$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft File: r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft (raw, json) Hash identifier: TaLKgf6AsD56b348HO6bzXv66vYPUi17QwKovlVgwm4= Subject key identifier: DA:65:93:26:20:50:12:21:87:0B:A1:90:DC:47:7D:9E:62:00:76:2B Authority key identifier: AF:5D:61:CE:12:B7:C3:E5:8D:C8:6C:97:87:2C:BB:2C:DA:AD:27:F1 Certificate issuer: /CN=A9178E22/serialNumber=AF5D61CE12B7C3E58DC86C97872CBB2CDAAD27F1 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r11hzhK3w-WNyGyXhyy7LNqtJ_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft Manifest number: AF Signing time: Thu 21 Aug 2025 06:17:20 +0000 Manifest this update: Thu 21 Aug 2025 06:17:19 +0000 Manifest next update: Thu 28 Aug 2025 06:17:19 +0000 Files and hashes: 1: r11hzhK3w-WNyGyXhyy7LNqtJ_E.crl (hash: IQz5vkDu6lBeFreIGGCMySdADv3JiHOLwXW3LIYbZqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.crl rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r11hzhK3w-WNyGyXhyy7LNqtJ_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 06:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178E22, serialNumber=AF5D61CE12B7C3E58DC86C97872CBB2CDAAD27F1 Validity Not Before: Aug 21 06:17:19 2025 GMT Not After : Aug 28 06:17:19 2025 GMT Subject: CN=68a6b9f0-b0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:41:55:cd:b8:76:41:15:3f:aa:14:ca:7f:fb: 81:51:03:5f:92:ab:51:2e:0f:cb:d9:11:ab:74:03: d1:ee:93:89:19:b5:0e:c4:4f:e6:86:ce:25:57:7f: 04:3e:9d:c7:62:68:b1:d4:77:be:9b:6e:1a:5c:ca: 81:3f:29:6b:2a:40:69:ee:ae:b8:40:de:78:34:fd: a0:20:a1:2d:d9:91:49:ea:3e:8a:22:9a:61:c2:56: 17:5d:20:d3:b9:4a:23:94:18:01:e8:04:1b:ce:87: a7:60:bd:92:f7:aa:ef:74:84:68:7d:ce:df:04:3d: b9:9b:a1:eb:87:26:17:fb:8f:7e:6d:ca:a6:5f:dd: 32:2b:b3:e4:44:92:63:5e:5d:85:f9:63:92:2d:e6: 3f:4d:c6:f7:1c:17:9e:3b:a1:d0:86:4b:6a:70:4f: 7c:0b:30:9d:75:e9:23:c1:64:bc:c7:33:2e:43:6c: b6:c3:72:1b:51:f9:d2:b7:49:fd:61:f2:1f:02:da: da:5b:3d:56:10:d2:a0:6e:4f:f3:7a:ea:d6:91:85: cb:53:c9:25:cd:62:ed:65:1b:cb:17:e4:92:6d:d7: 36:38:48:3e:8b:31:74:7a:04:53:e9:8e:b1:ce:6d: c2:67:f4:54:22:43:43:3d:70:6b:3e:32:0a:ec:56: ed:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:65:93:26:20:50:12:21:87:0B:A1:90:DC:47:7D:9E:62:00:76:2B X509v3 Authority Key Identifier: keyid:AF:5D:61:CE:12:B7:C3:E5:8D:C8:6C:97:87:2C:BB:2C:DA:AD:27:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r11hzhK3w-WNyGyXhyy7LNqtJ_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:ec:a0:d2:ce:03:aa:0e:e3:d8:06:3c:43:08:e9:b3:16:dd: