$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft File: AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json) Hash identifier: aCbb/A2n/F+CxnzYL8wZN/8KZxE0IqcFIryczPZXYDU= Subject key identifier: 12:24:47:F8:83:35:07:BF:EB:D1:8D:5D:E1:F8:7F:3A:E3:20:40:AD Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 Certificate issuer: /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft Manifest number: 01FA Signing time: Mon 11 May 2026 03:19:28 +0000 Manifest this update: Mon 11 May 2026 03:19:27 +0000 Manifest next update: Mon 18 May 2026 03:19:27 +0000 Files and hashes: 1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: lDxXqLA2erOBTQDXmVZ6u0CKljYAXwcGMPOc5DObfTc=) 2: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: c3Idvp5I6BGzVLk5m0JH2EeG/G7DC+/0AfafmTFhP5U=) 3: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: g7/beSnQDmTq2ey2xjXqWwakjmuPtANr1j+4Lu9F/xY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Validity Not Before: May 11 03:19:27 2026 GMT Not After : May 18 03:19:27 2026 GMT Subject: CN=6a014abf-6555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3b:92:e5:1b:3d:51:cd:4a:b5:d4:cb:5d:d7: 8a:15:87:6e:e0:2b:a0:c9:e6:63:76:22:41:2a:5d: df:67:c8:eb:e0:cf:78:78:d6:dd:cd:b9:26:42:36: e0:81:32:26:f9:c3:46:43:1e:38:8d:66:65:da:e3: 5a:cb:31:05:00:25:ff:0f:5b:b3:ad:d4:8e:e1:c2: b1:8d:e6:bd:d1:e8:b1:65:5e:37:28:60:09:a4:4b: 13:f6:2e:db:25:63:0c:ba:ef:65:dc:13:29:0f:09: de:d0:08:d2:8c:93:5a:f3:c4:0b:60:41:8b:65:ac: 4a:c2:bc:a2:8a:9a:30:38:0b:1a:4b:24:4f:20:c5: c0:1b:6a:4d:78:5b:07:b4:0f:15:90:e3:98:8c:96: d5:dd:09:3e:35:5e:af:33:df:e0:17:8f:01:97:a5: 1b:98:73:a8:9d:f1:74:8c:9a:4f:f7:36:8e:93:64: b1:bf:90:42:29:c7:3f:9d:ed:91:51:ab:ae:eb:47: 71:b2:ba:9b:dd:05:ab:d0:58:b3:d5:49:d7:5d:ef: f8:03:af:3a:09:05:6a:68:06:d4:2d:d2:6c:96:5e: d4:7e:77:60:14:1d:7a:50:a4:0e:95:b6:66:7c:19: 2b:2f:3c:0d:da:3a:97:15:fb:86:0d:b8:9b:e5:d7: 45:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:24:47:F8:83:35:07:BF:EB:D1:8D:5D:E1:F8:7F:3A:E3:20:40:AD X509v3 Authority Key Identifier: keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:dc:29:d6:61:b0:78:06:b4:68:2d:06:69:ff:ee:e8:55:a6: 18:a5:66:64:81:6b:17:19:6c:dd:fa:93:da:dd:2c:b1:6e:9c: ba:7e:47:03:fa:79:6b:71:f8:46:23:12:46:c6:2e:a8:b9:ce: fa:f8:43:c9:1f:9f:1a:c3:76:c7:3b:19:43:84:d5:17:10:da: 3b:51:59:d6:48:3c:15:20:3c:3e:90:09:99:0e:8c:a5:19:4b: 5d:b0:0e:51:d2:66:db:fc:7b:a7:30:38:08:fa:a1:0a:69:b3: 73:8d:cd:b1:11:88:42:d3:64:11:80:a9:25:fd:00:92:b5:f7: 53:56:25:78:58:7d:d7:da:e1:69:f7:da:f3:e3:3b:33:7c:a2: c4:33:35:7b:54:38:d9:54:2c:e6:3c:9e:73:47:97:7e:8c:3e: 97:96:4d:cf:dc:ed:4d:15:78:01:f2:02:6e:d1:3d:0b:ef:1f: 29:32:c7:82:8e:a8:32:7e:04:73:8c:3f:06:11:65:f0:18:38: 65:79:b6:d6:e8:42:e0:a7:34:8c:a0:bc:99:f3:fa:00:42:f6: 9e:70:8c:d0:46:01:23:34:fd:8e:a6:e6:ba:46:07:96:46:d0: 0f:86:70:9f:e6:c1:b2:4d:42:fc:be:26:47:c0:41:26:21:95: 57:43:a2:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDAwOTkyOEYwQjhDRDMwRURBMDU2MzBBOEJBNjc0RTc2 MkE5RDI4MzMwHhcNMjYwNTExMDMxOTI3WhcNMjYwNTE4MDMxOTI3WjAYMRYwFAYD VQQDEw02YTAxNGFiZi02NTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTuS5Rs9Uc1KtdTLXdeKFYdu4CugyeZjdiJBKl3fZ8jr4M94eNbdzbkmQjbg gTIm+cNGQx44jWZl2uNayzEFACX/D1uzrdSO4cKxjea90eixZV43KGAJpEsT9i7b JWMMuu9l3BMpDwne0AjSjJNa88QLYEGLZaxKwryiipowOAsaSyRPIMXAG2pNeFsH tA8VkOOYjJbV3Qk+NV6vM9/gF48Bl6UbmHOonfF0jJpP9zaOk2Sxv5BCKcc/ne2R Uauu60dxsrqb3QWr0Fiz1UnXXe/4A686CQVqaAbULdJsll7UfndgFB16UKQOlbZm fBkrLzwN2jqXFfuGDbib5ddFdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBIkR/iD NQe/69GNXeH4fzrjIECtMB8GA1UdIwQYMBaAFACZKPC4zTDtoFYwqLpnTnYqnSgz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9CMzc0OTcxMDVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1PMmdWakNvdW1kT2RpcWRL RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKa284TGpOTU8yZ1ZqQ291bWRPZGlxZEtETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9CMzc0OTcxMDVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1P MmdWakNvdW1kT2RpcWRLRE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXdwp1mGweAa0aC0Gaf/u6FWmGKVmZIFrFxls3fqT2t0ssW6cun5HA/p5a3H4 RiMSRsYuqLnO+vhDyR+fGsN2xzsZQ4TVFxDaO1FZ1kg8FSA8PpAJmQ6MpRlLXbAO UdJm2/x7pzA4CPqhCmmzc43NsRGIQtNkEYCpJf0AkrX3U1YleFh919rhaffa8+M7 M3yixDM1e1Q42VQs5jyec0eXfow+l5ZNz9ztTRV4AfICbtE9C+8fKTLHgo6oMn4E c4w/BhFl8Bg4ZXm21uhC4Kc0jKC8mfP6AEL2nnCM0EYBIzT9jqbmukYHlkbQD4Zw n+bBsk1C/L4mR8BBJiGVV0OiZQ== -----END CERTIFICATE-----Generated at Wed May 13 03:25:56 2026 by rpki-client