$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft File: 6beh3yCMdbnrMDz4g8oSjqBPxQo.mft (raw, json) Hash identifier: scZNdD2JqyO+4wCGvcUTY5HC7JJ21756s/+4MaXu7zY= Subject key identifier: 66:E2:4C:49:98:45:BC:22:0E:10:1F:68:E0:0B:98:75:F6:77:9E:2D Authority key identifier: E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A Certificate issuer: /CN=A91D8DCB/serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A Certificate serial: 1590 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft Manifest number: 1588 Signing time: Thu 24 Apr 2025 16:48:28 +0000 Manifest this update: Thu 24 Apr 2025 16:48:28 +0000 Manifest next update: Thu 01 May 2025 16:48:28 +0000 Files and hashes: 1: 6beh3yCMdbnrMDz4g8oSjqBPxQo.crl (hash: KVRThWcX2Lm2gpvrzwPxf5Y4wgzKJLUXYPuIxD8PDQ0=) 2: F1D384D031D311E88735EA0AC4F9AE02.roa (hash: 1WW3WJFCQXTAgfqp4BPT1d+bkbg/Wm5DIDF6W6wSe5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.crl rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5520 (0x1590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8DCB, serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A Validity Not Before: Apr 24 16:48:28 2025 GMT Not After : May 1 16:48:28 2025 GMT Subject: CN=680a6b5c-3a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:73:04:7b:37:a2:1d:b3:10:16:8a:f1:82:e9: 6a:7d:1f:f1:da:6f:49:44:c3:0b:fd:aa:bd:a0:d9: 15:fb:07:3e:15:a1:96:5a:b7:3b:3f:76:fb:a1:73: 04:88:af:19:34:95:ce:b6:3b:37:86:0d:c0:e8:a8: 01:24:c1:16:c1:bb:26:3a:30:95:2a:b3:d9:73:6c: 0f:e9:01:d9:92:72:be:ff:c2:bd:91:fd:8e:a6:74: 80:06:79:99:6d:66:93:e4:20:9d:97:53:46:68:61: c7:40:b6:34:bd:6a:d0:3c:23:bc:84:ba:19:7c:ed: 27:4b:88:33:dc:7c:e6:73:53:e3:4b:81:6e:85:66: be:90:a7:d2:14:a6:bf:40:1d:59:b2:4d:1e:77:df: c4:e0:8c:34:5d:07:c8:81:af:60:d2:17:92:88:1a: 28:87:f2:18:dc:94:ec:fd:c7:29:ca:fd:73:a3:8e: 57:38:aa:a5:0d:24:61:c8:a8:c8:22:ba:9c:57:42: 97:7a:22:33:29:27:73:93:16:fe:23:cf:df:73:fc: 7a:9d:4e:6d:4c:cc:c3:40:93:86:f5:78:85:b5:1e: 4e:c8:79:50:e7:e3:86:0d:41:06:01:79:e3:3d:8d: ff:ae:50:2b:e0:93:dc:ed:66:4b:04:4e:40:56:0c: d3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E2:4C:49:98:45:BC:22:0E:10:1F:68:E0:0B:98:75:F6:77:9E:2D X509v3 Authority Key Identifier: keyid:E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:38:f3:33:4c:2c:41:c2:07:66:97:24:30:d2:17:8e:31:74: 62:f5:14:9d:20:6b:00:72:3a:7d:ea:46:02:d6:50:b9:ae:59: 5f:5b:24:f6:90:18:3c:ae:88:16:fa:92:83:1f:e4:8e:e0:48: 40:7a:e6:d4:8d:5d:63:67:7e:48:68:08:b6:7c:ea:f1:37:4d: 41:7b:b0:ff:8d:10:05:37:32:9a:3b:8c:af:5d:a9:0f:a4:87: 53:6f:6e:83:b3:22:fd:bb:c2:c1:8c:ab:e4:6f:a1:0f:d4:2c: 1f:34:c3:26:dc:5d:63:47:76:bf:d7:1a:36:ac:c7:7c:91:6a: 7f:35:53:b9:c1:0d:55:7f:00:96:19:a8:69:f7:5c:f6:3d:26: 20:95:ec:f5:42:59:5f:44:a7:51:f4:d0:c8:98:e4:2d:90:af: 66:c4:67:ea:dd:66:07:c8:67:76:b2:19:12:3d:d8:a4:1a:1e: ff:4c:a3:eb:c6:d8:1a:01:6e:fa:23:2e:b5:72:54:46:32:a6: 58:83:55:24:a5:2c:ff:b1:8b:f7:0f:87:2f:f9:8a:6c:1c:80: bd:c5:80:48:df:5f:6f:f1:89:2f:98:c0:ca:d2:f0:e7:0f:ac: c0:2d:d7:4d:9b:92:dd:77:a1:5d:d5:f0:86:b8:de:28:f1:e0: 53:cc:a8:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhEQ0IxMTAvBgNVBAUTKEU5QjdBMURGMjA4Qzc1QjlFQjMwM0NGODgzQ0ExMjhF QTA0RkM1MEEwHhcNMjUwNDI0MTY0ODI4WhcNMjUwNTAxMTY0ODI4WjAYMRYwFAYD VQQDEw02ODBhNmI1Yy0zYTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4XMEezeiHbMQForxgulqfR/x2m9JRMML/aq9oNkV+wc+FaGWWrc7P3b7oXME iK8ZNJXOtjs3hg3A6KgBJMEWwbsmOjCVKrPZc2wP6QHZknK+/8K9kf2OpnSABnmZ bWaT5CCdl1NGaGHHQLY0vWrQPCO8hLoZfO0nS4gz3Hzmc1PjS4FuhWa+kKfSFKa/ QB1Zsk0ed9/E4Iw0XQfIga9g0heSiBooh/IY3JTs/ccpyv1zo45XOKqlDSRhyKjI IrqcV0KXeiIzKSdzkxb+I8/fc/x6nU5tTMzDQJOG9XiFtR5OyHlQ5+OGDUEGAXnj PY3/rlAr4JPc7WZLBE5AVgzTGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbiTEmY RbwiDhAfaOALmHX2d54tMB8GA1UdIwQYMBaAFOm3od8gjHW56zA8+IPKEo6gT8UK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOERDQi83NDNGNzBDODJG MkMxMUU4OTlEMUUwMTdDNEY5QUUwMi82YmVoM3lDTWRibnJNRHo0ZzhvU2pxQlB4 UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZiZWgzeUNNZGJuck1EejRnOG9TanFCUHhRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OERDQi83NDNGNzBDODJGMkMxMUU4OTlEMUUwMTdDNEY5QUUwMi82YmVoM3lDTWRi bnJNRHo0ZzhvU2pxQlB4UW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADOPMzTCxBwgdmlyQw0heOMXRi9RSdIGsAcjp96kYC1lC5rllfWyT2 kBg8rogW+pKDH+SO4EhAeubUjV1jZ35IaAi2fOrxN01Be7D/jRAFNzKaO4yvXakP pIdTb26DsyL9u8LBjKvkb6EP1CwfNMMm3F1jR3a/1xo2rMd8kWp/NVO5wQ1VfwCW Gahp91z2PSYglez1QllfRKdR9NDImOQtkK9mxGfq3WYHyGd2shkSPdikGh7/TKPr xtgaAW76Iy61clRGMqZYg1UkpSz/sYv3D4cv+YpsHIC9xYBI319v8YkvmMDK0vDn D6zALddNm5Ldd6Fd1fCGuN4o8eBTzKjN -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:42 2025 by rpki-client