$ rpki-client -vvf rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft File: F61gXQbH7QoUSFwCoS8AFwmiLWI.mft (raw, json) Hash identifier: I0Arv7+vj3YgDeRNABvRdQaJzCyM1oYvDnAO8DiNeQ0= Subject key identifier: 01:0A:9F:44:21:31:F5:36:2A:F2:F6:9B:F4:02:B2:AF:5A:74:80:C3 Authority key identifier: 17:AD:60:5D:06:C7:ED:0A:14:48:5C:02:A1:2F:00:17:09:A2:2D:62 Certificate issuer: /CN=A911BEA7/serialNumber=17AD605D06C7ED0A14485C02A12F001709A22D62 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft Manifest number: 014B Signing time: Sat 31 May 2025 03:53:04 +0000 Manifest this update: Sat 31 May 2025 03:53:04 +0000 Manifest next update: Sat 07 Jun 2025 03:53:04 +0000 Files and hashes: 1: F61gXQbH7QoUSFwCoS8AFwmiLWI.crl (hash: wlyOQwzUN6rO5Fl6uPZUcaErhr4e2/hoHCQD0nuDB0s=) 2: 0294C902459511EE982FBC6DC4F9AE02.roa (hash: ImURD0YXIXR8XStDPLYGz5z7015ogkyNT0YFkxGE7dU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.crl rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BEA7, serialNumber=17AD605D06C7ED0A14485C02A12F001709A22D62 Validity Not Before: May 31 03:53:04 2025 GMT Not After : Jun 7 03:53:04 2025 GMT Subject: CN=683a7d20-378e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:67:b2:ea:f3:c5:9d:93:56:e3:12:1e:60:62: 05:c6:dd:63:3c:6d:33:79:52:91:e2:1f:2a:88:49: b5:3d:18:6c:8e:5c:35:80:56:a2:c2:d8:2a:bc:e0: 51:d7:3b:94:a0:60:4b:e4:4f:5f:20:cc:94:a1:11: 11:41:c3:f0:80:4e:19:75:95:1e:55:e7:f4:34:8e: 9c:f1:e9:17:82:8d:d6:de:4d:c6:26:2b:7a:26:4b: b8:7e:9a:05:07:c2:3e:ea:90:37:95:d6:a8:05:5a: 6b:f3:ec:ce:f4:7e:1e:15:6b:a0:c8:11:a8:11:da: 3a:9f:94:59:fb:0b:3d:a8:3b:f6:da:9c:02:19:5c: 68:a5:82:c2:14:ed:84:7d:8b:6a:b3:21:a4:c9:56: fc:1a:60:3c:6d:e6:76:25:8e:e5:58:6b:53:bd:37: ca:c1:47:d4:73:a7:ce:a6:e0:d7:98:19:f7:9d:bc: 04:a4:1f:9d:e6:27:8a:9a:1e:be:f0:7a:62:9c:22: 7e:4c:ae:f1:dc:d3:0d:ab:8e:de:63:29:69:6f:e7: 8d:84:bf:c7:b3:bd:86:06:59:f4:70:97:21:f0:d0: 84:60:a7:d2:4a:53:48:86:25:71:93:6c:c2:78:6a: 29:82:45:7a:6b:6b:cb:ba:b3:e9:4e:1f:00:80:42: ea:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0A:9F:44:21:31:F5:36:2A:F2:F6:9B:F4:02:B2:AF:5A:74:80:C3 X509v3 Authority Key Identifier: keyid:17:AD:60:5D:06:C7:ED:0A:14:48:5C:02:A1:2F:00:17:09:A2:2D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:4f:f3:4d:b9:dd:df:4d:12:1c:6a:d1:01:04:3a:e2:61:64: