$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft File: aaMtc-A4ow1HrKzrgc1zEq91Ork.mft (raw, json) Hash identifier: F2/B/eRy8K4Gk6cl24U3RrLhu5KmGmajzUlrlkLXBKo= Subject key identifier: D4:62:DB:50:B0:07:32:ED:8F:2A:E5:6A:E3:C7:8A:DB:EE:32:51:CE Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 Certificate issuer: /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft Manifest number: 0121 Signing time: Tue 09 Sep 2025 04:55:07 +0000 Manifest this update: Tue 09 Sep 2025 04:55:07 +0000 Manifest next update: Tue 16 Sep 2025 04:55:07 +0000 Files and hashes: 1: aaMtc-A4ow1HrKzrgc1zEq91Ork.crl (hash: YMLs33tvI3hG9FKNcunpyBNmrRb8J+8bmIRGeSp7LwI=) 2: 2F734D2E860111EFB49EB20DC4F9AE02.roa (hash: gfkWuMfDUYAqyRnTePZPV70xVbbxGR6RawYGUjcJFec=) 3: AAFEACF0500311F0A7E46C33C4F9AE02.roa (hash: kFrgJirbvirh1kV38XDRtsJ3nsQNa4+OvKJO0YsvLek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 04:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1F31, serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Validity Not Before: Sep 9 04:55:07 2025 GMT Not After : Sep 16 04:55:07 2025 GMT Subject: CN=68bfb32b-795e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:72:33:43:16:8b:0c:22:2b:8e:22:82:07:2f: 17:d8:d9:5a:17:d9:64:0e:ef:92:34:51:ff:6d:2b: 88:42:0c:1f:80:8d:c2:c5:23:2d:63:f4:a7:ef:b8: 7e:a7:fe:f1:6c:fa:b9:60:7c:79:bf:fc:05:83:70: be:f2:3c:64:f5:bc:54:cc:ee:fd:21:bd:d0:dc:8c: f2:be:20:94:10:c4:71:14:68:d2:22:80:0b:4b:21: 77:af:30:9a:6b:80:d9:6f:47:c0:ed:d5:09:09:61: 61:a3:6d:9a:4e:ce:df:14:e9:04:c2:76:f7:8b:9f: d2:d8:39:2d:d7:31:bf:79:f6:99:ae:af:1b:7c:1a: cc:df:ac:99:09:98:f3:3d:fc:9c:0c:8f:4e:60:81: 44:ae:f4:4e:97:de:44:8a:61:f4:69:38:7a:dd:66: 72:42:e3:b1:aa:37:c3:9e:50:18:3a:e3:a0:dc:02: 43:90:5e:af:28:c6:1b:b4:08:57:b7:3d:0e:52:46: 0c:c9:53:74:67:f6:37:78:09:46:fc:3d:47:35:b1: be:a8:82:0b:7e:31:3b:cc:a4:f7:41:a5:4d:c0:a8: 96:13:7c:0c:70:bb:a4:f3:5e:21:9b:3f:50:36:5b: 94:d9:dd:91:3a:c6:7c:df:38:d9:f6:c5:f4:4d:b8: e1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:62:DB:50:B0:07:32:ED:8F:2A:E5:6A:E3:C7:8A:DB:EE:32:51:CE X509v3 Authority Key Identifier: keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:23:6f:a5:e1:dc:a4:b5:c5:a8:7b:be:42:5c:26:5a:f1:33: 87:80:48:0c:a4:13:7a:15:48:e0:54:40:c7:76:59:23:6f:f3: a3:77:4d:57:48:48:4b:60:3f:9a:f7:3a:45:37:f6:04:a7:f1: cc:ca:b7:c3:91:d4:6d:35:c4:37:a9:a5:c1:1b:f3:93:2d:7d: 8d:17:16:1b:f3:af:df:69:0c:a1:aa:d7:f6:1d:cc:41:14:cf: 0b:da:c4:4b:9c:e2:18:93:3a:d2:05:32:e5:07:95:69:b3:f2: 45:2f:ec:e7:3a:88:f8:fc:59:5d:e7:95:94:f3:d5:c0:8b:83: 08:a0:dd:c5:27:da:eb:6c:98:18:00:4e:6f:7a:e3:16:41:f3: 21:35:09:4c:ee:29:03:81:b1:4b:a7:9c:c8:7d:8b:54:58:ae: c7:9c:83:57:e5:cc:9d:05:c6:3e:9f:b0:3f:7a:3d:1b:30:77: d9:74:a5:3a:3e:e4:cb:f9:17:fa:b6:db:c0:8a:a5:fe:4f:3c: 52:b3:8f:a5:b8:fa:4f:35:07:6e:79:43:5c:dd:20:a9:e4:ce: a4:ff:06:b3:a2:aa:73:eb:2a:f2:e8:94:b8:d7:77:bd:a6:6d: c5:5c:95:9d:28:65:11:f5:b1:30:75:ba:f5:06:90:f1:04:fd: 87:c2:55:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFGMzExMTAvBgNVBAUTKDY5QTMyRDczRTAzOEEzMEQ0N0FDQUNFQjgxQ0Q3MzEy QUY3NTNBQjkwHhcNMjUwOTA5MDQ1NTA3WhcNMjUwOTE2MDQ1NTA3WjAYMRYwFAYD VQQDEw02OGJmYjMyYi03OTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3IzQxaLDCIrjiKCBy8X2NlaF9lkDu+SNFH/bSuIQgwfgI3CxSMtY/Sn77h+ p/7xbPq5YHx5v/wFg3C+8jxk9bxUzO79Ib3Q3IzyviCUEMRxFGjSIoALSyF3rzCa a4DZb0fA7dUJCWFho22aTs7fFOkEwnb3i5/S2Dkt1zG/efaZrq8bfBrM36yZCZjz PfycDI9OYIFErvROl95EimH0aTh63WZyQuOxqjfDnlAYOuOg3AJDkF6vKMYbtAhX tz0OUkYMyVN0Z/Y3eAlG/D1HNbG+qIILfjE7zKT3QaVNwKiWE3wMcLuk814hmz9Q NluU2d2ROsZ83zjZ9sX0TbjhRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRi21Cw BzLtjyrlauPHitvuMlHOMB8GA1UdIwQYMBaAFGmjLXPgOKMNR6ys64HNcxKvdTq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUYzMS9BMEY0RTBEMEUx QkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93MUhyS3pyZ2MxekVxOTFP cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhTXRjLUE0b3cxSHJLenJnYzF6RXE5MU9yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUYzMS9BMEY0RTBEMEUxQkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93 MUhyS3pyZ2MxekVxOTFPcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYI2+l4dyktcWoe75CXCZa8TOHgEgMpBN6FUjgVEDHdlkjb/Ojd01X SEhLYD+a9zpFN/YEp/HMyrfDkdRtNcQ3qaXBG/OTLX2NFxYb86/faQyhqtf2HcxB FM8L2sRLnOIYkzrSBTLlB5Vps/JFL+znOoj4/Fld55WU89XAi4MIoN3FJ9rrbJgY AE5veuMWQfMhNQlM7ikDgbFLp5zIfYtUWK7HnINX5cydBcY+n7A/ej0bMHfZdKU6 PuTL+Rf6ttvAiqX+TzxSs4+luPpPNQdueUNc3SCp5M6k/wazoqpz6yry6JS413e9 pm3FXJWdKGUR9bEwdbr1BpDxBP2HwlU2 -----END CERTIFICATE-----Generated at Thu Sep 11 00:32:01 2025 by rpki-client