$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft File: r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft (raw, json) Hash identifier: CcqQ5hGc3WVEOCVXEdfBzvPH7Y4YOhW/G4J7yjKGWqQ= Subject key identifier: 0C:34:02:78:81:C7:F8:4B:82:DC:9E:F8:36:80:2B:43:B0:48:E8:BA Authority key identifier: AF:5D:61:CE:12:B7:C3:E5:8D:C8:6C:97:87:2C:BB:2C:DA:AD:27:F1 Certificate issuer: /CN=A9178E22/serialNumber=AF5D61CE12B7C3E58DC86C97872CBB2CDAAD27F1 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r11hzhK3w-WNyGyXhyy7LNqtJ_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft Manifest number: AA Signing time: Mon 11 Aug 2025 06:21:30 +0000 Manifest this update: Mon 11 Aug 2025 06:21:30 +0000 Manifest next update: Mon 18 Aug 2025 06:21:30 +0000 Files and hashes: 1: r11hzhK3w-WNyGyXhyy7LNqtJ_E.crl (hash: Bs9DJwd3Yk0vFLa2iqSVbHRhrGPqS1t7JwN5Jda68U4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.crl rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r11hzhK3w-WNyGyXhyy7LNqtJ_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178E22, serialNumber=AF5D61CE12B7C3E58DC86C97872CBB2CDAAD27F1 Validity Not Before: Aug 11 06:21:30 2025 GMT Not After : Aug 18 06:21:30 2025 GMT Subject: CN=68998bea-90a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:54:07:67:03:88:b6:79:55:bc:09:25:12:77: 0b:1c:e7:a8:47:d7:84:8f:d9:d8:5a:72:4c:c9:f8: 5a:27:95:47:32:d4:33:70:90:07:46:68:d3:82:1b: b6:e5:e8:6b:14:f4:8c:78:b3:ff:7c:79:6e:72:49: f7:b9:28:b2:3f:ec:74:d6:25:b3:db:81:17:99:1f: 62:50:61:e0:fe:6a:38:1d:6f:53:40:75:23:e4:4f: 5d:02:26:6b:60:1c:97:f9:52:33:2f:dc:9a:49:c7: 32:ea:fa:a9:13:e6:1d:24:87:a3:16:20:f9:6e:5b: d1:68:1b:de:47:ad:74:5e:f0:e2:01:eb:d6:f6:e5: 30:64:bc:03:bb:2e:12:5b:d3:49:09:36:79:32:0a: ba:55:d8:b1:69:4f:34:e2:45:b3:2b:a1:6d:35:85: 40:a5:b6:9b:9a:76:8f:63:6a:b5:7e:c3:d0:c4:01: f6:99:e8:bb:9f:f6:c4:0d:b3:01:d4:99:85:00:bf: b9:22:11:93:12:f9:d1:3f:9d:b0:73:b1:f7:b4:06: 4c:18:3a:b4:b3:dc:c9:19:4f:39:30:0a:df:e8:b6: 4c:aa:5d:5c:68:a5:2e:73:8b:48:2d:18:57:ed:a4: 40:8e:22:cd:08:33:33:b7:f7:a1:7d:bf:20:04:b1: 6d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:34:02:78:81:C7:F8:4B:82:DC:9E:F8:36:80:2B:43:B0:48:E8:BA X509v3 Authority Key Identifier: keyid:AF:5D:61:CE:12:B7:C3:E5:8D:C8:6C:97:87:2C:BB:2C:DA:AD:27:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r11hzhK3w-WNyGyXhyy7LNqtJ_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:7d:af:00:47:ca:94:68:a1:44:5e:f3:41:91:fc:fa:1b:80: 