$ rpki-client -vvf rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft File: F61gXQbH7QoUSFwCoS8AFwmiLWI.mft (raw, json) Hash identifier: 0SUOlizHmTPs+2JPRSqv1FVjGIPR1xsKDr/EeeJredI= Subject key identifier: CE:2B:DE:FB:11:20:0A:5B:1A:21:4A:3E:C3:BF:E2:04:E7:24:FB:CE Authority key identifier: 17:AD:60:5D:06:C7:ED:0A:14:48:5C:02:A1:2F:00:17:09:A2:2D:62 Certificate issuer: /CN=A911BEA7/serialNumber=17AD605D06C7ED0A14485C02A12F001709A22D62 Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft Manifest number: 019C Signing time: Mon 03 Nov 2025 03:21:36 +0000 Manifest this update: Mon 03 Nov 2025 03:21:36 +0000 Manifest next update: Mon 10 Nov 2025 03:21:36 +0000 Files and hashes: 1: F61gXQbH7QoUSFwCoS8AFwmiLWI.crl (hash: Om6XcTxrMGv66HUogJGhtDbp8+wDew7I9Co5NY5Zy8E=) 2: 0294C902459511EE982FBC6DC4F9AE02.roa (hash: aajHDX/xMTvhOQEZLYkPj50OTCpjx3WnG5EW/RzkXC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.crl rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BEA7, serialNumber=17AD605D06C7ED0A14485C02A12F001709A22D62 Validity Not Before: Nov 3 03:21:36 2025 GMT Not After : Nov 10 03:21:36 2025 GMT Subject: CN=69081fc0-04a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d8:04:cc:18:80:fd:a0:42:5f:3a:6a:f1:9f: f2:59:1c:6e:50:84:33:3a:78:34:ca:8a:e6:1a:91: 2b:df:7b:b2:1e:e7:c4:e9:af:4c:de:b6:f6:ca:d6: 8d:d0:2d:84:82:1c:20:d5:fa:9c:16:c9:84:37:97: 3a:04:3b:52:1b:7a:62:87:3c:bc:c8:21:48:e7:aa: e4:8f:5c:75:36:92:7b:ea:35:0d:3d:1a:87:20:2d: 8a:e2:2f:52:6f:d2:42:20:b9:24:09:74:cb:a2:3e: 63:54:b3:f1:86:c5:8e:3b:77:2d:f9:49:9c:d3:13: d2:5f:56:23:63:eb:7b:ba:d5:05:35:c0:e2:be:34: bf:3c:8a:ed:8c:13:d2:6a:bd:cb:05:9d:90:36:ea: 6e:97:f7:90:0e:1d:36:85:46:2c:59:5a:f8:01:ea: 9b:b1:2a:62:bb:e2:a4:e7:a1:f8:3b:3b:94:88:bd: 44:84:5a:b3:44:3a:d2:5e:13:cd:c2:48:6f:af:50: 3c:04:47:2f:3e:2a:d9:26:b1:86:e2:26:70:85:0d: e3:a0:8a:56:a9:89:77:96:62:ce:45:4a:7a:07:fa: 65:57:23:1e:71:47:f9:02:c7:7f:89:96:5a:a1:5f: 18:99:3d:81:f3:2a:63:a0:0b:60:86:0b:12:56:6e: fe:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2B:DE:FB:11:20:0A:5B:1A:21:4A:3E:C3:BF:E2:04:E7:24:FB:CE X509v3 Authority Key Identifier: keyid:17:AD:60:5D:06:C7:ED:0A:14:48:5C:02:A1:2F:00:17:09:A2:2D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:29:02:27:da:df:4a:2f:a9:ca:c5:84:14:47:9a:28:ca:f3: 