$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft File: aaMtc-A4ow1HrKzrgc1zEq91Ork.mft (raw, json) Hash identifier: 6c4B0qWJnFzp4dB82goMBfL4cqXb5CHAujCpLIJLcYc= Subject key identifier: 02:E2:75:B6:D6:96:11:89:04:CD:6A:07:95:71:E5:2C:AB:6B:68:28 Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 Certificate issuer: /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft Manifest number: 0138 Signing time: Sat 25 Oct 2025 08:09:28 +0000 Manifest this update: Sat 25 Oct 2025 08:09:27 +0000 Manifest next update: Sat 01 Nov 2025 08:09:27 +0000 Files and hashes: 1: aaMtc-A4ow1HrKzrgc1zEq91Ork.crl (hash: jFVOLiBkwrtJ5U1WZ/OiNsmMeEA1oFut3kO6rDkUJUk=) 2: 2F734D2E860111EFB49EB20DC4F9AE02.roa (hash: gfkWuMfDUYAqyRnTePZPV70xVbbxGR6RawYGUjcJFec=) 3: AAFEACF0500311F0A7E46C33C4F9AE02.roa (hash: kFrgJirbvirh1kV38XDRtsJ3nsQNa4+OvKJO0YsvLek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 08:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1F31, serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Validity Not Before: Oct 25 08:09:27 2025 GMT Not After : Nov 1 08:09:27 2025 GMT Subject: CN=68fc85b8-563b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5f:84:f8:3c:eb:2d:18:05:37:5f:6d:81:fd: 4e:08:0f:f7:1e:21:b6:8d:2a:a7:76:98:ef:f4:f5: d2:39:21:c6:45:ff:15:48:10:62:0e:d8:b4:cc:22: ec:0e:3f:14:34:ee:87:47:73:0c:63:87:7b:dc:1c: dc:56:68:d7:ab:48:ed:b2:76:2f:5e:5c:95:63:8d: 74:da:0c:d2:80:5b:42:a1:9b:50:0b:a3:51:ba:39: 6c:09:10:21:dc:68:bc:49:e6:8b:67:72:48:f7:35: f5:ed:25:43:4e:bd:54:54:35:38:98:86:e8:9c:dd: 2d:f7:cf:07:bf:83:84:f0:39:31:d3:36:fc:f5:74: 25:ec:c2:f3:5e:ca:c1:76:89:5a:27:70:e2:d7:b2: 8a:af:f7:f9:9e:65:b0:6a:57:4f:7e:ce:b3:04:bf: 89:a0:83:10:0c:0f:c9:3d:62:6f:36:b0:a1:be:c4: e5:ff:3c:05:af:5e:0c:4c:cf:3b:68:26:ae:2d:49: eb:2c:1d:30:91:e6:54:2d:5d:c0:a1:eb:e0:27:72: 41:6e:e5:3f:99:9a:7e:32:0a:67:a7:0d:a2:66:5a: fb:56:f2:58:ad:40:96:16:58:80:f0:13:c0:ae:36: 00:35:d7:65:8f:89:de:41:84:0b:cc:6b:e4:91:66: 08:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E2:75:B6:D6:96:11:89:04:CD:6A:07:95:71:E5:2C:AB:6B:68:28 X509v3 Authority Key Identifier: keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:d1:cb:cc:67:62:c1:c9:0f:6b:52:2e:4b:55:85:0d:3c:ae: bf:0e:b2:98:f6:bb:04:0b:4f:1e:ed:03:80:70:1f:20:28:9e: 32:72:ea:1b:cb:77:68:83:ab:af:4a:e4:d7:e9:c8:19:01:01: 73:49:55:c3:3a:a8:22:32:6e:63:dc:b0:f2:e8:cc:fc:62:4f: 58:15:e9:65:f2:eb:45:4b:58:b6:01:da:4b:0d:a6:87:e5:3d: f3:2c:20:25:f2:8a:9c:c2:18:82:c6:c2:96:4b:3b:46:de:76: d4:60:e5:46:1c:87:1a:1b:31:e7:2a:a4:55:dc:72:b3:b8:07: 30:09:09:14:78:b4:bc:ce:de:4b:cd:fc:f6:89:fc:00:e4:66: 84:b2:71:b5:1e:70:af:8b:83:9c:34:18:c0:5e:69:83:84:c1: 15:6c:39:bf:33:13:44:4b:e2:f6:2e:da:16:2f:a9:78:6e:7b: 20:a5:a9:f7:41:12:41:c6:10:33:90:f5:4e:94:c4:d6:de:f6: 41:12:aa:35:7d:dc:d9:53:5b:b9:e6:09:d4:2d:45:a4:90:95: 2c:8d:58:0b:79:f4:90:91:05:c8:02:b7:9b:2c:0c:dd:7e:ea: 55:3d:93:84:42:74:c1:98:8b:fa:41:bb:42:54:71:9a:d6:7e: 05:e8:a5:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFGMzExMTAvBgNVBAUTKDY5QTMyRDczRTAzOEEzMEQ0N0FDQUNFQjgxQ0Q3MzEy QUY3NTNBQjkwHhcNMjUxMDI1MDgwOTI3WhcNMjUxMTAxMDgwOTI3WjAYMRYwFAYD VQQDEw02OGZjODViOC01NjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqV+E+DzrLRgFN19tgf1OCA/3HiG2jSqndpjv9PXSOSHGRf8VSBBiDti0zCLs Dj8UNO6HR3MMY4d73BzcVmjXq0jtsnYvXlyVY4102gzSgFtCoZtQC6NRujlsCRAh 3Gi8SeaLZ3JI9zX17SVDTr1UVDU4mIbonN0t988Hv4OE8Dkx0zb89XQl7MLzXsrB dolaJ3Di17KKr/f5nmWwaldPfs6zBL+JoIMQDA/JPWJvNrChvsTl/zwFr14MTM87 aCauLUnrLB0wkeZULV3AoevgJ3JBbuU/mZp+Mgpnpw2iZlr7VvJYrUCWFliA8BPA rjYANddlj4neQYQLzGvkkWYItwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALidbbW lhGJBM1qB5Vx5Syra2goMB8GA1UdIwQYMBaAFGmjLXPgOKMNR6ys64HNcxKvdTq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUYzMS9BMEY0RTBEMEUx QkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93MUhyS3pyZ2MxekVxOTFP cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhTXRjLUE0b3cxSHJLenJnYzF6RXE5MU9yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUYzMS9BMEY0RTBEMEUxQkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93 MUhyS3pyZ2MxekVxOTFPcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF0cvMZ2LByQ9rUi5LVYUNPK6/DrKY9rsEC08e7QOAcB8gKJ4ycuob y3dog6uvSuTX6cgZAQFzSVXDOqgiMm5j3LDy6Mz8Yk9YFell8utFS1i2AdpLDaaH 5T3zLCAl8oqcwhiCxsKWSztG3nbUYOVGHIcaGzHnKqRV3HKzuAcwCQkUeLS8zt5L zfz2ifwA5GaEsnG1HnCvi4OcNBjAXmmDhMEVbDm/MxNES+L2LtoWL6l4bnsgpan3 QRJBxhAzkPVOlMTW3vZBEqo1fdzZU1u55gnULUWkkJUsjVgLefSQkQXIArebLAzd fupVPZOEQnTBmIv6QbtCVHGa1n4F6KXv -----END CERTIFICATE-----Generated at Mon Oct 27 04:42:07 2025 by rpki-client