04:fa:77:3e:4b:98:13:3d:73:a1:b6:81:ef:29:45:21:96:8e: fa:58:24:b8:70:a8:8c:e6:a7:9f:3a:ae:07:af:13:89:6b:04: 33:b6:07:1d:d8:6c:06:15:9b:17:69:7c:fe:f2:4d:99:d5:37: 31:83:a6:6e:13:fd:06:5a:bd:f5:ef:1a:0c:28:54:60:06:ca: 8a:c4:42:1c:a3:7e:0e:76:3f:ae:c0:04:aa:9f:4e:a1:9f:33: 3a:44:fa:6b:7d:9b:5d:52:f7:d6:c2:02:e4:2c:69:62:eb:98: 25:f8:1e:c9:bc:ff:ba:6d:2a:fb:a6:2b:72:2c:15:63:44:03: 41:6b:61:9a:0e:3a:73:96:04:23:6f:c1:a6:58:17:bd:ba:33: 34:7f:ef:7f:23:00:7e:f9:7c:d9:b5:f7:ad:fc:87:84:89:a0: b2:f4:02:74:03:e5:ed:d1:e1:b2:a5:d3:2f:8b:43:3f:25:43: 6c:f8:ce:7f:0b:ce:3f:ea:7c:cd:c4:29:f4:7b:bc:cf:7e:e5: 58:f1:10:32:25:81:93:e5:b5:9e:69:50:22:81:60:30:4f:8d: ae:be:63:f8:54:5c:9a:3f:e1:5c:45:06:94:26:bc:35:e4:5a: 78:61:5f:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFMjIxMTAvBgNVBAUTKEFGNUQ2MUNFMTJCN0MzRTU4REM4NkM5Nzg3MkNCQjJD REFBRDI3RjEwHhcNMjUwODExMDYyMTMwWhcNMjUwODE4MDYyMTMwWjAYMRYwFAYD VQQDEw02ODk5OGJlYS05MGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVQHZwOItnlVvAklEncLHOeoR9eEj9nYWnJMyfhaJ5VHMtQzcJAHRmjTghu2 5ehrFPSMeLP/fHluckn3uSiyP+x01iWz24EXmR9iUGHg/mo4HW9TQHUj5E9dAiZr YByX+VIzL9yaSccy6vqpE+YdJIejFiD5blvRaBveR610XvDiAevW9uUwZLwDuy4S W9NJCTZ5Mgq6VdixaU804kWzK6FtNYVApbabmnaPY2q1fsPQxAH2mei7n/bEDbMB 1JmFAL+5IhGTEvnRP52wc7H3tAZMGDq0s9zJGU85MArf6LZMql1caKUuc4tILRhX 7aRAjiLNCDMzt/ehfb8gBLFtcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAw0AniB x/hLgtye+DaAK0OwSOi6MB8GA1UdIwQYMBaAFK9dYc4St8Pljchsl4csuyzarSfx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEUyMi9CNTAyNjM4Njc0 REExMUVGODAzOUIwMjZDNEY5QUUwMi9yMTFoemhLM3ctV055R3lYaHl5N0xOcXRK X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IxMWh6aEszdy1XTnlHeVhoeXk3TE5xdEpfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEUyMi9CNTAyNjM4Njc0REExMUVGODAzOUIwMjZDNEY5QUUwMi9yMTFoemhLM3ct V055R3lYaHl5N0xOcXRKX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGfa8AR8qUaKFEXvNBkfz6G4AE+nc+S5gTPXOhtoHvKUUhlo76WCS4 cKiM5qefOq4HrxOJawQztgcd2GwGFZsXaXz+8k2Z1Tcxg6ZuE/0GWr317xoMKFRg BsqKxEIco34Odj+uwASqn06hnzM6RPprfZtdUvfWwgLkLGli65gl+B7JvP+6bSr7 pityLBVjRANBa2GaDjpzlgQjb8GmWBe9ujM0f+9/IwB++XzZtfet/IeEiaCy9AJ0 A+Xt0eGypdMvi0M/JUNs+M5/C84/6nzNxCn0e7zPfuVY8RAyJYGT5bWeaVAigWAw T42uvmP4VFyaP+FcRQaUJrw15Fp4YV+h -----END CERTIFICATE-----Generated at Mon Aug 11 13:03:13 2025 by rpki-client