$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft File: 6beh3yCMdbnrMDz4g8oSjqBPxQo.mft (raw, json) Hash identifier: lY61N7pKplaEp5Zhtj4gyYMrqBt3mrAK9/vYk3zilPY= Subject key identifier: 16:F5:17:AB:D5:4C:87:A5:F8:F7:1B:C1:FA:18:2E:F9:4D:DA:76:9A Authority key identifier: E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A Certificate issuer: /CN=A91D8DCB/serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A Certificate serial: 15EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft Manifest number: 15E7 Signing time: Tue 28 Oct 2025 16:42:24 +0000 Manifest this update: Tue 28 Oct 2025 16:42:24 +0000 Manifest next update: Tue 04 Nov 2025 16:42:24 +0000 Files and hashes: 1: 6beh3yCMdbnrMDz4g8oSjqBPxQo.crl (hash: NkAfas2QAvOCuliy1pLWcbtSAntC1+cw+iyAOub35MM=) 2: F1D384D031D311E88735EA0AC4F9AE02.roa (hash: 1WW3WJFCQXTAgfqp4BPT1d+bkbg/Wm5DIDF6W6wSe5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.crl rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 16:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5615 (0x15ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8DCB, serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A Validity Not Before: Oct 28 16:42:24 2025 GMT Not After : Nov 4 16:42:24 2025 GMT Subject: CN=6900f270-3f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a0:5d:78:da:86:6e:bb:a7:25:7e:e3:ae:3c: 29:62:6b:91:8c:58:ef:80:77:60:d7:05:bc:30:90: 9e:50:eb:d6:67:97:ef:9c:14:42:33:6d:02:ec:4c: 52:8a:66:10:24:5d:f3:9e:3b:f5:82:ec:ce:3f:ab: 10:33:58:ba:27:91:9c:57:ca:a1:bf:74:52:dc:0b: f2:a3:fb:24:d3:05:1b:78:91:7f:cf:97:38:18:e9: d2:cc:85:08:39:bf:57:7f:01:40:87:d1:52:6c:47: d6:82:66:b3:5a:3c:ec:87:ed:9f:d9:ba:50:bf:35: e0:7c:34:90:09:e2:bb:5c:d9:83:fe:76:e9:f0:0e: 36:5b:ff:5c:67:46:d1:d9:ca:d1:5e:27:06:ab:3d: 73:d7:30:b1:52:35:87:51:29:e8:e3:76:30:5e:7f: 78:3b:2e:6e:52:ee:29:c4:69:d4:5a:f8:50:7b:c2: a6:4d:51:0d:81:db:3b:8b:bd:ce:69:6b:ff:b5:48: 1b:e5:a7:49:6a:93:c2:fc:77:9e:dd:9e:4c:f6:bd: 92:70:a3:ea:a0:38:58:6f:0f:65:86:a2:d4:5b:77: d1:dc:38:de:0a:15:78:9e:50:c6:0d:29:42:23:3f: 99:fc:8a:fc:8e:68:d0:4d:50:4f:46:a5:98:11:55: 5d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F5:17:AB:D5:4C:87:A5:F8:F7:1B:C1:FA:18:2E:F9:4D:DA:76:9A X509v3 Authority Key Identifier: keyid:E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:86:a7:25:88:38:b3:e4:1b:8b:83:64:59:5d:e4:21:01:26: 