$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft File: AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json) Hash identifier: uwo1eo+5IjrWQRJcSP/ameiSbTwRcAgjPg9PxArQwQc= Subject key identifier: 93:15:12:70:8E:17:77:96:78:0C:67:62:01:33:75:F4:6B:61:0C:1E Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 Certificate issuer: /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft Manifest number: 0205 Signing time: Mon 01 Jun 2026 03:57:03 +0000 Manifest this update: Mon 01 Jun 2026 03:57:02 +0000 Manifest next update: Mon 08 Jun 2026 03:57:02 +0000 Files and hashes: 1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: 6awH1sTcVZXEsVd/mDdhT3WI1o4yrnRYuMr3zo5NPpE=) 2: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: c3Idvp5I6BGzVLk5m0JH2EeG/G7DC+/0AfafmTFhP5U=) 3: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: g7/beSnQDmTq2ey2xjXqWwakjmuPtANr1j+4Lu9F/xY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 03:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Validity Not Before: Jun 1 03:57:02 2026 GMT Not After : Jun 8 03:57:02 2026 GMT Subject: CN=6a1d030e-877e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:00:04:84:7b:46:5c:31:32:92:80:d2:78:94: 2d:9d:43:82:8d:1c:47:cd:42:5f:37:df:19:7e:51: 3a:31:b7:cf:0b:67:92:25:9c:8b:35:f8:ca:e7:08: 16:de:5b:0c:39:2d:c4:5e:30:61:b9:7c:32:eb:fa: de:45:a6:d4:02:88:4b:3d:41:c1:cc:11:10:21:3d: 09:a7:d6:6a:67:97:f8:d3:18:19:d1:46:8f:29:e9: 8c:a1:ca:67:7c:89:f0:20:ac:85:69:0e:34:e7:20: 29:dd:85:2d:8c:a6:68:50:04:1e:c5:cb:77:79:7f: 7b:ce:88:55:e8:cc:ff:f4:71:fc:b7:7e:54:39:03: e7:f0:75:b7:c1:62:1c:19:e7:af:30:4d:24:29:b8: 95:3e:08:6c:9d:90:e6:be:72:f3:c3:1c:ad:0c:fd: 1d:1d:7e:06:c1:64:f2:54:27:cb:7e:94:05:60:de: e3:48:b0:8f:41:98:18:5b:b5:19:4d:00:85:a2:ec: 36:1d:cf:d4:c5:66:1a:34:4e:40:8e:c1:a9:3e:0f: 13:67:a0:50:10:38:79:81:64:b6:6c:ad:de:45:f9: 4e:5c:a8:fa:ca:94:e1:55:ff:01:1f:96:e1:c3:55: 08:69:fa:d0:0d:1f:0d:73:b9:c6:a2:27:0c:0d:56: 5e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:15:12:70:8E:17:77:96:78:0C:67:62:01:33:75:F4:6B:61:0C:1E X509v3 Authority Key Identifier: keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:47:9c:ea:d1:61:17:27:9f:7b:54:c5:38:84:46:0f:7d:8e: ad:21:24:13:b9:2b:fe:9b:43:eb:26:31:6f:2c:89:87:5e:d2: a5:1b:a9:a9:e1:4a:f1:9f:c2:91:d3:2f:f0:e1:d7:f2:c3:91: 82:62:1c:e3:ba:9d:f9:64:d6:24:00:1b:5b:ce:ee:40:b8:35: 1a:11:a9:b4:45:02:28:93:bd:54:71:19:67:83:7f:62:8c:fe: 51:42:75:44:5e:8c:bc:94:14:7f:0e:9f:55:b2:0e:19:bf:7a: ec:ba:64:9a:99:16:ee:bd:81:48:24:fd:77:d0:16:52:69:14: 96:c9:22:20:db:80:7d:8d:50:e1:65:36:52:a8:d5:45:04:8a: 85:6a:73:6c:b5:50:4f:65:b3:bc:d2:b7:26:b1:fb:a8:e1:6d: e9:91:1c:25:f6:93:10:1e:45:41:0c:f7:37:af:8d:f4:51:91: 60:d6:ce:ce:d1:a6:2c:2f:c1:c5:12:1b:37:d9:00:55:71:f8: 17:34:ee:4e:73:05:87:c0:f1:3b:34:ee:cc:6a:62:57:60:a7: e7:8f:a2:5a:13:32:b6:77:bb:5a:ce:86:7c:9a:a2:f5:53:2d: 2e:07:9f:22:c8:aa:8e:2e:0e:62:75:31:68:cd:93:03:73:85: 73:e7:a4:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDAwOTkyOEYwQjhDRDMwRURBMDU2MzBBOEJBNjc0RTc2 MkE5RDI4MzMwHhcNMjYwNjAxMDM1NzAyWhcNMjYwNjA4MDM1NzAyWjAYMRYwFAYD VQQDEw02YTFkMDMwZS04NzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswAEhHtGXDEykoDSeJQtnUOCjRxHzUJfN98ZflE6MbfPC2eSJZyLNfjK5wgW 3lsMOS3EXjBhuXwy6/reRabUAohLPUHBzBEQIT0Jp9ZqZ5f40xgZ0UaPKemMocpn fInwIKyFaQ405yAp3YUtjKZoUAQexct3eX97zohV6Mz/9HH8t35UOQPn8HW3wWIc GeevME0kKbiVPghsnZDmvnLzwxytDP0dHX4GwWTyVCfLfpQFYN7jSLCPQZgYW7UZ TQCFouw2Hc/UxWYaNE5AjsGpPg8TZ6BQEDh5gWS2bK3eRflOXKj6ypThVf8BH5bh w1UIafrQDR8Nc7nGoicMDVZeQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJMVEnCO F3eWeAxnYgEzdfRrYQweMB8GA1UdIwQYMBaAFACZKPC4zTDtoFYwqLpnTnYqnSgz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9CMzc0OTcxMDVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1PMmdWakNvdW1kT2RpcWRL RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKa284TGpOTU8yZ1ZqQ291bWRPZGlxZEtETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9CMzc0OTcxMDVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1P MmdWakNvdW1kT2RpcWRLRE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOkec6tFhFyefe1TFOIRGD32OrSEkE7kr/ptD6yYxbyyJh17SpRupqeFK8Z/C kdMv8OHX8sORgmIc47qd+WTWJAAbW87uQLg1GhGptEUCKJO9VHEZZ4N/Yoz+UUJ1 RF6MvJQUfw6fVbIOGb967LpkmpkW7r2BSCT9d9AWUmkUlskiINuAfY1Q4WU2UqjV RQSKhWpzbLVQT2WzvNK3JrH7qOFt6ZEcJfaTEB5FQQz3N6+N9FGRYNbOztGmLC/B xRIbN9kAVXH4FzTuTnMFh8DxOzTuzGpiV2Cn54+iWhMytne7Ws6GfJqi9VMtLgef Isiqji4OYnUxaM2TA3OFc+ekDg== -----END CERTIFICATE-----Generated at Tue Jun 2 21:48:10 2026 by rpki-client