$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft File: AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json) Hash identifier: jc2r3uEBzkkzt8OR/Q6Zc5fgDwop7c/GI5hy8BewA54= Subject key identifier: 08:B5:DC:41:89:27:F7:34:44:11:EE:79:E6:38:D0:C3:2D:6A:AD:54 Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 Certificate issuer: /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft Manifest number: 0166 Signing time: Thu 07 Aug 2025 04:29:47 +0000 Manifest this update: Thu 07 Aug 2025 04:29:46 +0000 Manifest next update: Thu 14 Aug 2025 04:29:46 +0000 Files and hashes: 1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: T8xhZihMgPkMaI3h2SN7A2fJCOCPWAcIFeuDq0tltAA=) 2: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: L51Q68tVx2XVC4mIdbJx6yL7uZTn+EZdlLwf/zTugIc=) 3: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: 4Ob8OZ5S2H/WLKjYmff77WuX2DfNbq1F3IyX9D66TLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 04:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Validity Not Before: Aug 7 04:29:46 2025 GMT Not After : Aug 14 04:29:46 2025 GMT Subject: CN=68942bbb-1adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:50:d9:f1:5f:7c:be:bc:b3:14:43:d1:28:b2: 28:c7:cd:68:31:48:92:48:c0:5e:48:5b:9e:c1:63: 69:28:ad:5b:29:a7:fc:19:7c:de:39:4c:c7:d5:dc: 83:84:29:38:0b:1d:80:3b:7b:29:54:91:d1:2f:de: 71:15:13:9f:54:dc:8e:4c:d7:1c:8c:8d:44:e5:0c: 5f:98:89:91:77:c8:dc:45:63:11:15:88:e4:12:53: 7a:a6:38:35:08:b5:c7:c0:61:52:35:64:60:f6:6b: 2b:93:23:09:0a:70:f5:b7:52:07:c1:98:77:8c:9f: b7:b4:f1:08:13:24:c3:40:04:e8:3f:f0:e3:84:6a: 24:97:3f:8c:77:99:63:da:91:5a:a1:27:10:af:ab: ab:bb:28:53:72:20:98:5d:fd:31:f6:7c:21:8e:14: 72:6d:b6:8b:76:68:e6:39:ab:be:ec:53:8a:87:20: 96:fc:ed:3d:b2:78:c5:f4:f2:09:c7:f3:d7:2c:d8: 1f:90:3b:24:2d:fb:e5:b6:e5:f7:d7:fb:f6:5d:52: 08:0f:c3:88:9e:b0:df:7b:84:db:4b:5a:7c:c4:2b: 4e:62:50:74:33:18:45:08:d3:96:dc:48:ab:d3:fc: 74:43:f4:0e:ff:e8:fc:64:61:0f:47:b2:cf:f8:88: 82:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B5:DC:41:89:27:F7:34:44:11:EE:79:E6:38:D0:C3:2D:6A:AD:54 X509v3 Authority Key Identifier: keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e8:49:58:7f:66:6d:e7:d6:98:b5:2f:59:ed:9a:69:ff:c4: da:45:dd:5a:64:4b:8f:25:2a:37:97:43:20:12:67:25:93:2c: 69:89:82:7a:2c:d8:f5:ed:19:f8:28:2b:60:d4:43:71:bb:fc: 66:87:d8:84:ca:cc:6d:b6:9c:f3:72:78:20:b1:91:42:80:5f: fd:1f:60:3c:fc:a5:da:6b:b9:4d:69:79:71:33:aa:af:c9:43: 6a:9b:e7:e4:53:c3:e2:b4:74:88:ef:a4:43:f9:19:54:32:9f: 92:c7:9f:2d:da:81:16:66:4a:27:a7:3e:90:e9:45:11:32:8a: 1d:d3:71:c4:0d:c0:42:aa:b1:f0:b8:46:6d:6a:39:70:f9:ea: 91:2b:35:59:7b:30:c2:52:e5:55:ab:27:27:b2:5e:88:fb:ea: 60:9c:ea:38:a5:15:c5:19:cd:08:b7:e0:a1:d1:67:20:c6:2d: d2:dc:ab:c3:0a:68:4c:dc:4e:a5:e2:79:72:e2:78:94:34:b6: 0f:05:60:9a:56:10:b6:e0:56:ed:88:e2:ed:ac:02:6a:e1:1e: be:c6:76:7d:e5:eb:7c:48:22:c4:69:f0:57:05:17:87:b1:f0: aa:b3:5e:a4:6a:d2:a3:6e:ac:22:29:78:5d:4f:2a:90:85:ee: b0:4e:10:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDAwOTkyOEYwQjhDRDMwRURBMDU2MzBBOEJBNjc0RTc2 MkE5RDI4MzMwHhcNMjUwODA3MDQyOTQ2WhcNMjUwODE0MDQyOTQ2WjAYMRYwFAYD VQQDEw02ODk0MmJiYi0xYWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FDZ8V98vryzFEPRKLIox81oMUiSSMBeSFuewWNpKK1bKaf8GXzeOUzH1dyD hCk4Cx2AO3spVJHRL95xFROfVNyOTNccjI1E5QxfmImRd8jcRWMRFYjkElN6pjg1 CLXHwGFSNWRg9msrkyMJCnD1t1IHwZh3jJ+3tPEIEyTDQAToP/DjhGoklz+Md5lj 2pFaoScQr6uruyhTciCYXf0x9nwhjhRybbaLdmjmOau+7FOKhyCW/O09snjF9PIJ x/PXLNgfkDskLfvltuX31/v2XVIID8OInrDfe4TbS1p8xCtOYlB0MxhFCNOW3Eir 0/x0Q/QO/+j8ZGEPR7LP+IiCbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAi13EGJ J/c0RBHueeY40MMtaq1UMB8GA1UdIwQYMBaAFACZKPC4zTDtoFYwqLpnTnYqnSgz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9CMzc0OTcxMDVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1PMmdWakNvdW1kT2RpcWRL RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKa284TGpOTU8yZ1ZqQ291bWRPZGlxZEtETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9CMzc0OTcxMDVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1P MmdWakNvdW1kT2RpcWRLRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu6ElYf2Zt59aYtS9Z7Zpp/8TaRd1aZEuPJSo3l0MgEmclkyxpiYJ6 LNj17Rn4KCtg1ENxu/xmh9iEysxttpzzcnggsZFCgF/9H2A8/KXaa7lNaXlxM6qv yUNqm+fkU8PitHSI76RD+RlUMp+Sx58t2oEWZkonpz6Q6UURMood03HEDcBCqrHw uEZtajlw+eqRKzVZezDCUuVVqycnsl6I++pgnOo4pRXFGc0It+Ch0Wcgxi3S3KvD CmhM3E6l4nly4niUNLYPBWCaVhC24FbtiOLtrAJq4R6+xnZ95et8SCLEafBXBReH sfCqs16katKjbqwiKXhdTyqQhe6wThC7 -----END CERTIFICATE-----Generated at Sat Aug 9 05:36:37 2025 by rpki-client