$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft File: AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json) Hash identifier: buMHZMe1OlnOsI7Jb9AxGuUV7C5Anae7MZs71ThrKZ8= Subject key identifier: 51:59:DD:3F:4D:07:8C:8E:13:4B:B1:14:C3:61:0B:F6:D8:3A:96:C2 Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 Certificate issuer: /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Certificate serial: 01F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft Manifest number: 01EC Signing time: Fri 17 Apr 2026 03:09:58 +0000 Manifest this update: Fri 17 Apr 2026 03:09:57 +0000 Manifest next update: Fri 24 Apr 2026 03:09:57 +0000 Files and hashes: 1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: wqiqHwsNvcKKTns8RG7UADlCZ9lzwAN2p03Ca0/map4=) 2: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: 46gW2zgv3kg1jR+kuDN4YFuI7xpd+JwD4IDvp1lQDks=) 3: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: JZoZOHjhkyr5rz4uHhJA9OG57kt5JcA7v4fP2oMs0KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 504 (0x1f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Validity Not Before: Apr 17 03:09:57 2026 GMT Not After : Apr 24 03:09:57 2026 GMT Subject: CN=69e1a486-9299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f8:18:78:ab:7f:7c:a7:6c:10:12:1e:44:b1: 5e:66:ee:01:fe:41:77:c1:e4:bc:4b:87:e5:a6:69: f3:48:ab:02:68:f7:91:93:f3:8d:d3:99:e8:74:5e: 59:ca:a8:4b:53:49:43:ad:ba:ab:38:c8:04:24:3c: 65:99:7b:30:25:13:b4:7b:5e:62:42:f1:fd:6e:76: 2a:e4:1b:cd:98:66:f4:30:a8:56:16:f0:4e:c0:69: 16:08:a7:fa:8d:28:ee:c8:35:a9:89:a5:81:d4:32: c9:64:b3:55:35:27:c5:48:b7:aa:1e:c4:f5:8c:e9: eb:cf:96:f1:9b:cd:b0:0c:ff:78:8c:ce:5c:b1:04: 29:91:85:09:9e:37:b2:63:93:51:b2:cd:b7:5f:1b: 6f:b8:72:ab:77:1e:41:89:67:c2:a7:fa:fd:15:b1: bb:51:f2:d2:fb:d5:a5:3f:4c:de:83:9e:77:78:fd: fd:95:29:36:92:ef:d6:08:10:da:44:02:3f:a9:17: c4:29:5e:b2:fe:15:c5:b7:cb:c4:29:b9:5f:2a:69: f5:11:9a:c3:8e:d3:fc:98:d7:e8:31:36:03:67:2a: f3:0e:d0:02:9d:a8:07:e2:dd:0d:b0:57:df:3a:f6: 59:dc:23:a1:99:94:00:91:55:d9:04:e2:27:c5:29: 8d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:59:DD:3F:4D:07:8C:8E:13:4B:B1:14:C3:61:0B:F6:D8:3A:96:C2 X509v3 Authority Key Identifier: keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:7b:5a:26:18:31:11:d9:3b:9b:c7:6d:54:cf:a8:19:5a:1a: 87:aa:5c:ad:b3:b1:d0:58:c5:a5:ce:a5:f1:72:48:91:d7:4b: 78:4c:be:08:af:23:b6:5c:ba:00:66:39:c5:00:3b:33:3a:7c: 7f:fb:80:05:a3:bb:60:4e:75:13:ba:fd:f2:29:dd:4a:c8:77: bd:3b:33:3e:32:0e:af:12:84:6a:bc:1b:c0:ae:35:02:e0:80: 01:07:db:c7:fe:98:1c:97:47:a3:c3:cb:d1:bc:ff:a1:8c:98: 01:d5:14:05:6b:7a:be:6d:ee:79:c5:df:bd:c1:45:a7:21:7c: fb:8f:04:5a:73:ae:ac:7d:59:15:57:7a:1d:1c:04:c6:26:eb: c4:da:f7:88:22:93:8e:bd:7a:0d:ba:29:cf:be:1b:23:1c:75: 36:b4:ee:2c:c8:63:da:fd:69:51:7a:38:a7:98:89:a7:9e:78: 5c:c3:a8:d5:91:01:39:31:a1:87:ed:75:ed:12:63:eb:9d:25: 0d:dc:e8:3d:5c:fc:9c:b5:3f:8a:aa:3f:99:24:47:de:6a:1b: f8:4a:61:fc:8d:6a:ba:60:9c:45:a0:e7:9e:aa:29:f3:f0:3b: cc:7f:34:39:8b:27:37:fc:ab:98:10:3b:31:f9:46:20:b2:af: e5:7d:ee:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDAwOTkyOEYwQjhDRDMwRURBMDU2MzBBOEJBNjc0RTc2 MkE5RDI4MzMwHhcNMjYwNDE3MDMwOTU3WhcNMjYwNDI0MDMwOTU3WjAYMRYwFAYD VQQDEw02OWUxYTQ4Ni05Mjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhPgYeKt/fKdsEBIeRLFeZu4B/kF3weS8S4flpmnzSKsCaPeRk/ON05nodF5Z yqhLU0lDrbqrOMgEJDxlmXswJRO0e15iQvH9bnYq5BvNmGb0MKhWFvBOwGkWCKf6 jSjuyDWpiaWB1DLJZLNVNSfFSLeqHsT1jOnrz5bxm82wDP94jM5csQQpkYUJnjey Y5NRss23XxtvuHKrdx5BiWfCp/r9FbG7UfLS+9WlP0zeg553eP39lSk2ku/WCBDa RAI/qRfEKV6y/hXFt8vEKblfKmn1EZrDjtP8mNfoMTYDZyrzDtACnagH4t0NsFff OvZZ3COhmZQAkVXZBOInxSmNRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFFZ3T9N B4yOE0uxFMNhC/bYOpbCMB8GA1UdIwQYMBaAFACZKPC4zTDtoFYwqLpnTnYqnSgz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9CMzc0OTcxMDVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1PMmdWakNvdW1kT2RpcWRL RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKa284TGpOTU8yZ1ZqQ291bWRPZGlxZEtETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9CMzc0OTcxMDVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1P MmdWakNvdW1kT2RpcWRLRE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApHtaJhgxEdk7m8dtVM+oGVoah6pcrbOx0FjFpc6l8XJIkddLeEy+CK8jtly6 AGY5xQA7Mzp8f/uABaO7YE51E7r98indSsh3vTszPjIOrxKEarwbwK41AuCAAQfb x/6YHJdHo8PL0bz/oYyYAdUUBWt6vm3uecXfvcFFpyF8+48EWnOurH1ZFVd6HRwE xibrxNr3iCKTjr16Dbopz74bIxx1NrTuLMhj2v1pUXo4p5iJp554XMOo1ZEBOTGh h+117RJj650lDdzoPVz8nLU/iqo/mSRH3mob+Eph/I1qumCcRaDnnqop8/A7zH80 OYsnN/yrmBA7MflGILKv5X3ung== -----END CERTIFICATE-----Generated at Fri Apr 17 10:59:29 2026 by rpki-client