$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft File: 6beh3yCMdbnrMDz4g8oSjqBPxQo.mft (raw, json) Hash identifier: MQmLFM1uOtiuAczU8OwX3lv3/i0RAPlBW3EQWosswPc= Subject key identifier: 97:69:C8:42:F4:CE:FA:F8:AA:B6:CA:76:0F:C6:02:FF:8D:70:D2:E9 Authority key identifier: E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A Certificate issuer: /CN=A91D8DCB/serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A Certificate serial: 15A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft Manifest number: 159A Signing time: Fri 30 May 2025 16:58:08 +0000 Manifest this update: Fri 30 May 2025 16:58:08 +0000 Manifest next update: Fri 06 Jun 2025 16:58:08 +0000 Files and hashes: 1: 6beh3yCMdbnrMDz4g8oSjqBPxQo.crl (hash: lEwzEuNh76w510LDlAOs45D+FJFk5YrWd0jnPlkVlCw=) 2: F1D384D031D311E88735EA0AC4F9AE02.roa (hash: 1WW3WJFCQXTAgfqp4BPT1d+bkbg/Wm5DIDF6W6wSe5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.crl rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5538 (0x15a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8DCB, serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A Validity Not Before: May 30 16:58:08 2025 GMT Not After : Jun 6 16:58:08 2025 GMT Subject: CN=6839e3a0-4ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:51:74:5f:af:45:6d:41:85:a7:35:14:cd:9e: 7a:a7:f1:88:14:30:35:3d:a9:d8:dc:35:34:29:9a: d4:c5:1d:dd:87:e8:33:77:c5:cd:1a:05:d6:c4:d5: c5:fb:9a:51:e0:c9:64:0f:e2:bd:0d:8d:01:73:c4: a0:0b:57:a8:71:ad:c1:74:10:4e:ae:5d:cc:1d:bd: 07:26:85:83:1b:fc:99:3e:df:4f:27:35:ae:2a:b5: 0b:b7:2e:dd:f9:cf:cc:df:58:ef:1c:bb:aa:cf:40: 7f:b8:3d:07:dc:4a:a3:06:f0:cf:f1:13:f9:27:cd: 43:76:0e:2c:32:ad:57:17:9d:ee:b2:8e:ae:57:5a: 57:de:3d:3b:0f:bf:ad:0f:a6:40:c0:38:b9:30:b3: 87:46:00:9c:22:72:44:a6:ad:2b:9e:1b:55:30:76: 3c:48:7e:8e:74:72:cf:78:4d:ce:e4:19:ea:2c:e1: e9:c8:5e:34:37:ce:eb:0d:48:e2:27:ff:73:da:e4: 2c:ce:d0:4f:14:c2:a5:eb:13:92:c5:9f:a4:d2:0f: a4:b7:29:d5:c1:be:94:d0:2e:5c:a2:30:22:61:12: d3:6f:66:b6:c1:fe:43:32:dc:fb:4d:1c:b5:3c:dc: f3:3c:73:1a:35:2c:34:9a:37:d3:11:4e:09:c5:89: 75:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:69:C8:42:F4:CE:FA:F8:AA:B6:CA:76:0F:C6:02:FF:8D:70:D2:E9 X509v3 Authority Key Identifier: keyid:E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b9:fc:59:1e:2f:e7:08:9f:90:8c:f3:6b:db:4e:d4:a9:c5: cc:b4:63:09:b7:90:85:6f:ba:4e:c7:73:e6:55:53:92:e6:b1: 4b:2c:96:74:90:ba:58:ba:aa:36:ce:4a:26:c7:3a:7f:78:bb: 33:84:5b:36:63:a4:b8:a4:29:b9:92:9a:c8:1c:ea:03:b1:c4: 71:9a:09:17:e3:8e:20:8d:86:37:ed:f0:b9:53:3b:c9:68:72: 14:96:58:a9:58:ed:ba:d9:5e:2f:ec:2a:f3:91:c6:35:3e:94: 31:19:f6:42:e1:dc:bd:82:68:14:46:5a:d4:76:98:cd:63:c1: 4c:5f:60:44:2c:9f:95:e8:59:e5:fe:1f:62:3e:02:0e:c7:f7: b2:2c:a6:1a:e7:5f:56:39:33:15:de:55:ff:60:59:fb:8a:07: 99:2b:56:71:ed:6b:be:cd:47:bc:f0:ec:8f:ab:30:9d:5e:74: 5e:9c:03:00:85:4f:7a:73:26:e9:49:4e:40:90:1b:95:24:c4: 5e:64:00:18:14:85:a7:44:1e:32:13:21:98:c7:e7:03:5c:ba: 3c:94:85:14:43:e5:99:5a:21:f3:41:3d:4a:f9:aa:28:72:1b: e0:a4:94:c9:fe:40:69:7f:ec:34:12:73:18:df:f4:cb:05:60: 80:f5:50:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhEQ0IxMTAvBgNVBAUTKEU5QjdBMURGMjA4Qzc1QjlFQjMwM0NGODgzQ0ExMjhF QTA0RkM1MEEwHhcNMjUwNTMwMTY1ODA4WhcNMjUwNjA2MTY1ODA4WjAYMRYwFAYD VQQDEw02ODM5ZTNhMC00ZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylF0X69FbUGFpzUUzZ56p/GIFDA1PanY3DU0KZrUxR3dh+gzd8XNGgXWxNXF +5pR4MlkD+K9DY0Bc8SgC1eoca3BdBBOrl3MHb0HJoWDG/yZPt9PJzWuKrULty7d +c/M31jvHLuqz0B/uD0H3EqjBvDP8RP5J81Ddg4sMq1XF53uso6uV1pX3j07D7+t D6ZAwDi5MLOHRgCcInJEpq0rnhtVMHY8SH6OdHLPeE3O5BnqLOHpyF40N87rDUji J/9z2uQsztBPFMKl6xOSxZ+k0g+ktynVwb6U0C5cojAiYRLTb2a2wf5DMtz7TRy1 PNzzPHMaNSw0mjfTEU4JxYl1uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdpyEL0 zvr4qrbKdg/GAv+NcNLpMB8GA1UdIwQYMBaAFOm3od8gjHW56zA8+IPKEo6gT8UK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOERDQi83NDNGNzBDODJG MkMxMUU4OTlEMUUwMTdDNEY5QUUwMi82YmVoM3lDTWRibnJNRHo0ZzhvU2pxQlB4 UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZiZWgzeUNNZGJuck1EejRnOG9TanFCUHhRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OERDQi83NDNGNzBDODJGMkMxMUU4OTlEMUUwMTdDNEY5QUUwMi82YmVoM3lDTWRi bnJNRHo0ZzhvU2pxQlB4UW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLufxZHi/nCJ+QjPNr207UqcXMtGMJt5CFb7pOx3PmVVOS5rFLLJZ0 kLpYuqo2zkomxzp/eLszhFs2Y6S4pCm5kprIHOoDscRxmgkX444gjYY37fC5UzvJ aHIUllipWO262V4v7CrzkcY1PpQxGfZC4dy9gmgURlrUdpjNY8FMX2BELJ+V6Fnl /h9iPgIOx/eyLKYa519WOTMV3lX/YFn7igeZK1Zx7Wu+zUe88OyPqzCdXnRenAMA hU96cybpSU5AkBuVJMReZAAYFIWnRB4yEyGYx+cDXLo8lIUUQ+WZWiHzQT1K+aoo chvgpJTJ/kBpf+w0EnMY3/TLBWCA9VA1 -----END CERTIFICATE-----Generated at Sat May 31 17:48:37 2025 by rpki-client