$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft File: AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json) Hash identifier: yffTD9clHq1kt+KrfUhxX1irE+WhgWnkeMQXk4AjTJ0= Subject key identifier: A1:AB:2F:5F:46:4B:24:13:A2:F2:2F:BE:77:44:CA:B8:22:0E:04:1D Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 Certificate issuer: /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft Manifest number: 01DC Signing time: Wed 25 Mar 2026 02:53:11 +0000 Manifest this update: Wed 25 Mar 2026 02:53:10 +0000 Manifest next update: Wed 01 Apr 2026 02:53:10 +0000 Files and hashes: 1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: BinTsQ01CRkf+LoKa8M4/Lkxw5fQtSm+x/ddTIHTSKo=) 2: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: 46gW2zgv3kg1jR+kuDN4YFuI7xpd+JwD4IDvp1lQDks=) 3: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: P1sFlrq62FMoLO7wf4E9r66SOU438vWKBPyMEzzBEHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Validity Not Before: Mar 25 02:53:10 2026 GMT Not After : Apr 1 02:53:10 2026 GMT Subject: CN=69c34e17-7915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9f:37:27:bb:bf:54:b5:86:69:a8:cf:56:58: ad:9e:5c:26:d0:4c:56:db:28:e8:f5:78:51:81:31: 12:a3:f0:96:5e:93:ed:20:7b:ea:19:39:73:75:59: af:62:17:1c:c6:be:2d:39:28:2b:e2:e1:64:46:5a: 50:b5:fa:01:de:04:1e:d4:ae:ae:b1:37:dc:68:a3: 0f:0d:71:72:91:55:22:f4:9e:bc:26:44:25:16:1a: 54:93:52:10:5e:ed:db:7e:af:fa:f7:7e:60:4f:1d: 4d:f1:d4:e2:6c:e7:98:3c:21:a1:44:98:54:ca:69: f0:4b:05:5f:d8:10:32:0e:24:4c:a2:4a:48:6a:aa: 53:41:52:f4:c4:ec:f0:88:1a:3c:de:d9:cb:03:9b: d9:2c:e0:23:c4:7a:0a:a2:5b:cd:12:81:f6:32:70: 81:f8:f1:a6:d5:dd:f5:60:0a:4e:57:3d:c7:b3:17: ff:c4:d2:bf:a1:73:b8:86:3f:3e:c7:22:d1:28:d6: e9:5b:ae:15:ba:19:f7:4a:13:82:bc:33:b5:27:20: c5:0a:70:a0:2f:79:2d:00:2e:43:2a:ab:60:d7:18: 47:7b:8e:9a:e1:84:e0:f0:26:58:e8:b3:9d:41:05: aa:07:76:de:d2:71:09:f7:06:9b:15:ef:e4:cf:1f: 60:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AB:2F:5F:46:4B:24:13:A2:F2:2F:BE:77:44:CA:B8:22:0E:04:1D X509v3 Authority Key Identifier: keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:99:96:1a:60:78:84:4e:d2:66:02:66:af:b6:fe:3d:fc:9d: e8:36:77:dc:c7:c4:5c:58:e8:d2:b7:a9:82:7e:e1:a0:e1:40: 6c:c4:d5:6a:2b:d8:67:d8:54:0a:22:3a:00:ef:9d:90:bf:3b: 85:f2:89:d6:6e:31:24:8c:e8:6a:a9:41:13:3d:94:9d:ff:d2: d7:69:60:a1:a8:f7:78:ab:f4:ae:3b:6c:f5:77:f9:e6:d4:1c: af:e9:ad:9b:74:32:aa:f5:c5:96:31:d3:99:82:df:0f:90:a9: ab:c5:4a:4c:02:13:b5:b4:45:fd:14:68:9f:ac:b9:87:f5:07: 57:76:64:cc:35:78:42:3d:45:d5:fb:6d:f0:ac:0e:40:0e:bc: 73:1f:10:f4:ef:d3:d9:97:0d:76:a1:0e:22:d8:28:2d:74:31: 29:f1:35:4e:e2:cc:fa:11:25:51:06:7f:3e:79:72:d1:b0:65: 6f:21:26:2d:b1:a2:62:6f:85:60:ae:80:df:0d:12:d6:9c:3e: 18:47:e0:0a:56:21:23:3f:c9:e9:76:8a:c1:e2:46:aa:d8:cd: 6a:1d:fe:83:14:d3:1d:c0:d9:ab:1f:3a:a3:93:24:73:5b:f3: fc:c3:bb:18:79:55:3c:80:f5:51:49:2b:6f:2e:ad:f8:4f:44: ca:a7:8b:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDAwOTkyOEYwQjhDRDMwRURBMDU2MzBBOEJBNjc0RTc2 MkE5RDI4MzMwHhcNMjYwMzI1MDI1MzEwWhcNMjYwNDAxMDI1MzEwWjAYMRYwFAYD VQQDEw02OWMzNGUxNy03OTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJ83J7u/VLWGaajPVlitnlwm0ExW2yjo9XhRgTESo/CWXpPtIHvqGTlzdVmv Yhccxr4tOSgr4uFkRlpQtfoB3gQe1K6usTfcaKMPDXFykVUi9J68JkQlFhpUk1IQ Xu3bfq/6935gTx1N8dTibOeYPCGhRJhUymnwSwVf2BAyDiRMokpIaqpTQVL0xOzw iBo83tnLA5vZLOAjxHoKolvNEoH2MnCB+PGm1d31YApOVz3Hsxf/xNK/oXO4hj8+ xyLRKNbpW64Vuhn3ShOCvDO1JyDFCnCgL3ktAC5DKqtg1xhHe46a4YTg8CZY6LOd QQWqB3be0nEJ9wabFe/kzx9giwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKGrL19G SyQTovIvvndEyrgiDgQdMB8GA1UdIwQYMBaAFACZKPC4zTDtoFYwqLpnTnYqnSgz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9CMzc0OTcxMDVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1PMmdWakNvdW1kT2RpcWRL RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKa284TGpOTU8yZ1ZqQ291bWRPZGlxZEtETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9CMzc0OTcxMDVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1P MmdWakNvdW1kT2RpcWRLRE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC5mWGmB4hE7SZgJmr7b+Pfyd6DZ33MfEXFjo0repgn7hoOFAbMTVaivYZ9hU CiI6AO+dkL87hfKJ1m4xJIzoaqlBEz2Unf/S12lgoaj3eKv0rjts9Xf55tQcr+mt m3QyqvXFljHTmYLfD5Cpq8VKTAITtbRF/RRon6y5h/UHV3ZkzDV4Qj1F1ftt8KwO QA68cx8Q9O/T2ZcNdqEOItgoLXQxKfE1TuLM+hElUQZ/Pnly0bBlbyEmLbGiYm+F YK6A3w0S1pw+GEfgClYhIz/J6XaKweJGqtjNah3+gxTTHcDZqx86o5Mkc1vz/MO7 GHlVPID1UUkrby6t+E9EyqeLfQ== -----END CERTIFICATE-----Generated at Fri Mar 27 00:34:00 2026 by rpki-client