$ rpki-client -vvf rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft File: F61gXQbH7QoUSFwCoS8AFwmiLWI.mft (raw, json) Hash identifier: GzEfQ7hIqqdGZ46SrL7ZIwq34wOOuDzlug/sWSHPvpc= Subject key identifier: 70:85:8C:88:44:54:F3:B7:D6:36:7C:4A:55:3B:0B:5B:9F:37:E0:72 Authority key identifier: 17:AD:60:5D:06:C7:ED:0A:14:48:5C:02:A1:2F:00:17:09:A2:2D:62 Certificate issuer: /CN=A911BEA7/serialNumber=17AD605D06C7ED0A14485C02A12F001709A22D62 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft Manifest number: 0141 Signing time: Fri 09 May 2025 03:26:47 +0000 Manifest this update: Fri 09 May 2025 03:26:46 +0000 Manifest next update: Fri 16 May 2025 03:26:46 +0000 Files and hashes: 1: F61gXQbH7QoUSFwCoS8AFwmiLWI.crl (hash: md6pqmWgIN2f0hgdu7t8HlEJcI5E74MURD+2rtNjjYQ=) 2: 0294C902459511EE982FBC6DC4F9AE02.roa (hash: ImURD0YXIXR8XStDPLYGz5z7015ogkyNT0YFkxGE7dU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.crl rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 03:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BEA7, serialNumber=17AD605D06C7ED0A14485C02A12F001709A22D62 Validity Not Before: May 9 03:26:46 2025 GMT Not After : May 16 03:26:46 2025 GMT Subject: CN=681d75f7-a997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5e:38:09:18:ff:f4:64:0c:ee:2e:ef:85:88: 01:dc:a0:92:62:f3:07:29:17:2b:97:66:07:e3:17: 55:45:b6:1f:4d:51:3d:6f:b8:31:3b:b8:24:7f:ab: 03:ba:e5:a8:34:7c:56:2d:7d:5d:50:93:c3:36:f1: 75:08:5e:0a:b1:d6:6b:12:0d:a3:14:01:7c:19:a3: 67:0f:a0:b8:b2:09:98:d9:ad:c6:8f:2e:2c:16:d2: 49:0a:0c:3f:10:2f:c3:b0:46:e5:c3:bd:fe:fe:5f: b7:02:85:ef:d1:15:ab:d3:d7:a7:3a:52:7d:f6:56: 6b:9f:4b:69:ff:ab:cb:9a:c5:0a:9c:60:49:6e:93: 93:e3:66:5c:a6:d2:cd:b5:27:72:18:bf:3a:e5:14: fc:74:32:dc:91:6b:12:14:c4:39:fe:0c:eb:b2:ad: 8b:0e:9d:25:fe:be:45:e7:fc:02:b5:81:e6:55:45: e7:3e:a6:6c:97:29:59:f8:4c:01:17:50:b2:45:92: 42:c5:0b:2c:1b:e0:1e:85:f0:52:31:fb:f0:96:9a: cb:a5:81:2d:84:68:78:9a:b8:f2:85:79:94:06:3f: 84:77:8d:33:5f:06:1e:22:47:a0:56:7f:38:83:c2: 10:3d:6f:41:06:90:ed:db:67:79:d9:7a:aa:c7:43: 13:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:85:8C:88:44:54:F3:B7:D6:36:7C:4A:55:3B:0B:5B:9F:37:E0:72 X509v3 Authority Key Identifier: keyid:17:AD:60:5D:06:C7:ED:0A:14:48:5C:02:A1:2F:00:17:09:A2:2D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:fe:b6:1f:3c:e0:ab:e0:32:72:08:9b:05:ce:a5:7e:c8:38: