$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft File: AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json) Hash identifier: Kqe+TJDhbq9Ti/GkctJZ8vrDknY4y0OXxmHAv/wWlTs= Subject key identifier: 1A:22:F3:D5:E3:17:86:88:3C:5A:84:6D:E3:57:1B:4F:A6:2F:70:1D Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 Certificate issuer: /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Certificate serial: 025C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft Manifest number: 024E Signing time: Sun 25 Oct 2026 02:49:19 +0000 Manifest this update: Sun 25 Oct 2026 02:49:19 +0000 Manifest next update: Sun 01 Nov 2026 02:49:19 +0000 Files and hashes: 1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: MjWwahAIFNS+Y1A61WowASSsuCCkIoV41ldj4FPKFy0=) 2: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: c3Idvp5I6BGzVLk5m0JH2EeG/G7DC+/0AfafmTFhP5U=) 3: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: g7/beSnQDmTq2ey2xjXqWwakjmuPtANr1j+4Lu9F/xY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 02:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Validity Not Before: Oct 25 02:49:19 2026 GMT Not After : Nov 1 02:49:19 2026 GMT Subject: CN=6add6e2f-f362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:02:f2:3e:3a:41:41:5b:79:b6:66:67:71:31: 3a:8e:84:7c:d4:ae:3a:a1:46:d4:e2:b2:74:23:cf: 9d:cd:ac:e9:59:93:b9:81:9c:35:a5:b7:19:f4:ee: 9a:d2:19:b8:d0:36:a2:c6:ac:3d:36:7d:58:69:bd: d5:3f:b3:cc:e4:b0:ec:b0:9a:e0:fd:7d:13:c9:a3: d0:b1:7f:5d:7a:f0:f0:9e:9d:48:0a:43:2c:f1:d1: 54:f5:b9:1d:80:4f:a3:5c:05:c0:fb:29:0d:90:54: 95:c7:e5:d0:66:8d:f7:6f:e1:88:7a:d0:d5:20:1e: ea:6c:f1:4e:5e:1c:c8:22:d0:9f:fb:be:ee:53:eb: 55:97:24:db:46:62:c2:3e:bc:fe:b8:86:80:f6:09: 20:27:77:e3:f6:61:8e:0a:eb:ae:23:c3:1a:5d:b2: 2e:bf:9f:a9:2b:f0:db:36:aa:5e:4c:d8:42:50:f6: 8c:57:df:d1:d1:66:6e:4a:3d:d3:3a:60:8f:49:7f: 2f:c2:d8:25:36:c0:06:1e:74:00:c5:ae:82:6b:44: 42:d8:41:db:df:5d:25:a0:c6:d8:db:1b:f1:32:04: bd:d4:44:64:08:4f:c1:be:6c:a1:67:dd:ff:26:f9: d0:3e:4a:6f:87:ae:16:d1:ba:b4:23:4f:ea:03:18: 5f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:22:F3:D5:E3:17:86:88:3C:5A:84:6D:E3:57:1B:4F:A6:2F:70:1D X509v3 Authority Key Identifier: keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:88:93:af:b1:9f:8e:89:9b:fe:b6:06:60:99:6d:03:09:01: 5e:79:4a:e8:4b:4e:21:db:da:ac:64:1c:12:00:04:8b:9b:af: c0:87:65:09:48:d9:5d:6a:59:a3:d5:b4:30:ec:5d:5a:15:b4: 85:05:8d:32:92:55:ae:5a:2b:68:47:c1:e1:e8:76:24:8c:30: e5:c0:23:3d:3d:a6:25:61:b2:52:9a:49:cc:92:d6:90:ba:7b: f7:68:a6:5b:88:85:99:5c:ef:b9:de:ff:e9:6c:06:a1:3b:5d: b7:96:c1:40:84:a9:67:ce:88:27:a0:72:f4:4c:b2:cd:64:89: 3a:1c:3a:1d:a3:57:f4:30:4c:51:77:c8:e6:46:e2:92:42:79: 77:b3:33:6a:30:de:66:9d:40:e8:3e:ca:5d:a3:c0:86:d7:e2: ac:76:95:d3:3e:e1:0e:33:03:ea:03:68:bb:55:4b:95:2d:0f: cd:1d:e1:64:6b:56:44:ff:ad:57:a1:8c:43:df:b9:a8:40:51: 70:41:c7:6f:82:84:a0:0f:d4:bb:0d:e4:58:b0:63:a0:13:aa: 3d:bc:eb:f4:51:8d:a8:03:c5:1d:69:14:65:0a:6a:b4:d3:83: 85:f1:18:d0:9e:58:ca:f4:22:fe:ab:7f:41:5f:81:5b:6a:7c: 52:ec:ab:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDAwOTkyOEYwQjhDRDMwRURBMDU2MzBBOEJBNjc0RTc2 MkE5RDI4MzMwHhcNMjYxMDI1MDI0OTE5WhcNMjYxMTAxMDI0OTE5WjAYMRYwFAYD VQQDEw02YWRkNmUyZi1mMzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAigLyPjpBQVt5tmZncTE6joR81K46oUbU4rJ0I8+dzazpWZO5gZw1pbcZ9O6a 0hm40Daixqw9Nn1Yab3VP7PM5LDssJrg/X0TyaPQsX9devDwnp1ICkMs8dFU9bkd gE+jXAXA+ykNkFSVx+XQZo33b+GIetDVIB7qbPFOXhzIItCf+77uU+tVlyTbRmLC Prz+uIaA9gkgJ3fj9mGOCuuuI8MaXbIuv5+pK/DbNqpeTNhCUPaMV9/R0WZuSj3T OmCPSX8vwtglNsAGHnQAxa6Ca0RC2EHb310loMbY2xvxMgS91ERkCE/BvmyhZ93/ JvnQPkpvh64W0bq0I0/qAxhfZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBoi89Xj F4aIPFqEbeNXG0+mL3AdMB8GA1UdIwQYMBaAFACZKPC4zTDtoFYwqLpnTnYqnSgz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9CMzc0OTcxMDVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1PMmdWakNvdW1kT2RpcWRL RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKa284TGpOTU8yZ1ZqQ291bWRPZGlxZEtETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9CMzc0OTcxMDVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1P MmdWakNvdW1kT2RpcWRLRE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAYiTr7Gfjomb/rYGYJltAwkBXnlK6EtOIdvarGQcEgAEi5uvwIdlCUjZXWpZ o9W0MOxdWhW0hQWNMpJVrloraEfB4eh2JIww5cAjPT2mJWGyUppJzJLWkLp792im W4iFmVzvud7/6WwGoTtdt5bBQISpZ86IJ6By9EyyzWSJOhw6HaNX9DBMUXfI5kbi kkJ5d7MzajDeZp1A6D7KXaPAhtfirHaV0z7hDjMD6gNou1VLlS0PzR3hZGtWRP+t V6GMQ9+5qEBRcEHHb4KEoA/Uuw3kWLBjoBOqPbzr9FGNqAPFHWkUZQpqtNODhfEY 0J5YyvQi/qt/QV+BW2p8UuyrWw== -----END CERTIFICATE-----Generated at Mon Oct 26 07:27:26 2026 by rpki-client