$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft File: AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json) Hash identifier: g56GZFW2KM9SY5RNw742ToKRVqvP7yt/qxKW2mowv6E= Subject key identifier: 79:DC:01:F6:F1:14:9D:7D:4A:85:50:09:4B:2D:80:FA:C9:6E:50:6E Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 Certificate issuer: /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft Manifest number: 01CE Signing time: Sun 01 Mar 2026 04:27:53 +0000 Manifest this update: Sun 01 Mar 2026 04:27:53 +0000 Manifest next update: Sun 08 Mar 2026 04:27:53 +0000 Files and hashes: 1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: c/nig4M01wDEy1m6rjmdtQ7FVv7MtvTOMiZeGJ/PkVY=) 2: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: 4Ob8OZ5S2H/WLKjYmff77WuX2DfNbq1F3IyX9D66TLg=) 3: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: L51Q68tVx2XVC4mIdbJx6yL7uZTn+EZdlLwf/zTugIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Validity Not Before: Mar 1 04:27:53 2026 GMT Not After : Mar 8 04:27:53 2026 GMT Subject: CN=69a3c049-4edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e2:25:53:87:c4:73:1e:30:9b:d7:ae:1f:1f: 84:d0:53:ae:30:ca:35:56:e4:1c:80:39:91:c2:3c: db:bb:e1:de:a1:60:dd:35:47:71:56:71:2e:cb:1d: 7c:2d:98:30:99:8c:ef:0e:ae:0f:fc:ce:41:e4:c5: 16:05:fc:66:d8:80:be:da:83:19:09:2e:d7:e1:dd: 26:8f:67:1b:55:aa:bb:36:40:40:7b:8e:1f:7b:51: d0:6f:fe:d0:26:ab:e1:9e:ea:2e:1f:21:89:03:c5: e9:9f:fc:a1:f5:6e:8c:28:ec:14:ae:be:19:90:75: bf:f7:d6:dd:07:43:7b:fd:99:c4:a6:c3:c2:70:79: 7c:ee:61:6b:f1:58:ab:96:6e:ef:3a:68:82:8f:e5: 68:c9:ef:ef:e4:d5:30:cf:f8:d0:f3:6f:08:90:5a: 48:fe:e5:3d:4c:6e:3f:62:20:7a:58:01:37:5b:51: 8f:cc:af:dc:c7:57:6b:58:f7:96:2f:e1:ed:25:af: 47:fd:92:b2:87:fa:b6:73:17:84:0d:f4:29:6b:a2: 19:e4:21:73:55:a0:a6:55:b8:63:c3:08:9a:0f:e7: 3c:e3:29:e1:0b:b4:a1:3e:f8:ea:84:15:b5:a4:80: 7c:58:75:04:5a:2a:4e:f3:ab:d4:6e:fb:45:6c:4b: 2a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DC:01:F6:F1:14:9D:7D:4A:85:50:09:4B:2D:80:FA:C9:6E:50:6E X509v3 Authority Key Identifier: keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:79:f9:f7:ab:ec:3c:75:67:13:b9:17:06:0c:1b:76:35:f5: de:41:ad:40:1f:e9:9c:ce:0f:f8:46:16:85:6f:7b:65:63:17: 64:58:3a:87:76:af:f8:ce:63:16:ea:0a:99:1b:e7:5b:83:9d: 20:94:e7:2a:dc:4b:1b:92:aa:52:6f:4c:c0:46:6b:f6:65:af: bd:a9:df:17:ee:b3:53:7e:87:9e:53:c2:6f:02:ca:d1:0c:55: 08:26:24:86:6c:14:02:18:8a:46:d6:51:ea:ca:f9:3d:83:58: 26:06:17:c7:35:ab:97:cc:3f:c0:84:3f:6e:37:98:95:29:9d: 8e:62:7d:77:4b:7d:f4:e7:77:22:5f:87:57:fa:5e:6d:dc:77: 0a:2a:a3:b1:f7:75:db:5d:25:32:bd:26:0f:22:81:d3:1a:50: 83:a9:c8:a4:46:84:32:31:8a:57:52:e2:01:9b:0f:9e:be:6f: dc:5d:aa:0c:58:4e:12:45:69:39:9c:ca:27:d5:c8:cb:aa:e7: 7b:64:50:87:b5:57:79:12:de:ca:5a:74:0f:14:44:86:5c:c0: b0:d3:d6:b1:3b:61:86:39:60:6c:78:57:f0:b9:32:16:4d:f6: 53:03:5c:c4:a7:27:b9:16:25:ac:b4:ae:60:10:01:4f:e9:0c: e5:7a:58:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDAwOTkyOEYwQjhDRDMwRURBMDU2MzBBOEJBNjc0RTc2 MkE5RDI4MzMwHhcNMjYwMzAxMDQyNzUzWhcNMjYwMzA4MDQyNzUzWjAYMRYwFAYD VQQDDA02OWEzYzA0OS00ZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuIlU4fEcx4wm9euHx+E0FOuMMo1VuQcgDmRwjzbu+HeoWDdNUdxVnEuyx18 LZgwmYzvDq4P/M5B5MUWBfxm2IC+2oMZCS7X4d0mj2cbVaq7NkBAe44fe1HQb/7Q JqvhnuouHyGJA8Xpn/yh9W6MKOwUrr4ZkHW/99bdB0N7/ZnEpsPCcHl87mFr8Vir lm7vOmiCj+Voye/v5NUwz/jQ828IkFpI/uU9TG4/YiB6WAE3W1GPzK/cx1drWPeW L+HtJa9H/ZKyh/q2cxeEDfQpa6IZ5CFzVaCmVbhjwwiaD+c84ynhC7ShPvjqhBW1 pIB8WHUEWipO86vUbvtFbEsqUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHncAfbx FJ19SoVQCUstgPrJblBuMB8GA1UdIwQYMBaAFACZKPC4zTDtoFYwqLpnTnYqnSgz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9CMzc0OTcxMDVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1PMmdWakNvdW1kT2RpcWRL RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKa284TGpOTU8yZ1ZqQ291bWRPZGlxZEtETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9CMzc0OTcxMDVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1P MmdWakNvdW1kT2RpcWRLRE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYXn596vsPHVnE7kXBgwbdjX13kGtQB/pnM4P+EYWhW97ZWMXZFg6h3av+M5j FuoKmRvnW4OdIJTnKtxLG5KqUm9MwEZr9mWvvanfF+6zU36HnlPCbwLK0QxVCCYk hmwUAhiKRtZR6sr5PYNYJgYXxzWrl8w/wIQ/bjeYlSmdjmJ9d0t99Od3Il+HV/pe bdx3Ciqjsfd1210lMr0mDyKB0xpQg6nIpEaEMjGKV1LiAZsPnr5v3F2qDFhOEkVp OZzKJ9XIy6rne2RQh7VXeRLeylp0DxREhlzAsNPWsTthhjlgbHhX8LkyFk32UwNc xKcnuRYlrLSuYBABT+kM5XpY0g== -----END CERTIFICATE-----Generated at Sun Mar 1 20:24:52 2026 by rpki-client