$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft File: r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft (raw, json) Hash identifier: 0MQfrhnwB4pUnNHNc+R3xIL2O+nKqxY8Xo+/d9FIeBE= Subject key identifier: D2:88:4D:D5:96:4A:29:06:98:97:49:30:5E:DE:8A:49:F1:E4:39:9C Authority key identifier: AF:5D:61:CE:12:B7:C3:E5:8D:C8:6C:97:87:2C:BB:2C:DA:AD:27:F1 Certificate issuer: /CN=A9178E22/serialNumber=AF5D61CE12B7C3E58DC86C97872CBB2CDAAD27F1 Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r11hzhK3w-WNyGyXhyy7LNqtJ_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft Manifest number: CE Signing time: Sun 19 Oct 2025 08:48:57 +0000 Manifest this update: Sun 19 Oct 2025 08:48:57 +0000 Manifest next update: Sun 26 Oct 2025 08:48:57 +0000 Files and hashes: 1: r11hzhK3w-WNyGyXhyy7LNqtJ_E.crl (hash: qnuLjbABmIu/1XcTF3PDkbVJjZERXj1LMl4JQB1yK2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.crl rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r11hzhK3w-WNyGyXhyy7LNqtJ_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178E22, serialNumber=AF5D61CE12B7C3E58DC86C97872CBB2CDAAD27F1 Validity Not Before: Oct 19 08:48:57 2025 GMT Not After : Oct 26 08:48:57 2025 GMT Subject: CN=68f4a5f9-ba47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6d:0e:72:1e:4b:f9:95:01:40:60:3b:15:86: 01:0c:a3:7a:6f:a7:e5:35:59:fd:56:f3:8a:4a:70: 42:48:35:ab:6a:0e:66:4b:8d:d0:b6:07:98:a1:bf: aa:a6:a2:d4:08:06:f6:e4:d0:53:20:c0:eb:60:e2: 11:8b:2f:43:3d:68:7c:bb:3d:f1:71:5d:29:da:62: fc:b9:b7:c9:7a:d9:0e:f8:2b:6f:c2:fe:0a:05:91: 5a:4e:e7:3d:e2:33:e5:3d:65:21:b5:d1:d8:83:40: c9:3f:73:ed:0e:09:82:8f:64:7c:d1:21:e6:a6:40: f6:fe:8d:9d:7e:19:b9:6d:fe:03:a3:f8:a5:59:b9: ac:46:d9:7b:3b:da:55:1a:78:e5:83:94:36:57:88: fb:22:9c:cf:2b:95:9b:c8:27:66:9a:c4:8b:19:2e: 68:2c:fc:8e:06:c0:45:02:d1:10:9c:53:61:f3:6f: dc:21:d0:86:d1:37:7b:06:72:2d:e8:24:ec:88:f3: 8b:8c:c6:0e:41:09:38:b4:5c:17:42:44:5f:53:b7: 36:1c:ec:b2:75:7b:61:f4:eb:c4:ed:b9:16:d9:98: 57:4f:b4:b0:80:75:5b:7d:b4:2c:c5:68:77:ed:64: a0:02:2b:db:1c:5e:0e:7c:cf:9e:63:08:02:e4:c0: 69:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:88:4D:D5:96:4A:29:06:98:97:49:30:5E:DE:8A:49:F1:E4:39:9C X509v3 Authority Key Identifier: keyid:AF:5D:61:CE:12:B7:C3:E5:8D:C8:6C:97:87:2C:BB:2C:DA:AD:27:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r11hzhK3w-WNyGyXhyy7LNqtJ_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1a:f6:f6:cf:ce:13:08:b6:66:56:7a:e0:13:3d:db:ec:d1: 