$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft File: aaMtc-A4ow1HrKzrgc1zEq91Ork.mft (raw, json) Hash identifier: XA0IzEGASY5mSSBDKxbvXiTHOl6RDT9GmoDND8PX4oA= Subject key identifier: 63:DE:E3:7A:CC:BB:9D:84:0C:17:1D:FC:68:94:78:AA:3E:F1:2B:DE Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 Certificate issuer: /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft Manifest number: 01DF Signing time: Fri 11 Sep 2026 03:42:01 +0000 Manifest this update: Fri 11 Sep 2026 03:42:01 +0000 Manifest next update: Fri 18 Sep 2026 03:42:01 +0000 Files and hashes: 1: aaMtc-A4ow1HrKzrgc1zEq91Ork.crl (hash: I6D+li6XucXry71ZdR7GfbVCWnX2BQEkeBOxz4zxxuk=) 2: 2F734D2E860111EFB49EB20DC4F9AE02.roa (hash: AXziCFMFYEtBXdtY9dmpKm88jTn6EGy7D69LF+swI3Y=) 3: AAFEACF0500311F0A7E46C33C4F9AE02.roa (hash: KAsjZTGjxlT8d6AMDd8zXBUGI6TylpSkB+FkLto9kGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1F31, serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Validity Not Before: Sep 11 03:42:01 2026 GMT Not After : Sep 18 03:42:01 2026 GMT Subject: CN=6aa37889-fd1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:50:19:52:73:53:ad:97:39:b3:da:72:17:6f: 3e:a0:95:62:d8:cf:e1:0a:69:9f:2f:6e:c3:6c:33: 60:77:da:91:1f:4b:f2:af:42:6c:f6:a7:ed:d1:24: 04:55:20:b7:08:84:14:ca:c5:ae:26:a2:1b:d0:63: 44:5e:84:89:fa:e3:52:b2:15:c3:fd:63:5d:3a:b3: 67:19:30:ef:f6:02:b7:87:3b:0e:b6:47:42:30:a1: c2:27:33:c6:f3:71:6c:3b:91:b4:e5:2f:79:1e:c9: 1e:14:50:34:fb:56:17:e5:71:6f:f1:04:92:05:4b: f2:6d:a8:f5:78:6a:4e:59:df:51:67:b9:77:9d:33: 67:c3:fb:51:a2:48:b0:4f:26:ea:d5:1e:cc:d7:51: ab:5d:46:a5:3b:ca:1a:86:37:42:36:3e:a9:9d:e7: 82:3a:37:1a:8c:b0:e7:c2:55:ed:90:d8:71:6f:72: ad:e7:bb:d5:21:88:c4:c8:dc:e2:e0:a0:9f:c2:27: 39:f7:7e:0b:cc:8b:d8:aa:3d:a4:e0:84:d0:f1:40: 7e:c3:45:28:d3:83:76:a9:e8:60:b3:ec:07:b6:77: b4:95:e9:87:e7:5b:ce:b5:f2:12:0d:f0:14:b2:1f: 8c:6e:43:cc:37:f0:0a:3e:21:fa:f3:b3:c0:1e:44: 61:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DE:E3:7A:CC:BB:9D:84:0C:17:1D:FC:68:94:78:AA:3E:F1:2B:DE X509v3 Authority Key Identifier: keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:ec:1e:1c:d6:37:fd:7e:97:4e:e8:85:c6:55:c4:79:e2:96: ce:61:73:46:1b:06:63:c4:7e:f6:0a:a3:8c:d1:a9:0f:71:5d: 42:31:56:3b:6f:d2:32:78:3e:90:da:9a:5b:62:cf:92:8e:6f: a9:29:27:e7:17:dd:f9:50:22:a4:08:66:86:4b:e1:e2:ae:fe: 3d:a9:ac:a1:6c:29:38:07:d8:c5:36:03:6b:8f:b4:a6:2a:b9: 82:57:ac:3e:92:24:76:fe:ed:e6:34:24:65:b8:d4:8c:89:84: c8:db:2f:26:fd:38:1a:60:e2:81:7a:48:85:89:bb:62:0b:f8: 89:d7:c9:60:47:e0:3a:27:30:c3:10:31:59:ee:0e:a6:fa:5b: 32:8c:18:07:b4:d5:7f:f0:e8:e4:1a:68:9e:f6:5e:a5:32:08: 79:98:6d:a9:ab:eb:3f:bd:79:1d:79:c5:47:cc:09:08:26:27: 96:94:93:21:eb:e5:50:93:c7:77:9d:cf:59:6b:6a:90:b4:71: ca:ee:94:f1:f6:e2:ea:ce:0e:cc:49:e6:8a:13:e8:c8:47:86: 94:20:69:b7:11:4a:0d:36:33:05:c1:a1:fc:2c:af:e4:6b:d9: 40:4e:98:f5:2e:0b:24:6a:57:ae:1d:fb:2a:1f:78:af:c2:71: 4c:a1:ef:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFGMzExMTAvBgNVBAUTKDY5QTMyRDczRTAzOEEzMEQ0N0FDQUNFQjgxQ0Q3MzEy QUY3NTNBQjkwHhcNMjYwOTExMDM0MjAxWhcNMjYwOTE4MDM0MjAxWjAYMRYwFAYD VQQDEw02YWEzNzg4OS1mZDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFAZUnNTrZc5s9pyF28+oJVi2M/hCmmfL27DbDNgd9qRH0vyr0Js9qft0SQE VSC3CIQUysWuJqIb0GNEXoSJ+uNSshXD/WNdOrNnGTDv9gK3hzsOtkdCMKHCJzPG 83FsO5G05S95HskeFFA0+1YX5XFv8QSSBUvybaj1eGpOWd9RZ7l3nTNnw/tRokiw Tybq1R7M11GrXUalO8oahjdCNj6pneeCOjcajLDnwlXtkNhxb3Kt57vVIYjEyNzi 4KCfwic5934LzIvYqj2k4ITQ8UB+w0Uo04N2qehgs+wHtne0lemH51vOtfISDfAU sh+MbkPMN/AKPiH687PAHkRhOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGPe43rM u52EDBcd/GiUeKo+8SveMB8GA1UdIwQYMBaAFGmjLXPgOKMNR6ys64HNcxKvdTq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUYzMS9BMEY0RTBEMEUx QkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93MUhyS3pyZ2MxekVxOTFP cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhTXRjLUE0b3cxSHJLenJnYzF6RXE5MU9yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUYzMS9BMEY0RTBEMEUxQkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93 MUhyS3pyZ2MxekVxOTFPcmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAouweHNY3/X6XTuiFxlXEeeKWzmFzRhsGY8R+9gqjjNGpD3FdQjFWO2/SMng+ kNqaW2LPko5vqSkn5xfd+VAipAhmhkvh4q7+PamsoWwpOAfYxTYDa4+0piq5gles PpIkdv7t5jQkZbjUjImEyNsvJv04GmDigXpIhYm7Ygv4idfJYEfgOicwwxAxWe4O pvpbMowYB7TVf/Do5BponvZepTIIeZhtqavrP715HXnFR8wJCCYnlpSTIevlUJPH d53PWWtqkLRxyu6U8fbi6s4OzEnmihPoyEeGlCBptxFKDTYzBcGh/Cyv5GvZQE6Y 9S4LJGpXrh37Kh94r8JxTKHvKg== -----END CERTIFICATE-----Generated at Fri Sep 11 06:17:19 2026 by rpki-client