$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft File: AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json) Hash identifier: NNFlBgGsbf5fnaHMCIMAP8iHx/4IfWl9AR3qD880G0o= Subject key identifier: B9:ED:AF:8B:53:0C:82:1E:FC:5B:D6:7E:F7:54:02:9F:D1:F0:8A:42 Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 Certificate issuer: /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Certificate serial: 0267 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft Manifest number: 0259 Signing time: Sun 15 Nov 2026 02:32:33 +0000 Manifest this update: Sun 15 Nov 2026 02:32:32 +0000 Manifest next update: Sun 22 Nov 2026 02:32:32 +0000 Files and hashes: 1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: PE3eZVYwErYuISiArYjQZFcAqR0UpUbcKevRuhjWwLw=) 2: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: g7/beSnQDmTq2ey2xjXqWwakjmuPtANr1j+4Lu9F/xY=) 3: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: c3Idvp5I6BGzVLk5m0JH2EeG/G7DC+/0AfafmTFhP5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 02:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615 (0x267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Validity Not Before: Nov 15 02:32:32 2026 GMT Not After : Nov 22 02:32:32 2026 GMT Subject: CN=6af919c1-0ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:52:d1:55:a8:c7:36:00:78:d6:62:43:93:fd: 30:72:ab:0f:57:17:98:a1:99:39:22:9c:2e:8e:5a: 68:80:66:06:06:ed:89:35:b2:57:13:86:47:8d:c3: aa:37:8b:fd:60:c2:4d:f5:e4:d7:f3:1c:4a:75:36: 2d:53:1f:04:c3:d0:40:4b:7e:ff:68:83:5e:bd:3a: 60:e1:b0:8c:cb:3b:f6:cf:ed:e6:24:43:96:60:cd: 3e:c2:31:16:6b:88:1d:08:08:8c:39:fc:38:ca:de: e0:59:5f:a6:91:1b:a2:86:b5:f1:48:94:5e:35:87: a3:85:46:82:a4:50:4c:57:a6:ac:94:77:44:4c:1b: cb:f7:bb:01:a2:a0:4d:99:07:87:ca:03:10:d1:32: c5:a9:bd:57:b2:89:96:71:af:70:8e:6c:02:4b:2a: d1:38:54:6e:c6:c6:dc:2b:a8:84:df:67:c0:59:1f: 1c:93:df:31:84:cc:29:fb:5a:1d:bb:47:87:0b:55: 01:f0:d5:dd:cb:7e:16:1c:db:a4:f4:13:20:a9:0d: 1d:c3:16:7d:f6:6f:f4:22:91:4e:57:3e:15:e3:bf: a6:72:16:cc:46:d4:d5:be:57:93:ee:eb:54:fd:cb: 5a:74:6c:1c:34:c3:7a:be:11:11:52:7c:3a:62:9f: 87:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:ED:AF:8B:53:0C:82:1E:FC:5B:D6:7E:F7:54:02:9F:D1:F0:8A:42 X509v3 Authority Key Identifier: keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:ea:a9:b9:4a:e3:02:3d:13:83:72:cc:a4:f2:e2:d5:d4:74: a3:25:3b:f2:c7:d4:75:ef:8a:a2:8a:b9:f2:a2:97:4d:ad:67: e1:9f:f0:8d:1b:ab:07:59:7e:50:d9:d5:35:d4:c3:55:ef:c3: 20:dc:ae:77:41:11:a4:4f:97:e2:96:6e:ff:e8:46:fc:1a:59: 13:02:a1:14:5f:c9:d3:27:19:34:b6:be:db:70:46:b2:d9:2c: d3:9e:8f:c3:ea:0c:3c:1b:dd:5e:29:fb:5f:d7:9a:f7:b9:2e: 8f:f1:85:06:0c:86:ad:e3:bb:d8:21:19:79:b5:84:54:c6:94: 3e:3e:18:a4:ab:3a:21:41:19:55:a0:34:fd:23:fa:24:36:be: 9b:ea:c5:7b:86:ca:c1:72:48:3e:46:26:d7:75:2f:4d:4e:cf: c7:7b:37:18:09:12:f4:2d:7a:d8:cd:58:00:ea:c6:d4:bb:c0: 82:6e:e0:d2:a3:96:03:cb:0b:72:a4:8b:56:3d:95:b6:f0:60: ef:02:c1:19:8c:77:d1:55:ab:d4:a2:99:fb:24:6e:4f:67:aa: a7:09:00:05:f5:8e:b8:ca:5d:ad:74:fd:4c:3b:4b:4d:df:7e: 87:78:51:ae:85:9f:f1:b6:eb:47:41:bb:ef:f2:a6:4e:e7:68: 9a:5e:c8:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDAwOTkyOEYwQjhDRDMwRURBMDU2MzBBOEJBNjc0RTc2 MkE5RDI4MzMwHhcNMjYxMTE1MDIzMjMyWhcNMjYxMTIyMDIzMjMyWjAYMRYwFAYD VQQDEw02YWY5MTljMS0wY2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6VLRVajHNgB41mJDk/0wcqsPVxeYoZk5IpwujlpogGYGBu2JNbJXE4ZHjcOq N4v9YMJN9eTX8xxKdTYtUx8Ew9BAS37/aINevTpg4bCMyzv2z+3mJEOWYM0+wjEW a4gdCAiMOfw4yt7gWV+mkRuihrXxSJReNYejhUaCpFBMV6aslHdETBvL97sBoqBN mQeHygMQ0TLFqb1XsomWca9wjmwCSyrROFRuxsbcK6iE32fAWR8ck98xhMwp+1od u0eHC1UB8NXdy34WHNuk9BMgqQ0dwxZ99m/0IpFOVz4V47+mchbMRtTVvleT7utU /ctadGwcNMN6vhERUnw6Yp+HEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLntr4tT DIIe/FvWfvdUAp/R8IpCMB8GA1UdIwQYMBaAFACZKPC4zTDtoFYwqLpnTnYqnSgz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9CMzc0OTcxMDVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1PMmdWakNvdW1kT2RpcWRL RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKa284TGpOTU8yZ1ZqQ291bWRPZGlxZEtETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9CMzc0OTcxMDVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1P MmdWakNvdW1kT2RpcWRLRE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd+qpuUrjAj0Tg3LMpPLi1dR0oyU78sfUde+Kooq58qKXTa1n4Z/wjRurB1l+ UNnVNdTDVe/DINyud0ERpE+X4pZu/+hG/BpZEwKhFF/J0ycZNLa+23BGstks056P w+oMPBvdXin7X9ea97kuj/GFBgyGreO72CEZebWEVMaUPj4YpKs6IUEZVaA0/SP6 JDa+m+rFe4bKwXJIPkYm13UvTU7Px3s3GAkS9C162M1YAOrG1LvAgm7g0qOWA8sL cqSLVj2VtvBg7wLBGYx30VWr1KKZ+yRuT2eqpwkABfWOuMpdrXT9TDtLTd9+h3hR roWf8bbrR0G77/KmTudoml7IZQ== -----END CERTIFICATE-----Generated at Sun Nov 15 11:45:02 2026 by rpki-client