$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft File: aaMtc-A4ow1HrKzrgc1zEq91Ork.mft (raw, json) Hash identifier: cLtO3nspxslLmnIB3doIvo0y3JJPOFxAdA1RNHx0KAQ= Subject key identifier: D4:EB:87:08:D7:D3:A3:12:D1:5C:62:D0:E5:D3:C2:8B:09:47:6A:DC Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 Certificate issuer: /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft Manifest number: 0107 Signing time: Mon 21 Jul 2025 05:16:17 +0000 Manifest this update: Mon 21 Jul 2025 05:16:16 +0000 Manifest next update: Mon 28 Jul 2025 05:16:16 +0000 Files and hashes: 1: aaMtc-A4ow1HrKzrgc1zEq91Ork.crl (hash: Rv50Z1PQ6s7369+p3QAaSv3Cr7gcc6ipVWuE8yGIPTU=) 2: 2F734D2E860111EFB49EB20DC4F9AE02.roa (hash: gfkWuMfDUYAqyRnTePZPV70xVbbxGR6RawYGUjcJFec=) 3: AAFEACF0500311F0A7E46C33C4F9AE02.roa (hash: kFrgJirbvirh1kV38XDRtsJ3nsQNa4+OvKJO0YsvLek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1F31, serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Validity Not Before: Jul 21 05:16:16 2025 GMT Not After : Jul 28 05:16:16 2025 GMT Subject: CN=687dcd21-9637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4a:42:6c:58:fa:e6:bb:1b:65:dd:b1:07:fc: 95:61:d8:73:b2:e7:e1:f3:38:c4:28:bd:59:55:c1: b6:22:14:8c:e4:bb:7b:b4:dd:85:fd:3e:be:53:14: d6:3f:e7:a5:8f:85:88:b5:94:2f:3f:bb:a7:f4:d3: 17:79:ae:67:c5:08:81:02:e1:37:49:1e:07:cc:82: 3f:0c:08:da:65:55:18:20:94:57:38:14:06:07:af: 2a:a6:d5:38:73:45:0a:30:4c:f1:25:94:7f:9c:55: 28:05:16:6b:3e:50:24:ec:ec:64:5c:e8:54:5e:4f: ad:cf:a9:0b:a4:80:76:96:d2:20:3f:94:0b:7a:a9: 39:9e:45:fa:7b:08:84:eb:f1:af:4b:8d:af:fd:ef: 7e:d2:a9:d8:67:14:62:ec:f4:8b:ea:f8:bb:67:98: d5:18:75:cf:e2:c7:56:39:39:b2:2c:85:1c:8d:31: 08:0c:6e:7a:e8:53:73:02:48:b7:e7:46:1d:47:20: 36:a3:c1:1b:9d:c4:6d:85:8c:3f:df:f1:82:b8:7f: 60:ab:c9:62:af:fb:06:aa:c9:5c:fa:af:fa:e1:3c: 1b:8e:33:fe:8f:cb:97:17:8c:98:3d:cc:3b:39:51: 7e:da:3c:fe:05:89:90:12:75:eb:c3:6a:5c:d4:4c: d3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EB:87:08:D7:D3:A3:12:D1:5C:62:D0:E5:D3:C2:8B:09:47:6A:DC X509v3 Authority Key Identifier: keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:5e:54:c8:2e:ee:d0:55:63:73:52:5c:d5:97:60:1a:4e:25: e9:89:c1:b6:0a:8f:86:95:f1:c4:98:ab:80:c8:ab:75:78:cb: f2:3c:03:d4:e7:96:d4:00:22:fc:78:c3:92:ea:98:9e:ad:f4: 23:0d:f5:69:b8:96:af:9a:82:b1:15:47:69:77:e1:bf:c2:5c: af:78:f3:44:ec:be:63:57:94:71:13:fc:1d:fe:ab:99:0f:9a: bc:ac:94:40:81:27:6d:4d:a3:56:59:7a:e7:a1:f9:b1:aa:fa: 98:f8:6e:8d:e7:39:1e:83:93:60:7a:c2:44:95:c1:cc:5c:f6: 9f:01:85:9a:ee:3c:2a:e2:fa:30:ef:b6:ec:0a:c0:42:28:94: e4:54:59:14:1c:3e:e5:51:f7:08:cd:cf:2f:66:37:01:1a:f1: f4:36:e5:2e:af:d5:08:34:d3:a8:4c:9e:bb:5a:bc:3d:fc:ee: 2d:dc:7d:87:dc:2b:3d:45:e5:00:e0:c3:03:f1:bd:5f:02:b1: 0e:d9:b4:b5:e5:0e:b6:9f:cf:a4:43:8d:34:f2:8f:e6:d0:52: 85:2c:b2:a3:35:70:a5:32:29:c3:9d:72:fe:87:ee:1c:0f:fd: c9:4a:6b:1f:63:6e:e7:50:dd:c2:51:13:f5:99:6f:ed:f3:5e: 3c:97:07:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFGMzExMTAvBgNVBAUTKDY5QTMyRDczRTAzOEEzMEQ0N0FDQUNFQjgxQ0Q3MzEy QUY3NTNBQjkwHhcNMjUwNzIxMDUxNjE2WhcNMjUwNzI4MDUxNjE2WjAYMRYwFAYD VQQDEw02ODdkY2QyMS05NjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6UpCbFj65rsbZd2xB/yVYdhzsufh8zjEKL1ZVcG2IhSM5Lt7tN2F/T6+UxTW P+elj4WItZQvP7un9NMXea5nxQiBAuE3SR4HzII/DAjaZVUYIJRXOBQGB68qptU4 c0UKMEzxJZR/nFUoBRZrPlAk7OxkXOhUXk+tz6kLpIB2ltIgP5QLeqk5nkX6ewiE 6/GvS42v/e9+0qnYZxRi7PSL6vi7Z5jVGHXP4sdWOTmyLIUcjTEIDG566FNzAki3 50YdRyA2o8EbncRthYw/3/GCuH9gq8lir/sGqslc+q/64TwbjjP+j8uXF4yYPcw7 OVF+2jz+BYmQEnXrw2pc1EzT3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTrhwjX 06MS0Vxi0OXTwosJR2rcMB8GA1UdIwQYMBaAFGmjLXPgOKMNR6ys64HNcxKvdTq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUYzMS9BMEY0RTBEMEUx QkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93MUhyS3pyZ2MxekVxOTFP cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhTXRjLUE0b3cxSHJLenJnYzF6RXE5MU9yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUYzMS9BMEY0RTBEMEUxQkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93 MUhyS3pyZ2MxekVxOTFPcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXXlTILu7QVWNzUlzVl2AaTiXpicG2Co+GlfHEmKuAyKt1eMvyPAPU 55bUACL8eMOS6pierfQjDfVpuJavmoKxFUdpd+G/wlyvePNE7L5jV5RxE/wd/quZ D5q8rJRAgSdtTaNWWXrnofmxqvqY+G6N5zkeg5NgesJElcHMXPafAYWa7jwq4vow 77bsCsBCKJTkVFkUHD7lUfcIzc8vZjcBGvH0NuUur9UINNOoTJ67Wrw9/O4t3H2H 3Cs9ReUA4MMD8b1fArEO2bS15Q62n8+kQ4008o/m0FKFLLKjNXClMinDnXL+h+4c D/3JSmsfY27nUN3CURP1mW/t8148lwfh -----END CERTIFICATE-----Generated at Mon Jul 21 13:28:15 2025 by rpki-client