$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft File: 6beh3yCMdbnrMDz4g8oSjqBPxQo.mft (raw, json) Hash identifier: SrD5MyUCFLhljS4lFcz42aaE9rsu7iKhC0DmFgYMKho= Subject key identifier: 12:04:B0:77:5A:7E:F1:7F:21:C6:E4:90:78:DF:BA:B4:F6:F5:D8:72 Authority key identifier: E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A Certificate issuer: /CN=A91D8DCB/serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A Certificate serial: 15B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft Manifest number: 15AB Signing time: Wed 02 Jul 2025 16:55:08 +0000 Manifest this update: Wed 02 Jul 2025 16:55:07 +0000 Manifest next update: Wed 09 Jul 2025 16:55:07 +0000 Files and hashes: 1: 6beh3yCMdbnrMDz4g8oSjqBPxQo.crl (hash: pOQL99GEi+fx5rV3/EuSzhMRRNb00GhUvIUNRriI6Yk=) 2: F1D384D031D311E88735EA0AC4F9AE02.roa (hash: 1WW3WJFCQXTAgfqp4BPT1d+bkbg/Wm5DIDF6W6wSe5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.crl rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5555 (0x15b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8DCB, serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A Validity Not Before: Jul 2 16:55:07 2025 GMT Not After : Jul 9 16:55:07 2025 GMT Subject: CN=6865646c-e503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:02:5b:74:71:ba:e5:8e:8a:cd:0e:c0:ad: a7:d6:43:6f:59:67:74:cc:6d:fd:27:bf:1b:43:58: fe:f5:8d:13:db:11:11:eb:9f:37:be:b8:cd:30:a6: 12:1a:55:ae:55:22:ef:73:4f:42:15:d2:91:29:80: 0a:49:b8:1e:99:bc:2d:ab:8d:60:e5:72:ef:eb:f5: 8d:be:75:f9:c4:a5:d2:21:b9:2f:1c:4a:7c:d1:65: 2e:9a:09:74:43:2c:a9:de:81:11:9d:a6:78:53:b4: fe:50:d0:2e:dd:f5:3f:d3:c8:68:2b:36:b6:30:37: fb:13:b3:2a:c2:12:d9:c4:89:be:d0:09:82:44:ac: bc:ad:c4:44:c6:cd:02:72:17:0b:e9:af:de:06:c3: 3f:56:f9:da:7e:8c:ea:04:39:03:a6:11:ba:52:aa: d0:9e:1a:12:c7:ac:51:29:39:af:f3:e4:a3:ce:53: 65:b5:57:cf:6e:43:d6:dd:c1:85:85:f4:da:79:91: 06:4d:37:6d:1f:f3:ab:f8:c3:92:6a:c6:0e:f2:ce: 35:7f:95:93:b8:ba:de:39:79:55:40:ce:b0:13:57: 13:80:71:ec:26:39:4a:a9:82:07:f8:54:13:fd:59: f1:29:92:ca:98:d6:05:8b:e1:84:b1:99:a2:14:30: c1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:04:B0:77:5A:7E:F1:7F:21:C6:E4:90:78:DF:BA:B4:F6:F5:D8:72 X509v3 Authority Key Identifier: keyid:E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:0f:f4:02:fa:3c:d6:7b:fc:13:e1:6d:d4:83:fe:31:4e:3e: 11:a7:3d:1f:4a:04:73:19:3a:0c:8e:bb:53:90:9c:bd:7f:51: ab:19:ed:a4:24:8d:2a:e3:9e:19:2e:7f:eb:6c:d3:3f:fd:63: a1:c0:73:20:cb:8c:19:e0:87:84:19:10:be:b1:82:e6:91:80: a2:11:95:92:e1:8e:df:cc:49:e3:2e:48:f8:57:53:e1:b9:a1: ad:ad:a9:54:da:6a:cf:19:90:f7:84:6b:26:a4:11:34:e5:cf: ae:cb:e9:fd:31:2a:82:6a:e7:c3:fb:bf:d8:57:52:ff:b0:e8: 97:cd:77:2c:5c:33:83:63:51:72:d0:b2:10:3e:46:33:2c:d4: af:6e:c4:d5:e6:c7:72:8a:b6:b2:f4:34:6b:9f:aa:a8:b7:8b: fd:4b:4f:c7:d2:c9:40:8b:2b:55:2b:a7:e3:74:4a:90:cb:4a: 95:ab:47:e3:f7:50:8a:58:8f:fe:c3:17:c2:4b:b5:97:16:1d: c4:e2:ff:5c:8b:b8:7d:21:b1:e9:36:11:a7:66:16:4e:08:1e: af:ae:1c:90:0d:aa:56:9c:55:d9:30:f6:90:88:26:82:3c:05: 47:8d:d6:23:49:48:a0:c9:90:49:3a:73:9a:9b:f1:80:1b:2f: ab:73:dc:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhEQ0IxMTAvBgNVBAUTKEU5QjdBMURGMjA4Qzc1QjlFQjMwM0NGODgzQ0ExMjhF QTA0RkM1MEEwHhcNMjUwNzAyMTY1NTA3WhcNMjUwNzA5MTY1NTA3WjAYMRYwFAYD VQQDEw02ODY1NjQ2Yy1lNTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhACW3RxuuWOis0OwK2n1kNvWWd0zG39J78bQ1j+9Y0T2xER6583vrjNMKYS GlWuVSLvc09CFdKRKYAKSbgembwtq41g5XLv6/WNvnX5xKXSIbkvHEp80WUumgl0 Qyyp3oERnaZ4U7T+UNAu3fU/08hoKza2MDf7E7MqwhLZxIm+0AmCRKy8rcRExs0C chcL6a/eBsM/VvnafozqBDkDphG6UqrQnhoSx6xRKTmv8+SjzlNltVfPbkPW3cGF hfTaeZEGTTdtH/Or+MOSasYO8s41f5WTuLreOXlVQM6wE1cTgHHsJjlKqYIH+FQT /VnxKZLKmNYFi+GEsZmiFDDBhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIEsHda fvF/IcbkkHjfurT29dhyMB8GA1UdIwQYMBaAFOm3od8gjHW56zA8+IPKEo6gT8UK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOERDQi83NDNGNzBDODJG MkMxMUU4OTlEMUUwMTdDNEY5QUUwMi82YmVoM3lDTWRibnJNRHo0ZzhvU2pxQlB4 UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZiZWgzeUNNZGJuck1EejRnOG9TanFCUHhRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OERDQi83NDNGNzBDODJGMkMxMUU4OTlEMUUwMTdDNEY5QUUwMi82YmVoM3lDTWRi bnJNRHo0ZzhvU2pxQlB4UW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuD/QC+jzWe/wT4W3Ug/4xTj4Rpz0fSgRzGToMjrtTkJy9f1GrGe2k JI0q454ZLn/rbNM//WOhwHMgy4wZ4IeEGRC+sYLmkYCiEZWS4Y7fzEnjLkj4V1Ph uaGtralU2mrPGZD3hGsmpBE05c+uy+n9MSqCaufD+7/YV1L/sOiXzXcsXDODY1Fy 0LIQPkYzLNSvbsTV5sdyiray9DRrn6qot4v9S0/H0slAiytVK6fjdEqQy0qVq0fj 91CKWI/+wxfCS7WXFh3E4v9ci7h9IbHpNhGnZhZOCB6vrhyQDapWnFXZMPaQiCaC PAVHjdYjSUigyZBJOnOam/GAGy+rc9yN -----END CERTIFICATE-----Generated at Thu Jul 3 21:25:28 2025 by rpki-client