$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft File: 6beh3yCMdbnrMDz4g8oSjqBPxQo.mft (raw, json) Hash identifier: SoEAkQK7bs+I7bNxd4n0LGxYcQUDbCa1RfS0vJieR0A= Subject key identifier: ED:AB:27:A3:D5:50:9A:8F:91:22:97:A9:74:8B:00:8B:84:58:5F:63 Authority key identifier: E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A Certificate issuer: /CN=A91D8DCB/serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A Certificate serial: 15C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft Manifest number: 15BF Signing time: Sun 10 Aug 2025 16:45:22 +0000 Manifest this update: Sun 10 Aug 2025 16:45:22 +0000 Manifest next update: Sun 17 Aug 2025 16:45:22 +0000 Files and hashes: 1: 6beh3yCMdbnrMDz4g8oSjqBPxQo.crl (hash: QmEELqiE7fj5u749bnC+Kas1WfZvcLtqdRGi+rntyhk=) 2: F1D384D031D311E88735EA0AC4F9AE02.roa (hash: 1WW3WJFCQXTAgfqp4BPT1d+bkbg/Wm5DIDF6W6wSe5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.crl rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5575 (0x15c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8DCB, serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A Validity Not Before: Aug 10 16:45:22 2025 GMT Not After : Aug 17 16:45:22 2025 GMT Subject: CN=6898cca2-8e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:3e:dd:6d:42:26:07:34:f4:56:07:7c:0a: e3:78:24:de:b2:88:ce:01:2c:71:11:7f:01:8d:19: 71:72:f2:7c:d3:78:3b:5c:ca:13:b4:4b:72:88:77: 14:a6:58:12:54:f1:b0:43:8d:a2:bf:d9:14:9d:99: 63:f1:85:4b:93:c5:e5:a7:ee:6a:c2:39:91:6d:fb: 1b:e1:c7:60:ca:1d:e6:e7:e5:86:68:e4:00:64:fa: 3f:d2:78:af:6c:b5:a4:78:50:e1:f5:79:40:6a:60: 4a:aa:3d:a4:b1:93:26:90:8f:00:76:89:b8:82:f8: 18:01:06:93:b0:85:8f:80:46:c9:a6:25:27:2c:7b: 22:71:80:c4:28:0c:64:bc:a4:db:e5:92:39:92:fa: 58:b8:ac:05:27:4e:52:b0:37:6b:03:1e:1f:4c:06: 63:ae:04:45:52:2a:5f:a2:12:33:87:70:27:d2:e1: e7:40:df:3a:b7:03:8f:43:8e:0c:24:93:5c:67:39: 41:fe:6d:e3:1f:95:61:50:a7:8f:c2:7a:4f:41:4f: 1a:88:36:a0:8b:96:ca:6b:80:b3:2e:91:12:aa:18: 8e:78:e9:de:1c:a1:61:a2:7e:3e:41:ba:56:48:57: 39:b3:d3:5f:71:87:09:a3:49:8d:c2:d7:97:d5:a5: e0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AB:27:A3:D5:50:9A:8F:91:22:97:A9:74:8B:00:8B:84:58:5F:63 X509v3 Authority Key Identifier: keyid:E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:24:10:42:80:5e:19:a6:eb:2c:7b:b0:ad:19:40:b6:a4:7b: 28:89:b6:56:01:b4:54:bc:63:cc:6a:cc:3e:5b:7b:bf:a7:21: 7a:aa:8b:da:3e:36:55:38:bd:09:2b:17:12:67:70:0b:8a:aa: 19:de:c0:66:1a:28:be:d0:b1:d4:e7:ec:0d:79:52:a1:1d:87: 38:e3:7f:c4:9e:2e:61:4c:4c:0d:77:4b:67:c8:03:0d:ef:ed: e3:bd:00:a1:f1:c5:0a:e3:ff:99:a6:89:13:a1:f9:33:b1:73: 80:f0:84:ce:49:ea:1c:f2:d2:46:ec:22:e4:3d:df:fc:a0:1d: 64:ed:86:34:a8:c9:bf:14:3e:8f:41:d2:b1:83:be:d4:54:7f: 41:55:37:aa:1b:74:4e:31:34:3c:c0:73:74:d6:c4:52:ea:9d: 2e:94:87:31:11:e9:76:57:fb:d2:56:23:f3:98:6c:8c:ed:ce: 6e:65:b6:10:75:12:1a:72:25:97:cd:4d:7b:54:96:55:50:6b: d2:90:0c:d5:63:35:fc:ee:70:e6:e2:23:65:a9:87:b3:53:87: db:e0:5e:b7:92:3e:3a:7f:c0:48:a0:4d:6d:7a:aa:ce:e5:7a: 8e:5b:05:68:82:71:c5:00:70:5e:e3:0b:6f:c3:27:12:9b:62: ea:28:13:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhEQ0IxMTAvBgNVBAUTKEU5QjdBMURGMjA4Qzc1QjlFQjMwM0NGODgzQ0ExMjhF QTA0RkM1MEEwHhcNMjUwODEwMTY0NTIyWhcNMjUwODE3MTY0NTIyWjAYMRYwFAYD VQQDEw02ODk4Y2NhMi04ZTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEs+3W1CJgc09FYHfArjeCTesojOASxxEX8BjRlxcvJ803g7XMoTtEtyiHcU plgSVPGwQ42iv9kUnZlj8YVLk8Xlp+5qwjmRbfsb4cdgyh3m5+WGaOQAZPo/0niv bLWkeFDh9XlAamBKqj2ksZMmkI8Adom4gvgYAQaTsIWPgEbJpiUnLHsicYDEKAxk vKTb5ZI5kvpYuKwFJ05SsDdrAx4fTAZjrgRFUipfohIzh3An0uHnQN86twOPQ44M JJNcZzlB/m3jH5VhUKePwnpPQU8aiDagi5bKa4CzLpESqhiOeOneHKFhon4+QbpW SFc5s9NfcYcJo0mNwteX1aXg6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2rJ6PV UJqPkSKXqXSLAIuEWF9jMB8GA1UdIwQYMBaAFOm3od8gjHW56zA8+IPKEo6gT8UK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOERDQi83NDNGNzBDODJG MkMxMUU4OTlEMUUwMTdDNEY5QUUwMi82YmVoM3lDTWRibnJNRHo0ZzhvU2pxQlB4 UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZiZWgzeUNNZGJuck1EejRnOG9TanFCUHhRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OERDQi83NDNGNzBDODJGMkMxMUU4OTlEMUUwMTdDNEY5QUUwMi82YmVoM3lDTWRi bnJNRHo0ZzhvU2pxQlB4UW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvJBBCgF4Zpusse7CtGUC2pHsoibZWAbRUvGPMasw+W3u/pyF6qova PjZVOL0JKxcSZ3ALiqoZ3sBmGii+0LHU5+wNeVKhHYc443/Eni5hTEwNd0tnyAMN 7+3jvQCh8cUK4/+ZpokTofkzsXOA8ITOSeoc8tJG7CLkPd/8oB1k7YY0qMm/FD6P QdKxg77UVH9BVTeqG3ROMTQ8wHN01sRS6p0ulIcxEel2V/vSViPzmGyM7c5uZbYQ dRIaciWXzU17VJZVUGvSkAzVYzX87nDm4iNlqYezU4fb4F63kj46f8BIoE1teqrO 5XqOWwVognHFAHBe4wtvwycSm2LqKBP7 -----END CERTIFICATE-----Generated at Mon Aug 11 07:29:06 2025 by rpki-client