$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft File: 11KsJgWV3m0QKce5SPSUl-SD6s4.mft (raw, json) Hash identifier: bj21ufnbsC3CCydSRlmkm7r1yH7IzzYd6IIEdEWZWTE= Subject key identifier: 95:01:2F:AB:30:70:28:6C:25:1E:6A:3E:38:7B:0F:0C:3A:73:98:6D Authority key identifier: D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE Certificate issuer: /CN=A91383B0/serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Certificate serial: 2BF7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft Manifest number: 2BF7 Signing time: Tue 04 Nov 2025 15:34:39 +0000 Manifest this update: Tue 04 Nov 2025 15:34:38 +0000 Manifest next update: Tue 11 Nov 2025 15:34:38 +0000 Files and hashes: 1: 11KsJgWV3m0QKce5SPSUl-SD6s4.crl (hash: 7QGxwH7oGhdgT1X1Nb2+/ItOBLiwpmPXkPxGIrEu3uw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11255 (0x2bf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0, serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Validity Not Before: Nov 4 15:34:38 2025 GMT Not After : Nov 11 15:34:38 2025 GMT Subject: CN=690a1d0e-dfbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fa:39:a9:f0:ac:69:43:a4:56:34:35:0e:c8: e5:38:d1:23:d8:e5:b9:12:ef:f2:d2:a2:2d:a9:50: 2b:1e:38:45:18:04:bd:6c:48:3b:d5:34:c2:93:1c: 7e:34:23:ab:37:76:93:bd:d7:86:bd:a5:47:f3:5d: 6d:e5:53:5f:4e:07:26:9f:1c:1e:e1:da:5a:02:dc: 33:21:57:99:fe:50:a8:28:50:e4:62:f1:22:bb:62: a3:21:31:d3:98:34:7c:e9:2a:35:7b:d6:fb:d1:01: f9:fc:9f:1e:c9:8b:ba:ec:62:d5:7a:75:18:95:7e: 37:12:3f:7d:cf:0d:3d:0d:20:ec:62:c2:61:18:67: af:1b:47:84:28:3a:03:78:a7:21:7d:a2:6c:bf:f1: 9f:56:8d:c5:34:90:48:2c:5a:96:c5:55:68:b7:e3: e1:aa:e5:8e:5b:e2:f0:22:ce:a1:3c:08:ff:07:ec: 0c:38:18:04:5e:54:ec:00:04:e4:30:bf:f0:d5:88: 46:ad:8e:42:06:11:2d:70:6a:d9:c8:a2:1c:5a:bc: 42:c1:51:92:39:d4:7c:53:7b:de:7a:1d:2d:95:01: f4:69:e2:84:c9:c5:2f:2c:20:6f:c7:4e:de:67:4c: 1f:96:57:1b:8f:f2:f8:3f:3a:0e:94:0b:50:86:be: 77:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:01:2F:AB:30:70:28:6C:25:1E:6A:3E:38:7B:0F:0C:3A:73:98:6D X509v3 Authority Key Identifier: keyid:D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ab:69:35:e2:0a:9d:40:a8:c9:f0:df:ce:bc:61:90:01:ea: 14:ab:f7:94:df:11:f8:ab:fd:9d:81:47:ff:c5:35:c3:84:c8: 08:c3:3d:e8:37:3d:6b:92:b2:23:6a:45:91:94:da:dc:7e:0e: 0e:58:98:03:5a:7e:d6:95:77:7c:2e:e9:1f:c7:2c:8d:6f:13: af:4f:8f:16:12:cb:90:bf:01:8b:10:34:a1:1b:f7:1d:92:71: 4c:ce:5a:11:dc:c3:1f:5e:e7:cc:d5:81:50:93:7b:46:37:35: c5:a7:bc:f2:b6:ce:18:85:be:aa:1c:81:74:30:76:79:f8:3f: 02:35:b6:f5:94:b4:a6:39:78:e7:99:cb:f5:c9:90:cb:3c:fb: 94:ca:e0:55:cd:50:35:87:62:f2:f8:6f:15:f3:84:69:9f:71: 43:aa:6c:49:a0:61:6e:70:84:35:f3:5f:7c:4e:37:b0:80:6f: f4:6c:ed:13:df:59:b2:dc:96:2f:05:90:8b:c5:cd:07:ba:76: fe:7d:f6:2f:77:05:0b:d5:4b:d4:2f:9e:6b:92:39:a0:60:01: ed:31:e0:06:39:bc:34:8a:83:78:49:53:39:18:9e:06:40:b0: 98:d5:95:b6:5a:28:7f:6f:28:af:ba:db:11:49:92:78:fd:32: 31:5d:24:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEQ3NTJBQzI2MDU5NURFNkQxMDI5QzdCOTQ4RjQ5NDk3 RTQ4M0VBQ0UwHhcNMjUxMTA0MTUzNDM4WhcNMjUxMTExMTUzNDM4WjAYMRYwFAYD VQQDEw02OTBhMWQwZS1kZmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfo5qfCsaUOkVjQ1DsjlONEj2OW5Eu/y0qItqVArHjhFGAS9bEg71TTCkxx+ NCOrN3aTvdeGvaVH811t5VNfTgcmnxwe4dpaAtwzIVeZ/lCoKFDkYvEiu2KjITHT mDR86So1e9b70QH5/J8eyYu67GLVenUYlX43Ej99zw09DSDsYsJhGGevG0eEKDoD eKchfaJsv/GfVo3FNJBILFqWxVVot+PhquWOW+LwIs6hPAj/B+wMOBgEXlTsAATk ML/w1YhGrY5CBhEtcGrZyKIcWrxCwVGSOdR8U3veeh0tlQH0aeKEycUvLCBvx07e Z0wfllcbj/L4PzoOlAtQhr53twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUBL6sw cChsJR5qPjh7Dww6c5htMB8GA1UdIwQYMBaAFNdSrCYFld5tECnHuUj0lJfkg+rO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC8zRDNGRTlCNkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNtMFFLY2U1U1BTVWwtU0Q2 czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzExS3NKZ1dWM20wUUtjZTVTUFNVbC1TRDZzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC8zRDNGRTlCNkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNt MFFLY2U1U1BTVWwtU0Q2czQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtq2k14gqdQKjJ8N/OvGGQAeoUq/eU3xH4q/2dgUf/xTXDhMgIwz3o Nz1rkrIjakWRlNrcfg4OWJgDWn7WlXd8LukfxyyNbxOvT48WEsuQvwGLEDShG/cd knFMzloR3MMfXufM1YFQk3tGNzXFp7zyts4Yhb6qHIF0MHZ5+D8CNbb1lLSmOXjn mcv1yZDLPPuUyuBVzVA1h2Ly+G8V84Rpn3FDqmxJoGFucIQ18198TjewgG/0bO0T 31my3JYvBZCLxc0Hunb+ffYvdwUL1UvUL55rkjmgYAHtMeAGObw0ioN4SVM5GJ4G QLCY1ZW2Wih/byivutsRSZJ4/TIxXSRE -----END CERTIFICATE-----Generated at Wed Nov 5 13:32:56 2025 by rpki-client