$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: 6sHoLLjoUe0v1Bc4PNZv++sG54iX1Jq8mLsD9O2lVzY= Subject key identifier: F8:9A:AE:BB:61:64:3B:C5:E8:5F:33:04:CB:4C:06:1B:05:F9:9B:23 Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 05FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 05D2 Signing time: Thu 26 Mar 2026 22:54:31 +0000 Manifest this update: Thu 26 Mar 2026 22:54:30 +0000 Manifest next update: Thu 02 Apr 2026 22:54:30 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: WOQpDn8NoiMLzinXfXsj5d5gR24qdAByIKaUbANTqEQ=) 2: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: f/BUsgYAhkNh1wPi/Yncazl1ahCQTWo+tZlrMOar91c=) 3: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: PUTT+fnSdjrAY+7iudZIcc7XalYBXt6JylgKlAJor4E=) 4: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: LkTs19W0gCsrdxuY2K03JUvqdf72Vlm5uJXTCSQ9ySM=) 5: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: BDfe1PRp9XIpoYIOGRlSSH5YPkxZO+dYlcQlNG5RIG8=) 6: EDC6896617B611F08E260814C4F9AE02.roa (hash: RMVzH9M6Y3Mrbs5SX4Jp/BB7cFJIY13na8LTf0yfA+U=) 7: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: R7x42wc8EHRs3ScgTPNSJkFZBvlsM8XZyRECvChhhvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 22:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1534 (0x5fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Mar 26 22:54:30 2026 GMT Not After : Apr 2 22:54:30 2026 GMT Subject: CN=69c5b927-2460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:84:9f:9b:4e:93:8b:b5:c5:cb:c6:a2:81:5b: 1a:bb:53:0f:ad:e4:e2:2b:fe:a6:57:64:1d:24:7e: 22:c6:42:d4:58:4f:d6:a3:0f:d1:20:00:75:6c:f4: ac:b2:bc:0a:fb:85:2f:05:d6:3d:6c:5a:2e:88:94: 90:29:89:ab:8f:47:6f:0a:f6:31:30:02:f3:ae:a2: ab:77:40:a1:a9:85:6a:27:a5:38:1e:04:6e:e4:9e: 35:81:08:5b:aa:3b:46:e3:11:dc:25:d9:04:db:fb: db:c4:27:2e:db:e4:58:d7:a1:c4:b3:35:f8:93:97: 96:a5:bb:81:7e:3b:74:73:84:01:19:8d:92:d8:1b: 14:e9:93:cd:44:96:4b:27:8e:e7:6b:02:11:a4:44: 6b:8a:5d:aa:b5:88:cb:af:4f:56:e0:f1:91:d8:ac: e1:88:a3:79:1d:1a:28:08:b7:eb:22:90:a0:c7:e8: b0:6f:ba:a2:7d:cb:b6:47:27:4c:4f:f2:ee:bc:ae: 58:0a:d4:5c:51:82:17:36:d8:a9:48:27:0b:b7:e1: f0:9d:0c:15:7d:e5:c5:25:00:94:6c:ad:04:6d:1f: b4:b5:d5:df:0f:78:ba:64:d0:b2:13:bb:b9:f3:51: 03:5a:49:5f:cd:7b:f9:1f:c0:2b:3e:f1:bc:7b:5c: 8f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9A:AE:BB:61:64:3B:C5:E8:5F:33:04:CB:4C:06:1B:05:F9:9B:23 X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:b8:ab:00:b0:05:97:c2:cf:d4:c5:fa:4b:04:b4:8c:46:93: 7e:71:ab:e8:2c:77:e6:7f:ef:0f:6c:f5:1e:5e:ee:8e:01:1b: ef:ac:2b:2e:32:1d:14:32:01:a0:21:93:62:4e:ba:f6:bd:c7: f3:f1:c5:fe:7c:37:7e:4e:7d:5b:fa:68:70:37:48:bf:cf:8d: fd:b3:7e:fd:24:02:8f:13:c9:86:24:85:2a:2f:62:07:3f:86: 15:fe:23:2d:74:dc:b0:4b:27:f8:26:b8:1f:51:a8:92:63:20: 5b:d1:84:16:91:c6:50:dd:8d:b5:2d:21:c6:29:fd:c2:33:98: 85:be:98:9a:d1:ea:af:b5:e7:3a:c0:7b:67:c7:c5:e6:18:c3: b0:db:c8:9e:07:08:b2:b1:67:17:9d:bc:4a:ff:f2:0b:5a:c0: 34:43:56:1e:4d:54:d4:44:85:22:ae:18:f1:3d:9f:13:b1:1b: 1c:85:25:d9:48:e1:b5:1e:82:c9:6b:11:ef:a3:53:25:9a:0f: 5c:8b:58:5b:ea:cd:d9:a7:9e:b0:3d:5d:03:11:a7:67:bb:48: 10:c5:be:68:25:1b:33:ef:43:64:92:3b:af:17:18:ce:df:bb: 44:4d:c7:ea:e9:e3:54:05:a3:18:d5:9c:91:2c:da:5f:d9:7f: e0:eb:36:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjYwMzI2MjI1NDMwWhcNMjYwNDAyMjI1NDMwWjAYMRYwFAYD VQQDEw02OWM1YjkyNy0yNDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYSfm06Ti7XFy8aigVsau1MPreTiK/6mV2QdJH4ixkLUWE/Wow/RIAB1bPSs srwK+4UvBdY9bFouiJSQKYmrj0dvCvYxMALzrqKrd0ChqYVqJ6U4HgRu5J41gQhb qjtG4xHcJdkE2/vbxCcu2+RY16HEszX4k5eWpbuBfjt0c4QBGY2S2BsU6ZPNRJZL J47nawIRpERril2qtYjLr09W4PGR2KzhiKN5HRooCLfrIpCgx+iwb7qifcu2RydM T/LuvK5YCtRcUYIXNtipSCcLt+HwnQwVfeXFJQCUbK0EbR+0tdXfD3i6ZNCyE7u5 81EDWklfzXv5H8ArPvG8e1yPyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPiarrth ZDvF6F8zBMtMBhsF+ZsjMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYrirALAFl8LP1MX6SwS0jEaTfnGr6Cx35n/vD2z1Hl7ujgEb76wrLjIdFDIB oCGTYk669r3H8/HF/nw3fk59W/pocDdIv8+N/bN+/SQCjxPJhiSFKi9iBz+GFf4j LXTcsEsn+Ca4H1GokmMgW9GEFpHGUN2NtS0hxin9wjOYhb6YmtHqr7XnOsB7Z8fF 5hjDsNvIngcIsrFnF528Sv/yC1rANENWHk1U1ESFIq4Y8T2fE7EbHIUl2UjhtR6C yWsR76NTJZoPXItYW+rN2aeesD1dAxGnZ7tIEMW+aCUbM+9DZJI7rxcYzt+7RE3H 6unjVAWjGNWckSzaX9l/4Os2kQ== -----END CERTIFICATE-----Generated at Sat Mar 28 12:09:35 2026 by rpki-client