$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft File: aaMtc-A4ow1HrKzrgc1zEq91Ork.mft (raw, json) Hash identifier: IECzVMhVSdbjamjpTYA2r5OfpAhFOlqUa1Ne7z/A2+c= Subject key identifier: 72:92:7E:44:05:67:28:61:23:C8:34:D7:60:C2:11:02:FB:27:10:CB Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 Certificate issuer: /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft Manifest number: 013E Signing time: Wed 05 Nov 2025 04:40:02 +0000 Manifest this update: Wed 05 Nov 2025 04:40:02 +0000 Manifest next update: Wed 12 Nov 2025 04:40:02 +0000 Files and hashes: 1: aaMtc-A4ow1HrKzrgc1zEq91Ork.crl (hash: v6JUWLptffFW0v2IBuLj4UhT66OHg0VgGrVl/2a2Fv4=) 2: 2F734D2E860111EFB49EB20DC4F9AE02.roa (hash: gfkWuMfDUYAqyRnTePZPV70xVbbxGR6RawYGUjcJFec=) 3: AAFEACF0500311F0A7E46C33C4F9AE02.roa (hash: kFrgJirbvirh1kV38XDRtsJ3nsQNa4+OvKJO0YsvLek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1F31, serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Validity Not Before: Nov 5 04:40:02 2025 GMT Not After : Nov 12 04:40:02 2025 GMT Subject: CN=690ad522-f8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:af:cf:d9:19:99:9b:51:33:f6:e7:04:13:be: 3d:3b:54:1a:da:f1:af:02:06:94:e5:e6:2d:c9:18: 8f:96:0a:f2:4a:a3:45:27:7f:94:29:ac:f1:c5:b8: fe:4f:87:98:b3:8b:65:7c:5e:8b:14:d6:82:15:04: 68:8e:4b:8e:34:53:5b:3c:32:3a:35:64:d5:5e:ef: 39:59:ba:21:54:7e:9e:8a:db:73:de:c5:ab:4b:7e: 7f:b1:98:4d:7e:75:6c:b4:0a:d4:b0:06:3a:ac:63: a5:fc:a2:c4:2c:9f:f6:48:3a:7b:dc:d9:88:7e:04: 41:b0:64:15:7c:34:16:3a:9e:10:51:4e:c4:09:9e: cb:39:2e:3d:b3:21:7f:d0:a1:a6:07:b9:92:6a:46: b6:75:a9:8d:86:99:dc:2e:7a:1f:34:d7:9e:26:51: 10:a0:cc:b7:6b:ee:22:bc:8c:ef:60:27:7c:8a:ba: 75:97:b8:aa:3b:ce:86:aa:bc:af:d6:18:11:26:0b: 55:bc:1b:55:76:e0:08:58:f2:5d:81:6f:75:2a:3d: 05:21:48:f5:c8:92:17:7d:71:1c:5b:3c:68:d1:1f: 5c:42:7c:d7:2c:42:c3:f5:57:c4:ee:6d:dc:eb:a9: aa:d1:88:da:56:23:e9:2e:e5:74:b5:7e:67:9f:71: d9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:92:7E:44:05:67:28:61:23:C8:34:D7:60:C2:11:02:FB:27:10:CB X509v3 Authority Key Identifier: keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:f3:6c:54:e0:3a:0e:de:94:46:a3:e0:c3:b6:30:e6:33:f9: 9f:fc:31:17:d3:64:01:6e:48:00:d8:23:c3:1c:39:ae:7d:10: 7c:a0:75:d2:81:05:0d:33:41:5c:be:a3:2c:e6:df:7f:d2:06: 31:7e:e0:60:74:a9:ef:67:8b:a3:8f:63:85:a6:d1:25:a3:a3: fe:8a:60:e5:96:b4:4d:ae:48:aa:95:9c:e8:8d:d1:67:fc:94: 2d:8b:2b:88:e6:13:4c:a1:56:f0:98:ec:ec:1a:59:43:6e:d7: 48:c3:42:55:c1:02:2f:d4:cf:a2:bb:44:8a:ce:66:10:26:d7: 26:b5:58:a8:63:ce:2f:49:a2:63:55:d4:f3:84:3e:85:3f:ca: 35:07:30:92:7b:77:e3:8c:d1:18:f6:34:c1:52:b3:ad:de:50: e1:67:0c:27:d7:86:77:52:1b:df:68:f6:2b:ef:5c:c7:49:cc: 82:4d:4b:db:51:e0:10:6e:66:52:29:0d:34:1c:65:fd:fc:a5: 19:d2:41:21:69:af:42:c0:28:94:1b:40:b1:d2:2b:8a:25:d9: a7:e2:ab:4d:92:f9:05:66:da:05:11:6e:37:0c:e1:30:6d:f4: a3:16:37:fe:9b:08:ff:dd:68:0a:25:fb:ec:40:d8:26:2b:b1: 61:f0:f5:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFGMzExMTAvBgNVBAUTKDY5QTMyRDczRTAzOEEzMEQ0N0FDQUNFQjgxQ0Q3MzEy QUY3NTNBQjkwHhcNMjUxMTA1MDQ0MDAyWhcNMjUxMTEyMDQ0MDAyWjAYMRYwFAYD VQQDEw02OTBhZDUyMi1mOGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1q/P2RmZm1Ez9ucEE749O1Qa2vGvAgaU5eYtyRiPlgrySqNFJ3+UKazxxbj+ T4eYs4tlfF6LFNaCFQRojkuONFNbPDI6NWTVXu85WbohVH6eittz3sWrS35/sZhN fnVstArUsAY6rGOl/KLELJ/2SDp73NmIfgRBsGQVfDQWOp4QUU7ECZ7LOS49syF/ 0KGmB7mSaka2damNhpncLnofNNeeJlEQoMy3a+4ivIzvYCd8irp1l7iqO86Gqryv 1hgRJgtVvBtVduAIWPJdgW91Kj0FIUj1yJIXfXEcWzxo0R9cQnzXLELD9VfE7m3c 66mq0YjaViPpLuV0tX5nn3HZzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKSfkQF ZyhhI8g012DCEQL7JxDLMB8GA1UdIwQYMBaAFGmjLXPgOKMNR6ys64HNcxKvdTq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUYzMS9BMEY0RTBEMEUx QkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93MUhyS3pyZ2MxekVxOTFP cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhTXRjLUE0b3cxSHJLenJnYzF6RXE5MU9yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUYzMS9BMEY0RTBEMEUxQkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93 MUhyS3pyZ2MxekVxOTFPcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr82xU4DoO3pRGo+DDtjDmM/mf/DEX02QBbkgA2CPDHDmufRB8oHXS gQUNM0FcvqMs5t9/0gYxfuBgdKnvZ4ujj2OFptElo6P+imDllrRNrkiqlZzojdFn /JQtiyuI5hNMoVbwmOzsGllDbtdIw0JVwQIv1M+iu0SKzmYQJtcmtVioY84vSaJj VdTzhD6FP8o1BzCSe3fjjNEY9jTBUrOt3lDhZwwn14Z3UhvfaPYr71zHScyCTUvb UeAQbmZSKQ00HGX9/KUZ0kEhaa9CwCiUG0Cx0iuKJdmn4qtNkvkFZtoFEW43DOEw bfSjFjf+mwj/3WgKJfvsQNgmK7Fh8PW/ -----END CERTIFICATE-----Generated at Wed Nov 5 12:07:01 2025 by rpki-client