$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft File: AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json) Hash identifier: aRIukbh+D08qAG3VpMkW5uH7jPAxvtBg732okULwox0= Subject key identifier: 39:2E:FD:CD:8F:68:66:7C:97:AC:AB:11:84:39:11:2B:52:D9:3F:13 Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 Certificate issuer: /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft Manifest number: 0175 Signing time: Fri 05 Sep 2025 04:11:08 +0000 Manifest this update: Fri 05 Sep 2025 04:11:07 +0000 Manifest next update: Fri 12 Sep 2025 04:11:07 +0000 Files and hashes: 1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: ypi8/MuKsmLor912FFJSfwH1NU0oK+h4SiGT2nGvDcQ=) 2: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: L51Q68tVx2XVC4mIdbJx6yL7uZTn+EZdlLwf/zTugIc=) 3: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: 4Ob8OZ5S2H/WLKjYmff77WuX2DfNbq1F3IyX9D66TLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 04:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Validity Not Before: Sep 5 04:11:07 2025 GMT Not After : Sep 12 04:11:07 2025 GMT Subject: CN=68ba62db-c119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:71:83:73:24:4b:1e:cf:51:c2:3e:fd:92:e9: e5:a4:b2:1b:f9:85:2c:87:d8:10:0e:47:24:10:de: 82:86:f9:04:ab:c1:6a:ea:41:84:20:73:f8:ae:2e: f6:c1:5e:0b:3a:ab:bf:e0:c3:48:4f:3b:b5:3d:c9: 50:1c:c2:5a:7a:ad:0a:d6:cb:52:0e:4c:3f:d5:20: 35:d1:68:62:b9:a8:b4:86:e7:59:07:70:7b:06:98: 00:1f:4d:1c:04:48:b5:5e:58:9d:64:90:49:dc:99: b4:d4:ee:bd:ad:de:eb:4c:e8:78:cb:f0:39:14:11: 66:f9:1b:75:ed:64:d7:77:0f:75:ac:2d:b7:67:cf: 27:e4:36:84:c5:59:38:c0:00:f5:59:36:5a:be:4a: 84:51:1e:b5:d7:21:b5:57:80:28:04:02:0f:06:4b: 42:f3:dc:71:0a:4a:77:38:f3:02:37:bf:49:cb:bd: ec:ab:3c:5a:85:b5:cb:d2:e3:9d:ea:0c:fa:85:1c: 0e:0d:86:96:f1:84:9e:41:be:89:bd:09:d6:e6:e1: df:98:eb:86:6e:1b:5b:88:ae:43:83:3a:2d:8f:5e: d5:8b:b6:1e:55:40:28:42:79:d2:ef:f2:fe:ed:d2: b0:79:76:1c:6b:33:91:0f:19:5e:55:92:44:fc:cf: 7e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2E:FD:CD:8F:68:66:7C:97:AC:AB:11:84:39:11:2B:52:D9:3F:13 X509v3 Authority Key Identifier: keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:de:e6:4e:59:45:85:bb:89:24:31:26:32:69:1c:fd:0f:83: dc:93:2c:eb:d8:bc:a3:e0:45:bc:9f:d3:1f:c6:6a:2b:67:b0: ee:a7:d4:3f:2d:ba:a9:7c:21:60:f2:e5:8c:15:12:9f:4d:c4: 37:a6:03:62:45:3a:f1:e8:c1:c2:f1:4b:db:f7:e0:66:e6:2b: cd:f0:74:24:34:20:b7:96:be:9a:4b:25:01:59:55:c1:50:c6: a5:8b:5e:87:3f:1a:5c:4d:ee:5d:81:a0:fa:07:75:c4:19:88: d3:29:1f:50:26:e0:ef:c1:67:6c:08:96:f1:59:a0:29:e9:64: 7b:e0:4e:4f:05:57:5c:de:56:0b:11:04:3a:ea:78:ca:04:f3: 36:78:be:17:c0:cd:b6:7f:9a:15:7d:28:ce:cd:3a:a4:01:6d: 0c:bf:3e:58:21:64:14:67:db:0d:0f:33:1c:77:15:45:91:4e: 4b:0e:56:56:85:47:de:1c:aa:42:cc:04:b3:71:a6:9b:f3:b8: 87:30:ec:f1:f6:43:e9:ec:7b:34:60:e3:92:40:f7:bc:f7:99: 87:6e:7e:47:8d:44:db:51:4c:dd:b4:c4:ba:fd:55:00:61:31: 95:21:53:79:07:6c:0a:8d:db:25:c2:05:c0:72:51:fe:c1:f1: 5c:0b:fa:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDAwOTkyOEYwQjhDRDMwRURBMDU2MzBBOEJBNjc0RTc2 MkE5RDI4MzMwHhcNMjUwOTA1MDQxMTA3WhcNMjUwOTEyMDQxMTA3WjAYMRYwFAYD VQQDEw02OGJhNjJkYi1jMTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nGDcyRLHs9Rwj79kunlpLIb+YUsh9gQDkckEN6ChvkEq8Fq6kGEIHP4ri72 wV4LOqu/4MNITzu1PclQHMJaeq0K1stSDkw/1SA10Whiuai0hudZB3B7BpgAH00c BEi1XlidZJBJ3Jm01O69rd7rTOh4y/A5FBFm+Rt17WTXdw91rC23Z88n5DaExVk4 wAD1WTZavkqEUR611yG1V4AoBAIPBktC89xxCkp3OPMCN79Jy73sqzxahbXL0uOd 6gz6hRwODYaW8YSeQb6JvQnW5uHfmOuGbhtbiK5Dgzotj17Vi7YeVUAoQnnS7/L+ 7dKweXYcazORDxleVZJE/M9+ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDku/c2P aGZ8l6yrEYQ5EStS2T8TMB8GA1UdIwQYMBaAFACZKPC4zTDtoFYwqLpnTnYqnSgz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9CMzc0OTcxMDVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1PMmdWakNvdW1kT2RpcWRL RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKa284TGpOTU8yZ1ZqQ291bWRPZGlxZEtETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9CMzc0OTcxMDVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1P MmdWakNvdW1kT2RpcWRLRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB43uZOWUWFu4kkMSYyaRz9D4Pckyzr2Lyj4EW8n9MfxmorZ7Dup9Q/ LbqpfCFg8uWMFRKfTcQ3pgNiRTrx6MHC8Uvb9+Bm5ivN8HQkNCC3lr6aSyUBWVXB UMali16HPxpcTe5dgaD6B3XEGYjTKR9QJuDvwWdsCJbxWaAp6WR74E5PBVdc3lYL EQQ66njKBPM2eL4XwM22f5oVfSjOzTqkAW0Mvz5YIWQUZ9sNDzMcdxVFkU5LDlZW hUfeHKpCzASzcaab87iHMOzx9kPp7Hs0YOOSQPe895mHbn5HjUTbUUzdtMS6/VUA YTGVIVN5B2wKjdslwgXAclH+wfFcC/p8 -----END CERTIFICATE-----Generated at Sat Sep 6 13:25:48 2025 by rpki-client