$ rpki-client -vvf rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft File: F61gXQbH7QoUSFwCoS8AFwmiLWI.mft (raw, json) Hash identifier: ZTLC3DKNk4iyftfYxPswWLaeVvocKzwNOgeXwbjy1Lk= Subject key identifier: B6:9B:96:FD:EC:EA:87:55:C2:50:B0:C4:5D:BC:88:99:84:4F:B5:CC Authority key identifier: 17:AD:60:5D:06:C7:ED:0A:14:48:5C:02:A1:2F:00:17:09:A2:2D:62 Certificate issuer: /CN=A911BEA7/serialNumber=17AD605D06C7ED0A14485C02A12F001709A22D62 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft Manifest number: 0176 Signing time: Sat 23 Aug 2025 03:52:27 +0000 Manifest this update: Sat 23 Aug 2025 03:52:27 +0000 Manifest next update: Sat 30 Aug 2025 03:52:27 +0000 Files and hashes: 1: F61gXQbH7QoUSFwCoS8AFwmiLWI.crl (hash: 8ZPudSpSAXEflsvDlhq5hHB2x24Kq5LIf8K3y8dsQCo=) 2: 0294C902459511EE982FBC6DC4F9AE02.roa (hash: ImURD0YXIXR8XStDPLYGz5z7015ogkyNT0YFkxGE7dU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.crl rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BEA7, serialNumber=17AD605D06C7ED0A14485C02A12F001709A22D62 Validity Not Before: Aug 23 03:52:27 2025 GMT Not After : Aug 30 03:52:27 2025 GMT Subject: CN=68a93afb-64d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a3:bc:99:27:c7:1a:36:48:cd:44:cc:f7:d0: e3:3b:8b:d4:d0:8e:49:3e:ba:4a:d6:d0:7b:5e:f8: ad:96:a6:4b:b0:ed:77:f2:34:90:c2:40:a2:f2:0c: 17:8d:09:4c:cd:64:ad:a3:25:19:94:5e:9e:7d:49: 7f:cf:e1:f1:b0:e7:1e:b5:d6:6d:8a:9f:d2:c2:e2: 70:0f:8f:95:60:54:a6:82:a8:da:e0:ac:48:3e:33: 38:e7:c9:88:76:91:95:14:09:fa:9f:10:7c:75:33: d8:6f:f6:90:d3:c5:82:74:6d:8c:39:86:07:0e:5c: 45:59:56:80:e1:a3:07:8c:2c:17:79:1e:71:14:cc: 61:09:02:6e:e2:06:7b:93:bf:00:ab:1b:86:3a:a4: 3d:89:2f:30:9c:33:86:64:49:41:7e:1c:b2:14:37: 01:45:b8:aa:04:10:d7:3a:76:db:5e:80:53:1d:35: 7a:3f:29:91:07:d7:bf:8d:f3:de:51:3f:06:8c:8b: 65:67:2d:9f:4f:b7:48:33:01:66:21:e5:1b:25:73: 06:54:74:13:6f:6e:14:4a:ca:11:1b:f9:f1:8a:75: 21:71:cf:4e:b8:da:f9:f1:86:32:2e:46:01:d2:4f: 71:5f:ae:bf:84:31:56:50:da:77:b3:29:68:54:94: b5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9B:96:FD:EC:EA:87:55:C2:50:B0:C4:5D:BC:88:99:84:4F:B5:CC X509v3 Authority Key Identifier: keyid:17:AD:60:5D:06:C7:ED:0A:14:48:5C:02:A1:2F:00:17:09:A2:2D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d2:80:0c:b7:c1:43:3f:da:52:8e:25:80:cf:7e:ea:48:22: