$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: Q2Q5owYUA8BBhXIUow9oTTmuAig/QssydRDycYZYxNo= Subject key identifier: 79:40:3B:DE:CC:BF:B6:B2:2F:31:F6:39:C4:5D:69:4E:46:46:32:CA Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 0616 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 05EA Signing time: Tue 12 May 2026 23:07:54 +0000 Manifest this update: Tue 12 May 2026 23:07:54 +0000 Manifest next update: Tue 19 May 2026 23:07:54 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: LGARzWx6cQQ9FjcUufgzrPn1NqKv+AXZVi5Rr56C5E4=) 2: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: LkTs19W0gCsrdxuY2K03JUvqdf72Vlm5uJXTCSQ9ySM=) 3: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: PUTT+fnSdjrAY+7iudZIcc7XalYBXt6JylgKlAJor4E=) 4: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: BDfe1PRp9XIpoYIOGRlSSH5YPkxZO+dYlcQlNG5RIG8=) 5: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: R7x42wc8EHRs3ScgTPNSJkFZBvlsM8XZyRECvChhhvo=) 6: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: f/BUsgYAhkNh1wPi/Yncazl1ahCQTWo+tZlrMOar91c=) 7: EDC6896617B611F08E260814C4F9AE02.roa (hash: RMVzH9M6Y3Mrbs5SX4Jp/BB7cFJIY13na8LTf0yfA+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1558 (0x616) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: May 12 23:07:54 2026 GMT Not After : May 19 23:07:54 2026 GMT Subject: CN=6a03b2ca-81e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:03:78:81:78:b2:db:6a:31:03:8c:3a:5a:c0: 6e:71:16:06:40:ea:c7:71:72:bf:a5:0c:81:8d:88: be:23:60:88:bc:c0:ce:bd:80:9d:2f:d1:a6:9a:3d: e7:01:7f:6e:fc:16:93:b0:e2:ae:98:89:ba:2f:cf: 9b:cd:79:90:aa:23:44:ab:ee:fa:4d:00:39:ae:d9: 2f:02:a9:e4:d7:f2:61:dd:1a:b5:4d:e5:81:00:d4: 85:1a:1d:6a:2c:7a:24:66:c7:d4:ad:98:26:bf:9f: eb:fa:50:8a:18:ea:11:94:32:d5:f2:f3:27:33:b5: 77:f8:ae:75:19:68:f3:41:bd:f0:13:7e:1b:1f:99: 93:1c:15:19:cd:74:b1:9e:f9:a1:7b:75:25:10:f5: c5:89:c8:c5:b2:28:3d:97:b7:e7:5f:d5:02:d8:ed: aa:dd:58:3b:8d:dd:65:0d:59:75:7d:8b:01:75:04: de:e7:70:1d:e2:43:73:8a:9c:24:67:e2:ab:92:64: 91:c8:29:d4:36:88:0b:9a:10:22:42:a9:d4:ad:cd: 05:b1:b2:1a:8f:00:8f:d2:af:62:1a:a8:f6:48:0c: da:87:cd:bc:07:12:d0:c4:15:94:df:bc:b1:52:4d: 9d:81:f4:28:b7:54:95:0f:dd:7f:9f:9a:5f:fb:1f: 46:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:40:3B:DE:CC:BF:B6:B2:2F:31:F6:39:C4:5D:69:4E:46:46:32:CA X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:09:0d:0b:67:11:69:c7:1a:2d:4a:3b:6a:49:9b:af:fa:d8: 0f:a7:fb:4e:4d:71:61:06:ed:04:f5:d2:a9:e5:c5:4a:50:af: 3f:11:aa:83:92:34:54:d0:68:9f:46:37:1d:6c:51:5f:c4:68: b3:ee:c9:c5:ad:de:a8:e1:c0:f3:8c:ac:3a:e5:98:08:89:4a: 86:53:16:8c:03:74:7c:1f:9b:41:d1:d7:5a:c2:1b:3b:1a:2e: 65:70:4e:ae:1f:97:e3:a1:8b:55:09:6d:f0:db:dd:91:bf:96: d8:87:73:57:77:c6:e1:ce:21:c3:d3:aa:2c:35:a3:02:88:b9: 2f:67:38:eb:58:d5:10:7f:5b:2a:bb:17:48:fa:12:48:9a:50: 2e:cc:58:17:98:9c:29:92:5b:e0:33:99:85:2e:45:e4:8d:fe: c6:66:25:79:25:af:6c:7a:e4:33:32:9a:1d:f7:39:83:d9:0a: cd:fb:c5:8a:0a:17:ee:d6:1a:d2:09:2b:98:26:1f:19:aa:d8: dc:26:01:5b:8e:f2:36:04:54:1b:56:86:b7:d7:3c:20:39:82: 67:7e:df:b0:f4:c0:1d:b0:c2:c7:12:c1:7b:7d:34:5d:b5:1f: 71:5a:3e:00:10:9a:f8:c3:20:42:c4:2a:26:9f:59:51:6d:9c: 10:5a:59:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjYwNTEyMjMwNzU0WhcNMjYwNTE5MjMwNzU0WjAYMRYwFAYD VQQDEw02YTAzYjJjYS04MWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0AN4gXiy22oxA4w6WsBucRYGQOrHcXK/pQyBjYi+I2CIvMDOvYCdL9Gmmj3n AX9u/BaTsOKumIm6L8+bzXmQqiNEq+76TQA5rtkvAqnk1/Jh3Rq1TeWBANSFGh1q LHokZsfUrZgmv5/r+lCKGOoRlDLV8vMnM7V3+K51GWjzQb3wE34bH5mTHBUZzXSx nvmhe3UlEPXFicjFsig9l7fnX9UC2O2q3Vg7jd1lDVl1fYsBdQTe53Ad4kNzipwk Z+KrkmSRyCnUNogLmhAiQqnUrc0FsbIajwCP0q9iGqj2SAzah828BxLQxBWU37yx Uk2dgfQot1SVD91/n5pf+x9G6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHlAO97M v7ayLzH2OcRdaU5GRjLKMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkQkNC2cRaccaLUo7akmbr/rYD6f7Tk1xYQbtBPXSqeXFSlCvPxGqg5I0VNBo n0Y3HWxRX8Ros+7Jxa3eqOHA84ysOuWYCIlKhlMWjAN0fB+bQdHXWsIbOxouZXBO rh+X46GLVQlt8Nvdkb+W2IdzV3fG4c4hw9OqLDWjAoi5L2c461jVEH9bKrsXSPoS SJpQLsxYF5icKZJb4DOZhS5F5I3+xmYleSWvbHrkMzKaHfc5g9kKzfvFigoX7tYa 0gkrmCYfGarY3CYBW47yNgRUG1aGt9c8IDmCZ37fsPTAHbDCxxLBe300XbUfcVo+ ABCa+MMgQsQqJp9ZUW2cEFpZ3w== -----END CERTIFICATE-----Generated at Wed May 13 06:09:50 2026 by rpki-client