$ rpki-client -vvf rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft File: F61gXQbH7QoUSFwCoS8AFwmiLWI.mft (raw, json) Hash identifier: AWxbko279jNxQtthfLn9WjATv7++wSRlFGxc0/msh0I= Subject key identifier: 6F:16:FB:FC:45:E9:83:76:A1:E2:59:63:78:40:80:08:45:27:5F:18 Authority key identifier: 17:AD:60:5D:06:C7:ED:0A:14:48:5C:02:A1:2F:00:17:09:A2:2D:62 Certificate issuer: /CN=A911BEA7/serialNumber=17AD605D06C7ED0A14485C02A12F001709A22D62 Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft Manifest number: 015A Signing time: Sun 29 Jun 2025 03:10:31 +0000 Manifest this update: Sun 29 Jun 2025 03:10:31 +0000 Manifest next update: Sun 06 Jul 2025 03:10:31 +0000 Files and hashes: 1: F61gXQbH7QoUSFwCoS8AFwmiLWI.crl (hash: 0tuBkOEEo6WcXfK3IGcQQACJUQo+q6ySCsxdH9vY2Xw=) 2: 0294C902459511EE982FBC6DC4F9AE02.roa (hash: ImURD0YXIXR8XStDPLYGz5z7015ogkyNT0YFkxGE7dU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.crl rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BEA7, serialNumber=17AD605D06C7ED0A14485C02A12F001709A22D62 Validity Not Before: Jun 29 03:10:31 2025 GMT Not After : Jul 6 03:10:31 2025 GMT Subject: CN=6860aea7-982c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d8:15:6d:51:d8:fd:77:52:d5:d8:79:bb:26: ea:d9:aa:d0:1d:9c:03:eb:1e:fb:4f:de:d6:e4:c9: 88:d6:b7:03:cf:98:3c:76:f9:4a:44:dd:7d:7c:cd: e3:bd:1d:82:49:43:d8:42:38:f1:de:dd:b6:02:c3: 9d:67:ec:c5:34:ad:67:42:24:2a:88:83:9a:59:da: d7:cb:5b:b8:ec:c6:62:24:df:74:24:2c:ff:9f:4d: 9c:0f:8d:85:b3:20:f7:46:c2:0a:0b:e1:c8:05:c7: 11:b9:e8:82:73:c7:a5:d5:ce:2c:5c:20:0e:6e:ee: 4d:c7:40:dc:a8:fc:74:ff:51:7f:58:02:7c:f5:ea: 2b:c7:00:e5:19:aa:ad:da:63:da:30:02:97:da:d5: ea:2a:e0:88:b5:8a:d4:f6:72:67:78:0b:d2:d6:ca: ca:c0:b1:f9:9f:03:8c:06:61:f4:bf:29:8c:6f:22: 64:e7:e2:7f:ec:19:07:6b:3f:9f:c5:cb:59:6d:97: bd:e7:50:15:15:a9:84:9b:7d:81:0a:82:54:2e:ca: 8a:5e:19:d4:42:ab:ea:ef:5b:77:cb:dd:f7:09:c3: ab:9e:4b:57:2f:07:b1:39:5d:0c:75:c7:9d:9f:30: 64:a9:20:f1:c9:4d:f3:6e:41:11:65:67:c7:6c:fb: bf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:16:FB:FC:45:E9:83:76:A1:E2:59:63:78:40:80:08:45:27:5F:18 X509v3 Authority Key Identifier: keyid:17:AD:60:5D:06:C7:ED:0A:14:48:5C:02:A1:2F:00:17:09:A2:2D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:4d:43:51:d3:2a:cd:d3:c1:08:26:3e:f5:08:54:2d:0f:49: