$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft File: F11CAiv1C9bCDzCxxa2MlOCFvE4.mft (raw, json) Hash identifier: EY2ZEX6AgAA5FkGbpSJ9PBVkJMU6gNraHiXzA+nhHvA= Subject key identifier: 74:82:F9:B4:98:06:74:3B:28:47:C4:EA:77:0B:72:71:87:32:7F:5B Authority key identifier: 17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E Certificate issuer: /CN=A91F89D9/serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft Manifest number: AE Signing time: Sat 09 Aug 2025 06:34:11 +0000 Manifest this update: Sat 09 Aug 2025 06:34:10 +0000 Manifest next update: Sat 16 Aug 2025 06:34:10 +0000 Files and hashes: 1: F11CAiv1C9bCDzCxxa2MlOCFvE4.crl (hash: L1AIZH2KMekwNWn2DT5kiF6U+GiY9Ai55jEb8+gPZpc=) 2: A18C777C6F5F11EFAF849B28C4F9AE02.roa (hash: fujb24eQPYgPwcrZc8i7YcmXNyel+exUWMY7rJXI438=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89D9, serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E Validity Not Before: Aug 9 06:34:10 2025 GMT Not After : Aug 16 06:34:10 2025 GMT Subject: CN=6896ebe3-7164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d3:a5:54:ec:38:1f:64:32:2e:f1:49:af:aa: b6:47:da:e7:43:b1:99:c0:d4:cd:ee:dd:ce:bf:a3: a3:8e:a8:60:df:40:ac:b0:b9:41:36:73:a1:e0:94: c8:23:e3:9a:d3:ce:20:2c:8b:95:46:7c:7b:b4:d0: 6d:4e:1c:dc:92:0c:27:b8:d2:66:14:4b:d8:98:40: 6b:c4:48:04:e4:2c:fa:22:9e:8b:f4:06:a3:2f:3c: 85:96:b1:21:f8:91:35:48:2f:a3:9a:20:39:5a:5e: c0:79:c0:b0:fe:05:ff:ca:4d:d7:47:29:e7:9f:3f: 98:13:d0:98:46:01:a8:46:90:53:13:3c:2d:ec:40: 69:e5:ac:f8:1a:fa:02:53:61:03:31:92:2b:72:e9: 66:84:49:f3:69:47:66:14:e2:a0:f9:36:5f:13:1c: c8:f3:05:e5:a5:06:4f:64:d6:a7:6b:88:41:21:1c: 05:e1:1b:f2:90:77:b1:ab:17:b3:de:e6:f1:a0:10: 25:87:94:f6:bb:a8:9a:0a:db:27:9f:c4:60:18:b2: 53:94:dd:eb:55:19:1d:70:8f:4a:d1:e3:ed:b3:00: b2:c5:63:3d:c8:5d:8a:3a:0f:26:fa:b1:4e:f8:da: 41:45:3c:7e:87:6d:39:32:86:5b:c5:14:2d:5c:94: 4d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:82:F9:B4:98:06:74:3B:28:47:C4:EA:77:0B:72:71:87:32:7F:5B X509v3 Authority Key Identifier: keyid:17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:56:27:4b:df:b1:e2:50:04:fb:36:68:d0:33:e9:32:5a:b2: 5e:e1:21:0a:d7:4f:d2:41:85:90:35:1d:2d:b5:2f:6a:43:be: 27:96:ea:20:b7:2f:43:d3:b6:ec:3e:88:ba:0c:6c:65:a8:f9: 9a:a2:d5:ec:ee:83:ae:cc:c9:73:3e:99:5a:77:ef:77:86:d0: 18:7a:63:08:2e:0b:de:ff:7b:3a:13:88:81:42:69:17:01:be: 30:ec:1b:9c:7f:0c:bb:f5:51:54:a7:4c:a3:7b:90:75:69:48: c7:8d:5a:d6:ad:5e:c1:35:e4:39:9a:f9:cd:bb:ff:22:57:ea: e5:84:79:f4:cd:ca:26:e6:ec:09:e4:86:03:ef:f2:6b:df:36: 6a:2f:5c:c4:8e:0b:c0:60:6d:52:78:bc:3a:30:91:37:24:ab: a2:0d:e2:03:45:28:49:36:71:18:9f:63:16:99:d0:d9:73:7e: f4:04:88:45:a2:8d:f1:a4:cb:0f:4b:3b:db:0f:03:f0:a6:d9: c7:50:98:dd:ca:4b:53:ab:c2:55:a2:e6:f9:1e:b9:9e:68:9e: f6:89:9e:9d:89:72:38:15:f4:85:9e:f1:d7:60:fd:99:df:94: f7:40:7e:6c:8a:6c:aa:67:c1:bd:13:31:83:71:04:e8:8a:e1: e5:5c:92:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5RDkxMTAvBgNVBAUTKDE3NUQ0MjAyMkJGNTBCRDZDMjBGMzBCMUM1QUQ4Qzk0 RTA4NUJDNEUwHhcNMjUwODA5MDYzNDEwWhcNMjUwODE2MDYzNDEwWjAYMRYwFAYD VQQDEw02ODk2ZWJlMy03MTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNOlVOw4H2QyLvFJr6q2R9rnQ7GZwNTN7t3Ov6Ojjqhg30CssLlBNnOh4JTI I+Oa084gLIuVRnx7tNBtThzckgwnuNJmFEvYmEBrxEgE5Cz6Ip6L9AajLzyFlrEh +JE1SC+jmiA5Wl7AecCw/gX/yk3XRynnnz+YE9CYRgGoRpBTEzwt7EBp5az4GvoC U2EDMZIrculmhEnzaUdmFOKg+TZfExzI8wXlpQZPZNana4hBIRwF4RvykHexqxez 3ubxoBAlh5T2u6iaCtsnn8RgGLJTlN3rVRkdcI9K0ePtswCyxWM9yF2KOg8m+rFO +NpBRTx+h205MoZbxRQtXJRNBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSC+bSY BnQ7KEfE6ncLcnGHMn9bMB8GA1UdIwQYMBaAFBddQgIr9QvWwg8wscWtjJTghbxO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlEOS9FQUJGRUJGMjZG NUMxMUVGODM1QTdCNjZDNEY5QUUwMi9GMTFDQWl2MUM5YkNEekN4eGEyTWxPQ0Z2 RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0YxMUNBaXYxQzliQ0R6Q3h4YTJNbE9DRnZFNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlEOS9FQUJGRUJGMjZGNUMxMUVGODM1QTdCNjZDNEY5QUUwMi9GMTFDQWl2MUM5 YkNEekN4eGEyTWxPQ0Z2RTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHVidL37HiUAT7NmjQM+kyWrJe4SEK10/SQYWQNR0ttS9qQ74nluog ty9D07bsPoi6DGxlqPmaotXs7oOuzMlzPplad+93htAYemMILgve/3s6E4iBQmkX Ab4w7Bucfwy79VFUp0yje5B1aUjHjVrWrV7BNeQ5mvnNu/8iV+rlhHn0zcom5uwJ 5IYD7/Jr3zZqL1zEjgvAYG1SeLw6MJE3JKuiDeIDRShJNnEYn2MWmdDZc370BIhF oo3xpMsPSzvbDwPwptnHUJjdyktTq8JVoub5HrmeaJ72iZ6diXI4FfSFnvHXYP2Z 35T3QH5simyqZ8G9EzGDcQToiuHlXJJS -----END CERTIFICATE-----Generated at Sat Aug 9 23:08:43 2025 by rpki-client