$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft File: AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json) Hash identifier: pBy4VMzXShvIjPYUH5CWmZzVIlv7/PNOO0YEK2hRayI= Subject key identifier: 9D:B1:57:C3:0B:AB:E5:E9:C1:04:96:9B:14:C2:17:41:15:4A:2D:65 Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 Certificate issuer: /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Certificate serial: 024C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft Manifest number: 023E Signing time: Wed 23 Sep 2026 02:29:02 +0000 Manifest this update: Wed 23 Sep 2026 02:29:02 +0000 Manifest next update: Wed 30 Sep 2026 02:29:02 +0000 Files and hashes: 1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: XSHHd5ZZWX0cwT1aMgmp/vUSRXWXSP05XIJjA1I6u4c=) 2: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: c3Idvp5I6BGzVLk5m0JH2EeG/G7DC+/0AfafmTFhP5U=) 3: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: g7/beSnQDmTq2ey2xjXqWwakjmuPtANr1j+4Lu9F/xY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 588 (0x24c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Validity Not Before: Sep 23 02:29:02 2026 GMT Not After : Sep 30 02:29:02 2026 GMT Subject: CN=6ab3396e-0459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fa:44:92:0f:dd:cf:3c:1e:03:b5:9e:40:f4: cb:7b:1e:cc:a8:2f:40:c4:5a:fc:42:ba:0d:59:0a: b3:40:c8:9c:07:a0:a1:31:78:03:41:de:e6:f3:af: da:39:35:14:ac:a3:14:d9:47:9d:41:75:bc:ec:5a: 91:ca:97:f5:d7:a5:02:da:ac:a3:ee:8b:95:81:c0: 76:47:cf:4c:e1:a7:24:2a:e5:02:ae:0b:94:e8:e9: 9d:42:09:70:eb:de:f0:3b:8d:6b:6a:2b:e7:7a:df: 7f:2e:18:4c:24:de:a4:55:58:95:7b:c5:2f:8e:23: a1:c5:1f:99:0e:01:53:d4:ab:c5:8f:3a:fa:78:3f: 97:e5:47:cb:63:14:f7:d0:b2:5d:37:31:90:d8:0c: be:88:15:4f:a9:55:6c:c4:2c:5f:5e:11:cc:53:4b: 72:30:94:8c:23:6b:83:55:e5:67:50:cb:9d:46:27: 60:3b:0f:59:eb:bd:20:ce:59:74:ee:58:2e:1b:f1: 53:9a:59:b3:1d:47:27:19:ac:20:0c:93:44:d7:2e: 48:bb:e6:aa:00:4e:43:fd:1c:e7:ed:1c:cc:39:7b: 9f:cd:91:4c:11:16:6b:e8:67:e9:3b:db:a7:be:c1: a5:9f:cc:f6:9a:94:f9:fe:f0:27:bc:d1:db:03:85: 43:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B1:57:C3:0B:AB:E5:E9:C1:04:96:9B:14:C2:17:41:15:4A:2D:65 X509v3 Authority Key Identifier: keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:c4:27:5b:84:bf:cb:5d:f5:8e:39:22:4b:f7:7d:36:72:1a: 3f:3e:e4:a2:c1:ed:59:e9:76:1f:df:d8:42:8b:dc:59:e5:c2: da:dd:31:f9:e7:ef:45:40:32:f5:60:83:4a:ab:97:f5:84:14: 90:7c:bf:30:c5:bf:de:1b:52:5c:05:09:b3:c7:7d:ce:ff:2c: ff:cc:e3:1a:f3:bd:54:09:95:a0:f2:33:71:9a:1f:fe:5d:39: 6e:ed:9d:e5:f8:e1:f7:7b:1f:5b:6e:cd:a8:dc:4d:c8:82:fc: cd:da:2f:fc:94:8d:1b:c8:7d:b4:45:66:a7:f9:d1:1b:34:2e: b4:33:99:dc:6b:8f:bd:db:68:a9:b0:c8:62:e8:86:53:58:7f: af:3a:a6:ce:1e:a3:b5:eb:27:58:85:8c:48:f3:c7:ce:2b:15: fe:61:4c:71:a7:dd:c5:91:c6:02:bf:e5:65:db:06:f8:cf:11: b5:76:1d:74:b2:55:69:87:bd:68:7f:2c:ea:ac:e4:7b:f8:21: d1:6a:87:33:39:50:30:42:0c:c0:b1:a3:42:49:a9:9d:6b:8e: 1b:86:43:1b:c0:27:6f:45:8a:14:95:67:45:35:bf:43:1b:44: f3:98:b1:c8:c3:79:d1:a0:ba:70:cc:cc:01:3d:fc:c8:52:4d: 35:a5:3e:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDAwOTkyOEYwQjhDRDMwRURBMDU2MzBBOEJBNjc0RTc2 MkE5RDI4MzMwHhcNMjYwOTIzMDIyOTAyWhcNMjYwOTMwMDIyOTAyWjAYMRYwFAYD VQQDEw02YWIzMzk2ZS0wNDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl/pEkg/dzzweA7WeQPTLex7MqC9AxFr8QroNWQqzQMicB6ChMXgDQd7m86/a OTUUrKMU2UedQXW87FqRypf116UC2qyj7ouVgcB2R89M4ackKuUCrguU6OmdQglw 697wO41raivnet9/LhhMJN6kVViVe8UvjiOhxR+ZDgFT1KvFjzr6eD+X5UfLYxT3 0LJdNzGQ2Ay+iBVPqVVsxCxfXhHMU0tyMJSMI2uDVeVnUMudRidgOw9Z670gzll0 7lguG/FTmlmzHUcnGawgDJNE1y5Iu+aqAE5D/Rzn7RzMOXufzZFMERZr6GfpO9un vsGln8z2mpT5/vAnvNHbA4VDJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ2xV8ML q+XpwQSWmxTCF0EVSi1lMB8GA1UdIwQYMBaAFACZKPC4zTDtoFYwqLpnTnYqnSgz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9CMzc0OTcxMDVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1PMmdWakNvdW1kT2RpcWRL RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKa284TGpOTU8yZ1ZqQ291bWRPZGlxZEtETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9CMzc0OTcxMDVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1P MmdWakNvdW1kT2RpcWRLRE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIcQnW4S/y131jjkiS/d9NnIaPz7kosHtWel2H9/YQovcWeXC2t0x+efvRUAy 9WCDSquX9YQUkHy/MMW/3htSXAUJs8d9zv8s/8zjGvO9VAmVoPIzcZof/l05bu2d 5fjh93sfW27NqNxNyIL8zdov/JSNG8h9tEVmp/nRGzQutDOZ3GuPvdtoqbDIYuiG U1h/rzqmzh6jtesnWIWMSPPHzisV/mFMcafdxZHGAr/lZdsG+M8RtXYddLJVaYe9 aH8s6qzke/gh0WqHMzlQMEIMwLGjQkmpnWuOG4ZDG8Anb0WKFJVnRTW/QxtE85ix yMN50aC6cMzMAT38yFJNNaU+Vw== -----END CERTIFICATE-----Generated at Wed Sep 23 15:31:57 2026 by rpki-client