1a:bd:8a:5b:a2:ec:45:ff:be:29:29:6a:3a:8e:78:da:a8:78: 73:8b:5c:34:c0:03:b7:7d:29:a4:e6:58:fc:e1:0c:7a:87:27: c2:d7:c2:62:d9:59:c7:3f:c8:a4:aa:0a:54:27:3d:e1:d4:4a: db:db:87:d9:5d:43:ad:10:55:31:2a:a5:e0:5f:12:78:87:36: 2e:cb:c4:bc:ec:ad:f0:8d:c8:ac:75:b2:22:4e:b4:4d:34:0b: 22:92:3e:1b:42:bc:ac:ba:4f:92:d3:ee:4b:27:c6:4b:71:86: 96:6c:1f:6d:3a:bf:27:96:da:25:fa:be:32:4e:19:45:ce:bc: 71:8d:b6:4f:28:3d:31:92:59:f5:fc:e0:23:72:b8:f8:8d:10: 68:9d:fa:a7:f4:66:4c:b9:c1:2f:0c:77:98:f4:e7:59:94:d3: 77:8b:76:8c:7e:7e:13:82:d1:e3:21:48:2b:bb:0e:49:3d:71: df:f8:e4:ab:7f:ce:6b:23:b7:6f:fc:f2:d3:b8:ed:bd:73:d7: 50:14:aa:8b:81:0a:1d:80:c7:1e:df:d2:5f:b3:f9:0d:d5:8d: 36:c5:d8:21:b2:7a:72:3a:9a:4f:95:d6:ed:c9:c6:b9:cb:ae: 35:2e:1c:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhEQ0IxMTAvBgNVBAUTKEU5QjdBMURGMjA4Qzc1QjlFQjMwM0NGODgzQ0ExMjhF QTA0RkM1MEEwHhcNMjUxMDI4MTY0MjI0WhcNMjUxMTA0MTY0MjI0WjAYMRYwFAYD VQQDEw02OTAwZjI3MC0zZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qBdeNqGbrunJX7jrjwpYmuRjFjvgHdg1wW8MJCeUOvWZ5fvnBRCM20C7ExS imYQJF3znjv1guzOP6sQM1i6J5GcV8qhv3RS3Avyo/sk0wUbeJF/z5c4GOnSzIUI Ob9XfwFAh9FSbEfWgmazWjzsh+2f2bpQvzXgfDSQCeK7XNmD/nbp8A42W/9cZ0bR 2crRXicGqz1z1zCxUjWHUSno43YwXn94Oy5uUu4pxGnUWvhQe8KmTVENgds7i73O aWv/tUgb5adJapPC/Hee3Z5M9r2ScKPqoDhYbw9lhqLUW3fR3DjeChV4nlDGDSlC Iz+Z/Ir8jmjQTVBPRqWYEVVdDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBb1F6vV TIel+PcbwfoYLvlN2naaMB8GA1UdIwQYMBaAFOm3od8gjHW56zA8+IPKEo6gT8UK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOERDQi83NDNGNzBDODJG MkMxMUU4OTlEMUUwMTdDNEY5QUUwMi82YmVoM3lDTWRibnJNRHo0ZzhvU2pxQlB4 UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZiZWgzeUNNZGJuck1EejRnOG9TanFCUHhRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OERDQi83NDNGNzBDODJGMkMxMUU4OTlEMUUwMTdDNEY5QUUwMi82YmVoM3lDTWRi bnJNRHo0ZzhvU2pxQlB4UW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAThqcliDiz5BuLg2RZXeQhASYavYpbouxF/74pKWo6jnjaqHhzi1w0 wAO3fSmk5lj84Qx6hyfC18Ji2VnHP8ikqgpUJz3h1Erb24fZXUOtEFUxKqXgXxJ4 hzYuy8S87K3wjcisdbIiTrRNNAsikj4bQrysuk+S0+5LJ8ZLcYaWbB9tOr8nltol +r4yThlFzrxxjbZPKD0xkln1/OAjcrj4jRBonfqn9GZMucEvDHeY9OdZlNN3i3aM fn4TgtHjIUgruw5JPXHf+OSrf85rI7dv/PLTuO29c9dQFKqLgQodgMce39Jfs/kN 1Y02xdghsnpyOppPldbtyca5y641Lhzp -----END CERTIFICATE-----Generated at Wed Oct 29 00:25:08 2025 by rpki-client