0f:9e:e5:30:54:8e:40:c3:5f:57:e8:d8:49:7a:69:0c:0f:e0: e8:1f:f4:81:08:c0:02:f7:b1:2d:70:40:0f:a3:89:23:2a:76: 37:2a:94:83:80:24:ec:63:60:9f:d5:97:de:0c:ea:66:7f:a0: e8:6e:5f:c9:49:c7:88:71:49:38:e7:1a:05:e5:05:0c:99:f1: 99:a6:3d:20:b4:bf:10:be:a6:01:26:5c:06:ee:62:28:15:a8: 16:96:cb:eb:91:0f:58:b2:a0:6c:20:05:b6:d3:d1:d0:93:32: 61:e2:56:13:cf:94:8f:0c:5a:b3:78:49:10:f0:1e:bf:b7:61: c6:b0:35:96:1e:c5:1e:9d:73:3a:4e:54:67:e7:22:a3:4e:64: c4:a3:3b:cb:a1:ad:2e:fe:06:3c:7f:15:e6:30:a7:81:a6:07: 6a:d5:3e:f7:9a:ed:a2:2a:fe:fb:be:37:cf:39:a6:45:b4:2f: 9e:eb:6a:af:1f:2d:cd:8b:1c:f9:8f:76:7b:7b:e9:cc:71:22: 02:ca:8a:0e:1f:dd:be:9e:51:13:d5:23:59:ce:32:45:10:88: c1:a6:ed:31:77:a1:f7:4c:0e:cb:cc:08:4a:f2:35:42:3e:89: 0e:2e:8f:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFMjIxMTAvBgNVBAUTKEFGNUQ2MUNFMTJCN0MzRTU4REM4NkM5Nzg3MkNCQjJD REFBRDI3RjEwHhcNMjUxMDE5MDg0ODU3WhcNMjUxMDI2MDg0ODU3WjAYMRYwFAYD VQQDEw02OGY0YTVmOS1iYTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuW0Och5L+ZUBQGA7FYYBDKN6b6flNVn9VvOKSnBCSDWrag5mS43QtgeYob+q pqLUCAb25NBTIMDrYOIRiy9DPWh8uz3xcV0p2mL8ubfJetkO+Ctvwv4KBZFaTuc9 4jPlPWUhtdHYg0DJP3PtDgmCj2R80SHmpkD2/o2dfhm5bf4Do/ilWbmsRtl7O9pV Gnjlg5Q2V4j7IpzPK5WbyCdmmsSLGS5oLPyOBsBFAtEQnFNh82/cIdCG0Td7BnIt 6CTsiPOLjMYOQQk4tFwXQkRfU7c2HOyydXth9OvE7bkW2ZhXT7SwgHVbfbQsxWh3 7WSgAivbHF4OfM+eYwgC5MBpCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKITdWW SikGmJdJMF7eiknx5DmcMB8GA1UdIwQYMBaAFK9dYc4St8Pljchsl4csuyzarSfx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEUyMi9CNTAyNjM4Njc0 REExMUVGODAzOUIwMjZDNEY5QUUwMi9yMTFoemhLM3ctV055R3lYaHl5N0xOcXRK X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IxMWh6aEszdy1XTnlHeVhoeXk3TE5xdEpfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEUyMi9CNTAyNjM4Njc0REExMUVGODAzOUIwMjZDNEY5QUUwMi9yMTFoemhLM3ct V055R3lYaHl5N0xOcXRKX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8Gvb2z84TCLZmVnrgEz3b7NEPnuUwVI5Aw19X6NhJemkMD+DoH/SB CMAC97EtcEAPo4kjKnY3KpSDgCTsY2Cf1ZfeDOpmf6Dobl/JSceIcUk45xoF5QUM mfGZpj0gtL8QvqYBJlwG7mIoFagWlsvrkQ9YsqBsIAW209HQkzJh4lYTz5SPDFqz eEkQ8B6/t2HGsDWWHsUenXM6TlRn5yKjTmTEozvLoa0u/gY8fxXmMKeBpgdq1T73 mu2iKv77vjfPOaZFtC+e62qvHy3Nixz5j3Z7e+nMcSICyooOH92+nlET1SNZzjJF EIjBpu0xd6H3TA7LzAhK8jVCPokOLo82 -----END CERTIFICATE-----Generated at Mon Oct 20 21:59:48 2025 by rpki-client