$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft File: 11KsJgWV3m0QKce5SPSUl-SD6s4.mft (raw, json) Hash identifier: NEFahy2GmUjAIiyup5js9pgJhpCeTWNEDduWGj6D1bc= Subject key identifier: 12:9D:3C:43:D7:9A:9E:71:D7:21:A9:EE:2F:F1:CF:F8:FC:3B:5A:10 Authority key identifier: D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE Certificate issuer: /CN=A91383B0/serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Certificate serial: 2BD9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft Manifest number: 2BD9 Signing time: Sat 06 Sep 2025 15:34:12 +0000 Manifest this update: Sat 06 Sep 2025 15:34:12 +0000 Manifest next update: Sat 13 Sep 2025 15:34:12 +0000 Files and hashes: 1: 11KsJgWV3m0QKce5SPSUl-SD6s4.crl (hash: l7mpopqXcRl7Z09bW4/kDRMm8CVp0iK5kaoWnoIxmx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 15:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11225 (0x2bd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0, serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Validity Not Before: Sep 6 15:34:12 2025 GMT Not After : Sep 13 15:34:12 2025 GMT Subject: CN=68bc5474-aef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:14:e7:4b:eb:85:33:1f:5a:af:d5:08:9a:1b: 52:68:03:dd:81:05:5a:f0:12:71:86:1a:fb:3c:1a: 55:d9:60:8f:53:e7:86:29:4e:92:2d:96:76:71:32: ef:1d:d4:70:e3:28:41:0a:b4:99:fe:76:d7:9e:3e: 81:80:06:0f:2f:86:e2:04:66:34:26:3a:77:8f:25: 0a:e8:48:e2:5e:54:74:3d:45:00:c5:5d:77:a3:ca: 0f:8d:33:7a:25:d4:8e:df:ea:ae:ae:ad:fc:43:8e: e5:eb:fc:04:26:50:4d:0b:f0:aa:c0:67:90:10:82: 45:42:2b:bf:b7:79:9a:f7:28:99:ca:6d:af:c9:82: 19:f4:f9:ce:25:d4:a0:35:b8:43:aa:d4:24:74:00: 51:e0:34:89:ee:b3:44:ae:14:50:2c:f4:1f:27:d5: 6c:fd:fa:b0:5a:65:9e:c8:5e:d3:67:98:d3:9b:a4: b2:9e:43:77:5c:39:fa:78:f1:d7:ee:6b:68:cf:c5: b8:7e:a3:70:5b:fd:ab:ae:67:95:d8:b5:74:bd:f0: 24:4e:0e:26:04:1a:fe:ae:21:78:ce:60:69:77:52: e5:8c:06:e6:65:a3:c7:e7:c7:fd:b4:16:dd:ed:72: 9e:d8:51:29:42:bd:20:79:08:75:7a:2e:04:7f:97: 57:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9D:3C:43:D7:9A:9E:71:D7:21:A9:EE:2F:F1:CF:F8:FC:3B:5A:10 X509v3 Authority Key Identifier: keyid:D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:3b:4d:d2:43:93:01:8f:60:f8:44:5e:78:5d:af:5e:2f:1d: 8f:dc:5c:ab:51:33:fd:69:3b:fa:76:b0:27:42:3f:d0:5d:21: eb:b6:f3:bd:f7:28:34:4e:e3:54:45:ec:24:e0:ca:60:81:3c: b9:89:90:21:28:56:4f:4b:5a:53:2b:90:c9:d1:81:83:b3:2e: c1:30:c5:4a:61:dc:e7:6e:cd:04:e5:bc:0c:8f:9e:d4:f9:6c: 62:5d:fa:93:d5:24:b6:99:a5:f7:b5:92:e9:25:9e:fe:ad:66: b0:66:b4:0a:b6:e7:61:7d:7f:34:82:35:19:bd:4d:91:d3:56: e3:14:d5:fa:6e:27:9b:9f:df:49:59:79:fd:7b:2b:2b:87:4b: 7d:2c:c9:e0:d0:4a:11:ac:a7:d3:49:53:f7:5d:a5:d0:dd:15: 8a:8d:39:9e:25:c9:ee:af:cd:38:4a:9a:31:b1:68:0e:d0:35: 2c:8d:3f:78:69:6a:63:cf:d0:0a:1f:65:1c:ed:2d:87:d8:26: 45:f0:d7:c8:18:42:a0:c8:d6:37:8f:62:d1:2e:ea:a9:7f:15: a5:91:46:5a:d7:81:e4:5c:ab:f5:3a:1b:70:4f:90:95:ab:c7: 28:c6:30:75:ec:84:7d:45:c7:29:be:70:99:da:72:35:82:ef: a6:71:e0:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEQ3NTJBQzI2MDU5NURFNkQxMDI5QzdCOTQ4RjQ5NDk3 RTQ4M0VBQ0UwHhcNMjUwOTA2MTUzNDEyWhcNMjUwOTEzMTUzNDEyWjAYMRYwFAYD VQQDEw02OGJjNTQ3NC1hZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8RTnS+uFMx9ar9UImhtSaAPdgQVa8BJxhhr7PBpV2WCPU+eGKU6SLZZ2cTLv HdRw4yhBCrSZ/nbXnj6BgAYPL4biBGY0Jjp3jyUK6EjiXlR0PUUAxV13o8oPjTN6 JdSO3+qurq38Q47l6/wEJlBNC/CqwGeQEIJFQiu/t3ma9yiZym2vyYIZ9PnOJdSg NbhDqtQkdABR4DSJ7rNErhRQLPQfJ9Vs/fqwWmWeyF7TZ5jTm6SynkN3XDn6ePHX 7mtoz8W4fqNwW/2rrmeV2LV0vfAkTg4mBBr+riF4zmBpd1LljAbmZaPH58f9tBbd 7XKe2FEpQr0geQh1ei4Ef5dXRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKdPEPX mp5x1yGp7i/xz/j8O1oQMB8GA1UdIwQYMBaAFNdSrCYFld5tECnHuUj0lJfkg+rO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC8zRDNGRTlCNkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNtMFFLY2U1U1BTVWwtU0Q2 czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzExS3NKZ1dWM20wUUtjZTVTUFNVbC1TRDZzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC8zRDNGRTlCNkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNt MFFLY2U1U1BTVWwtU0Q2czQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpO03SQ5MBj2D4RF54Xa9eLx2P3FyrUTP9aTv6drAnQj/QXSHrtvO9 9yg0TuNURewk4MpggTy5iZAhKFZPS1pTK5DJ0YGDsy7BMMVKYdznbs0E5bwMj57U +WxiXfqT1SS2maX3tZLpJZ7+rWawZrQKtudhfX80gjUZvU2R01bjFNX6biebn99J WXn9eysrh0t9LMng0EoRrKfTSVP3XaXQ3RWKjTmeJcnur804SpoxsWgO0DUsjT94 aWpjz9AKH2Uc7S2H2CZF8NfIGEKgyNY3j2LRLuqpfxWlkUZa14HkXKv1OhtwT5CV q8coxjB17IR9RccpvnCZ2nI1gu+mceAS -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:13 2025 by rpki-client