$ rpki-client -vvf rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft File: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft (raw, json) Hash identifier: Gn89TSUYLkE9c62U7RG4CHe01iqr5/F3OPh+uB8WUsI= Subject key identifier: A9:F6:C7:A1:69:81:F3:30:CD:BF:C3:EC:1A:E5:F3:5F:6B:05:71:02 Authority key identifier: 11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 Certificate issuer: /CN=A919FDC0/serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft Manifest number: 11 Signing time: Sat 23 Aug 2025 08:18:41 +0000 Manifest this update: Sat 23 Aug 2025 08:18:41 +0000 Manifest next update: Sat 30 Aug 2025 08:18:41 +0000 Files and hashes: 1: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl (hash: 7T2i2Q1BYfn2Rq9aOt17fH2nuOd8vto/bL31OBslfKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FDC0, serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Validity Not Before: Aug 23 08:18:41 2025 GMT Not After : Aug 30 08:18:41 2025 GMT Subject: CN=68a97961-218b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5c:91:32:ec:5e:e4:3d:86:ee:6c:d6:90:ce: fa:ef:5e:1a:21:70:b7:37:66:90:86:de:2e:95:6c: 9f:f6:56:8c:20:92:94:91:61:32:73:c1:b3:9d:b3: cd:12:0d:e7:0f:99:4a:96:7e:9c:a8:28:88:83:00: 9f:f3:96:8f:7f:2f:52:c5:bf:2c:76:ac:39:c8:06: 5d:37:2b:88:78:2d:7f:38:69:87:d4:25:0e:9a:19: d8:f4:ff:f8:bd:0b:80:ff:13:ba:0f:57:a1:2f:7d: ee:03:57:da:9b:77:74:97:17:c9:40:55:ee:41:6d: 8d:06:7c:40:8f:50:ac:37:bc:36:db:24:a1:9e:8f: 33:80:a0:35:62:8a:74:39:c4:a9:4e:9a:a7:5b:92: 8c:d6:e9:0c:51:a1:83:d2:a9:5f:91:90:ca:eb:29: 4e:a2:60:8f:21:51:f0:a8:f3:50:e5:bf:b0:12:a1: d6:8c:52:c2:08:c5:8c:8f:51:cd:ab:b6:2e:4a:20: 2d:c5:60:8a:d2:bb:d0:f8:b2:0e:c4:08:91:3a:56: 25:9d:09:ab:1b:5e:0c:3d:b3:b6:ab:90:db:3c:ed: c0:b4:0b:49:c8:cc:50:4f:e8:28:3e:c3:bc:77:c5: 77:59:72:4a:16:f8:2b:91:8d:2d:2f:ba:aa:46:ef: c0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F6:C7:A1:69:81:F3:30:CD:BF:C3:EC:1A:E5:F3:5F:6B:05:71:02 X509v3 Authority Key Identifier: keyid:11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:6e:ac:2b:c0:6b:f0:54:30:e6:aa:e1:41:82:e7:a1:79:89: b6:4c:25:12:53:9e:f2:13:5d:76:e4:5e:f6:94:df:63:11:68: 19:6d:da:d0:b9:ac:18:ec:f8:4b:5f:e0:aa:53:1e:73:e7:2d: c5:65:a5:61:e0:21:cd:41:4c:aa:d4:af:31:d9:16:6d:7c:39: fb:11:32:d6:0d:06:b8:82:64:92:39:88:6c:54:f5:a1:69:f8: 28:e4:13:78:e5:7c:02:4b:44:a4:c5:c2:46:da:19:bd:92:f5: 27:24:22:aa:da:82:49:a5:2a:c1:12:7d:d0:98:16:75:9e:13: 3e:7f:ab:32:84:96:76:79:e1:26:3f:c8:cb:ba:77:e8:ca:55: cf:dd:0c:70:a2:74:df:99:44:2d:ef:1c:d6:2c:18:5a:3f:7d: e8:c3:eb:97:ba:94:33:77:5e:23:da:39:0f:b3:29:a0:fd:2c: f0:10:f5:14:1c:4a:0a:e7:0e:55:d0:1a:f7:51:c9:c6:d9:44: f8:d1:95:67:a0:11:e3:99:45:a9:3f:0d:97:40:82:c7:53:81: 28:af:65:cf:9c:46:87:2d:4f:6f:3b:84:f5:40:0a:37:75:ec: 3a:63:85:cb:0c:49:b9:37:f8:e1:2d:f0:14:d8:98:22:e6:e5: f3:85:db:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RkRDMDExMC8GA1UEBRMoMTE3QzBENkQxOUJGQkE0OEI1RkE5RTUxN0QwRTY5MjY1 NUM5OEM0NDAeFw0yNTA4MjMwODE4NDFaFw0yNTA4MzAwODE4NDFaMBgxFjAUBgNV BAMTDTY4YTk3OTYxLTIxOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxXJEy7F7kPYbubNaQzvrvXhohcLc3ZpCG3i6VbJ/2VowgkpSRYTJzwbOds80S DecPmUqWfpyoKIiDAJ/zlo9/L1LFvyx2rDnIBl03K4h4LX84aYfUJQ6aGdj0//i9 C4D/E7oPV6Evfe4DV9qbd3SXF8lAVe5BbY0GfECPUKw3vDbbJKGejzOAoDViinQ5 xKlOmqdbkozW6QxRoYPSqV+RkMrrKU6iYI8hUfCo81Dlv7ASodaMUsIIxYyPUc2r ti5KIC3FYIrSu9D4sg7ECJE6ViWdCasbXgw9s7arkNs87cC0C0nIzFBP6Cg+w7x3 xXdZckoW+CuRjS0vuqpG78DFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqfbHoWmB 8zDNv8PsGuXzX2sFcQIwHwYDVR0jBBgwFoAUEXwNbRm/uki1+p5RfQ5pJlXJjEQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGREMwLzMzMTFGMEVFNjlF OTExRjA4MUI2NUI2N0M0RjlBRTAyL0VYd05iUm1fdWtpMS1wNVJmUTVwSmxYSmpF US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRVh3TmJSbV91a2kxLXA1UmZRNXBKbFhKakVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG REMwLzMzMTFGMEVFNjlFOTExRjA4MUI2NUI2N0M0RjlBRTAyL0VYd05iUm1fdWtp MS1wNVJmUTVwSmxYSmpFUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE1urCvAa/BUMOaq4UGC56F5ibZMJRJTnvITXXbkXvaU32MRaBlt2tC5 rBjs+Etf4KpTHnPnLcVlpWHgIc1BTKrUrzHZFm18OfsRMtYNBriCZJI5iGxU9aFp +CjkE3jlfAJLRKTFwkbaGb2S9SckIqragkmlKsESfdCYFnWeEz5/qzKElnZ54SY/ yMu6d+jKVc/dDHCidN+ZRC3vHNYsGFo/fejD65e6lDN3XiPaOQ+zKaD9LPAQ9RQc SgrnDlXQGvdRycbZRPjRlWegEeOZRak/DZdAgsdTgSivZc+cRoctT287hPVACjd1 7DpjhcsMSbk3+OEt8BTYmCLm5fOF20w= -----END CERTIFICATE-----Generated at Sat Aug 23 22:38:56 2025 by rpki-client