$ rpki-client -vvf rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft File: ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft (raw, json) Hash identifier: eOqbbi5XvWsIy/4kYPTjZaY68dXrguj6xYylxwQOYB0= Subject key identifier: 6D:5D:B8:26:EB:F8:CD:4D:C0:1F:22:F3:FA:A7:AF:29:EE:0F:64:08 Authority key identifier: 6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED Certificate issuer: /CN=A91944AB/serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED Certificate serial: 061B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft Manifest number: 0614 Signing time: Sun 02 Nov 2025 22:51:20 +0000 Manifest this update: Sun 02 Nov 2025 22:51:19 +0000 Manifest next update: Sun 09 Nov 2025 22:51:19 +0000 Files and hashes: 1: ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl (hash: rsZM/na9MKIzLz7yFTg6M3TzgPEyWv/e6kyiOsmFaQc=) 2: BB01CFB0723811EEA39E0042C4F9AE02.roa (hash: 1LEbeB2sOSy0yXmk2wIYI71rgNCCnZow4wFFO18wbUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1563 (0x61b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91944AB, serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED Validity Not Before: Nov 2 22:51:19 2025 GMT Not After : Nov 9 22:51:19 2025 GMT Subject: CN=6907e068-af1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:62:9c:2b:33:c5:6f:21:27:84:6d:ef:5d:bd: 7a:d9:78:71:2b:03:dd:58:86:f1:79:7b:a4:7d:4d: ab:6d:46:8d:3d:ab:f8:eb:ef:8e:22:d5:ec:54:03: b8:75:76:7c:b9:94:ec:46:9d:08:70:83:91:d4:06: 41:64:10:64:6c:95:89:4e:37:21:55:57:ec:36:26: 46:d5:0c:f2:2d:8c:6e:2f:d0:36:0c:7d:8a:a5:12: 45:d6:4b:dc:77:f6:ec:3b:d1:18:2b:ff:f3:0f:79: 43:b6:46:2a:6c:6d:22:5d:81:af:b1:0b:2e:02:64: c0:b9:84:a9:f0:9c:f9:dc:f2:fa:55:bf:61:de:b2: 0c:b2:91:ce:b7:aa:c2:2a:bc:e0:af:21:56:43:5d: 1a:fc:28:62:c8:af:e0:3c:c2:7f:2a:e2:9b:b6:bf: 5a:5f:3e:b1:d1:e2:6a:b4:78:6f:9c:fb:10:0a:5d: 64:17:b8:40:43:f6:a7:3e:2b:06:02:75:a2:0a:a0: 4e:e6:f4:aa:1c:12:c3:6f:ee:87:b8:91:14:65:f5: 64:c4:55:31:c0:8a:b8:e3:d0:c9:70:3c:2e:6c:21: 45:f2:cc:68:4e:8f:6d:a2:ff:bc:aa:b3:63:52:d2: 57:26:b2:16:83:35:24:5d:c4:12:43:34:98:6d:85: b0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5D:B8:26:EB:F8:CD:4D:C0:1F:22:F3:FA:A7:AF:29:EE:0F:64:08 X509v3 Authority Key Identifier: keyid:6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:5a:e8:c9:87:b0:19:51:1c:d5:e2:10:d0:3f:58:2c:84:d7: 5b:a3:9d:2d:be:02:ab:59:3d:62:0a:6a:5e:83:f1:6b:8b:3a: ab:5d:6e:8e:bf:44:22:ea:c1:cb:2c:78:7d:b9:be:e1:76:bf: 4e:02:b5:51:48:84:f4:38:70:69:55:49:bd:19:99:5d:f3:cd: d9:75:e8:50:8a:47:8f:52:fc:cc:22:b6:bf:47:a4:57:0d:ff: dd:5b:07:b5:71:83:45:3b:e4:80:97:d0:63:fb:24:0d:1f:1d: e9:65:72:dc:43:f1:8c:4b:33:57:b9:cd:b9:79:5b:fd:10:d0: f4:42:55:41:58:d3:40:32:19:ea:67:2f:86:33:64:bb:69:69: 5d:ec:c2:5f:a4:fb:b4:83:1b:47:48:9b:62:fa:ca:36:bc:cf: f8:ee:98:c5:29:b8:36:09:f4:ce:f4:28:6b:5e:2f:dc:41:05: 72:4e:ce:ca:86:c1:e8:76:a2:eb:5f:e2:31:65:4e:bb:c5:4c: 59:ba:da:99:f2:fa:be:65:56:cf:0f:83:12:13:19:4c:4b:e8: 0e:fd:80:ae:e1:2f:c8:68:09:36:9b:3e:3c:43:69:0b:bb:cb: 92:b5:d4:97:d2:e2:ea:24:4a:27:1c:f6:4c:a5:0a:5b:66:c0: 55:2d:6e:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ0QUIxMTAvBgNVBAUTKDZBMTIxOTcyNkQyMzlDODJGNUE0NDYwMTEyN0QxQUY4 NzI1Q0UwRUQwHhcNMjUxMTAyMjI1MTE5WhcNMjUxMTA5MjI1MTE5WjAYMRYwFAYD VQQDEw02OTA3ZTA2OC1hZjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WKcKzPFbyEnhG3vXb162XhxKwPdWIbxeXukfU2rbUaNPav46++OItXsVAO4 dXZ8uZTsRp0IcIOR1AZBZBBkbJWJTjchVVfsNiZG1QzyLYxuL9A2DH2KpRJF1kvc d/bsO9EYK//zD3lDtkYqbG0iXYGvsQsuAmTAuYSp8Jz53PL6Vb9h3rIMspHOt6rC KrzgryFWQ10a/ChiyK/gPMJ/KuKbtr9aXz6x0eJqtHhvnPsQCl1kF7hAQ/anPisG AnWiCqBO5vSqHBLDb+6HuJEUZfVkxFUxwIq449DJcDwubCFF8sxoTo9tov+8qrNj UtJXJrIWgzUkXcQSQzSYbYWweQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1duCbr +M1NwB8i8/qnrynuD2QIMB8GA1UdIwQYMBaAFGoSGXJtI5yC9aRGARJ9GvhyXODt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDRBQi82RkUzMDZBNkMy QzgxMUVCOThEOURBNzlDNEY5QUUwMi9haElaY20wam5JTDFwRVlCRW4wYS1ISmM0 TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoSVpjbTBqbklMMXBFWUJFbjBhLUhKYzRPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDRBQi82RkUzMDZBNkMyQzgxMUVCOThEOURBNzlDNEY5QUUwMi9haElaY20wam5J TDFwRVlCRW4wYS1ISmM0TzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgWujJh7AZURzV4hDQP1gshNdbo50tvgKrWT1iCmpeg/FrizqrXW6O v0Qi6sHLLHh9ub7hdr9OArVRSIT0OHBpVUm9GZld883ZdehQikePUvzMIra/R6RX Df/dWwe1cYNFO+SAl9Bj+yQNHx3pZXLcQ/GMSzNXuc25eVv9END0QlVBWNNAMhnq Zy+GM2S7aWld7MJfpPu0gxtHSJti+so2vM/47pjFKbg2CfTO9ChrXi/cQQVyTs7K hsHodqLrX+IxZU67xUxZutqZ8vq+ZVbPD4MSExlMS+gO/YCu4S/IaAk2mz48Q2kL u8uStdSX0uLqJEonHPZMpQpbZsBVLW54 -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:37 2025 by rpki-client