$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft File: 7BeaWHQiKOMLffeXiCZYOHglW3g.mft (raw, json) Hash identifier: hetyIw59nhuiTxsX+dMqFbeb3/KnT9yAAKa4b5EhFV8= Subject key identifier: 13:6D:A2:7E:46:FD:B8:2C:06:40:95:2D:68:24:7A:BD:25:8E:D0:5A Authority key identifier: EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 Certificate issuer: /CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78 Certificate serial: 0DAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft Manifest number: 0DAA Signing time: Sun 08 Jun 2025 17:46:21 +0000 Manifest this update: Sun 08 Jun 2025 17:46:21 +0000 Manifest next update: Sun 15 Jun 2025 17:46:21 +0000 Files and hashes: 1: 7BeaWHQiKOMLffeXiCZYOHglW3g.crl (hash: wXUfEY4paznMmz+qtA1l2mnRXQu6eYPRpJeXDSOX0ks=) 2: E64999C258D611ED86C99945C4F9AE02.roa (hash: DQ+JErFx/tRloLusNXusv2s1HWOBWc0JnN5N02SFoik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 17:46:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3502 (0xdae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA95A, serialNumber=EC179A58742228E30B7DF7978826583878255B78 Validity Not Before: Jun 8 17:46:21 2025 GMT Not After : Jun 15 17:46:21 2025 GMT Subject: CN=6845cc6d-7d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f4:c1:18:61:56:47:74:c2:1b:1b:40:dc:c4: 73:0b:17:64:a5:28:06:aa:cd:b7:f0:e1:a8:57:9d: 51:91:83:14:f0:a6:a5:f5:8d:a9:85:f1:a0:96:18: 21:33:65:b4:d3:f9:27:8c:4d:9f:52:47:27:13:1f: b9:fe:bc:fc:b9:7b:36:a8:e9:2c:7a:e2:cb:28:c0: 51:68:79:56:a2:c5:4b:47:0c:0f:46:3f:ee:c0:5a: e2:f7:77:0b:64:16:3e:39:f6:b0:77:d4:e1:32:d4: 48:c8:09:e5:97:01:be:98:25:1f:75:bb:40:cb:84: a5:d1:d9:12:b6:33:72:66:79:50:48:20:6c:75:71: 55:2c:51:b4:14:05:cd:46:10:66:85:31:cb:92:70: bd:6d:20:91:e5:d1:98:65:c6:93:9d:69:1a:f9:ae: 14:4a:98:f7:35:12:ca:61:6d:4d:fd:97:c6:3d:13: 86:68:ec:1e:79:2c:3e:dd:6c:5d:7c:00:e5:fc:e3: 74:6f:4c:5c:af:10:71:70:58:59:c9:82:bb:45:70: 0e:23:0c:2b:97:d1:1a:79:8a:b8:e6:ac:4a:9d:40: 9c:c2:38:70:ba:d2:07:32:ef:9f:5a:e6:23:86:b5: d1:d1:da:93:c2:6d:fb:a3:b8:3c:aa:93:71:e4:ba: a5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6D:A2:7E:46:FD:B8:2C:06:40:95:2D:68:24:7A:BD:25:8E:D0:5A X509v3 Authority Key Identifier: keyid:EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d0:f9:da:1b:4f:0f:b4:98:18:56:dc:19:e2:e2:70:f8:96: 16:77:00:ec:9d:95:40:0e:21:94:94:2d:a0:3c:64:4a:17:d3: d3:4f:02:3e:a3:5e:c8:a0:71:04:30:d3:9a:e6:85:40:44:8b: 01:40:6a:89:a2:df:4f:39:65:68:52:7c:e1:87:04:90:cc:8d: 1c:3a:1f:fd:80:cc:73:f8:61:3b:64:21:6d:96:61:50:d9:6f: 1f:a9:d5:d8:c1:50:9f:86:6d:12:9a:9d:70:46:8f:07:55:ef: b3:42:f1:ae:cb:97:53:12:bc:1e:2e:35:79:4f:59:29:0d:0e: 4c:33:64:a6:fb:da:5d:79:68:7e:76:e6:cb:e5:a6:97:80:86: 09:a6:a0:8d:c9:0a:bb:9b:cc:84:84:3d:22:27:6d:2e:f5:c3: 84:87:18:15:12:dd:bb:4a:d3:a5:b6:ed:27:71:5d:7d:52:59: 2e:a5:0d:9f:58:81:ce:f7:ad:a1:8d:96:ab:f1:53:6b:28:81: 8b:63:56:70:f3:44:23:dd:6e:ce:69:24:26:46:24:cf:3e:66: 82:57:82:2d:3b:bd:39:63:ed:f0:31:f8:49:24:42:1d:25:c5: f7:e6:eb:0e:75:85:29:fc:aa:ba:a0:95:20:1d:29:5b:1e:aa: 9d:3a:af:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE5NUExMTAvBgNVBAUTKEVDMTc5QTU4NzQyMjI4RTMwQjdERjc5Nzg4MjY1ODM4 NzgyNTVCNzgwHhcNMjUwNjA4MTc0NjIxWhcNMjUwNjE1MTc0NjIxWjAYMRYwFAYD VQQDEw02ODQ1Y2M2ZC03ZDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fTBGGFWR3TCGxtA3MRzCxdkpSgGqs238OGoV51RkYMU8Kal9Y2phfGglhgh M2W00/knjE2fUkcnEx+5/rz8uXs2qOkseuLLKMBRaHlWosVLRwwPRj/uwFri93cL ZBY+Ofawd9ThMtRIyAnllwG+mCUfdbtAy4Sl0dkStjNyZnlQSCBsdXFVLFG0FAXN RhBmhTHLknC9bSCR5dGYZcaTnWka+a4USpj3NRLKYW1N/ZfGPROGaOweeSw+3Wxd fADl/ON0b0xcrxBxcFhZyYK7RXAOIwwrl9EaeYq45qxKnUCcwjhwutIHMu+fWuYj hrXR0dqTwm37o7g8qpNx5LqlKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNton5G /bgsBkCVLWgker0ljtBaMB8GA1UdIwQYMBaAFOwXmlh0IijjC333l4gmWDh4JVt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk1QS9CMEQxRDVGQ0JF NzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtPTUxmZmVYaUNaWU9IZ2xX M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdCZWFXSFFpS09NTGZmZVhpQ1pZT0hnbFczZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTk1QS9CMEQxRDVGQ0JFNzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtP TUxmZmVYaUNaWU9IZ2xXM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa0PnaG08PtJgYVtwZ4uJw+JYWdwDsnZVADiGUlC2gPGRKF9PTTwI+ o17IoHEEMNOa5oVARIsBQGqJot9POWVoUnzhhwSQzI0cOh/9gMxz+GE7ZCFtlmFQ 2W8fqdXYwVCfhm0Smp1wRo8HVe+zQvGuy5dTErweLjV5T1kpDQ5MM2Sm+9pdeWh+ dubL5aaXgIYJpqCNyQq7m8yEhD0iJ20u9cOEhxgVEt27StOltu0ncV19UlkupQ2f WIHO962hjZar8VNrKIGLY1Zw80Qj3W7OaSQmRiTPPmaCV4ItO705Y+3wMfhJJEId JcX35usOdYUp/Kq6oJUgHSlbHqqdOq/O -----END CERTIFICATE-----Generated at Tue Jun 10 03:36:40 2025 by rpki-client