$ rpki-client -vvf rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft File: ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft (raw, json) Hash identifier: 5ml+jBZ7N15PdVGbHRRKRmKn0fxPGuxsELokdBy6ZLE= Subject key identifier: 29:08:B8:9E:2E:C6:39:F4:1E:C3:B8:8E:88:FE:B9:24:B1:F9:07:8E Authority key identifier: 6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7 Certificate issuer: /CN=A919C451/serialNumber=6A185BF417A2EB02A12E19D57590AD8D118475F7 Certificate serial: 0C51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft Manifest number: 0C4A Signing time: Mon 30 Jun 2025 18:39:54 +0000 Manifest this update: Mon 30 Jun 2025 18:39:53 +0000 Manifest next update: Mon 07 Jul 2025 18:39:53 +0000 Files and hashes: 1: ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl (hash: vuBd8k4HXQcZXychvDWjqB1MuYto1pNS7Un1ijclVL8=) 2: F0208B2012BC11EBB3294950C4F9AE02.roa (hash: eaM5ERmLR+NewtcyA9NoXbFVJmh3ke0mtpONHl7mYGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3153 (0xc51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C451, serialNumber=6A185BF417A2EB02A12E19D57590AD8D118475F7 Validity Not Before: Jun 30 18:39:53 2025 GMT Not After : Jul 7 18:39:53 2025 GMT Subject: CN=6862d9fa-8891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6c:10:d2:77:73:be:af:a1:b2:5a:28:7e:cf: 53:4e:ca:f1:7c:c0:b5:43:43:dc:01:c5:23:7d:19: 1d:07:b9:e1:d0:e9:4c:a9:b5:f4:37:34:7e:81:03: 73:a0:d8:4c:25:6e:f7:8f:79:17:45:47:3c:c1:3e: 88:b8:48:de:47:3f:bd:58:ca:de:15:b0:af:00:1a: a5:fc:e7:c4:94:91:21:4c:f2:e8:6c:12:6e:5e:e8: 3d:cc:73:ab:40:31:85:75:dd:0e:cc:16:5d:c6:35: 1a:f3:44:43:15:b5:27:00:54:6d:59:11:98:27:69: aa:3e:75:f4:03:dc:f8:48:a4:3c:af:65:3a:4f:28: e0:99:17:34:71:65:72:50:33:01:b1:c5:7b:a4:be: 92:37:6a:dc:7d:73:fd:62:49:b1:f8:6f:66:69:d8: e2:3f:85:7d:f2:79:d3:af:d7:cc:af:d1:a8:96:34: d7:2c:4d:4a:77:59:a5:61:f4:64:43:7c:b3:ac:ec: 3a:8c:dd:24:49:5f:40:00:7b:e3:b3:cb:27:d1:ad: 62:d4:08:00:37:4c:35:23:f5:6a:db:43:af:2a:56: 4a:a6:1d:c5:cf:17:a1:80:8b:47:2f:63:f8:d7:35: d4:ed:de:7e:18:cd:4d:a1:02:41:52:00:08:5c:92: ff:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:08:B8:9E:2E:C6:39:F4:1E:C3:B8:8E:88:FE:B9:24:B1:F9:07:8E X509v3 Authority Key Identifier: keyid:6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c1:e9:cd:13:98:14:5e:b2:d6:70:9d:5e:48:65:0b:6a:7f: