$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft File: 6beh3yCMdbnrMDz4g8oSjqBPxQo.mft (raw, json) Hash identifier: lEizWnkMYTsjjkpLUbP66VP1OGfAopvkVObueSO/eSI= Subject key identifier: E7:3D:0A:36:7B:15:F7:7D:76:C2:8D:13:A3:D5:B3:20:72:B5:07:C6 Authority key identifier: E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A Certificate issuer: /CN=A91D8DCB/serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A Certificate serial: 15EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft Manifest number: 15E3 Signing time: Mon 20 Oct 2025 17:08:00 +0000 Manifest this update: Mon 20 Oct 2025 17:07:59 +0000 Manifest next update: Mon 27 Oct 2025 17:07:59 +0000 Files and hashes: 1: 6beh3yCMdbnrMDz4g8oSjqBPxQo.crl (hash: X9v0EtQ6cVmho+QisixNQDAC4vV/tEOy5y37PRNWCPk=) 2: F1D384D031D311E88735EA0AC4F9AE02.roa (hash: 1WW3WJFCQXTAgfqp4BPT1d+bkbg/Wm5DIDF6W6wSe5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.crl rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5611 (0x15eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8DCB, serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A Validity Not Before: Oct 20 17:07:59 2025 GMT Not After : Oct 27 17:07:59 2025 GMT Subject: CN=68f66c70-8adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:92:81:14:d8:d5:ef:e3:af:39:ef:31:3e:72: 36:e0:50:94:ee:03:44:46:80:9b:0e:4d:a3:e1:b7: 7f:d7:ac:41:1c:8a:38:e7:ae:a7:e2:99:64:85:9d: ce:53:cf:e8:2a:46:30:e3:ba:bb:b4:22:5a:8a:00: ff:8a:6f:3e:43:9d:e8:3b:ec:25:3d:09:7b:29:36: 86:bc:4b:8c:e6:86:bb:b2:0c:86:2e:96:a5:b2:74: a3:0a:6a:35:1a:f7:1c:ce:9e:e5:dd:e0:02:9a:dc: 50:54:74:02:a8:e4:a8:3b:77:4e:5d:86:be:ec:48: 57:9a:19:2a:d4:9d:b9:51:67:16:b7:73:4a:11:96: b5:14:c3:bd:4a:bf:00:cc:f2:67:ff:b8:f0:7a:78: 45:f3:62:d8:a8:79:de:6f:62:bd:e0:08:3f:ce:6d: e5:1a:41:2a:60:d8:fe:d2:06:b7:b8:43:0f:28:28: ef:7c:f7:54:e6:f3:f2:2b:c4:fb:03:af:68:6c:d0: df:a4:78:b0:03:54:57:6f:2e:e9:ee:74:ed:f1:09: a6:22:97:2b:b1:b6:b6:a5:26:be:4c:23:c9:46:5f: 58:cd:6e:a9:23:87:e1:3b:12:7f:eb:7c:32:00:78: 81:ae:58:44:62:82:4b:43:45:d2:4c:d3:1b:5c:8c: 13:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3D:0A:36:7B:15:F7:7D:76:C2:8D:13:A3:D5:B3:20:72:B5:07:C6 X509v3 Authority Key Identifier: keyid:E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:06:72:7a:76:79:e7:53:db:df:95:d2:a6:a6:0f:16:55:89: ca:55:d6:35:db:20:ef:c7:00:7c:26:da:51:fa:a3:6a:8d:1d: 78:6e:71:a7:bd:bc:cd:24:7e:f0:2f:fc:15:2a:85:8d:f0:19: ec:31:80:f1:10:af:b5:63:1c:95:f2:0c:c0:64:26:5b:17:26: 3c:f3:11:e6:3c:81:4c:55:c1:4d:e6:93:40:fc:64:13:ba:ac: d3:f7:f1:4f:76:9c:f8:64:f2:38:e6:83:f8:f6:3d:17:11:0c: 09:ad:a3:17:eb:b9:1f:57:79:52:c2:6a:3d:9e:99:3f:62:1c: c9:e5:06:91:0c:0f:92:fb:6e:b0:87:1a:7e:39:1d:e5:35:49: ee:2d:0e:6b:05:fe:65:5f:60:a6:45:d4:96:e8:44:2e:6c:d1: 36:57:9d:03:71:67:0a:99:43:88:c2:dc:48:cb:d0:5a:5d:97: 0d:da:b7:66:a9:ab:83:a1:13:4f:ac:81:db:47:4c:6d:2c:00: 01:3f:05:d9:3c:fb:7d:70:5a:2b:62:ca:f7:fd:e2:68:68:57: e9:2f:f4:b2:64:f4:6e:21:aa:28:bb:85:be:8b:2e:5a:a3:e6: 31:d4:96:f5:73:35:fb:97:4e:14:66:22:25:e6:93:23:df:07: 47:51:17:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhEQ0IxMTAvBgNVBAUTKEU5QjdBMURGMjA4Qzc1QjlFQjMwM0NGODgzQ0ExMjhF QTA0RkM1MEEwHhcNMjUxMDIwMTcwNzU5WhcNMjUxMDI3MTcwNzU5WjAYMRYwFAYD VQQDEw02OGY2NmM3MC04YWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypKBFNjV7+OvOe8xPnI24FCU7gNERoCbDk2j4bd/16xBHIo4566n4plkhZ3O U8/oKkYw47q7tCJaigD/im8+Q53oO+wlPQl7KTaGvEuM5oa7sgyGLpalsnSjCmo1 Gvcczp7l3eACmtxQVHQCqOSoO3dOXYa+7EhXmhkq1J25UWcWt3NKEZa1FMO9Sr8A zPJn/7jwenhF82LYqHneb2K94Ag/zm3lGkEqYNj+0ga3uEMPKCjvfPdU5vPyK8T7 A69obNDfpHiwA1RXby7p7nTt8QmmIpcrsba2pSa+TCPJRl9YzW6pI4fhOxJ/63wy AHiBrlhEYoJLQ0XSTNMbXIwTPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOc9CjZ7 Ffd9dsKNE6PVsyBytQfGMB8GA1UdIwQYMBaAFOm3od8gjHW56zA8+IPKEo6gT8UK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOERDQi83NDNGNzBDODJG MkMxMUU4OTlEMUUwMTdDNEY5QUUwMi82YmVoM3lDTWRibnJNRHo0ZzhvU2pxQlB4 UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZiZWgzeUNNZGJuck1EejRnOG9TanFCUHhRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OERDQi83NDNGNzBDODJGMkMxMUU4OTlEMUUwMTdDNEY5QUUwMi82YmVoM3lDTWRi bnJNRHo0ZzhvU2pxQlB4UW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTBnJ6dnnnU9vfldKmpg8WVYnKVdY12yDvxwB8JtpR+qNqjR14bnGn vbzNJH7wL/wVKoWN8BnsMYDxEK+1YxyV8gzAZCZbFyY88xHmPIFMVcFN5pNA/GQT uqzT9/FPdpz4ZPI45oP49j0XEQwJraMX67kfV3lSwmo9npk/YhzJ5QaRDA+S+26w hxp+OR3lNUnuLQ5rBf5lX2CmRdSW6EQubNE2V50DcWcKmUOIwtxIy9BaXZcN2rdm qauDoRNPrIHbR0xtLAABPwXZPPt9cForYsr3/eJoaFfpL/SyZPRuIaoou4W+iy5a o+Yx1Jb1czX7l04UZiIl5pMj3wdHURfs -----END CERTIFICATE-----Generated at Mon Oct 20 19:47:57 2025 by rpki-client