$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft File: dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft (raw, json) Hash identifier: rDON5xvQJyoEbAIWa49ezu96N2A0sQm5jA8Ps9bBqmk= Subject key identifier: 49:71:08:C3:1E:C4:56:0C:B4:5E:47:36:E5:EB:5B:34:25:AD:E1:86 Authority key identifier: 76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69 Certificate issuer: /CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369 Certificate serial: 0659 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft Manifest number: 0656 Signing time: Tue 04 Nov 2025 22:42:24 +0000 Manifest this update: Tue 04 Nov 2025 22:42:23 +0000 Manifest next update: Tue 11 Nov 2025 22:42:23 +0000 Files and hashes: 1: dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl (hash: 03Zwjn/btZJrtnnmpKkK12Baiw34KvdgN1jDxx081XQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1625 (0x659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DF5, serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369 Validity Not Before: Nov 4 22:42:23 2025 GMT Not After : Nov 11 22:42:23 2025 GMT Subject: CN=690a814f-b3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:68:01:f0:87:58:b4:dd:f3:17:1e:d8:5c:5b: 7c:11:50:6a:89:40:8e:dd:88:8a:67:fc:ae:9a:a8: bc:16:dc:58:b3:1a:35:79:2d:97:96:00:e1:67:69: d0:33:69:cb:ba:70:96:ef:82:be:61:b5:29:30:2a: 9d:aa:0c:8a:3d:df:41:c6:64:de:38:00:07:39:68: c5:a5:68:ef:8b:13:5c:ba:9d:f2:a2:12:0e:8c:a7: 5d:92:f6:5d:b1:30:76:b9:e7:63:3b:e3:3d:c8:81: bc:bb:0d:1d:67:df:5b:c8:6a:5c:27:72:01:cb:20: 4c:95:22:4b:ea:e6:de:a8:12:cb:ea:98:e4:92:05: 5c:89:07:d8:6d:d5:2c:51:64:0e:43:31:83:b0:f9: 26:32:c9:50:27:4a:2d:ac:bb:4f:15:b0:d2:25:6a: 12:03:0a:b3:62:b0:77:6c:d5:35:c8:47:8b:2f:7e: 3c:6b:29:17:8b:0c:e6:d8:2a:25:a7:cc:45:4e:07: b4:a0:c7:20:60:58:52:72:5b:35:39:f9:75:5f:5a: 1f:83:cf:58:3f:01:36:27:f0:98:01:3d:3e:b2:61: 58:9d:d7:31:ac:fa:30:76:69:1b:da:f1:04:76:ee: 1f:a5:5c:29:9e:77:8d:1b:ba:ad:7f:7d:52:32:8b: d0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:71:08:C3:1E:C4:56:0C:B4:5E:47:36:E5:EB:5B:34:25:AD:E1:86 X509v3 Authority Key Identifier: keyid:76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:aa:01:f6:9e:bf:dd:46:fe:8f:4f:9d:81:a1:d2:11:59:e6: e0:1d:73:0e:71:49:75:49:3f:52:35:d0:78:ee:d7:16:cd:45: d6:be:a9:e0:a9:b2:48:3b:d1:82:0f:8d:9c:92:44:34:e5:a4: ba:93:69:58:ef:3a:a4:87:0c:56:02:91:1d:4f:21:aa:41:53: 2d:cf:d7:b5:82:ca:3b:3f:aa:51:11:0a:28:5a:91:7b:a0:a7: fb:c9:70:44:8a:98:05:dd:ca:5e:48:b9:55:ab:66:6a:2e:14: 5e:a1:78:55:ac:39:a8:c9:1f:ee:c7:64:37:88:8c:24:5f:7f: 22:33:04:0c:a3:d4:f2:b6:bf:2e:c7:f0:52:3f:6f:4d:bf:d0: 6e:77:d5:e5:cf:1e:cf:a9:f1:1b:8a:d9:29:5f:2e:c0:e4:47: bf:49:db:5a:5c:94:59:45:c5:f3:9d:e6:51:01:a4:95:89:a4: bc:2c:2c:52:cc:40:53:12:f1:75:95:de:1b:6b:08:07:35:9d: 3f:9f:c4:3b:79:a3:62:94:2b:65:7f:38:cc:43:4c:d7:5c:0c: 6a:33:1a:00:40:be:3a:96:19:11:49:6d:0d:91:b9:ae:20:74: 32:cc:89:66:95:e4:6c:14:a0:ed:bc:17:44:94:22:f6:29:a0: ce:8d:12:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBERjUxMTAvBgNVBAUTKDc2Nzg2MjVEOTE1NEZDREYxQjAwMEE0M0QxRjg5MkZC MUQ1ODgzNjkwHhcNMjUxMTA0MjI0MjIzWhcNMjUxMTExMjI0MjIzWjAYMRYwFAYD VQQDEw02OTBhODE0Zi1iM2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGgB8IdYtN3zFx7YXFt8EVBqiUCO3YiKZ/yumqi8FtxYsxo1eS2XlgDhZ2nQ M2nLunCW74K+YbUpMCqdqgyKPd9BxmTeOAAHOWjFpWjvixNcup3yohIOjKddkvZd sTB2uedjO+M9yIG8uw0dZ99byGpcJ3IByyBMlSJL6ubeqBLL6pjkkgVciQfYbdUs UWQOQzGDsPkmMslQJ0otrLtPFbDSJWoSAwqzYrB3bNU1yEeLL348aykXiwzm2Col p8xFTge0oMcgYFhScls1Ofl1X1ofg89YPwE2J/CYAT0+smFYndcxrPowdmkb2vEE du4fpVwpnneNG7qtf31SMovQUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElxCMMe xFYMtF5HNuXrWzQlreGGMB8GA1UdIwQYMBaAFHZ4Yl2RVPzfGwAKQ9H4kvsdWINp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERGNS9GNEZEMjI3QUE2 MzIxMUVCQjNFMTc5NjlDNEY5QUUwMi9kbmhpWFpGVV9OOGJBQXBEMGZpUy14MVln MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RuaGlYWkZVX044YkFBcEQwZmlTLXgxWWcyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MERGNS9GNEZEMjI3QUE2MzIxMUVCQjNFMTc5NjlDNEY5QUUwMi9kbmhpWFpGVV9O OGJBQXBEMGZpUy14MVlnMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmqgH2nr/dRv6PT52BodIRWebgHXMOcUl1ST9SNdB47tcWzUXWvqng qbJIO9GCD42ckkQ05aS6k2lY7zqkhwxWApEdTyGqQVMtz9e1gso7P6pREQooWpF7 oKf7yXBEipgF3cpeSLlVq2ZqLhReoXhVrDmoyR/ux2Q3iIwkX38iMwQMo9Tytr8u x/BSP29Nv9Bud9Xlzx7PqfEbitkpXy7A5Ee/SdtaXJRZRcXzneZRAaSViaS8LCxS zEBTEvF1ld4bawgHNZ0/n8Q7eaNilCtlfzjMQ0zXXAxqMxoAQL46lhkRSW0Nkbmu IHQyzIlmleRsFKDtvBdElCL2KaDOjRKG -----END CERTIFICATE-----Generated at Wed Nov 5 21:12:50 2025 by rpki-client