$ rpki-client -vvf rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft File: ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft (raw, json) Hash identifier: ZLsQKadsYkFhNEnKuzN3OQPG1bV5VWms1H9UNv3w6vg= Subject key identifier: 0D:B1:42:A7:5F:DC:C5:87:58:F3:31:A2:8C:23:F2:47:8B:BC:99:68 Authority key identifier: 6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7 Certificate issuer: /CN=A919C451/serialNumber=6A185BF417A2EB02A12E19D57590AD8D118475F7 Certificate serial: 0C94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft Manifest number: 0C8C Signing time: Sun 02 Nov 2025 18:23:01 +0000 Manifest this update: Sun 02 Nov 2025 18:23:01 +0000 Manifest next update: Sun 09 Nov 2025 18:23:01 +0000 Files and hashes: 1: ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl (hash: LLyXdJVuEu/Vrs0UUhGjToXMNITb41DUcieCB6MqC2w=) 2: F0208B2012BC11EBB3294950C4F9AE02.roa (hash: YAZVPBwhRd3Zwtu+5mGrhQ3oIunZzsRzOetYRLfqDuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3220 (0xc94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C451, serialNumber=6A185BF417A2EB02A12E19D57590AD8D118475F7 Validity Not Before: Nov 2 18:23:01 2025 GMT Not After : Nov 9 18:23:01 2025 GMT Subject: CN=6907a185-32ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:90:a6:d9:d7:3b:5d:a7:07:d1:ee:46:29:16: 30:1f:57:a7:f4:75:2d:06:37:01:f3:93:4f:ae:ff: 8e:74:6a:94:93:c3:d5:84:a4:a9:ce:d6:6d:2b:83: fe:fb:dd:57:e2:60:b9:29:6a:2c:7e:3f:49:16:2e: fc:48:41:a0:02:2c:08:48:8b:89:b2:19:43:58:91: 90:e4:41:3a:bb:13:5c:6d:68:e7:cc:98:61:80:dc: 13:15:2a:23:38:30:9c:68:ee:ef:52:06:2d:64:7a: c2:1b:bb:9d:ef:fe:ce:81:bc:88:a5:b8:7f:7d:2f: d9:25:8b:00:69:3f:dd:92:3f:ed:82:1d:15:94:64: 9b:57:29:5d:5d:03:79:19:ef:3d:b0:81:30:68:65: 8a:5b:b2:22:c2:5d:0a:41:7c:64:19:b4:e0:b0:6f: e5:41:5e:71:7f:e0:eb:84:15:38:ff:a8:54:5f:58: ac:03:8f:5e:f1:a4:d9:0b:09:da:91:04:59:d2:27: b7:36:8d:3f:70:73:3b:97:79:09:16:74:16:1f:9e: 07:be:2e:cd:c8:f2:14:27:27:ac:07:c0:16:52:a7: 75:52:44:74:9f:66:40:08:94:55:4f:7c:7e:b4:95: 37:e5:c4:7c:33:73:37:a2:81:3c:7a:a0:e6:9d:9f: db:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B1:42:A7:5F:DC:C5:87:58:F3:31:A2:8C:23:F2:47:8B:BC:99:68 X509v3 Authority Key Identifier: keyid:6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:27:8c:cb:a7:82:e6:67:02:25:ee:2b:7d:bf:a1:ee:ce:3d: 6e:0f:ef:56:2c:49:33:9c:19:49:b3:94:c4:d9:d4:33:bd:ed: e0:73:6d:ac:11:15:b1:f7:94:86:2c:47:ec:92:d7:20:52:1f: 98:45:a2:ed:0e:2b:04:be:09:d3:dd:79:91:b1:02:85:13:6b: 54:70:5b:98:4b:c6:d6:07:8d:db:06:9b:85:7e:c6:31:98:d7: 8f:9b:2a:50:dc:ed:a9:47:7a:89:6d:54:09:3b:ae:29:31:39: a9:4d:ae:a2:a2:d3:e0:c1:1c:be:8c:57:64:44:8f:6c:a2:df: 54:2c:48:ad:5b:38:36:2e:f2:50:42:9a:b9:c6:5f:fd:2b:67: b2:57:b0:8e:17:c3:4f:c0:9c:4e:eb:4e:5d:92:ad:90:9e:3b: 07:97:a9:e3:9d:d9:3a:70:b6:5a:30:5a:1f:e0:08:8b:e5:3a: fe:8f:20:96:5d:24:5c:50:05:da:75:43:b5:18:35:f0:2f:31: 38:30:36:e7:17:fb:78:3b:6e:88:5b:1f:c6:b0:70:10:d1:f1: 65:ab:89:45:69:82:25:24:68:51:81:08:85:1c:51:cd:ba:07: 04:a9:32:85:08:6c:38:94:19:91:54:37:20:5f:f7:3b:69:ef: 1f:1e:36:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM0NTExMTAvBgNVBAUTKDZBMTg1QkY0MTdBMkVCMDJBMTJFMTlENTc1OTBBRDhE MTE4NDc1RjcwHhcNMjUxMTAyMTgyMzAxWhcNMjUxMTA5MTgyMzAxWjAYMRYwFAYD VQQDEw02OTA3YTE4NS0zMmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpCm2dc7XacH0e5GKRYwH1en9HUtBjcB85NPrv+OdGqUk8PVhKSpztZtK4P+ +91X4mC5KWosfj9JFi78SEGgAiwISIuJshlDWJGQ5EE6uxNcbWjnzJhhgNwTFSoj ODCcaO7vUgYtZHrCG7ud7/7OgbyIpbh/fS/ZJYsAaT/dkj/tgh0VlGSbVyldXQN5 Ge89sIEwaGWKW7Iiwl0KQXxkGbTgsG/lQV5xf+DrhBU4/6hUX1isA49e8aTZCwna kQRZ0ie3No0/cHM7l3kJFnQWH54Hvi7NyPIUJyesB8AWUqd1UkR0n2ZACJRVT3x+ tJU35cR8M3M3ooE8eqDmnZ/bTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2xQqdf 3MWHWPMxoowj8keLvJloMB8GA1UdIwQYMBaAFGoYW/QXousCoS4Z1XWQrY0RhHX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ1MS9COTM0OTM3QTA2 RDAxMUVBOEQ0MzhDM0ZDNEY5QUUwMi9haGhiOUJlaTZ3S2hMaG5WZFpDdGpSR0Vk ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoaGI5QmVpNndLaExoblZkWkN0alJHRWRmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzQ1MS9COTM0OTM3QTA2RDAxMUVBOEQ0MzhDM0ZDNEY5QUUwMi9haGhiOUJlaTZ3 S2hMaG5WZFpDdGpSR0VkZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAJ4zLp4LmZwIl7it9v6Huzj1uD+9WLEkznBlJs5TE2dQzve3gc22s ERWx95SGLEfsktcgUh+YRaLtDisEvgnT3XmRsQKFE2tUcFuYS8bWB43bBpuFfsYx mNePmypQ3O2pR3qJbVQJO64pMTmpTa6iotPgwRy+jFdkRI9sot9ULEitWzg2LvJQ Qpq5xl/9K2eyV7COF8NPwJxO605dkq2QnjsHl6njndk6cLZaMFof4AiL5Tr+jyCW XSRcUAXadUO1GDXwLzE4MDbnF/t4O26IWx/GsHAQ0fFlq4lFaYIlJGhRgQiFHFHN ugcEqTKFCGw4lBmRVDcgX/c7ae8fHjbg -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:32 2025 by rpki-client