$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft File: AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json) Hash identifier: H6Avf1usVp02giz8/+3LAEBjhR/oJfpVDVKzukvAcq8= Subject key identifier: FC:88:27:46:9D:E2:23:B8:93:63:33:3D:73:6C:4E:08:73:61:35:4D Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 Certificate issuer: /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft Manifest number: 016E Signing time: Sat 23 Aug 2025 04:03:14 +0000 Manifest this update: Sat 23 Aug 2025 04:03:13 +0000 Manifest next update: Sat 30 Aug 2025 04:03:13 +0000 Files and hashes: 1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: hiCXNgVi2zw7ViZIWzFTZ9o2rYMcJ13GwO+69DbLb3E=) 2: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: L51Q68tVx2XVC4mIdbJx6yL7uZTn+EZdlLwf/zTugIc=) 3: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: 4Ob8OZ5S2H/WLKjYmff77WuX2DfNbq1F3IyX9D66TLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Validity Not Before: Aug 23 04:03:13 2025 GMT Not After : Aug 30 04:03:13 2025 GMT Subject: CN=68a93d81-3306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4b:94:c8:4d:45:73:34:2b:f8:d0:57:b4:09: 1d:f7:93:01:51:83:41:0a:0d:d5:de:af:e6:66:07: af:9e:f6:a9:a3:1e:8f:8a:d3:c3:ca:a1:02:48:2a: 22:78:61:c9:01:37:db:01:8b:18:5b:5b:b5:b2:da: 43:d3:42:6f:3b:7a:c6:fb:ba:f0:aa:e7:d1:75:3f: 75:c9:06:eb:a4:ee:2c:f0:98:2c:83:ab:ef:3b:a8: 23:6c:1d:27:19:86:9d:33:8e:31:08:2b:94:e2:3f: 1d:22:0d:c9:74:e9:29:44:d9:77:34:56:ed:f3:60: 90:3d:fa:3a:89:d8:53:cf:ed:ea:1c:fd:ad:67:3e: fa:1c:5c:83:7a:c2:04:a7:f6:28:99:93:77:a9:63: 0d:77:ad:7f:b7:b7:ac:dc:ef:e7:33:63:69:27:9f: 15:b0:fe:28:88:8a:f3:e2:f0:7c:e9:a3:2f:30:fd: 48:8c:50:53:a1:9b:f7:ec:59:99:8c:f1:c1:9e:9f: 91:19:4a:17:a8:dc:2c:3d:fd:a9:37:eb:cc:0f:1f: 3f:5c:d6:3f:f9:ad:63:76:80:9f:c2:d1:e6:d3:cf: a3:47:f5:ab:f9:2a:79:a0:91:23:01:7e:3a:f3:1d: d1:13:c1:3a:86:5c:a2:47:d3:46:03:cc:34:66:cb: b4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:88:27:46:9D:E2:23:B8:93:63:33:3D:73:6C:4E:08:73:61:35:4D X509v3 Authority Key Identifier: keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e1:45:9f:75:87:8e:8a:5a:8d:2c:ae:91:98:e4:34:79:0a: c6:5f:a6:9a:15:16:d2:3a:d4:0a:98:05:99:68:ee:0c:91:4d: 12:c0:04:cd:49:6e:95:25:e0:5e:ca:fa:ab:91:30:41:1d:ae: 58:06:8d:8e:75:16:8a:56:71:dd:3b:1c:ac:09:82:57:e9:b7: 98:80:88:ea:93:e3:95:81:7e:7e:8a:01:0b:b7:aa:47:de:ca: 88:f3:fb:a5:9b:bd:ad:97:7c:97:33:ee:ac:21:ac:ce:f1:7b: b0:3e:01:9e:26:86:8d:83:42:b0:2f:f5:61:4c:b6:87:cf:e7: 58:07:d1:0e:d6:8e:2a:f0:82:af:2b:83:e1:9d:c5:b9:04:ba: 8d:bd:2a:be:7b:41:5e:d6:d3:33:bf:e2:d0:18:cc:5d:05:fb: ca:9b:74:89:d8:c7:a5:36:e7:b5:e0:86:69:26:c8:08:ce:3f: 9d:76:7a:21:5c:59:02:17:87:a3:3d:a0:e6:e3:27:f8:f4:0a: 13:3e:ef:b2:a8:81:7b:97:b0:bd:5f:63:d9:a9:ca:72:76:b4: cb:52:74:92:ed:6c:ec:07:b9:4c:d8:9e:61:6d:b7:38:b1:a2: 9b:19:18:e3:ae:a0:af:27:4f:c3:f8:b2:62:04:1b:86:d6:64: a3:7f:fc:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDAwOTkyOEYwQjhDRDMwRURBMDU2MzBBOEJBNjc0RTc2 MkE5RDI4MzMwHhcNMjUwODIzMDQwMzEzWhcNMjUwODMwMDQwMzEzWjAYMRYwFAYD VQQDEw02OGE5M2Q4MS0zMzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1UuUyE1FczQr+NBXtAkd95MBUYNBCg3V3q/mZgevnvapox6PitPDyqECSCoi eGHJATfbAYsYW1u1stpD00JvO3rG+7rwqufRdT91yQbrpO4s8Jgsg6vvO6gjbB0n GYadM44xCCuU4j8dIg3JdOkpRNl3NFbt82CQPfo6idhTz+3qHP2tZz76HFyDesIE p/YomZN3qWMNd61/t7es3O/nM2NpJ58VsP4oiIrz4vB86aMvMP1IjFBToZv37FmZ jPHBnp+RGUoXqNwsPf2pN+vMDx8/XNY/+a1jdoCfwtHm08+jR/Wr+Sp5oJEjAX46 8x3RE8E6hlyiR9NGA8w0Zsu08wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyIJ0ad 4iO4k2MzPXNsTghzYTVNMB8GA1UdIwQYMBaAFACZKPC4zTDtoFYwqLpnTnYqnSgz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9CMzc0OTcxMDVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1PMmdWakNvdW1kT2RpcWRL RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKa284TGpOTU8yZ1ZqQ291bWRPZGlxZEtETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9CMzc0OTcxMDVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1P MmdWakNvdW1kT2RpcWRLRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd4UWfdYeOilqNLK6RmOQ0eQrGX6aaFRbSOtQKmAWZaO4MkU0SwATN SW6VJeBeyvqrkTBBHa5YBo2OdRaKVnHdOxysCYJX6beYgIjqk+OVgX5+igELt6pH 3sqI8/ulm72tl3yXM+6sIazO8XuwPgGeJoaNg0KwL/VhTLaHz+dYB9EO1o4q8IKv K4PhncW5BLqNvSq+e0Fe1tMzv+LQGMxdBfvKm3SJ2MelNue14IZpJsgIzj+ddnoh XFkCF4ejPaDm4yf49AoTPu+yqIF7l7C9X2PZqcpydrTLUnSS7WzsB7lM2J5hbbc4 saKbGRjjrqCvJ0/D+LJiBBuG1mSjf/ws -----END CERTIFICATE-----Generated at Sat Aug 23 16:37:38 2025 by rpki-client