$ rpki-client -vvf rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft File: aJtDtI4RHmnx33nMohHMtCZaJns.mft (raw, json) Hash identifier: Ql2OWZaDL6RVoVMTDBuvabx0bsv847wPVUMzTdlWXe0= Subject key identifier: A0:33:F1:DA:92:37:0D:1F:C7:9E:CB:22:71:C4:11:21:32:BC:24:54 Authority key identifier: 68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B Certificate issuer: /CN=A91688C4/serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B Certificate serial: 0786 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft Manifest number: 0780 Signing time: Sun 02 Nov 2025 21:32:19 +0000 Manifest this update: Sun 02 Nov 2025 21:32:19 +0000 Manifest next update: Sun 09 Nov 2025 21:32:19 +0000 Files and hashes: 1: aJtDtI4RHmnx33nMohHMtCZaJns.crl (hash: rC+WD3o73Q8c5w/SplJ7JA81fmCHLS303lbSmgu66kY=) 2: 56FB3BA630DB11EBB36CAB54C4F9AE02.roa (hash: Tkzl81mL9jCkezlpTqealMA+SaYDCxv0/vXNUScGesg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1926 (0x786) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91688C4, serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B Validity Not Before: Nov 2 21:32:19 2025 GMT Not After : Nov 9 21:32:19 2025 GMT Subject: CN=6907cde3-b94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d7:b3:15:65:27:49:51:4f:9c:4d:c2:96:c1: 5b:a5:71:8b:4d:99:4b:59:75:fb:84:ff:2f:cb:e5: 04:87:25:89:dc:5f:d8:a1:4d:a8:cd:88:39:0b:75: da:01:a3:7f:2a:16:df:60:32:00:6a:e5:9d:54:7e: 70:1f:70:04:89:d6:32:25:c0:a5:e2:cc:e4:df:d0: 9b:15:df:6f:d0:78:67:e5:2e:40:3a:42:71:c5:a6: c5:60:0b:d3:a4:99:9b:41:11:eb:f4:92:c2:52:43: ee:75:0c:7c:6e:5e:93:0b:05:be:9e:23:89:67:f5: 16:78:9b:0b:41:5f:f7:6e:6f:4a:46:bb:16:9d:d2: 1a:12:8f:ed:70:70:70:fd:3c:fa:c1:86:5b:59:13: fc:48:0b:9e:a7:fb:dc:73:c4:eb:3b:e7:5e:59:72: c9:ef:71:84:56:2a:27:05:f7:57:77:7c:36:8c:33: d2:c0:1d:a4:df:2f:53:8e:58:1e:9b:d4:16:80:a8: 9f:67:7b:36:13:23:97:55:30:54:f9:3f:37:34:b9: 7d:2c:33:4e:66:76:7e:e3:5d:17:a6:c2:cf:ef:48: 18:7a:5b:92:94:0b:4f:03:67:e3:fa:c7:b0:5b:e9: 32:0f:3d:70:49:79:28:f9:15:c0:66:63:71:21:c9: c4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:33:F1:DA:92:37:0D:1F:C7:9E:CB:22:71:C4:11:21:32:BC:24:54 X509v3 Authority Key Identifier: keyid:68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:09:e2:f6:63:dd:09:ce:87:ab:4b:58:f1:de:60:5b:0a:6d: 33:77:43:40:3a:3d:8e:73:b9:88:0e:a1:85:0f:93:06:bd:63: d0:56:ad:fc:24:a1:cf:fd:e4:37:1c:0e:4a:f4:ea:c5:6d:42: 3a:1e:b5:b3:0f:4a:3f:e8:95:f3:cb:0a:5c:6f:88:65:37:a6: b8:88:42:bf:05:1f:52:10:99:7a:cf:9d:a0:9b:09:59:b4:a0: 48:8a:e0:77:11:a9:86:1f:4b:f7:5f:ba:51:12:5e:14:99:ce: e3:5f:c7:3b:70:cb:04:ed:4e:90:7d:75:bf:a2:c0:eb:91:34: fb:54:a2:44:2e:ff:36:7a:05:19:92:65:46:03:78:f7:f0:22: 2f:87:e1:30:84:52:45:57:45:df:99:be:c2:ee:ac:4b:54:4b: 82:9c:84:ad:f3:ac:75:fe:55:2d:3e:1c:f6:21:33:e6:0e:18: 87:c4:ce:f2:d2:ba:bd:52:10:bb:de:e0:3b:1a:77:23:b1:a5: 85:e5:78:d0:f3:12:6b:64:7a:2e:e6:b9:23:9d:3e:bc:c5:fa: c7:f2:f0:6a:3e:a9:f8:84:f8:54:a7:59:86:f0:c6:71:5b:66: ea:08:ed:3e:10:86:44:28:07:03:d8:b8:ac:9f:55:8f:f7:28: c3:ee:05:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg4QzQxMTAvBgNVBAUTKDY4OUI0M0I0OEUxMTFFNjlGMURGNzlDQ0EyMTFDQ0I0 MjY1QTI2N0IwHhcNMjUxMTAyMjEzMjE5WhcNMjUxMTA5MjEzMjE5WjAYMRYwFAYD VQQDEw02OTA3Y2RlMy1iOTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtezFWUnSVFPnE3ClsFbpXGLTZlLWXX7hP8vy+UEhyWJ3F/YoU2ozYg5C3Xa AaN/KhbfYDIAauWdVH5wH3AEidYyJcCl4szk39CbFd9v0Hhn5S5AOkJxxabFYAvT pJmbQRHr9JLCUkPudQx8bl6TCwW+niOJZ/UWeJsLQV/3bm9KRrsWndIaEo/tcHBw /Tz6wYZbWRP8SAuep/vcc8TrO+deWXLJ73GEVionBfdXd3w2jDPSwB2k3y9Tjlge m9QWgKifZ3s2EyOXVTBU+T83NLl9LDNOZnZ+410XpsLP70gYeluSlAtPA2fj+sew W+kyDz1wSXko+RXAZmNxIcnEuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAz8dqS Nw0fx57LInHEESEyvCRUMB8GA1UdIwQYMBaAFGibQ7SOER5p8d95zKIRzLQmWiZ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhDNC9EODk0N0VCODMw RDkxMUVCODdFMDkzNTNDNEY5QUUwMi9hSnREdEk0UkhtbngzM25Nb2hITXRDWmFK bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FKdER0STRSSG1ueDMzbk1vaEhNdENaYUpucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODhDNC9EODk0N0VCODMwRDkxMUVCODdFMDkzNTNDNEY5QUUwMi9hSnREdEk0Ukht bngzM25Nb2hITXRDWmFKbnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZCeL2Y90JzoerS1jx3mBbCm0zd0NAOj2Oc7mIDqGFD5MGvWPQVq38 JKHP/eQ3HA5K9OrFbUI6HrWzD0o/6JXzywpcb4hlN6a4iEK/BR9SEJl6z52gmwlZ tKBIiuB3EamGH0v3X7pREl4Umc7jX8c7cMsE7U6QfXW/osDrkTT7VKJELv82egUZ kmVGA3j38CIvh+EwhFJFV0Xfmb7C7qxLVEuCnISt86x1/lUtPhz2ITPmDhiHxM7y 0rq9UhC73uA7GncjsaWF5XjQ8xJrZHou5rkjnT68xfrH8vBqPqn4hPhUp1mG8MZx W2bqCO0+EIZEKAcD2Lisn1WP9yjD7gXg -----END CERTIFICATE-----Generated at Tue Nov 4 07:19:24 2025 by rpki-client