c7:72:71:7f:74:67:bd:de:eb:48:ae:a7:c5:59:da:64:ed:97: 28:c3:e5:42:74:29:8b:2e:f0:82:66:31:09:c3:f9:14:e3:69: 13:c9:31:5f:c1:4a:ed:b7:13:fd:86:b9:32:a4:cc:e9:25:17: 7e:d8:9d:80:72:c9:35:d8:c6:e4:26:e9:c3:6d:62:6b:90:21: aa:cc:d0:b1:13:6c:dc:e7:0e:85:25:37:c6:a9:10:48:40:e5: e1:3b:4c:fa:54:ff:d0:01:60:39:ff:e4:27:10:1b:e4:50:a3: e1:57:f2:ec:3e:c9:44:05:11:57:5c:24:96:39:38:0d:c8:ee: 65:f9:6d:7e:ff:e4:65:04:86:f5:65:86:34:54:bc:54:81:ad: d4:a9:51:70:97:3c:b9:92:87:b5:34:91:a3:ff:17:9b:a9:55: 52:ac:7c:f9:84:ac:e9:1f:7b:07:bb:b1:60:64:5f:10:c1:03: 2d:e8:78:67:86:3f:3f:a9:a8:ca:cc:03:51:d2:06:3f:2d:ed: 4e:a6:1c:c5:f6:f0:47:f6:29:3f:46:e3:62:79:fc:97:01:b7: 02:25:8f:cb:cf:c4:07:ae:e3:8b:01:b2:10:31:9d:bf:22:32: 39:f4:cd:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJFQTcxMTAvBgNVBAUTKDE3QUQ2MDVEMDZDN0VEMEExNDQ4NUMwMkExMkYwMDE3 MDlBMjJENjIwHhcNMjUwNjI5MDMxMDMxWhcNMjUwNzA2MDMxMDMxWjAYMRYwFAYD VQQDEw02ODYwYWVhNy05ODJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlNgVbVHY/XdS1dh5uybq2arQHZwD6x77T97W5MmI1rcDz5g8dvlKRN19fM3j vR2CSUPYQjjx3t22AsOdZ+zFNK1nQiQqiIOaWdrXy1u47MZiJN90JCz/n02cD42F syD3RsIKC+HIBccRueiCc8el1c4sXCAObu5Nx0DcqPx0/1F/WAJ89eorxwDlGaqt 2mPaMAKX2tXqKuCItYrU9nJneAvS1srKwLH5nwOMBmH0vymMbyJk5+J/7BkHaz+f xctZbZe951AVFamEm32BCoJULsqKXhnUQqvq71t3y933CcOrnktXLwexOV0Mdced nzBkqSDxyU3zbkERZWfHbPu/AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8W+/xF 6YN2oeJZY3hAgAhFJ18YMB8GA1UdIwQYMBaAFBetYF0Gx+0KFEhcAqEvABcJoi1i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkVBNy9CRTY3RDcxMDQ1 OTQxMUVFODU0NTJFNkRDNEY5QUUwMi9GNjFnWFFiSDdRb1VTRndDb1M4QUZ3bWlM V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y2MWdYUWJIN1FvVVNGd0NvUzhBRndtaUxXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkVBNy9CRTY3RDcxMDQ1OTQxMUVFODU0NTJFNkRDNEY5QUUwMi9GNjFnWFFiSDdR b1VTRndDb1M4QUZ3bWlMV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4TUNR0yrN08EIJj71CFQtD0nHcnF/dGe93utIrqfFWdpk7Zcow+VC dCmLLvCCZjEJw/kU42kTyTFfwUrttxP9hrkypMzpJRd+2J2Acsk12MbkJunDbWJr kCGqzNCxE2zc5w6FJTfGqRBIQOXhO0z6VP/QAWA5/+QnEBvkUKPhV/LsPslEBRFX XCSWOTgNyO5l+W1+/+RlBIb1ZYY0VLxUga3UqVFwlzy5koe1NJGj/xebqVVSrHz5 hKzpH3sHu7FgZF8QwQMt6Hhnhj8/qajKzANR0gY/Le1OphzF9vBH9ik/RuNiefyX AbcCJY/Lz8QHruOLAbIQMZ2/IjI59M2B -----END CERTIFICATE-----Generated at Mon Jun 30 17:24:03 2025 by rpki-client