$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft File: aaMtc-A4ow1HrKzrgc1zEq91Ork.mft (raw, json) Hash identifier: h6gXiLb0eUfPJZSQlIIMe1wlJy/9csX+q50Ya/YP11w= Subject key identifier: 4A:B0:75:3D:2A:02:3D:33:E1:77:18:31:4E:AF:65:89:F0:3B:81:E4 Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 Certificate issuer: /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft Manifest number: 01F8 Signing time: Sat 31 Oct 2026 03:46:48 +0000 Manifest this update: Sat 31 Oct 2026 03:46:47 +0000 Manifest next update: Sat 07 Nov 2026 03:46:47 +0000 Files and hashes: 1: aaMtc-A4ow1HrKzrgc1zEq91Ork.crl (hash: lOfsF3XjSAg2D5ULCuPv8itX3MGJ/zdwGANqBV31AEY=) 2: AAFEACF0500311F0A7E46C33C4F9AE02.roa (hash: KAsjZTGjxlT8d6AMDd8zXBUGI6TylpSkB+FkLto9kGs=) 3: 2F734D2E860111EFB49EB20DC4F9AE02.roa (hash: AXziCFMFYEtBXdtY9dmpKm88jTn6EGy7D69LF+swI3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 03:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1F31, serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Validity Not Before: Oct 31 03:46:47 2026 GMT Not After : Nov 7 03:46:47 2026 GMT Subject: CN=6ae564a8-246d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:09:41:6c:6e:c2:5a:7f:6c:f0:be:eb:19:e5: dc:a4:db:2f:c8:b3:12:52:65:ae:94:f0:b9:40:0a: bd:20:60:a1:16:95:69:f4:aa:4c:bc:c6:17:94:b2: 63:48:8d:83:47:de:6b:4e:b2:90:e2:5e:9a:e8:c2: 9d:dd:37:52:b1:81:29:04:be:50:46:56:a9:9a:2a: 98:53:52:d6:f2:d5:58:37:d7:5a:0a:76:db:e3:df: 05:68:85:41:6e:a6:87:a5:08:cd:ba:6b:dc:f6:c9: d3:27:f5:a5:7e:08:1c:45:e8:f3:2d:62:3f:8b:09: 5d:b7:72:b6:c4:48:2d:cd:e2:ac:ed:f8:45:40:e9: 6f:64:73:e4:2d:eb:38:01:62:0f:cf:7a:1b:d5:b7: c2:c3:17:83:14:b3:24:68:ff:9f:d1:f6:9d:dc:98: 0a:54:4b:fa:41:d6:e1:f7:02:f6:9c:4c:84:81:88: 44:51:d3:fc:36:18:21:1d:67:98:ea:28:b3:05:ea: cf:83:38:7b:90:38:59:0d:17:8b:b0:c4:23:e2:e3: 74:4b:c2:be:61:b9:7d:e8:71:f7:cc:4d:8c:bf:c6: df:af:ac:94:75:6b:50:c5:e5:d5:ac:ba:28:4b:f8: ad:ee:c8:48:dd:53:e9:17:31:ca:9e:9d:f5:b2:96: 67:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B0:75:3D:2A:02:3D:33:E1:77:18:31:4E:AF:65:89:F0:3B:81:E4 X509v3 Authority Key Identifier: keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:e9:e4:31:b9:97:04:e6:8f:da:cb:e2:ed:67:e1:20:ee:19: 28:fa:b2:2a:6c:b0:c5:39:03:5a:75:1e:e7:3a:d3:bf:86:e3: 5c:c1:79:83:a9:5b:12:f3:a6:41:a5:f5:9a:ed:97:46:80:e3: 0e:dd:45:d6:ad:a3:7f:08:86:89:d3:d3:8f:6b:1f:26:96:52: 2a:d3:6d:aa:df:d8:6a:49:c1:f9:43:cf:45:d1:7e:93:2a:27: 5a:e3:6a:ce:1a:2c:b6:c8:7d:0e:ee:d7:8d:74:12:75:b2:43: 3b:41:a6:1c:e7:cc:bf:1c:75:9c:0c:8d:3d:b4:8d:39:7b:10: 96:c1:88:7a:0b:bb:40:80:20:00:5a:ea:8e:9c:8e:9e:f8:7b: 0a:6d:ec:71:6b:82:7b:57:1c:41:c1:d0:4c:9d:56:6a:2c:aa: bc:17:36:6b:c8:41:0a:4e:b1:07:b4:2a:44:85:15:99:c6:ea: cc:88:67:80:a6:cd:41:c2:bc:db:1e:fb:9e:ce:d0:ba:dc:b4: 56:26:f0:ee:ce:d5:e8:8f:25:81:d5:5b:b9:47:33:74:38:b4: 14:f3:80:48:fe:95:0b:01:b0:fe:94:e8:9c:09:34:d9:c2:5c: 49:75:0d:85:ac:94:9b:15:6f:e7:a7:95:92:aa:cf:fd:ba:0c: 5b:c9:e3:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFGMzExMTAvBgNVBAUTKDY5QTMyRDczRTAzOEEzMEQ0N0FDQUNFQjgxQ0Q3MzEy QUY3NTNBQjkwHhcNMjYxMDMxMDM0NjQ3WhcNMjYxMTA3MDM0NjQ3WjAYMRYwFAYD VQQDEw02YWU1NjRhOC0yNDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiQlBbG7CWn9s8L7rGeXcpNsvyLMSUmWulPC5QAq9IGChFpVp9KpMvMYXlLJj SI2DR95rTrKQ4l6a6MKd3TdSsYEpBL5QRlapmiqYU1LW8tVYN9daCnbb498FaIVB bqaHpQjNumvc9snTJ/WlfggcRejzLWI/iwldt3K2xEgtzeKs7fhFQOlvZHPkLes4 AWIPz3ob1bfCwxeDFLMkaP+f0fad3JgKVEv6Qdbh9wL2nEyEgYhEUdP8NhghHWeY 6iizBerPgzh7kDhZDReLsMQj4uN0S8K+Ybl96HH3zE2Mv8bfr6yUdWtQxeXVrLoo S/it7shI3VPpFzHKnp31spZn1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEqwdT0q Aj0z4XcYMU6vZYnwO4HkMB8GA1UdIwQYMBaAFGmjLXPgOKMNR6ys64HNcxKvdTq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUYzMS9BMEY0RTBEMEUx QkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93MUhyS3pyZ2MxekVxOTFP cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhTXRjLUE0b3cxSHJLenJnYzF6RXE5MU9yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUYzMS9BMEY0RTBEMEUxQkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93 MUhyS3pyZ2MxekVxOTFPcmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgunkMbmXBOaP2svi7WfhIO4ZKPqyKmywxTkDWnUe5zrTv4bjXMF5g6lbEvOm QaX1mu2XRoDjDt1F1q2jfwiGidPTj2sfJpZSKtNtqt/YaknB+UPPRdF+kyonWuNq zhostsh9Du7XjXQSdbJDO0GmHOfMvxx1nAyNPbSNOXsQlsGIegu7QIAgAFrqjpyO nvh7Cm3scWuCe1ccQcHQTJ1WaiyqvBc2a8hBCk6xB7QqRIUVmcbqzIhngKbNQcK8 2x77ns7Quty0Vibw7s7V6I8lgdVbuUczdDi0FPOASP6VCwGw/pTonAk02cJcSXUN hayUmxVv56eVkqrP/boMW8njJA== -----END CERTIFICATE-----Generated at Sat Oct 31 12:47:54 2026 by rpki-client