$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft File: 11KsJgWV3m0QKce5SPSUl-SD6s4.mft (raw, json) Hash identifier: ShkM8zPuJMWoa1L6+iXj6IfAkq9h0BvDRrnuH1c/YFg= Subject key identifier: D7:30:7C:FD:CF:D0:4C:1E:A0:08:0C:95:2E:5D:62:F2:48:BB:80:05 Authority key identifier: D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE Certificate issuer: /CN=A91383B0/serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Certificate serial: 2BD1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft Manifest number: 2BD1 Signing time: Fri 22 Aug 2025 15:35:09 +0000 Manifest this update: Fri 22 Aug 2025 15:35:08 +0000 Manifest next update: Fri 29 Aug 2025 15:35:08 +0000 Files and hashes: 1: 11KsJgWV3m0QKce5SPSUl-SD6s4.crl (hash: BYiy4FOGwwoEsUz+WN6qmJhhzAUkvKZJWGoSwBrhhWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11217 (0x2bd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0, serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Validity Not Before: Aug 22 15:35:08 2025 GMT Not After : Aug 29 15:35:08 2025 GMT Subject: CN=68a88e2d-7a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6b:19:be:01:a7:81:81:2e:9c:d6:c8:34:d9: de:4b:2c:85:54:00:c1:a4:78:ec:b1:d7:d0:f2:21: cc:e0:c3:5e:9b:15:3c:b9:ec:a9:5d:07:9a:58:89: c3:8b:36:70:f0:ec:98:6e:d1:97:f9:9e:31:27:36: ed:dd:98:6c:d8:17:47:07:33:8d:cb:0c:a2:b7:e1: 65:ed:b4:58:92:26:e3:1f:7a:cb:eb:b1:c1:66:19: 8e:49:a0:23:e5:47:d0:b1:7e:27:f5:5d:fd:70:70: de:28:5e:4a:54:45:ce:3d:b5:d7:8b:67:19:75:dd: 7b:7c:ab:c0:10:2b:bc:1d:c0:73:83:bf:76:e9:37: 32:dc:9e:49:c3:5d:45:61:21:25:ab:1c:2e:9d:a4: 38:8f:5d:ee:f8:13:8c:4f:96:97:d4:ba:4c:df:5b: be:16:02:b6:90:bc:00:a1:f1:1d:66:b4:13:a6:db: 6a:0a:ec:2d:be:93:4d:75:56:0e:ff:f5:56:f1:cf: bd:8a:0e:b4:35:a1:39:bd:58:83:18:6b:6b:40:82: 13:9c:19:b4:e6:6f:8c:b5:6f:76:6a:5f:ff:d2:29: 6e:05:b6:5c:c8:00:aa:c2:13:86:a3:4d:87:73:b9: 41:c1:31:02:ea:95:e0:68:79:de:59:b8:0a:44:0c: 79:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:30:7C:FD:CF:D0:4C:1E:A0:08:0C:95:2E:5D:62:F2:48:BB:80:05 X509v3 Authority Key Identifier: keyid:D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:a6:c8:29:09:dd:c2:a6:4f:1f:ad:2c:98:4b:f1:2e:7f:e6: 27:55:95:ed:79:d7:88:f1:13:e8:b6:90:28:05:13:80:c8:39: 7a:5f:32:a3:05:a0:bc:59:ad:3b:ea:01:61:f6:d9:9e:b9:24: 9c:53:b4:a0:ed:6b:12:93:3a:36:4e:62:84:08:6c:5f:e0:1c: 0a:f2:1e:99:60:af:f7:49:29:e3:83:c1:11:84:67:87:b6:b6: 20:66:03:46:2b:3c:e9:3d:26:41:6b:7c:80:ca:39:1d:2f:78: 59:05:0d:46:73:d6:2d:bb:35:20:c0:14:b8:a2:0a:50:c3:aa: ed:b6:30:87:eb:5f:df:db:2a:a0:0c:9d:bd:6b:71:e2:95:f0: 87:1f:3a:0c:e2:00:95:84:ad:04:99:a4:10:da:76:5b:bf:d3: f9:e4:25:f4:82:fc:a5:48:c5:4e:22:c3:51:34:30:e9:11:a5: bb:ca:96:0f:a2:a7:e2:c7:36:47:36:2c:c8:7e:16:8f:e4:0b: 65:82:ad:52:66:d5:2c:5e:53:2c:fa:20:84:1c:25:cd:2c:59: b6:a7:9c:56:87:30:25:3d:1a:fe:bf:2c:7a:d9:65:35:d8:91: 54:f5:95:9f:df:a6:21:74:2b:11:df:3e:47:6b:fa:60:ef:37: 48:a8:e2:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEQ3NTJBQzI2MDU5NURFNkQxMDI5QzdCOTQ4RjQ5NDk3 RTQ4M0VBQ0UwHhcNMjUwODIyMTUzNTA4WhcNMjUwODI5MTUzNTA4WjAYMRYwFAYD VQQDEw02OGE4OGUyZC03YTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmsZvgGngYEunNbINNneSyyFVADBpHjssdfQ8iHM4MNemxU8ueypXQeaWInD izZw8OyYbtGX+Z4xJzbt3Zhs2BdHBzONywyit+Fl7bRYkibjH3rL67HBZhmOSaAj 5UfQsX4n9V39cHDeKF5KVEXOPbXXi2cZdd17fKvAECu8HcBzg7926Tcy3J5Jw11F YSElqxwunaQ4j13u+BOMT5aX1LpM31u+FgK2kLwAofEdZrQTpttqCuwtvpNNdVYO //VW8c+9ig60NaE5vViDGGtrQIITnBm05m+MtW92al//0iluBbZcyACqwhOGo02H c7lBwTEC6pXgaHneWbgKRAx5nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcwfP3P 0EweoAgMlS5dYvJIu4AFMB8GA1UdIwQYMBaAFNdSrCYFld5tECnHuUj0lJfkg+rO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC8zRDNGRTlCNkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNtMFFLY2U1U1BTVWwtU0Q2 czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzExS3NKZ1dWM20wUUtjZTVTUFNVbC1TRDZzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC8zRDNGRTlCNkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNt MFFLY2U1U1BTVWwtU0Q2czQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWpsgpCd3Cpk8frSyYS/Euf+YnVZXtedeI8RPotpAoBROAyDl6XzKj BaC8Wa076gFh9tmeuSScU7Sg7WsSkzo2TmKECGxf4BwK8h6ZYK/3SSnjg8ERhGeH trYgZgNGKzzpPSZBa3yAyjkdL3hZBQ1Gc9YtuzUgwBS4ogpQw6rttjCH61/f2yqg DJ29a3HilfCHHzoM4gCVhK0EmaQQ2nZbv9P55CX0gvylSMVOIsNRNDDpEaW7ypYP oqfixzZHNizIfhaP5Atlgq1SZtUsXlMs+iCEHCXNLFm2p5xWhzAlPRr+vyx62WU1 2JFU9ZWf36YhdCsR3z5Ha/pg7zdIqOLn -----END CERTIFICATE-----Generated at Sat Aug 23 12:50:11 2025 by rpki-client