$ rpki-client -vvf rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft File: 1h3BeAj1jg-ZsoUs50hg-FPLINs.mft (raw, json) Hash identifier: wnZu1bYknlnT/WeXk76tnY19LQ0qOfzAE1Ny6xfPi90= Subject key identifier: 3B:18:F3:C2:40:23:7A:01:53:FF:1C:AA:5B:20:A2:DA:BA:F6:2A:71 Authority key identifier: D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB Certificate issuer: /CN=A916FD2B/serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft Manifest number: 01BF Signing time: Sun 29 Jun 2025 02:09:20 +0000 Manifest this update: Sun 29 Jun 2025 02:09:19 +0000 Manifest next update: Sun 06 Jul 2025 02:09:19 +0000 Files and hashes: 1: 1h3BeAj1jg-ZsoUs50hg-FPLINs.crl (hash: U4J5YuJnm6ocW86tdbN39zSP0Zrqs6qzuOpKEnU6Cx4=) 2: FB4FC092A83811ED94EE0437C4F9AE02.roa (hash: CsAbRFqHcEIzwNgcJyTBhfAP0i1+CDL52//CVRtHe84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.crl rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FD2B, serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB Validity Not Before: Jun 29 02:09:19 2025 GMT Not After : Jul 6 02:09:19 2025 GMT Subject: CN=6860a04f-846d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ae:09:d9:42:2c:27:95:23:d1:14:65:6b:a2: 1b:e2:de:de:79:e5:a1:f6:cd:66:b2:61:19:2a:ae: 13:db:42:b6:01:d6:4c:93:b2:c8:fe:02:e8:2c:99: 76:79:80:3e:0c:f2:0c:6a:50:c7:4c:44:9c:cb:b3: b8:7d:ab:03:e4:05:b2:aa:16:6c:d0:1c:99:40:fa: eb:c2:fa:e4:d6:8a:1e:bb:ab:33:cc:14:f5:99:e3: 80:ca:2b:d5:58:fc:c7:63:00:31:37:1a:8b:47:56: ac:00:c2:8a:ee:58:fc:f6:53:25:2a:ed:42:71:5f: 27:fe:73:c1:be:43:92:61:15:9b:ad:60:80:6b:1e: c8:f1:f3:81:9d:40:d7:a0:d6:35:b6:e2:ec:e1:24: 34:00:c0:a6:a5:6d:22:68:22:66:e3:e5:e3:97:c6: 8e:58:0f:b3:43:76:b4:37:dc:b2:89:90:41:70:65: ec:50:86:2a:45:e9:1f:e7:23:4d:17:c7:21:95:e9: 54:29:d0:a8:34:9a:33:45:ae:3f:3e:e6:0f:dd:77: 28:d8:97:5b:90:7e:27:74:63:df:87:7c:a5:75:2a: a4:88:5f:37:a2:03:b8:ab:e1:85:b4:cb:88:be:57: 71:69:af:e6:e4:c7:5b:d8:57:49:aa:85:28:16:4c: ec:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:18:F3:C2:40:23:7A:01:53:FF:1C:AA:5B:20:A2:DA:BA:F6:2A:71 X509v3 Authority Key Identifier: keyid:D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e5:2e:ed:f6:dc:de:e2:c9:b5:8a:bd:1f:bb:e9:06:76:13: a6:a8:63:71:4d:04:70:61:31:f2:ef:84:09:b0:ae:98:97:78: ac:d4:65:3f:b7:66:57:70:b6:8d:fe:6a:01:81:29:f3:ad:b1: 4a:8d:02:8a:1d:06:e0:63:bd:6d:f1:9e:61:af:3e:c4:ea:ed: 41:74:b7:b2:fd:1e:02:92:c4:44:9c:c4:2e:15:ac:00:ba:db: 02:cc:19:c9:a1:ae:39:25:30:59:03:ff:f1:3f:40:05:20:fb: b7:9f:9e:b3:b2:9e:f9:9b:3a:8b:4a:8c:f1:80:61:cc:d4:ed: f5:8c:52:60:e8:0f:e9:cd:3b:04:9b:eb:c4:da:04:d2:33:4f: 90:55:a7:c2:a6:63:60:e1:49:ca:d6:1b:87:6c:cf:ad:ba:8b: 26:f8:5a:d0:50:32:a8:2c:41:2e:a3:ed:f2:66:2e:c6:99:10: ac:4d:87:19:fd:cc:46:8c:0d:96:62:21:95:27:7f:3f:39:5c: 07:fd:00:fb:e9:c9:be:48:71:ab:6b:9b:44:a0:08:7b:26:94: 3f:35:1e:d5:8f:2f:6c:1e:39:d0:34:e9:d2:f7:9e:0a:1e:db: 5e:71:67:80:64:45:2b:5d:8c:d9:9e:15:cd:80:d5:30:1c:7e: 95:9c:7b:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZEMkIxMTAvBgNVBAUTKEQ2MURDMTc4MDhGNThFMEY5OUIyODUyQ0U3NDg2MEY4 NTNDQjIwREIwHhcNMjUwNjI5MDIwOTE5WhcNMjUwNzA2MDIwOTE5WjAYMRYwFAYD VQQDEw02ODYwYTA0Zi04NDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7a4J2UIsJ5Uj0RRla6Ib4t7eeeWh9s1msmEZKq4T20K2AdZMk7LI/gLoLJl2 eYA+DPIMalDHTEScy7O4fasD5AWyqhZs0ByZQPrrwvrk1ooeu6szzBT1meOAyivV WPzHYwAxNxqLR1asAMKK7lj89lMlKu1CcV8n/nPBvkOSYRWbrWCAax7I8fOBnUDX oNY1tuLs4SQ0AMCmpW0iaCJm4+Xjl8aOWA+zQ3a0N9yyiZBBcGXsUIYqRekf5yNN F8chlelUKdCoNJozRa4/PuYP3Xco2JdbkH4ndGPfh3yldSqkiF83ogO4q+GFtMuI vldxaa/m5Mdb2FdJqoUoFkzsmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsY88JA I3oBU/8cqlsgotq69ipxMB8GA1UdIwQYMBaAFNYdwXgI9Y4PmbKFLOdIYPhTyyDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkQyQi8zRjg2RDc5QUE4 MzUxMUVEQTc3NkFCMzBDNEY5QUUwMi8xaDNCZUFqMWpnLVpzb1VzNTBoZy1GUExJ TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFoM0JlQWoxamctWnNvVXM1MGhnLUZQTElOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkQyQi8zRjg2RDc5QUE4MzUxMUVEQTc3NkFCMzBDNEY5QUUwMi8xaDNCZUFqMWpn LVpzb1VzNTBoZy1GUExJTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO5S7t9tze4sm1ir0fu+kGdhOmqGNxTQRwYTHy74QJsK6Yl3is1GU/ t2ZXcLaN/moBgSnzrbFKjQKKHQbgY71t8Z5hrz7E6u1BdLey/R4CksREnMQuFawA utsCzBnJoa45JTBZA//xP0AFIPu3n56zsp75mzqLSozxgGHM1O31jFJg6A/pzTsE m+vE2gTSM0+QVafCpmNg4UnK1huHbM+tuosm+FrQUDKoLEEuo+3yZi7GmRCsTYcZ /cxGjA2WYiGVJ38/OVwH/QD76cm+SHGra5tEoAh7JpQ/NR7Vjy9sHjnQNOnS954K HttecWeAZEUrXYzZnhXNgNUwHH6VnHtB -----END CERTIFICATE-----Generated at Sun Jun 29 19:04:37 2025 by rpki-client