e3:70:44:32:1d:64:9c:28:80:be:ac:2e:6c:c0:c4:f3:62:cf: 0a:8e:3a:5b:f5:ac:06:c4:14:44:ab:84:0f:15:be:d5:94:f0: eb:7e:bf:5c:98:ea:3e:1f:fe:1e:9e:3a:d4:d5:0d:29:6d:d1: 5d:10:d3:53:2c:e3:fb:45:5c:7e:cd:e3:19:df:10:0d:83:a9: ec:ce:e4:b7:d0:75:2d:40:6f:36:a8:6e:1d:ff:91:56:6e:ae: 92:a5:d8:12:59:5e:09:d5:e4:dd:02:a7:47:e2:b3:24:f1:8e: 2e:36:34:71:96:67:f3:2a:c9:a4:8e:e6:1a:76:bd:33:80:dd: c0:22:a8:ba:bc:90:69:4b:a9:4e:f8:52:e7:c0:42:86:69:2c: 3d:9d:85:89:3e:40:ed:61:6b:d8:75:ce:a3:56:24:74:7a:26: 8f:6e:dd:7b:e8:27:88:4d:70:27:62:79:fe:4c:26:05:40:2c: 5b:63:ed:ec:f0:a5:3b:e9:71:be:f1:33:a8:09:d9:42:be:39: ff:83:b6:5f:2f:3a:6b:1f:0f:c6:17:de:91:65:83:7e:af:cd: 9b:89:fc:6a:df:0a:eb:93:85:ee:70:73:e9:5c:a7:d4:fe:e4: 5a:22:4b:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJFQTcxMTAvBgNVBAUTKDE3QUQ2MDVEMDZDN0VEMEExNDQ4NUMwMkExMkYwMDE3 MDlBMjJENjIwHhcNMjUwNTMxMDM1MzA0WhcNMjUwNjA3MDM1MzA0WjAYMRYwFAYD VQQDEw02ODNhN2QyMC0zNzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2ey6vPFnZNW4xIeYGIFxt1jPG0zeVKR4h8qiEm1PRhsjlw1gFaiwtgqvOBR 1zuUoGBL5E9fIMyUoRERQcPwgE4ZdZUeVef0NI6c8ekXgo3W3k3GJit6Jku4fpoF B8I+6pA3ldaoBVpr8+zO9H4eFWugyBGoEdo6n5RZ+ws9qDv22pwCGVxopYLCFO2E fYtqsyGkyVb8GmA8beZ2JY7lWGtTvTfKwUfUc6fOpuDXmBn3nbwEpB+d5ieKmh6+ 8HpinCJ+TK7x3NMNq47eYylpb+eNhL/Hs72GBln0cJch8NCEYKfSSlNIhiVxk2zC eGopgkV6a2vLurPpTh8AgELq5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEKn0Qh MfU2KvL2m/QCsq9adIDDMB8GA1UdIwQYMBaAFBetYF0Gx+0KFEhcAqEvABcJoi1i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkVBNy9CRTY3RDcxMDQ1 OTQxMUVFODU0NTJFNkRDNEY5QUUwMi9GNjFnWFFiSDdRb1VTRndDb1M4QUZ3bWlM V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y2MWdYUWJIN1FvVVNGd0NvUzhBRndtaUxXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkVBNy9CRTY3RDcxMDQ1OTQxMUVFODU0NTJFNkRDNEY5QUUwMi9GNjFnWFFiSDdR b1VTRndDb1M4QUZ3bWlMV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUT/NNud3fTRIcatEBBDriYWTjcEQyHWScKIC+rC5swMTzYs8Kjjpb 9awGxBREq4QPFb7VlPDrfr9cmOo+H/4enjrU1Q0pbdFdENNTLOP7RVx+zeMZ3xAN g6nszuS30HUtQG82qG4d/5FWbq6SpdgSWV4J1eTdAqdH4rMk8Y4uNjRxlmfzKsmk juYadr0zgN3AIqi6vJBpS6lO+FLnwEKGaSw9nYWJPkDtYWvYdc6jViR0eiaPbt17 6CeITXAnYnn+TCYFQCxbY+3s8KU76XG+8TOoCdlCvjn/g7ZfLzprHw/GF96RZYN+ r82bifxq3wrrk4XucHPpXKfU/uRaIks/ -----END CERTIFICATE-----Generated at Sat May 31 16:32:19 2025 by rpki-client