$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft File: AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json) Hash identifier: M1jBLoD6GewdiECHdceYMSHxpaJgtqBPvx0AsQ44TMI= Subject key identifier: 75:EF:D5:7C:41:D2:C3:37:B2:CF:35:A9:EC:5E:AD:C7:05:B8:53:47 Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 Certificate issuer: /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft Manifest number: 023D Signing time: Mon 21 Sep 2026 02:39:50 +0000 Manifest this update: Mon 21 Sep 2026 02:39:50 +0000 Manifest next update: Mon 28 Sep 2026 02:39:50 +0000 Files and hashes: 1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: i3kNL8wp1wIHgOdhRf2O9zkhQozsRLouAWOBr0t/mKI=) 2: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: c3Idvp5I6BGzVLk5m0JH2EeG/G7DC+/0AfafmTFhP5U=) 3: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: g7/beSnQDmTq2ey2xjXqWwakjmuPtANr1j+4Lu9F/xY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Validity Not Before: Sep 21 02:39:50 2026 GMT Not After : Sep 28 02:39:50 2026 GMT Subject: CN=6ab098f6-fdd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:65:68:0b:19:54:48:fe:a3:72:76:04:51:01: 1b:61:c5:5d:52:f1:ea:d1:86:da:de:ea:fb:b1:26: 58:ba:15:ac:5c:c8:7d:24:ee:97:1a:00:e4:29:7b: 3b:c9:c3:04:55:9e:0b:9f:90:37:e4:0c:44:cb:30: 77:63:7a:95:81:5d:da:73:53:0f:b8:e5:5c:97:08: d1:2c:49:97:62:54:80:3f:b3:17:b1:bc:24:c2:fb: 7a:63:ec:86:c9:4a:4c:5c:d3:7c:81:29:6e:db:6e: 27:46:77:f4:24:e0:74:a0:51:fe:42:62:59:be:41: 85:33:6b:5b:bf:4e:54:7f:ec:4b:fd:d3:e9:e7:b8: 9d:be:04:29:64:e7:a1:f9:4b:5f:d6:53:b9:f0:cf: 10:5b:59:24:cd:3b:b2:05:51:25:f5:07:ea:bd:8b: ae:ae:af:4d:63:ca:26:8a:9e:4e:81:2b:e0:da:2b: 5a:53:d3:6e:92:e7:b8:a5:1a:54:6f:41:b9:bc:c7: 11:6b:12:c5:88:d7:07:c0:70:58:52:62:b6:eb:1a: 51:e0:12:81:1e:31:41:f1:ac:1d:ff:6a:dd:41:94: 15:c9:98:0a:03:2d:d7:77:f6:18:5b:2a:01:45:a3: 71:2b:d6:7b:3c:ac:db:ad:fe:59:21:b1:13:e0:ac: d5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EF:D5:7C:41:D2:C3:37:B2:CF:35:A9:EC:5E:AD:C7:05:B8:53:47 X509v3 Authority Key Identifier: keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a5:2d:5d:98:9a:40:4e:ff:9c:c8:1c:3d:c6:29:e8:df:15: d5:8d:d5:d0:47:ca:44:1b:1a:08:2e:42:b0:e8:36:c6:ce:90: b6:27:e5:0b:2b:e2:d6:05:9e:a9:b4:17:a3:e8:56:f9:02:2b: d4:37:d1:2c:07:20:3d:25:cd:d4:e0:a3:ed:77:be:fe:7b:86: 34:ab:51:22:17:51:b4:78:3a:dd:49:be:1d:a4:5e:76:ce:1f: d1:e1:6b:71:68:98:29:62:fc:89:44:f7:c0:61:bc:e8:b5:a2: 6e:6f:b1:cb:5d:2d:a2:ba:ba:32:34:cf:50:c8:50:c9:20:f6: fd:63:f5:86:cd:06:7f:7a:ea:3c:40:1d:29:fc:fd:6c:8b:74: 15:05:a5:4c:20:bb:b7:52:36:c0:e3:7d:1b:c0:a0:f0:6b:b5: 1d:c7:2a:f0:da:fc:06:4e:b9:8f:83:5f:b5:a3:26:18:ff:b2: 7a:72:a3:79:0f:84:91:12:55:28:74:c5:ff:ad:79:fb:8c:90: 36:be:6a:d9:0f:03:89:2a:05:87:6f:bc:3a:a0:e4:90:ec:c5: eb:b7:e7:70:25:17:f7:c4:cf:e4:57:7d:cc:a4:5d:c0:aa:ce: aa:e9:32:8b:52:bd:7a:b1:0a:6b:dd:ab:7f:5d:8f:c0:70:92: 71:59:54:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDAwOTkyOEYwQjhDRDMwRURBMDU2MzBBOEJBNjc0RTc2 MkE5RDI4MzMwHhcNMjYwOTIxMDIzOTUwWhcNMjYwOTI4MDIzOTUwWjAYMRYwFAYD VQQDEw02YWIwOThmNi1mZGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmVoCxlUSP6jcnYEUQEbYcVdUvHq0Yba3ur7sSZYuhWsXMh9JO6XGgDkKXs7 ycMEVZ4Ln5A35AxEyzB3Y3qVgV3ac1MPuOVclwjRLEmXYlSAP7MXsbwkwvt6Y+yG yUpMXNN8gSlu224nRnf0JOB0oFH+QmJZvkGFM2tbv05Uf+xL/dPp57idvgQpZOeh +Utf1lO58M8QW1kkzTuyBVEl9QfqvYuurq9NY8omip5OgSvg2itaU9Nukue4pRpU b0G5vMcRaxLFiNcHwHBYUmK26xpR4BKBHjFB8awd/2rdQZQVyZgKAy3Xd/YYWyoB RaNxK9Z7PKzbrf5ZIbET4KzVXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHXv1XxB 0sM3ss81qexerccFuFNHMB8GA1UdIwQYMBaAFACZKPC4zTDtoFYwqLpnTnYqnSgz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9CMzc0OTcxMDVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1PMmdWakNvdW1kT2RpcWRL RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKa284TGpOTU8yZ1ZqQ291bWRPZGlxZEtETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9CMzc0OTcxMDVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1P MmdWakNvdW1kT2RpcWRLRE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT6UtXZiaQE7/nMgcPcYp6N8V1Y3V0EfKRBsaCC5CsOg2xs6QtiflCyvi1gWe qbQXo+hW+QIr1DfRLAcgPSXN1OCj7Xe+/nuGNKtRIhdRtHg63Um+HaReds4f0eFr cWiYKWL8iUT3wGG86LWibm+xy10torq6MjTPUMhQySD2/WP1hs0Gf3rqPEAdKfz9 bIt0FQWlTCC7t1I2wON9G8Cg8Gu1Hccq8Nr8Bk65j4NftaMmGP+yenKjeQ+EkRJV KHTF/615+4yQNr5q2Q8DiSoFh2+8OqDkkOzF67fncCUX98TP5Fd9zKRdwKrOquky i1K9erEKa92rf12PwHCScVlUqA== -----END CERTIFICATE-----Generated at Tue Sep 22 01:50:36 2026 by rpki-client