$ rpki-client -vvf rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft File: aJtDtI4RHmnx33nMohHMtCZaJns.mft (raw, json) Hash identifier: mALhMAq9YToiCYMxxne3cn5yPqPPVKjRyc4GeU3ZRX4= Subject key identifier: 65:07:8E:34:74:BF:ED:FA:85:1A:BD:5C:62:CD:D2:0E:91:D2:ED:EC Authority key identifier: 68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B Certificate issuer: /CN=A91688C4/serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B Certificate serial: 0787 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft Manifest number: 0781 Signing time: Tue 04 Nov 2025 21:38:34 +0000 Manifest this update: Tue 04 Nov 2025 21:38:34 +0000 Manifest next update: Tue 11 Nov 2025 21:38:34 +0000 Files and hashes: 1: aJtDtI4RHmnx33nMohHMtCZaJns.crl (hash: J0HJlBLFUGEn+0IpUWoNJBt4xmoq0dpR9RwSrT69JQI=) 2: 56FB3BA630DB11EBB36CAB54C4F9AE02.roa (hash: Tkzl81mL9jCkezlpTqealMA+SaYDCxv0/vXNUScGesg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1927 (0x787) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91688C4, serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B Validity Not Before: Nov 4 21:38:34 2025 GMT Not After : Nov 11 21:38:34 2025 GMT Subject: CN=690a725a-bc63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:89:9b:f6:b0:3c:ee:d4:4e:ae:fe:ac:5e:ac: cf:71:89:38:b3:04:48:b5:3b:25:17:2f:83:c6:d1: 44:c5:78:c6:ff:9b:ac:b7:0e:e7:f4:17:30:af:42: cb:7a:79:a8:1d:e9:db:7f:08:f6:a8:38:13:4f:49: 58:fc:de:90:fa:88:52:b7:40:01:d2:c2:03:61:4d: d5:42:7c:66:a1:98:83:d9:ab:dc:8e:3c:fe:b9:7a: 4b:22:83:48:b5:02:18:6d:dd:9d:06:64:db:27:35: 5a:24:79:cf:9f:5b:13:32:bf:ec:b6:e3:31:00:21: 45:25:fc:eb:3d:79:d8:9e:3a:ed:66:e1:a2:35:69: d4:64:c4:0f:28:c9:57:82:f3:be:bf:0e:ee:26:8c: f0:67:19:0f:9e:fa:96:f7:5b:4c:80:a0:7e:76:4c: 17:75:da:30:b0:eb:82:79:41:07:79:f1:a8:b1:ae: a5:04:af:9d:4e:de:be:63:dc:1c:2f:a0:bf:2c:4f: 63:75:19:fa:8b:39:07:5e:9e:d5:53:78:ca:9d:4c: 6c:1c:88:ba:47:3f:dd:21:fa:d9:43:8a:cc:a4:93: b5:6a:59:1a:d7:43:8d:19:44:43:bc:3d:14:56:ff: 55:0b:73:46:04:b6:dc:2a:e0:0f:a0:0e:e7:34:ba: 9a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:07:8E:34:74:BF:ED:FA:85:1A:BD:5C:62:CD:D2:0E:91:D2:ED:EC X509v3 Authority Key Identifier: keyid:68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:a6:0f:92:76:62:3a:34:ea:e2:ee:ce:b4:7c:5b:ab:fd:3f: 51:a1:60:8d:14:e0:f7:90:75:ef:52:26:df:58:98:65:68:76: 5c:51:c6:9f:f7:29:96:c6:74:04:31:cf:a6:e3:c0:cd:d3:24: fd:03:04:86:f2:7a:4d:0b:f0:c3:e1:c3:28:43:19:5f:bc:88: 91:c2:1c:7e:35:07:34:7e:6c:9c:e6:f4:80:6f:d6:ed:f2:99: d6:09:03:cf:07:76:ce:ad:e4:d4:5b:16:93:46:bd:3f:a0:6a: 4e:85:83:03:21:1a:af:1f:75:72:81:a3:43:21:07:83:0a:59: 4b:05:b9:a9:86:56:e8:2b:c9:ca:35:7a:98:b0:9f:b7:63:9a: 6e:d7:f5:22:af:b2:cc:27:c6:83:67:71:18:35:15:67:6a:c9: 7d:ff:44:be:c9:b2:97:1d:7c:e3:dc:45:7d:18:09:a9:37:e7: c3:76:1d:11:81:2c:54:aa:32:51:3e:be:79:8e:95:1a:71:e0: 90:a7:68:e9:8a:83:bd:4c:7d:91:1e:6b:71:7c:79:d5:76:16: 4d:59:5a:68:9f:7d:9b:01:ea:5e:f2:72:5c:32:11:bc:a5:2a: 1f:d9:13:db:06:2f:0b:7c:a6:7e:8e:9c:02:53:b0:b8:45:45: 18:16:8f:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg4QzQxMTAvBgNVBAUTKDY4OUI0M0I0OEUxMTFFNjlGMURGNzlDQ0EyMTFDQ0I0 MjY1QTI2N0IwHhcNMjUxMTA0MjEzODM0WhcNMjUxMTExMjEzODM0WjAYMRYwFAYD VQQDEw02OTBhNzI1YS1iYzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYmb9rA87tROrv6sXqzPcYk4swRItTslFy+DxtFExXjG/5ustw7n9Bcwr0LL enmoHenbfwj2qDgTT0lY/N6Q+ohSt0AB0sIDYU3VQnxmoZiD2avcjjz+uXpLIoNI tQIYbd2dBmTbJzVaJHnPn1sTMr/stuMxACFFJfzrPXnYnjrtZuGiNWnUZMQPKMlX gvO+vw7uJozwZxkPnvqW91tMgKB+dkwXddowsOuCeUEHefGosa6lBK+dTt6+Y9wc L6C/LE9jdRn6izkHXp7VU3jKnUxsHIi6Rz/dIfrZQ4rMpJO1alka10ONGURDvD0U Vv9VC3NGBLbcKuAPoA7nNLqaFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUHjjR0 v+36hRq9XGLN0g6R0u3sMB8GA1UdIwQYMBaAFGibQ7SOER5p8d95zKIRzLQmWiZ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhDNC9EODk0N0VCODMw RDkxMUVCODdFMDkzNTNDNEY5QUUwMi9hSnREdEk0UkhtbngzM25Nb2hITXRDWmFK bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FKdER0STRSSG1ueDMzbk1vaEhNdENaYUpucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODhDNC9EODk0N0VCODMwRDkxMUVCODdFMDkzNTNDNEY5QUUwMi9hSnREdEk0Ukht bngzM25Nb2hITXRDWmFKbnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIpg+SdmI6NOri7s60fFur/T9RoWCNFOD3kHXvUibfWJhlaHZcUcaf 9ymWxnQEMc+m48DN0yT9AwSG8npNC/DD4cMoQxlfvIiRwhx+NQc0fmyc5vSAb9bt 8pnWCQPPB3bOreTUWxaTRr0/oGpOhYMDIRqvH3VygaNDIQeDCllLBbmphlboK8nK NXqYsJ+3Y5pu1/Uir7LMJ8aDZ3EYNRVnasl9/0S+ybKXHXzj3EV9GAmpN+fDdh0R gSxUqjJRPr55jpUaceCQp2jpioO9TH2RHmtxfHnVdhZNWVpon32bAepe8nJcMhG8 pSof2RPbBi8LfKZ+jpwCU7C4RUUYFo+z -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:25 2025 by rpki-client