:74:5b:ea:5a:e9:cb:e2:c2:23:2e:e0: 1d:65:32:e7:b0:19:86:f6:3f:ed:75:40:46:e7:1b:7e:2c:33: d3:74:01:b8:15:41:2a:76:34:35:e9:b9:0a:cf:64:7a:ea:97: 01:f6:96:c0:12:fa:75:07:f4:5d:cd:9d:6c:bb:9b:0c:5e:d2: d6:90:93:ee:10:a7:4e:89:9e:84:e8:f2:29:a1:39:c0:58:19: e5:d2:e9:71:e7:95:00:7c:5d:24:ea:e2:00:a8:3f:31:17:6e: 94:51:0a:1f:6f:f3:13:03:85:70:f6:a8:55:52:39:cf:c8:d9: cc:ea:d1:de:60:1f:0f:e0:62:cb:6c:bb:19:7b:53:e9:4f:d4: ec:72:bf:b4:1c:7f:6a:cc:62:ef:e3:ae:31:38:35:3f:91:ab: 80:cc:2b:ff:78:02:12:dc:7e:fd:f1:92:35:8c:e6:ce:da:59: a6:64:bf:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzMTgxMTAvBgNVBAUTKEU0MzMxNzZFNTlBRTlCNDc2NEVCNUVGRDA0QTQzNjg1 NjJBQjVFMjEwHhcNMjUxMTAyMTQ0MTI3WhcNMjUxMTA5MTQ0MTI3WjAYMRYwFAYD VQQDEw02OTA3NmQ5Ny1hNjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUt9edQd3/VqdYyM27XspLgJWS1s3z9BuR6y+dSngR2A4zUUR58ZvE28H7j0 FFOLBq+My4yLptL8WwVMqPeIEVYpuDAyaGZzlw24BxE1VIc4clM7qPlWWovXi2Ol +EXtkZcdoHmKsrgbYQ8c+v/pYhQE6clh1QJi13NXFVvIpCFyz0kScIGz+1hKa1Oe axQhIg9xu/0uxA8tLW758/jF1UK20MoFjf5rQckU6BXuLrWrQ4g01naTl2FvQZwF 5hyrfQWdtSGQHdxHlgT9UGx+880KUGk3lRX+ClL+RoFNE57/QMVBJvnU5LTxpEKd UzycVvl4Bx271julGA6OXLq2nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGPt8Va 2uYdSN7Q2KTjYmt9eRGhMB8GA1UdIwQYMBaAFOQzF25ZrptHZOte/QSkNoViq14h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMxOC9CNTcxOUREMjFE OEYxMUUyQjA1NzA3RUYwOEIwMkNEMi81RE1YYmxtdW0wZGs2MTc5QktRMmhXS3JY aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVETVhibG11bTBkazYxNzlCS1EyaFdLclhpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDMxOC9CNTcxOUREMjFEOEYxMUUyQjA1NzA3RUYwOEIwMkNEMi81RE1YYmxtdW0w ZGs2MTc5QktRMmhXS3JYaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIvCZFvwIMinjt2kim5W4Wz7eFyfEMUrFdjxdUXkWXdMs+uTS1vTXA McNqG/AYztaYL990lkpHblFkAOaNI2PniS6Px/EUxqeYlJ+++kF5dFvqWunL4sIj LuAdZTLnsBmG9j/tdUBG5xt+LDPTdAG4FUEqdjQ16bkKz2R66pcB9pbAEvp1B/Rd zZ1su5sMXtLWkJPuEKdOiZ6E6PIpoTnAWBnl0ulx55UAfF0k6uIAqD8xF26UUQof b/MTA4Vw9qhVUjnPyNnM6tHeYB8P4GLLbLsZe1PpT9Tscr+0HH9qzGLv464xODU/ kauAzCv/eAIS3H798ZI1jObO2lmmZL+I -----END CERTIFICATE-----Generated at Mon Nov 3 18:15:07 2025 by rpki-client