$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft File: dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft (raw, json) Hash identifier: nFBdfMyubsmXzhvooy64E5dNmwh1j22J/K25UIstHbo= Subject key identifier: A5:F9:AD:AC:5B:E4:A4:56:9C:7F:E7:F1:7E:47:F3:F5:02:D0:7F:F2 Authority key identifier: 76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69 Certificate issuer: /CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369 Certificate serial: 0633 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft Manifest number: 0630 Signing time: Wed 20 Aug 2025 22:49:37 +0000 Manifest this update: Wed 20 Aug 2025 22:49:36 +0000 Manifest next update: Wed 27 Aug 2025 22:49:36 +0000 Files and hashes: 1: dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl (hash: j+ZYBjuDAJ0HXhL/mJhzuKANmeyh+zIO9aFy5RaL0uo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 22:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1587 (0x633) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DF5, serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369 Validity Not Before: Aug 20 22:49:36 2025 GMT Not After : Aug 27 22:49:36 2025 GMT Subject: CN=68a65100-76cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7e:22:0b:cf:2c:95:1c:75:8a:5e:43:3a:7d: b6:4c:7f:3f:99:22:d7:92:9c:e2:1f:d5:f9:ca:98: 53:3a:a9:48:a8:86:c5:31:2f:c6:0e:bd:39:0f:cc: 0b:95:22:b9:f4:e3:d1:ba:b4:d2:53:ad:df:15:c2: 89:66:a3:89:09:c5:c4:30:ba:d7:fa:22:14:02:5b: d2:75:c8:a3:ad:86:34:5e:2b:c1:41:03:95:3d:05: 32:2d:3b:10:e0:8d:5d:d4:64:ab:0c:fb:3c:38:42: 75:c9:94:66:1d:64:1f:05:fd:ea:2c:f1:ac:68:4c: f6:40:29:bc:58:6d:d8:ea:6d:b6:8f:e0:5a:fc:1f: 06:df:d3:12:5f:96:7b:68:0e:74:ec:3a:d1:d0:35: fb:7c:d1:18:80:aa:f9:8a:31:80:84:33:16:d0:2f: f4:2a:f5:7e:20:6a:51:9c:e8:d8:52:ea:37:b9:2e: a4:59:6f:e6:22:9a:8e:44:ca:5b:88:7d:8c:aa:7c: b2:24:31:14:86:12:d4:fe:bf:c0:ed:17:58:d5:63: 1b:19:3b:e7:66:90:81:8a:c4:ba:b2:6c:81:6f:50: bd:20:cd:a7:44:4a:97:08:c0:0c:34:20:1d:3f:a2: eb:9f:a8:ab:3a:12:b2:e5:d9:7d:ca:35:fb:c7:20: 50:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F9:AD:AC:5B:E4:A4:56:9C:7F:E7:F1:7E:47:F3:F5:02:D0:7F:F2 X509v3 Authority Key Identifier: keyid:76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:84:47:0b:55:45:ae:85:79:a2:86:a1:e8:d0:76:e1:32:b7: ec:2f:3e:a7:f8:d3:0f:33:c9:69:58:39:c2:17:40:9f:33:14: 8f:0d:09:66:bb:02:56:1c:02:e0:b3:b2:c6:6e:5a:04:cb:d5: cd:30:a5:59:01:fb:23:1c:93:c2:f6:79:fc:71:85:0f:16:f2: a2:e9:13:8c:61:e3:ee:57:b3:18:b3:2c:dd:2e:fd:20:8c:ac: 35:fa:07:bf:62:c7:de:74:d5:f3:31:78:1c:c2:0d:1e:e3:f0: 80:64:d1:af:a1:ef:7d:00:f8:60:14:89:1e:5c:db:60:d9:02: a5:77:b7:04:91:35:bc:43:db:5f:da:f5:c0:b3:f2:f0:95:57: 41:d1:4a:b2:07:36:9c:08:1d:fd:0d:c4:2e:0e:87:9b:7d:39: b4:16:5a:db:b0:db:8d:05:0e:d6:f6:d1:35:49:67:05:a7:ec: 14:8f:57:40:b2:49:96:51:89:3d:d2:18:85:ed:c9:aa:2a:dc: 8f:b3:3e:bf:8f:66:39:c5:a2:e3:c5:47:36:85:2d:8d:58:d9: b9:ff:4c:a2:dd:24:a7:a3:ce:b3:4d:60:cf:8b:e2:bc:28:6d: 18:34:7a:34:72:ab:9e:36:71:71:ef:a1:8d:e3:54:90:80:c2: 8f:e2:eb:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBERjUxMTAvBgNVBAUTKDc2Nzg2MjVEOTE1NEZDREYxQjAwMEE0M0QxRjg5MkZC MUQ1ODgzNjkwHhcNMjUwODIwMjI0OTM2WhcNMjUwODI3MjI0OTM2WjAYMRYwFAYD VQQDEw02OGE2NTEwMC03NmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApH4iC88slRx1il5DOn22TH8/mSLXkpziH9X5yphTOqlIqIbFMS/GDr05D8wL lSK59OPRurTSU63fFcKJZqOJCcXEMLrX+iIUAlvSdcijrYY0XivBQQOVPQUyLTsQ 4I1d1GSrDPs8OEJ1yZRmHWQfBf3qLPGsaEz2QCm8WG3Y6m22j+Ba/B8G39MSX5Z7 aA507DrR0DX7fNEYgKr5ijGAhDMW0C/0KvV+IGpRnOjYUuo3uS6kWW/mIpqORMpb iH2MqnyyJDEUhhLU/r/A7RdY1WMbGTvnZpCBisS6smyBb1C9IM2nREqXCMAMNCAd P6Lrn6irOhKy5dl9yjX7xyBQoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKX5raxb 5KRWnH/n8X5H8/UC0H/yMB8GA1UdIwQYMBaAFHZ4Yl2RVPzfGwAKQ9H4kvsdWINp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERGNS9GNEZEMjI3QUE2 MzIxMUVCQjNFMTc5NjlDNEY5QUUwMi9kbmhpWFpGVV9OOGJBQXBEMGZpUy14MVln MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RuaGlYWkZVX044YkFBcEQwZmlTLXgxWWcyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MERGNS9GNEZEMjI3QUE2MzIxMUVCQjNFMTc5NjlDNEY5QUUwMi9kbmhpWFpGVV9O OGJBQXBEMGZpUy14MVlnMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1hEcLVUWuhXmihqHo0HbhMrfsLz6n+NMPM8lpWDnCF0CfMxSPDQlm uwJWHALgs7LGbloEy9XNMKVZAfsjHJPC9nn8cYUPFvKi6ROMYePuV7MYsyzdLv0g jKw1+ge/YsfedNXzMXgcwg0e4/CAZNGvoe99APhgFIkeXNtg2QKld7cEkTW8Q9tf 2vXAs/LwlVdB0UqyBzacCB39DcQuDoebfTm0FlrbsNuNBQ7W9tE1SWcFp+wUj1dA skmWUYk90hiF7cmqKtyPsz6/j2Y5xaLjxUc2hS2NWNm5/0yi3SSno86zTWDPi+K8 KG0YNHo0cqueNnFx76GN41SQgMKP4uuf -----END CERTIFICATE-----Generated at Fri Aug 22 16:24:16 2025 by rpki-client