de:43:66:e1:f1:c1:c6:91:cd:54:a3:54:7b:ac:f1:7e:15:15: f6:54:d0:d3:52:47:97:3e:ba:a8:f6:fd:c4:e0:20:84:7b:c2: d9:55:3a:2e:37:cd:d6:9b:c5:2b:16:ed:d5:91:31:21:72:73: 21:4d:3b:bf:f3:ad:96:ba:76:3d:ff:0f:8b:86:02:e8:10:a0: e1:b5:67:93:0c:a4:75:53:54:2f:46:04:e8:62:d1:25:9c:96: 6d:e1:d0:d8:0d:4f:50:40:29:60:76:ac:26:1a:2e:43:f0:39: e4:b8:f0:94:c8:bc:71:13:33:66:dc:4d:5b:97:01:a1:25:81: 18:c7:85:14:61:1d:78:d5:04:41:eb:8d:07:98:04:6c:95:e6: a4:e0:02:8f:b1:7a:c8:3c:fa:9f:74:43:66:0c:a4:eb:c3:52: 49:ba:56:d0:e0:22:13:9d:60:db:83:19:fb:32:08:d8:ec:f1: fb:bf:fc:01:9f:28:0b:69:93:75:8e:74:40:7c:d7:c0:b8:c4: e0:c9:95:d5:4e:37:63:0b:ff:57:38:45:3b:a9:21:05:19:78: 39:61:ad:fe:b3:3f:84:d2:92:5a:53:26:fc:0b:09:5b:65:f6: 91:f8:2f:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJFQTcxMTAvBgNVBAUTKDE3QUQ2MDVEMDZDN0VEMEExNDQ4NUMwMkExMkYwMDE3 MDlBMjJENjIwHhcNMjUwNTA5MDMyNjQ2WhcNMjUwNTE2MDMyNjQ2WjAYMRYwFAYD VQQDEw02ODFkNzVmNy1hOTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsF44CRj/9GQM7i7vhYgB3KCSYvMHKRcrl2YH4xdVRbYfTVE9b7gxO7gkf6sD uuWoNHxWLX1dUJPDNvF1CF4KsdZrEg2jFAF8GaNnD6C4sgmY2a3Gjy4sFtJJCgw/ EC/DsEblw73+/l+3AoXv0RWr09enOlJ99lZrn0tp/6vLmsUKnGBJbpOT42ZcptLN tSdyGL865RT8dDLckWsSFMQ5/gzrsq2LDp0l/r5F5/wCtYHmVUXnPqZslylZ+EwB F1CyRZJCxQssG+AehfBSMfvwlprLpYEthGh4mrjyhXmUBj+Ed40zXwYeIkegVn84 g8IQPW9BBpDt22d52Xqqx0MT6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCFjIhE VPO31jZ8SlU7C1ufN+ByMB8GA1UdIwQYMBaAFBetYF0Gx+0KFEhcAqEvABcJoi1i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkVBNy9CRTY3RDcxMDQ1 OTQxMUVFODU0NTJFNkRDNEY5QUUwMi9GNjFnWFFiSDdRb1VTRndDb1M4QUZ3bWlM V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y2MWdYUWJIN1FvVVNGd0NvUzhBRndtaUxXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkVBNy9CRTY3RDcxMDQ1OTQxMUVFODU0NTJFNkRDNEY5QUUwMi9GNjFnWFFiSDdR b1VTRndDb1M4QUZ3bWlMV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4/rYfPOCr4DJyCJsFzqV+yDjeQ2bh8cHGkc1Uo1R7rPF+FRX2VNDT UkeXPrqo9v3E4CCEe8LZVTouN83Wm8UrFu3VkTEhcnMhTTu/862WunY9/w+LhgLo EKDhtWeTDKR1U1QvRgToYtElnJZt4dDYDU9QQClgdqwmGi5D8DnkuPCUyLxxEzNm 3E1blwGhJYEYx4UUYR141QRB640HmARsleak4AKPsXrIPPqfdENmDKTrw1JJulbQ 4CITnWDbgxn7MgjY7PH7v/wBnygLaZN1jnRAfNfAuMTgyZXVTjdjC/9XOEU7qSEF GXg5Ya3+sz+E0pJaUyb8CwlbZfaR+C+y -----END CERTIFICATE-----Generated at Fri May 9 07:47:16 2025 by rpki-client