$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft File: 11KsJgWV3m0QKce5SPSUl-SD6s4.mft (raw, json) Hash identifier: Pnq9xFg1vc4gWLUXwylR35uFDBD3kfw55+FvSyvpVFE= Subject key identifier: EA:D0:0B:CD:87:39:61:8C:27:B2:5D:A9:2E:28:7F:C6:13:E8:CF:AC Authority key identifier: D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE Certificate issuer: /CN=A91383B0/serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Certificate serial: 2BCB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft Manifest number: 2BCB Signing time: Sun 10 Aug 2025 15:29:39 +0000 Manifest this update: Sun 10 Aug 2025 15:29:38 +0000 Manifest next update: Sun 17 Aug 2025 15:29:38 +0000 Files and hashes: 1: 11KsJgWV3m0QKce5SPSUl-SD6s4.crl (hash: 7G0/e9VUpKPAF0NOgx5Ukd+hg3xdErwh3siwdonn5cA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11211 (0x2bcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0, serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Validity Not Before: Aug 10 15:29:38 2025 GMT Not After : Aug 17 15:29:38 2025 GMT Subject: CN=6898bae2-777a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:de:2a:31:49:91:1e:4d:16:89:98:88:61:3b: 32:ee:18:e8:0a:b8:aa:85:14:75:f5:44:26:c7:7d: 18:e4:94:d1:71:80:39:1f:6b:2e:cc:d2:66:66:b2: 57:05:f2:c6:b0:50:cb:95:6b:db:1f:8b:8e:59:25: cc:22:40:cc:9f:ba:85:af:7e:43:05:9c:0e:ce:26: 47:c1:ac:69:fd:2f:91:f6:16:fa:cb:f8:65:c3:58: 36:ea:ee:df:32:bb:8c:74:4c:4d:b6:8b:fc:d4:b1: 6e:7d:27:67:e8:b3:5e:ea:a1:e6:16:fd:65:a4:b3: 58:ea:ab:1c:b1:38:99:6a:22:ce:17:41:c6:f2:bf: a5:f3:19:40:bd:d6:0b:73:8f:fd:01:9d:6c:5c:60: 84:71:86:9c:c9:f6:e6:11:10:dc:62:ba:c9:6f:fc: 1e:df:26:b6:7d:d3:f2:79:e7:8b:e9:d6:d3:af:a1: b7:5f:f7:9b:a4:3b:dd:42:57:9f:e6:59:f5:40:bc: 86:c7:7a:3f:3d:d7:75:b0:69:39:64:4c:c2:43:df: 86:af:ff:46:e7:bc:4b:f5:56:b8:84:b2:db:71:4c: c5:ac:e5:23:12:82:f3:ae:ef:0a:22:67:2c:64:87: 62:5c:d0:85:c8:bd:6c:df:3f:14:a5:a2:ba:9d:d4: ed:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D0:0B:CD:87:39:61:8C:27:B2:5D:A9:2E:28:7F:C6:13:E8:CF:AC X509v3 Authority Key Identifier: keyid:D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ce:c3:31:30:28:83:ca:0c:b3:da:aa:7f:41:e8:1c:b9:c5: b7:97:cb:d0:b8:90:c1:c8:10:cf:59:74:f8:8a:ad:0f:7d:59: 20:7f:be:88:1d:73:09:67:4f:6d:f3:8a:3c:e6:dd:24:41:db: 2d:a6:6d:aa:7d:c0:d4:6b:55:c3:e8:4d:d5:c4:74:71:c3:89: c6:f3:c3:03:81:98:d5:32:2c:07:c7:5f:b6:09:64:13:ca:c2: 06:41:98:f3:e7:f3:4e:a0:bb:91:05:fb:b7:34:f9:d7:66:e5: 6c:81:cd:2a:18:01:9d:1d:62:56:0c:e2:40:69:d0:aa:2c:2e: d1:e3:3e:6f:e0:57:f1:ce:cc:04:14:02:42:3d:d7:cc:7e:51: ed:fa:8d:24:c9:b8:07:ea:a5:fa:e9:ee:04:e1:34:30:0e:ba: 9f:49:59:f9:d1:21:c2:ab:36:88:db:df:81:59:fa:cf:88:99: 67:33:de:14:e3:87:af:68:89:0d:a2:fe:83:40:d1:a2:36:50: ee:9f:91:38:af:8b:e9:e4:e5:fc:30:41:7b:ed:8f:8b:8c:6a: 76:27:19:25:c7:a4:ca:c0:ed:d6:3d:6a:67:29:df:01:2a:eb: ac:8d:2a:85:c8:01:02:76:61:52:f7:24:9f:47:71:55:c1:6f: f9:29:02:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEQ3NTJBQzI2MDU5NURFNkQxMDI5QzdCOTQ4RjQ5NDk3 RTQ4M0VBQ0UwHhcNMjUwODEwMTUyOTM4WhcNMjUwODE3MTUyOTM4WjAYMRYwFAYD VQQDEw02ODk4YmFlMi03NzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx94qMUmRHk0WiZiIYTsy7hjoCriqhRR19UQmx30Y5JTRcYA5H2suzNJmZrJX BfLGsFDLlWvbH4uOWSXMIkDMn7qFr35DBZwOziZHwaxp/S+R9hb6y/hlw1g26u7f MruMdExNtov81LFufSdn6LNe6qHmFv1lpLNY6qscsTiZaiLOF0HG8r+l8xlAvdYL c4/9AZ1sXGCEcYacyfbmERDcYrrJb/we3ya2fdPyeeeL6dbTr6G3X/ebpDvdQlef 5ln1QLyGx3o/Pdd1sGk5ZEzCQ9+Gr/9G57xL9Va4hLLbcUzFrOUjEoLzru8KImcs ZIdiXNCFyL1s3z8UpaK6ndTt1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrQC82H OWGMJ7JdqS4of8YT6M+sMB8GA1UdIwQYMBaAFNdSrCYFld5tECnHuUj0lJfkg+rO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC8zRDNGRTlCNkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNtMFFLY2U1U1BTVWwtU0Q2 czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzExS3NKZ1dWM20wUUtjZTVTUFNVbC1TRDZzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC8zRDNGRTlCNkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNt MFFLY2U1U1BTVWwtU0Q2czQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOzsMxMCiDygyz2qp/QegcucW3l8vQuJDByBDPWXT4iq0PfVkgf76I HXMJZ09t84o85t0kQdstpm2qfcDUa1XD6E3VxHRxw4nG88MDgZjVMiwHx1+2CWQT ysIGQZjz5/NOoLuRBfu3NPnXZuVsgc0qGAGdHWJWDOJAadCqLC7R4z5v4FfxzswE FAJCPdfMflHt+o0kybgH6qX66e4E4TQwDrqfSVn50SHCqzaI29+BWfrPiJlnM94U 44evaIkNov6DQNGiNlDun5E4r4vp5OX8MEF77Y+LjGp2Jxklx6TKwO3WPWpnKd8B KuusjSqFyAECdmFS9ySfR3FVwW/5KQKo -----END CERTIFICATE-----Generated at Sun Aug 10 21:15:35 2025 by rpki-client