b8:8d:bf:05:86:b4:04:4a:61:07:80:a4:4f:11:9d:de:8b:c6: 90:2d:9a:23:af:1b:42:26:da:c0:b4:7d:5b:df:25:2c:ef:ff: 4a:db:d7:8a:33:e1:3f:d8:a3:5a:f4:57:32:c9:57:bc:63:13: 19:59:ff:4f:a7:cb:31:71:52:6d:c0:8e:1f:45:fa:6a:fb:38: 7d:2f:eb:d2:97:e5:85:ec:ef:2f:80:6d:77:24:ca:6b:d0:37: d8:46:7f:fc:4d:f7:d4:a1:ec:b9:b6:ce:3e:9d:be:e6:2f:d6: f3:57:bc:b4:ef:79:5c:87:d2:ac:3f:c4:9f:cb:b2:b7:17:6e: 6b:bb:9a:5a:5d:e5:32:51:51:e0:64:57:93:60:da:a0:bd:32: e8:bd:e3:50:5c:19:da:80:10:8a:dc:86:fa:f9:32:47:cb:a0: 61:34:cf:13:8f:82:6d:0a:42:e6:d9:c7:9e:ed:61:f0:4f:5a: 2e:f5:bb:0e:58:65:04:d8:fb:99:e7:9c:2a:48:d9:f3:b3:12: 24:2f:52:1b:7f:8f:2e:35:c2:66:1f:5f:65:52:0e:10:62:e6: 31:10:7e:6e:c7:99:41:b9:46:e2:14:fc:65:2a:95:91:e4:ee: d7:df:0c:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM0NTExMTAvBgNVBAUTKDZBMTg1QkY0MTdBMkVCMDJBMTJFMTlENTc1OTBBRDhE MTE4NDc1RjcwHhcNMjUwNjMwMTgzOTUzWhcNMjUwNzA3MTgzOTUzWjAYMRYwFAYD VQQDEw02ODYyZDlmYS04ODkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymwQ0ndzvq+hsloofs9TTsrxfMC1Q0PcAcUjfRkdB7nh0OlMqbX0NzR+gQNz oNhMJW73j3kXRUc8wT6IuEjeRz+9WMreFbCvABql/OfElJEhTPLobBJuXug9zHOr QDGFdd0OzBZdxjUa80RDFbUnAFRtWRGYJ2mqPnX0A9z4SKQ8r2U6TyjgmRc0cWVy UDMBscV7pL6SN2rcfXP9Ykmx+G9madjiP4V98nnTr9fMr9GoljTXLE1Kd1mlYfRk Q3yzrOw6jN0kSV9AAHvjs8sn0a1i1AgAN0w1I/Vq20OvKlZKph3FzxehgItHL2P4 1zXU7d5+GM1NoQJBUgAIXJL/DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkIuJ4u xjn0HsO4joj+uSSx+QeOMB8GA1UdIwQYMBaAFGoYW/QXousCoS4Z1XWQrY0RhHX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ1MS9COTM0OTM3QTA2 RDAxMUVBOEQ0MzhDM0ZDNEY5QUUwMi9haGhiOUJlaTZ3S2hMaG5WZFpDdGpSR0Vk ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoaGI5QmVpNndLaExoblZkWkN0alJHRWRmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzQ1MS9COTM0OTM3QTA2RDAxMUVBOEQ0MzhDM0ZDNEY5QUUwMi9haGhiOUJlaTZ3 S2hMaG5WZFpDdGpSR0VkZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOwenNE5gUXrLWcJ1eSGULan+4jb8FhrQESmEHgKRPEZ3ei8aQLZoj rxtCJtrAtH1b3yUs7/9K29eKM+E/2KNa9FcyyVe8YxMZWf9Pp8sxcVJtwI4fRfpq +zh9L+vSl+WF7O8vgG13JMpr0DfYRn/8TffUoey5ts4+nb7mL9bzV7y073lch9Ks P8Sfy7K3F25ru5paXeUyUVHgZFeTYNqgvTLoveNQXBnagBCK3Ib6+TJHy6BhNM8T j4JtCkLm2cee7WHwT1ou9bsOWGUE2PuZ55wqSNnzsxIkL1Ibf48uNcJmH19lUg4Q YuYxEH5ux5lBuUbiFPxlKpWR5O7X3wwX -----END CERTIFICATE-----Generated at Tue Jul 1 19:53:30 2025 by rpki-client