$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft File: AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json) Hash identifier: vCrWfuFogSbx+7WFPbL3AcQTyArDBzglY5EKlcZZi8o= Subject key identifier: 46:07:4C:A5:59:D7:05:F4:23:1F:23:1D:7F:7B:28:59:33:88:33:82 Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 Certificate issuer: /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft Manifest number: 0192 Signing time: Mon 03 Nov 2025 03:31:36 +0000 Manifest this update: Mon 03 Nov 2025 03:31:36 +0000 Manifest next update: Mon 10 Nov 2025 03:31:36 +0000 Files and hashes: 1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: duZFz1o++RRfyC8NC5ZtBlMoVwa2i7YuwUXb1BzGtZk=) 2: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: L51Q68tVx2XVC4mIdbJx6yL7uZTn+EZdlLwf/zTugIc=) 3: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: 4Ob8OZ5S2H/WLKjYmff77WuX2DfNbq1F3IyX9D66TLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Validity Not Before: Nov 3 03:31:36 2025 GMT Not After : Nov 10 03:31:36 2025 GMT Subject: CN=69082218-622d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:eb:09:d8:ef:3c:00:be:9f:db:7e:d1:c9:43: 97:6b:42:2e:94:8f:05:a9:c3:b6:1d:3c:b6:91:42: 06:ab:f3:53:83:2c:49:f9:4f:7f:05:ab:4a:ce:24: 30:0a:cb:e9:8d:a1:3f:46:49:84:2b:e6:7a:4a:84: f9:5a:1d:bd:b0:a6:cf:25:d8:89:3c:bd:62:04:4d: a6:eb:55:fc:4e:b4:bf:94:a3:a4:4e:09:61:91:d0: 67:90:ca:00:b6:a3:b8:9a:03:e8:bd:d1:2d:1f:6d: 6a:90:70:42:e7:14:fa:19:5a:8a:e1:c2:3a:c6:9c: c1:0c:f9:15:b1:a4:5e:dc:fa:3a:3c:15:ae:83:ae: 3b:6a:29:df:d1:7c:d8:cc:13:7c:b4:8a:ab:15:23: 9e:29:12:f2:03:03:91:e7:3c:e8:39:b8:fa:f8:7f: 47:72:d2:8f:b8:c1:ed:b0:dd:9c:44:82:c3:6e:e8: 02:da:9e:19:cf:af:5e:51:bd:23:51:3d:21:1b:46: 57:37:d3:7e:76:ad:d3:5e:32:da:d7:b6:30:b3:9d: bc:0b:c8:77:ac:c8:29:d7:fa:a7:4a:9c:b8:8c:61: 27:d0:94:de:16:10:41:ac:55:58:ee:7e:9f:98:46: b3:6d:78:e8:d9:30:08:1d:07:2d:62:5c:67:04:27: 38:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:07:4C:A5:59:D7:05:F4:23:1F:23:1D:7F:7B:28:59:33:88:33:82 X509v3 Authority Key Identifier: keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d4:4b:f7:ab:51:02:ee:ef:d9:c1:ea:05:67:28:60:a4:25: 15:79:52:9c:b4:16:96:e4:76:4c:9e:35:40:a0:23:a9:50:2d: 1c:81:51:8c:a5:61:86:24:82:48:bb:74:4b:0a:9f:a6:95:ad: a6:a8:cb:5b:01:d1:bf:f0:50:f0:21:85:0e:1f:af:c8:30:13: e0:10:8c:92:4d:31:12:1d:c5:4e:0f:6f:09:18:0b:28:b0:17: 59:08:75:58:99:f1:a8:9c:46:f4:2b:11:5d:c6:2e:c8:e6:80: 3e:00:9f:f6:95:b8:d6:b2:60:d3:c6:94:95:a4:2e:0a:6e:46: 9b:49:a6:83:2a:e7:39:15:bf:61:86:a9:98:b0:91:9a:24:a3: 0f:74:79:7f:73:54:26:14:2c:b2:5b:04:92:09:66:5e:b2:88: 8e:cd:f7:4b:88:ee:c1:52:2c:db:8b:e6:18:a8:27:90:86:63: c1:97:8c:c1:12:3f:7a:e4:a5:86:0c:4a:5c:6a:3a:c9:49:06: 3f:21:a6:a9:72:52:01:dd:ea:eb:c5:3d:2b:67:28:26:3b:d2: aa:a4:a3:09:c1:07:3e:60:6f:46:05:20:0c:13:6d:89:4f:c8: e7:31:44:1d:f9:95:5d:55:dc:4c:4c:46:cf:76:6b:18:87:8b: 5f:df:bd:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDAwOTkyOEYwQjhDRDMwRURBMDU2MzBBOEJBNjc0RTc2 MkE5RDI4MzMwHhcNMjUxMTAzMDMzMTM2WhcNMjUxMTEwMDMzMTM2WjAYMRYwFAYD VQQDEw02OTA4MjIxOC02MjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvesJ2O88AL6f237RyUOXa0IulI8FqcO2HTy2kUIGq/NTgyxJ+U9/BatKziQw CsvpjaE/RkmEK+Z6SoT5Wh29sKbPJdiJPL1iBE2m61X8TrS/lKOkTglhkdBnkMoA tqO4mgPovdEtH21qkHBC5xT6GVqK4cI6xpzBDPkVsaRe3Po6PBWug647ainf0XzY zBN8tIqrFSOeKRLyAwOR5zzoObj6+H9HctKPuMHtsN2cRILDbugC2p4Zz69eUb0j UT0hG0ZXN9N+dq3TXjLa17Yws528C8h3rMgp1/qnSpy4jGEn0JTeFhBBrFVY7n6f mEazbXjo2TAIHQctYlxnBCc4vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYHTKVZ 1wX0Ix8jHX97KFkziDOCMB8GA1UdIwQYMBaAFACZKPC4zTDtoFYwqLpnTnYqnSgz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9CMzc0OTcxMDVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1PMmdWakNvdW1kT2RpcWRL RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKa284TGpOTU8yZ1ZqQ291bWRPZGlxZEtETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9CMzc0OTcxMDVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1P MmdWakNvdW1kT2RpcWRLRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/1Ev3q1EC7u/ZweoFZyhgpCUVeVKctBaW5HZMnjVAoCOpUC0cgVGM pWGGJIJIu3RLCp+mla2mqMtbAdG/8FDwIYUOH6/IMBPgEIySTTESHcVOD28JGAso sBdZCHVYmfGonEb0KxFdxi7I5oA+AJ/2lbjWsmDTxpSVpC4KbkabSaaDKuc5Fb9h hqmYsJGaJKMPdHl/c1QmFCyyWwSSCWZesoiOzfdLiO7BUizbi+YYqCeQhmPBl4zB Ej965KWGDEpcajrJSQY/IaapclIB3errxT0rZygmO9KqpKMJwQc+YG9GBSAME22J T8jnMUQd+ZVdVdxMTEbPdmsYh4tf372w -----END CERTIFICATE-----Generated at Wed Nov 5 03:17:24 2025 by rpki-client