$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft File: AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft (raw, json) Hash identifier: ZRajwjCktcCzo1mO52pIoEfBNRYzyvPhO94uox2F0Eo= Subject key identifier: D9:87:E5:78:EA:B1:3D:B7:8A:F6:26:09:FD:91:1A:FA:27:4E:9F:9D Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 Certificate issuer: /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Certificate serial: 0784 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft Manifest number: 076B Signing time: Sat 18 Oct 2025 23:02:13 +0000 Manifest this update: Sat 18 Oct 2025 23:02:13 +0000 Manifest next update: Sat 25 Oct 2025 23:02:13 +0000 Files and hashes: 1: AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl (hash: VvSql8BvQb7Xs8suwdYY/31G5FRE2t579wb7HThRs1s=) 2: EEE4C606B5D411ECA20B840AC4F9AE02.roa (hash: VUXxnT8sw3gn1PLOcjj6v97JVbknJ4rMH9PVQxXmHQQ=) 3: 910A49AAB5CC11ECAE337E78C4F9AE02.roa (hash: Rcj1EoUrEWKE8gFKXUKtPg6fSNvcYh9jkBihoa8ZQDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1924 (0x784) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA1A6, serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Validity Not Before: Oct 18 23:02:13 2025 GMT Not After : Oct 25 23:02:13 2025 GMT Subject: CN=68f41c75-0105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:21:63:de:53:a9:a3:b1:57:7f:75:e1:73:e7: 71:be:d1:33:76:5a:63:59:9b:ee:d7:8b:f7:de:c6: 6c:ee:80:6f:ec:81:32:e3:9e:02:c2:db:22:66:bc: 9a:25:4a:a3:49:06:4a:e9:aa:d2:52:8f:cc:40:c7: 1f:7b:a1:83:71:d6:b8:91:20:ba:6e:df:15:26:34: 6c:4a:7a:b4:b4:bd:70:ad:d1:f6:6a:a7:dd:72:71: a6:c2:43:3c:5c:55:a9:7a:51:48:22:ec:1c:9a:17: 6b:fa:01:0e:5e:22:e4:4f:21:0b:38:19:17:0f:a7: 09:ed:d1:b3:b4:c2:25:b2:3e:65:20:c3:21:2e:46: 66:7f:a3:3c:21:43:d0:61:c1:47:88:04:dc:cc:8c: f0:67:11:91:f5:33:6e:0a:ce:d2:d0:41:54:82:f8: 00:e4:b3:4d:0d:b0:e6:e6:2c:34:2c:6d:d7:ee:8f: c5:6f:bc:cf:be:ba:a7:a7:fb:a2:07:ee:73:f7:c1: 41:53:04:6d:50:e7:a7:89:38:c5:2c:9a:87:3e:2d: 51:7c:32:e1:60:f1:28:f2:a6:01:84:00:b7:4c:5b: 7b:60:86:75:c2:bd:25:ac:5d:67:55:81:c6:11:12: 5f:99:99:ef:a2:85:f2:59:30:07:c6:72:83:2b:a3: 11:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:87:E5:78:EA:B1:3D:B7:8A:F6:26:09:FD:91:1A:FA:27:4E:9F:9D X509v3 Authority Key Identifier: keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:34:9b:8b:86:ee:c7:2a:1a:c7:cd:f2:7d:8e:6d:c4:38:ff: 23:00:f2:35:f4:39:3b:38:aa:29:0c:47:26:bc:15:f5:1b:75: 68:51:4e:65:ba:a0:a9:8f:a6:98:0f:5c:16:cf:93:1f:f0:ae: 2e:f8:ca:0f:62:fb:6e:c1:89:8c:de:cd:04:88:08:18:6d:10: 77:43:4e:40:cf:2c:20:13:42:d3:e8:79:58:93:7d:cc:f1:9e: d5:cf:61:00:fd:b2:4e:a0:98:c1:ac:d6:dc:58:f4:c3:ef:98: e3:65:38:3e:57:29:ef:3d:4e:d3:f2:c2:ac:aa:20:39:42:ed: 6a:89:ba:c4:01:26:98:32:ea:cc:58:e3:2d:30:eb:04:df:52: 70:c0:f1:85:bf:a3:a6:aa:f5:95:cf:5a:12:05:94:b4:14:16: 0a:31:02:a1:8a:03:63:7c:d9:22:33:df:fe:50:dd:e9:6c:06: 44:0e:81:09:f3:21:f9:00:c1:9e:c9:55:09:31:82:62:9c:98: 34:50:03:94:85:dc:25:24:1f:79:8b:29:08:dc:be:8e:05:27: fe:8e:67:df:67:ef:92:7b:2d:a7:b8:f0:dc:c5:7b:36:b1:4b: de:41:be:43:d0:15:5e:2c:5c:f6:2e:44:30:b3:e9:ef:94:10: 29:00:4e:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ExQTYxMTAvBgNVBAUTKDAwMDI0MTQ5MEUzRjIwOThGNzlENUM5MzAzN0VCRkYy Qjk1NkNGRDcwHhcNMjUxMDE4MjMwMjEzWhcNMjUxMDI1MjMwMjEzWjAYMRYwFAYD VQQDEw02OGY0MWM3NS0wMTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7CFj3lOpo7FXf3Xhc+dxvtEzdlpjWZvu14v33sZs7oBv7IEy454CwtsiZrya JUqjSQZK6arSUo/MQMcfe6GDcda4kSC6bt8VJjRsSnq0tL1wrdH2aqfdcnGmwkM8 XFWpelFIIuwcmhdr+gEOXiLkTyELOBkXD6cJ7dGztMIlsj5lIMMhLkZmf6M8IUPQ YcFHiATczIzwZxGR9TNuCs7S0EFUgvgA5LNNDbDm5iw0LG3X7o/Fb7zPvrqnp/ui B+5z98FBUwRtUOeniTjFLJqHPi1RfDLhYPEo8qYBhAC3TFt7YIZ1wr0lrF1nVYHG ERJfmZnvooXyWTAHxnKDK6MR0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmH5Xjq sT23ivYmCf2RGvonTp+dMB8GA1UdIwQYMBaAFAACQUkOPyCY951ckwN+v/K5Vs/X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTFBNi8zOEQ5M0UxRTNE MzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lKajNuVnlUQTM2XzhybFd6 OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBSkJTUTRfSUpqM25WeVRBMzZfOHJsV3o5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTFBNi8zOEQ5M0UxRTNEMzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lK ajNuVnlUQTM2XzhybFd6OWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMNJuLhu7HKhrHzfJ9jm3EOP8jAPI19Dk7OKopDEcmvBX1G3VoUU5l uqCpj6aYD1wWz5Mf8K4u+MoPYvtuwYmM3s0EiAgYbRB3Q05AzywgE0LT6HlYk33M 8Z7Vz2EA/bJOoJjBrNbcWPTD75jjZTg+VynvPU7T8sKsqiA5Qu1qibrEASaYMurM WOMtMOsE31JwwPGFv6OmqvWVz1oSBZS0FBYKMQKhigNjfNkiM9/+UN3pbAZEDoEJ 8yH5AMGeyVUJMYJinJg0UAOUhdwlJB95iykI3L6OBSf+jmffZ++Sey2nuPDcxXs2 sUveQb5D0BVeLFz2LkQws+nvlBApAE4w -----END CERTIFICATE-----Generated at Mon Oct 20 08:23:24 2025 by rpki-client