f9:7f:85:5f:ee:77:0a:46:92:1c:2d:ce:7c:c4:e3:48:de:8e: 8a:da:a2:0b:c9:3c:c1:12:c6:05:ec:a8:a2:74:13:f4:ce:85: 16:04:42:c3:98:15:53:11:dd:5b:50:5f:01:b8:39:b7:ca:89: d7:9c:5b:61:d3:35:3e:ed:4f:59:5a:cb:af:8f:c5:a1:dc:7c: c4:35:94:90:3b:06:2b:06:a5:58:45:b5:8b:1a:7d:9b:64:8a: 27:2d:29:23:22:16:c1:4c:9a:c5:1f:74:08:7a:d2:84:d9:4f: 9d:82:e6:e2:42:22:35:a0:95:66:81:fa:f5:58:02:95:67:38: 72:72:08:bf:b7:ca:19:80:36:8c:67:1c:5a:8d:55:e2:f6:92: 4e:e5:9e:37:29:d3:e6:71:33:b4:a7:fa:fe:1b:cf:20:cb:7b: d6:4b:5d:94:1f:41:23:80:f8:2e:b2:4a:fa:30:42:9f:8f:25: 80:d0:e3:12:62:52:71:76:be:23:6b:0f:98:3e:f5:41:6c:3d: 32:fb:35:60:1e:6c:b9:a2:30:f5:26:63:a2:b5:ac:71:20:56: 54:bd:f4:5a:5b:07:80:b7:99:52:90:45:8d:6d:82:63:47:3c: c3:93:69:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFMjIxMTAvBgNVBAUTKEFGNUQ2MUNFMTJCN0MzRTU4REM4NkM5Nzg3MkNCQjJD REFBRDI3RjEwHhcNMjUwODIxMDYxNzE5WhcNMjUwODI4MDYxNzE5WjAYMRYwFAYD VQQDEw02OGE2YjlmMC1iMGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEFVzbh2QRU/qhTKf/uBUQNfkqtRLg/L2RGrdAPR7pOJGbUOxE/mhs4lV38E Pp3HYmix1He+m24aXMqBPylrKkBp7q64QN54NP2gIKEt2ZFJ6j6KIpphwlYXXSDT uUojlBgB6AQbzoenYL2S96rvdIRofc7fBD25m6HrhyYX+49+bcqmX90yK7PkRJJj Xl2F+WOSLeY/Tcb3HBeeO6HQhktqcE98CzCddekjwWS8xzMuQ2y2w3IbUfnSt0n9 YfIfAtraWz1WENKgbk/zeurWkYXLU8klzWLtZRvLF+SSbdc2OEg+izF0egRT6Y6x zm3CZ/RUIkNDPXBrPjIK7FbtUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNplkyYg UBIhhwuhkNxHfZ5iAHYrMB8GA1UdIwQYMBaAFK9dYc4St8Pljchsl4csuyzarSfx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEUyMi9CNTAyNjM4Njc0 REExMUVGODAzOUIwMjZDNEY5QUUwMi9yMTFoemhLM3ctV055R3lYaHl5N0xOcXRK X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IxMWh6aEszdy1XTnlHeVhoeXk3TE5xdEpfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEUyMi9CNTAyNjM4Njc0REExMUVGODAzOUIwMjZDNEY5QUUwMi9yMTFoemhLM3ct V055R3lYaHl5N0xOcXRKX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ7KDSzgOqDuPYBjxDCOmzFt35f4Vf7ncKRpIcLc58xONI3o6K2qIL yTzBEsYF7KiidBP0zoUWBELDmBVTEd1bUF8BuDm3yonXnFth0zU+7U9ZWsuvj8Wh 3HzENZSQOwYrBqVYRbWLGn2bZIonLSkjIhbBTJrFH3QIetKE2U+dgubiQiI1oJVm gfr1WAKVZzhycgi/t8oZgDaMZxxajVXi9pJO5Z43KdPmcTO0p/r+G88gy3vWS12U H0EjgPguskr6MEKfjyWA0OMSYlJxdr4jaw+YPvVBbD0y+zVgHmy5ojD1JmOitaxx IFZUvfRaWweAt5lSkEWNbYJjRzzDk2mF -----END CERTIFICATE-----Generated at Fri Aug 22 16:36:08 2025 by rpki-client