$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft File: 6beh3yCMdbnrMDz4g8oSjqBPxQo.mft (raw, json) Hash identifier: T4cY6eEr++dKigYzKA/xTPRPq/Rm52cSwOa6wZpxBy8= Subject key identifier: 84:A2:60:C5:46:C9:1E:E1:9A:1F:56:4D:E8:1F:A8:24:67:B1:13:6B Authority key identifier: E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A Certificate issuer: /CN=A91D8DCB/serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A Certificate serial: 15AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft Manifest number: 15A2 Signing time: Sat 14 Jun 2025 16:44:13 +0000 Manifest this update: Sat 14 Jun 2025 16:44:12 +0000 Manifest next update: Sat 21 Jun 2025 16:44:12 +0000 Files and hashes: 1: 6beh3yCMdbnrMDz4g8oSjqBPxQo.crl (hash: q3iwnSEAdojfAt8me7/Pl/Jv1JAFYe+t/DU7sd7uCOs=) 2: F1D384D031D311E88735EA0AC4F9AE02.roa (hash: 1WW3WJFCQXTAgfqp4BPT1d+bkbg/Wm5DIDF6W6wSe5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.crl rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5546 (0x15aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8DCB, serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A Validity Not Before: Jun 14 16:44:12 2025 GMT Not After : Jun 21 16:44:12 2025 GMT Subject: CN=684da6dc-fbd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:91:da:51:4b:09:06:95:97:4b:6a:1a:13:db: 06:a7:3f:99:40:5b:fd:6d:47:f4:90:f6:e7:92:4f: 6c:be:9d:d5:30:6d:af:3b:30:5b:3e:34:a6:2f:53: 6b:a1:21:ed:e4:d9:9c:06:28:e2:30:f9:f0:63:1a: 69:8a:e2:0c:26:ce:a6:79:46:d0:31:2b:97:3b:28: 6a:0e:fb:1d:97:f7:f0:1a:de:0d:f9:5a:7b:d5:e0: 57:aa:21:cf:83:d7:c2:37:57:3f:51:33:85:4b:46: 66:94:76:78:95:62:fc:ba:0d:5b:64:d7:dc:6f:a6: 8f:21:69:ae:20:2a:35:e1:8c:66:25:ee:6e:c6:0c: 5d:c6:f6:cb:0b:d5:5f:83:12:6a:02:d4:68:20:20: 55:c0:d1:fb:8f:1b:53:c2:a8:dc:ec:6f:9a:bd:ab: 54:d5:24:05:b6:68:d2:68:46:41:ee:43:e7:16:a8: 77:9a:c4:ed:ba:95:78:31:2a:49:d4:8c:cd:99:0d: 29:1e:b3:2b:aa:7d:be:e1:a2:28:fb:54:83:fa:0a: b2:8f:0d:d3:69:bc:4a:68:48:91:36:da:a7:dd:7c: cd:71:a5:45:49:c1:0c:ef:5f:32:4a:2d:94:25:b9: 68:24:03:ad:62:83:1d:f9:92:ef:46:98:29:9d:e2: d5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A2:60:C5:46:C9:1E:E1:9A:1F:56:4D:E8:1F:A8:24:67:B1:13:6B X509v3 Authority Key Identifier: keyid:E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8b:70:65:78:42:bc:6b:87:d1:dc:35:59:c0:fd:a0:c9:16: a3:70:ac:43:f6:70:15:34:e2:c7:27:ab:4d:80:5a:1b:9a:76: c7:5d:f7:48:20:9f:e9:9c:60:c5:da:87:3a:71:b2:d8:86:05: 0f:e3:40:08:2f:8e:b4:49:93:15:75:14:6a:fd:23:64:4d:a3: 0b:47:90:80:b9:00:95:f8:58:b5:65:64:3e:8d:9a:bc:a8:1d: 51:fd:eb:a8:9a:3e:fe:e9:d0:b2:cb:22:01:49:64:eb:44:f3: 13:6a:12:c4:1c:3f:84:6b:68:01:3a:ba:f0:37:62:1e:32:73: 65:09:16:cc:4e:20:9a:8f:79:97:16:d1:1d:2a:81:51:d8:5c: 4b:6a:d6:40:73:f0:69:26:9d:94:e8:7e:8a:e3:45:3a:e3:79: fb:2d:37:fd:f8:fc:b7:78:33:d1:55:fd:bd:83:5e:6d:4c:03: b3:89:20:d8:31:07:36:5d:86:1b:56:9e:e6:0a:92:f3:85:31: 4f:9d:d2:c1:44:65:30:2c:c8:54:48:58:eb:f1:4a:0d:c3:a6: 23:0e:5a:e5:f2:2b:86:ec:de:37:c7:80:09:f1:db:0d:89:e8: 5e:97:50:ef:d5:53:f4:e9:6c:3c:7e:70:57:2b:d8:8a:3f:ea: bf:e3:66:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhEQ0IxMTAvBgNVBAUTKEU5QjdBMURGMjA4Qzc1QjlFQjMwM0NGODgzQ0ExMjhF QTA0RkM1MEEwHhcNMjUwNjE0MTY0NDEyWhcNMjUwNjIxMTY0NDEyWjAYMRYwFAYD VQQDEw02ODRkYTZkYy1mYmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJHaUUsJBpWXS2oaE9sGpz+ZQFv9bUf0kPbnkk9svp3VMG2vOzBbPjSmL1Nr oSHt5NmcBijiMPnwYxppiuIMJs6meUbQMSuXOyhqDvsdl/fwGt4N+Vp71eBXqiHP g9fCN1c/UTOFS0ZmlHZ4lWL8ug1bZNfcb6aPIWmuICo14YxmJe5uxgxdxvbLC9Vf gxJqAtRoICBVwNH7jxtTwqjc7G+avatU1SQFtmjSaEZB7kPnFqh3msTtupV4MSpJ 1IzNmQ0pHrMrqn2+4aIo+1SD+gqyjw3TabxKaEiRNtqn3XzNcaVFScEM718ySi2U JbloJAOtYoMd+ZLvRpgpneLV9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISiYMVG yR7hmh9WTegfqCRnsRNrMB8GA1UdIwQYMBaAFOm3od8gjHW56zA8+IPKEo6gT8UK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOERDQi83NDNGNzBDODJG MkMxMUU4OTlEMUUwMTdDNEY5QUUwMi82YmVoM3lDTWRibnJNRHo0ZzhvU2pxQlB4 UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZiZWgzeUNNZGJuck1EejRnOG9TanFCUHhRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OERDQi83NDNGNzBDODJGMkMxMUU4OTlEMUUwMTdDNEY5QUUwMi82YmVoM3lDTWRi bnJNRHo0ZzhvU2pxQlB4UW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbi3BleEK8a4fR3DVZwP2gyRajcKxD9nAVNOLHJ6tNgFobmnbHXfdI IJ/pnGDF2oc6cbLYhgUP40AIL460SZMVdRRq/SNkTaMLR5CAuQCV+Fi1ZWQ+jZq8 qB1R/euomj7+6dCyyyIBSWTrRPMTahLEHD+Ea2gBOrrwN2IeMnNlCRbMTiCaj3mX FtEdKoFR2FxLatZAc/BpJp2U6H6K40U643n7LTf9+Py3eDPRVf29g15tTAOziSDY MQc2XYYbVp7mCpLzhTFPndLBRGUwLMhUSFjr8UoNw6YjDlrl8iuG7N43x4AJ8dsN iehel1Dv1VP06Ww8fnBXK9iKP+q/42at -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:07 2025 by rpki-client