$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft File: 11KsJgWV3m0QKce5SPSUl-SD6s4.mft (raw, json) Hash identifier: t4Bnla3CK0o59fMkSYDCSl1t68KIeoZPQGxrFiHrUsA= Subject key identifier: 0C:62:E9:16:7F:79:16:A5:A4:E7:0F:5A:08:F2:8A:A0:02:47:9F:88 Authority key identifier: D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE Certificate issuer: /CN=A91383B0/serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Certificate serial: 2BB1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft Manifest number: 2BB1 Signing time: Fri 20 Jun 2025 15:34:05 +0000 Manifest this update: Fri 20 Jun 2025 15:34:05 +0000 Manifest next update: Fri 27 Jun 2025 15:34:05 +0000 Files and hashes: 1: 11KsJgWV3m0QKce5SPSUl-SD6s4.crl (hash: majRZV0inVFiehsmZewq8fNQNd+ETtsvn/3pp1lIJ54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 15:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11185 (0x2bb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0, serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Validity Not Before: Jun 20 15:34:05 2025 GMT Not After : Jun 27 15:34:05 2025 GMT Subject: CN=68557f6d-3a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6a:f2:47:71:97:bc:6e:ec:8e:7c:53:06:10: a6:86:bb:ed:4e:3f:ee:3c:b7:31:6b:ad:8f:6a:92: 64:e7:94:30:a9:d6:b6:4f:98:41:bf:6c:87:67:cc: 2d:68:39:40:64:20:cf:ef:5c:a5:c9:88:da:59:9d: 7a:c8:d9:d5:28:b3:6c:ef:32:fa:8e:ee:37:88:bc: 1e:60:9c:43:e6:23:23:e3:31:cb:38:e4:99:c5:4c: 30:ab:4d:81:52:9f:67:10:39:75:70:11:5f:b6:f5: c8:13:fb:30:60:2d:5e:9c:f5:8a:7c:ae:9c:89:c7: 51:d3:50:24:ae:ba:e9:e3:6b:32:e7:94:56:49:4a: e3:2c:6f:ba:0b:03:dc:61:12:09:39:ae:ea:31:93: bd:05:a0:bf:7e:52:d0:94:b1:fb:5b:f4:49:ea:40: e1:af:33:5b:94:72:62:e7:e2:f7:7c:ee:5d:71:75: 2d:45:91:f0:59:be:fc:a6:6e:c9:93:e5:5f:8d:fb: 42:36:be:03:74:01:17:16:82:a2:ee:a3:4f:c4:49: e1:0f:aa:83:a6:5b:fe:11:88:09:ca:56:e8:5b:3e: 2b:ff:62:73:5b:a2:db:41:d9:97:8b:23:11:63:56: 43:eb:f8:fe:35:fa:35:32:ca:f1:6c:b0:c6:d7:4f: 29:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:62:E9:16:7F:79:16:A5:A4:E7:0F:5A:08:F2:8A:A0:02:47:9F:88 X509v3 Authority Key Identifier: keyid:D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:8e:bd:b5:4b:8d:02:5a:01:01:26:f4:45:bc:06:a0:04:73: 1a:70:a1:cf:b8:2e:00:c4:93:21:fc:16:c1:93:06:d3:1e:70: cb:2e:4c:1b:f5:0a:9b:47:43:0a:2d:99:58:b1:d6:02:7c:f7: a4:8f:51:32:20:67:b3:9a:4d:05:54:20:0d:a4:d8:5d:7a:54: f9:06:68:1d:24:fb:08:a4:7a:c7:6b:dc:41:ae:8c:7e:82:9b: 0c:86:4d:58:8c:a4:a7:f5:f2:41:50:81:fc:94:26:d1:27:95: 95:f9:70:84:aa:a6:dd:6d:39:92:b0:02:04:1e:e7:7b:81:7a: dd:9b:0f:b1:96:f3:69:b2:6d:ae:d1:f2:39:cf:c4:df:5b:11: 9a:09:e9:c7:4f:13:9d:c1:74:7d:77:0e:dd:0c:2f:7d:fe:72: 5c:9a:e3:75:43:5a:dd:2c:b8:5e:54:e1:c3:6f:45:89:de:d9: 45:24:67:6c:37:43:87:85:1e:76:69:98:8e:8d:9e:3d:13:0f: b6:2a:57:b5:40:28:53:88:38:20:88:33:89:a8:cb:53:5f:8a: 1f:d3:55:f7:df:7d:b4:94:c9:3f:f8:2d:09:56:e7:9a:b2:ea: cf:22:e2:00:3b:c7:7e:85:75:d3:35:4e:fb:19:ed:b4:b3:a1: 43:d3:fd:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEQ3NTJBQzI2MDU5NURFNkQxMDI5QzdCOTQ4RjQ5NDk3 RTQ4M0VBQ0UwHhcNMjUwNjIwMTUzNDA1WhcNMjUwNjI3MTUzNDA1WjAYMRYwFAYD VQQDEw02ODU1N2Y2ZC0zYTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmryR3GXvG7sjnxTBhCmhrvtTj/uPLcxa62PapJk55Qwqda2T5hBv2yHZ8wt aDlAZCDP71ylyYjaWZ16yNnVKLNs7zL6ju43iLweYJxD5iMj4zHLOOSZxUwwq02B Up9nEDl1cBFftvXIE/swYC1enPWKfK6cicdR01Akrrrp42sy55RWSUrjLG+6CwPc YRIJOa7qMZO9BaC/flLQlLH7W/RJ6kDhrzNblHJi5+L3fO5dcXUtRZHwWb78pm7J k+VfjftCNr4DdAEXFoKi7qNPxEnhD6qDplv+EYgJylboWz4r/2JzW6LbQdmXiyMR Y1ZD6/j+Nfo1MsrxbLDG108pVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxi6RZ/ eRalpOcPWgjyiqACR5+IMB8GA1UdIwQYMBaAFNdSrCYFld5tECnHuUj0lJfkg+rO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC8zRDNGRTlCNkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNtMFFLY2U1U1BTVWwtU0Q2 czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzExS3NKZ1dWM20wUUtjZTVTUFNVbC1TRDZzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC8zRDNGRTlCNkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNt MFFLY2U1U1BTVWwtU0Q2czQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdjr21S40CWgEBJvRFvAagBHMacKHPuC4AxJMh/BbBkwbTHnDLLkwb 9QqbR0MKLZlYsdYCfPekj1EyIGezmk0FVCANpNhdelT5BmgdJPsIpHrHa9xBrox+ gpsMhk1YjKSn9fJBUIH8lCbRJ5WV+XCEqqbdbTmSsAIEHud7gXrdmw+xlvNpsm2u 0fI5z8TfWxGaCenHTxOdwXR9dw7dDC99/nJcmuN1Q1rdLLheVOHDb0WJ3tlFJGds N0OHhR52aZiOjZ49Ew+2Kle1QChTiDggiDOJqMtTX4of01X33320lMk/+C0JVuea surPIuIAO8d+hXXTNU77Ge20s6FD0/3h -----END CERTIFICATE-----Generated at Fri Jun 20 22:30:18 2025 by rpki-client