$ rpki-client -vvf rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft File: aJtDtI4RHmnx33nMohHMtCZaJns.mft (raw, json) Hash identifier: ngeDxLuTLa5yG7/NoYAB0+q1m6t9MjhZ1biDG6QK3gQ= Subject key identifier: 11:61:BD:2E:BB:2A:02:B9:BA:A8:A8:F0:C5:43:1E:D1:34:A7:9F:19 Authority key identifier: 68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B Certificate issuer: /CN=A91688C4/serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B Certificate serial: 0770 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft Manifest number: 076A Signing time: Thu 18 Sep 2025 21:52:39 +0000 Manifest this update: Thu 18 Sep 2025 21:52:39 +0000 Manifest next update: Thu 25 Sep 2025 21:52:39 +0000 Files and hashes: 1: aJtDtI4RHmnx33nMohHMtCZaJns.crl (hash: eY8TFhWvy0YCXz82IkLJPbV5oPBk0W3rNlRIU71mXYc=) 2: 56FB3BA630DB11EBB36CAB54C4F9AE02.roa (hash: Tkzl81mL9jCkezlpTqealMA+SaYDCxv0/vXNUScGesg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1904 (0x770) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91688C4, serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B Validity Not Before: Sep 18 21:52:39 2025 GMT Not After : Sep 25 21:52:39 2025 GMT Subject: CN=68cc7f27-68ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5f:b6:4d:93:09:9f:be:b7:31:8a:9c:1d:5a: fb:d9:47:6d:78:76:bd:50:c5:97:fa:89:8e:41:90: da:22:6a:aa:c3:e0:58:ee:f9:2c:e8:f0:28:52:60: 18:3a:3c:a5:f4:ea:43:25:b3:ea:7d:c5:d3:ef:12: 89:e4:b7:a1:2b:e2:e2:9f:9d:dc:7c:2a:41:7b:26: b5:6a:ea:9f:5e:98:28:2e:38:54:89:b4:a4:33:f7: 44:e8:65:a2:2a:0b:46:ea:7c:24:11:54:0c:33:32: fb:86:9d:37:e3:9f:67:73:a6:85:e9:1b:c2:b9:f6: c1:98:74:5f:92:10:94:71:18:43:87:34:8b:6b:a6: 10:82:d6:94:84:ab:d1:93:bd:51:35:d1:41:fc:f8: 46:b7:33:2f:1e:27:ac:11:1c:da:e4:62:db:e1:c9: 2b:b7:ad:56:fa:53:3b:30:76:fd:19:64:d8:8f:5a: 0a:ed:bd:f9:85:e5:4f:c6:43:f2:c2:7a:fd:9c:3a: ae:61:e4:d5:b0:7b:cd:48:54:2c:cf:8c:ed:0d:e5: a0:27:41:97:82:17:c1:fb:42:6b:5f:7d:2b:27:96: 5c:d8:7f:3b:75:01:03:e7:b8:3b:48:84:c3:48:b8: 40:67:cd:d2:92:a8:c0:9d:ba:08:cd:16:07:1a:5a: 3d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:61:BD:2E:BB:2A:02:B9:BA:A8:A8:F0:C5:43:1E:D1:34:A7:9F:19 X509v3 Authority Key Identifier: keyid:68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:e7:95:2a:11:e6:62:fa:fb:ab:35:a8:0f:04:9c:53:41:e0: bf:53:16:bd:a7:41:ea:9a:14:85:38:7f:3b:e6:f1:66:7c:08: 0a:74:49:90:f6:ce:67:01:83:db:78:fb:36:73:91:cc:83:58: 11:af:a0:92:3b:e0:f4:f4:6a:f7:f5:9a:6e:2f:45:5a:10:21: ef:67:1a:82:e9:e7:43:3b:29:af:bb:38:23:02:16:88:b2:b6: cf:19:ba:09:2d:49:21:d8:78:05:2d:20:e7:54:0f:83:9f:cf: f1:d8:21:05:2d:00:49:24:72:4c:62:71:1c:c3:73:76:ec:0e: d4:21:a9:93:9a:41:3c:54:9e:06:de:41:0d:39:7c:1a:f8:c8: e3:17:6c:6f:c3:bc:57:85:bf:72:8e:6b:4e:e0:f2:3c:8c:ed: 08:c2:13:3b:7a:de:cb:20:7e:9c:a7:28:c6:8a:21:e7:f0:a0: 85:fc:0d:6f:86:d6:e2:68:bf:ef:57:fd:40:af:c9:76:30:da: 77:dd:24:8b:2c:24:a1:d9:8f:4b:13:11:04:31:21:5d:fe:73: 59:b3:1a:99:64:69:36:5b:3b:51:4d:43:a3:76:52:3f:a5:87: 82:a9:48:de:b0:db:67:ee:4b:37:df:12:5c:37:23:8e:04:5a: c7:29:3c:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg4QzQxMTAvBgNVBAUTKDY4OUI0M0I0OEUxMTFFNjlGMURGNzlDQ0EyMTFDQ0I0 MjY1QTI2N0IwHhcNMjUwOTE4MjE1MjM5WhcNMjUwOTI1MjE1MjM5WjAYMRYwFAYD VQQDEw02OGNjN2YyNy02OGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnF+2TZMJn763MYqcHVr72UdteHa9UMWX+omOQZDaImqqw+BY7vks6PAoUmAY Ojyl9OpDJbPqfcXT7xKJ5LehK+Lin53cfCpBeya1auqfXpgoLjhUibSkM/dE6GWi KgtG6nwkEVQMMzL7hp03459nc6aF6RvCufbBmHRfkhCUcRhDhzSLa6YQgtaUhKvR k71RNdFB/PhGtzMvHiesERza5GLb4ckrt61W+lM7MHb9GWTYj1oK7b35heVPxkPy wnr9nDquYeTVsHvNSFQsz4ztDeWgJ0GXghfB+0JrX30rJ5Zc2H87dQED57g7SITD SLhAZ83SkqjAnboIzRYHGlo94wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFhvS67 KgK5uqio8MVDHtE0p58ZMB8GA1UdIwQYMBaAFGibQ7SOER5p8d95zKIRzLQmWiZ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhDNC9EODk0N0VCODMw RDkxMUVCODdFMDkzNTNDNEY5QUUwMi9hSnREdEk0UkhtbngzM25Nb2hITXRDWmFK bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FKdER0STRSSG1ueDMzbk1vaEhNdENaYUpucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODhDNC9EODk0N0VCODMwRDkxMUVCODdFMDkzNTNDNEY5QUUwMi9hSnREdEk0Ukht bngzM25Nb2hITXRDWmFKbnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl55UqEeZi+vurNagPBJxTQeC/Uxa9p0HqmhSFOH875vFmfAgKdEmQ 9s5nAYPbePs2c5HMg1gRr6CSO+D09Gr39ZpuL0VaECHvZxqC6edDOymvuzgjAhaI srbPGboJLUkh2HgFLSDnVA+Dn8/x2CEFLQBJJHJMYnEcw3N27A7UIamTmkE8VJ4G 3kENOXwa+MjjF2xvw7xXhb9yjmtO4PI8jO0IwhM7et7LIH6cpyjGiiHn8KCF/A1v htbiaL/vV/1Ar8l2MNp33SSLLCSh2Y9LExEEMSFd/nNZsxqZZGk2WztRTUOjdlI/ pYeCqUjesNtn7ks33xJcNyOOBFrHKTwY -----END CERTIFICATE-----Generated at Fri Sep 19 04:22:27 2025 by rpki-client