97:3f:50:68:53:3c:95:87:af:74:8b:da:f6:9e:5c:37:73:f9: 82:c8:6a:ca:06:01:89:d2:c7:f6:49:88:3e:85:a1:d4:a1:34: 3f:05:8f:a9:78:c6:e4:ba:38:97:f6:2e:68:68:b5:c1:cc:17: 90:5d:ca:0f:1f:20:f7:21:65:b6:be:47:06:e9:c0:fb:bd:f8: dd:fd:41:14:9f:00:f1:85:f2:50:81:7e:e1:1a:0a:2a:44:84: ba:3d:d9:16:18:78:d8:6a:29:32:a6:05:3b:56:7f:9d:3b:6d: 01:a4:cf:cf:f5:86:84:8b:59:0c:b1:3a:5a:54:5c:89:7e:53: 3c:28:9b:11:83:c5:11:7a:e9:bc:5d:8a:83:65:25:9b:c0:8e: e8:1a:31:98:89:8d:67:5e:f7:36:02:60:4c:a8:7c:e8:e7:cd: fc:01:a7:5d:3e:d4:2c:86:b6:2a:90:0b:92:c9:89:6a:6f:3a: d1:54:98:63:13:36:cf:ab:00:1f:48:aa:24:56:90:cd:7e:25: e5:3f:3b:72:10:60:9d:f7:8b:57:f9:dc:ad:6a:81:29:3b:f8: 08:d7:a1:6b:8e:14:05:9c:4f:a3:3f:2e:db:46:13:30:ff:17: 1d:92:9e:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJFQTcxMTAvBgNVBAUTKDE3QUQ2MDVEMDZDN0VEMEExNDQ4NUMwMkExMkYwMDE3 MDlBMjJENjIwHhcNMjUxMTAzMDMyMTM2WhcNMjUxMTEwMDMyMTM2WjAYMRYwFAYD VQQDEw02OTA4MWZjMC0wNGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNgEzBiA/aBCXzpq8Z/yWRxuUIQzOng0yormGpEr33uyHufE6a9M3rb2ytaN 0C2Eghwg1fqcFsmEN5c6BDtSG3pihzy8yCFI56rkj1x1NpJ76jUNPRqHIC2K4i9S b9JCILkkCXTLoj5jVLPxhsWOO3ct+Umc0xPSX1YjY+t7utUFNcDivjS/PIrtjBPS ar3LBZ2QNupul/eQDh02hUYsWVr4AeqbsSpiu+Kk56H4OzuUiL1EhFqzRDrSXhPN wkhvr1A8BEcvPirZJrGG4iZwhQ3joIpWqYl3lmLORUp6B/plVyMecUf5Asd/iZZa oV8YmT2B8ypjoAtghgsSVm7+8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4r3vsR IApbGiFKPsO/4gTnJPvOMB8GA1UdIwQYMBaAFBetYF0Gx+0KFEhcAqEvABcJoi1i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkVBNy9CRTY3RDcxMDQ1 OTQxMUVFODU0NTJFNkRDNEY5QUUwMi9GNjFnWFFiSDdRb1VTRndDb1M4QUZ3bWlM V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y2MWdYUWJIN1FvVVNGd0NvUzhBRndtaUxXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkVBNy9CRTY3RDcxMDQ1OTQxMUVFODU0NTJFNkRDNEY5QUUwMi9GNjFnWFFiSDdR b1VTRndDb1M4QUZ3bWlMV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjKQIn2t9KL6nKxYQUR5ooyvOXP1BoUzyVh690i9r2nlw3c/mCyGrK BgGJ0sf2SYg+haHUoTQ/BY+peMbkujiX9i5oaLXBzBeQXcoPHyD3IWW2vkcG6cD7 vfjd/UEUnwDxhfJQgX7hGgoqRIS6PdkWGHjYaikypgU7Vn+dO20BpM/P9YaEi1kM sTpaVFyJflM8KJsRg8UReum8XYqDZSWbwI7oGjGYiY1nXvc2AmBMqHzo5838Aadd PtQshrYqkAuSyYlqbzrRVJhjEzbPqwAfSKokVpDNfiXlPztyEGCd94tX+dytaoEp O/gI16FrjhQFnE+jPy7bRhMw/xcdkp47 -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:13 2025 by rpki-client