aa:01:df:8c:8a:32:ba:bd:68:4e:62:91:19:b3:9c:ed:ff:52: bf:22:90:1e:3b:9c:ba:51:68:d4:1c:01:ee:99:55:db:82:5c: 99:57:d1:98:f4:45:fa:86:bc:b1:03:8d:12:37:95:a2:58:37: 6d:02:70:da:b2:84:cc:ec:22:c8:f9:7b:3f:32:d8:1e:1e:b2: 92:3d:7a:0c:d0:22:1f:60:5d:72:a7:18:fe:49:53:99:6e:86: 93:9e:80:50:85:f3:1b:ae:36:03:2f:2b:26:25:5f:9c:49:c7: e6:1d:25:e9:a0:68:6b:7e:09:2d:bd:04:70:4e:65:c6:ea:16: 6b:dd:e6:74:62:6a:c6:b2:7e:96:0e:5e:82:ba:bc:09:dd:96: 19:fb:c1:ee:4c:c6:02:0e:bc:96:64:ff:51:96:54:af:0c:6f: cd:40:c5:76:37:20:23:79:43:e0:4b:fa:7f:0f:a1:4f:2e:07: 63:24:5b:74:36:50:5b:34:f0:b1:7a:d3:23:9f:b8:9e:43:33: 4d:98:20:0f:de:5b:48:b0:e8:0f:b6:5c:7c:02:b8:48:f4:e8: fe:82:9e:dd:49:fd:d0:48:d1:d3:22:80:48:53:40:65:aa:fe: ba:f1:0f:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJFQTcxMTAvBgNVBAUTKDE3QUQ2MDVEMDZDN0VEMEExNDQ4NUMwMkExMkYwMDE3 MDlBMjJENjIwHhcNMjUwODIzMDM1MjI3WhcNMjUwODMwMDM1MjI3WjAYMRYwFAYD VQQDEw02OGE5M2FmYi02NGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6O8mSfHGjZIzUTM99DjO4vU0I5JPrpK1tB7XvitlqZLsO138jSQwkCi8gwX jQlMzWStoyUZlF6efUl/z+HxsOcetdZtip/SwuJwD4+VYFSmgqja4KxIPjM458mI dpGVFAn6nxB8dTPYb/aQ08WCdG2MOYYHDlxFWVaA4aMHjCwXeR5xFMxhCQJu4gZ7 k78AqxuGOqQ9iS8wnDOGZElBfhyyFDcBRbiqBBDXOnbbXoBTHTV6PymRB9e/jfPe UT8GjItlZy2fT7dIMwFmIeUbJXMGVHQTb24USsoRG/nxinUhcc9OuNr58YYyLkYB 0k9xX66/hDFWUNp3syloVJS1YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLablv3s 6odVwlCwxF28iJmET7XMMB8GA1UdIwQYMBaAFBetYF0Gx+0KFEhcAqEvABcJoi1i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkVBNy9CRTY3RDcxMDQ1 OTQxMUVFODU0NTJFNkRDNEY5QUUwMi9GNjFnWFFiSDdRb1VTRndDb1M4QUZ3bWlM V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y2MWdYUWJIN1FvVVNGd0NvUzhBRndtaUxXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkVBNy9CRTY3RDcxMDQ1OTQxMUVFODU0NTJFNkRDNEY5QUUwMi9GNjFnWFFiSDdR b1VTRndDb1M4QUZ3bWlMV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv0oAMt8FDP9pSjiWAz37qSCKqAd+MijK6vWhOYpEZs5zt/1K/IpAe O5y6UWjUHAHumVXbglyZV9GY9EX6hryxA40SN5WiWDdtAnDasoTM7CLI+Xs/Mtge HrKSPXoM0CIfYF1ypxj+SVOZboaTnoBQhfMbrjYDLysmJV+cScfmHSXpoGhrfgkt vQRwTmXG6hZr3eZ0YmrGsn6WDl6CurwJ3ZYZ+8HuTMYCDryWZP9RllSvDG/NQMV2 NyAjeUPgS/p/D6FPLgdjJFt0NlBbNPCxetMjn7ieQzNNmCAP3ltIsOgPtlx8ArhI 9Oj+gp7dSf3QSNHTIoBIU0Blqv668Q+B -----END CERTIFICATE-----Generated at Sat Aug 23 15:56:20 2025 by rpki-client