$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: 0BSOVVZ/xAo37v28UxZMUfnNvNTDIU3S2r8tIPGy1Pc= Subject key identifier: 16:33:05:0C:41:23:91:1D:48:D5:F2:08:E5:4A:3A:22:F7:18:2F:AA Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 0640 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 0611 Signing time: Wed 22 Jul 2026 23:40:18 +0000 Manifest this update: Wed 22 Jul 2026 23:40:18 +0000 Manifest next update: Wed 29 Jul 2026 23:40:18 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: IN1jKfYJ47sw8shMzm4vbyxRY3nM0Z1j1oydE0PyL4Q=) 2: EDC6896617B611F08E260814C4F9AE02.roa (hash: RMVzH9M6Y3Mrbs5SX4Jp/BB7cFJIY13na8LTf0yfA+U=) 3: 70119E246AF411F1AA3EA8907547A888.roa (hash: c02C70pNwf0Uz4fz4O8kvOgsxfMETv+MMeBRcCYdv9c=) 4: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: PUTT+fnSdjrAY+7iudZIcc7XalYBXt6JylgKlAJor4E=) 5: ABA1BD78744C11F196D52A676DA30FBC.roa (hash: U8AUG3NbmOsnMqHI/8y4ghn5ByCRQC+eqjewJ8pzQck=) 6: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: f/BUsgYAhkNh1wPi/Yncazl1ahCQTWo+tZlrMOar91c=) 7: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: BDfe1PRp9XIpoYIOGRlSSH5YPkxZO+dYlcQlNG5RIG8=) 8: 9E9B3200501911F190142F18C2833773.roa (hash: Kj6v87OEFz8cQA5cA+Jm6HLgvRIzSuFmr9yRbxjkoYg=) 9: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: R7x42wc8EHRs3ScgTPNSJkFZBvlsM8XZyRECvChhhvo=) 10: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: LkTs19W0gCsrdxuY2K03JUvqdf72Vlm5uJXTCSQ9ySM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1600 (0x640) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Jul 22 23:40:18 2026 GMT Not After : Jul 29 23:40:18 2026 GMT Subject: CN=6a6154e2-9b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:53:d8:4a:82:6b:70:4c:b1:ac:6c:39:d2:93: c4:fd:85:07:b8:45:6f:2b:f0:09:91:31:d0:0b:18: 88:df:93:17:e9:bc:95:f7:e4:8d:f5:68:e3:49:52: 34:c8:17:16:af:fb:15:b6:1d:95:35:85:83:84:54: a3:4e:9b:29:d5:54:b9:7c:b5:f5:9d:ce:a6:e3:8a: 50:69:51:29:07:93:4f:50:a1:b4:ca:16:f1:87:d2: 71:76:b4:2b:12:e4:ad:7e:10:5d:c4:a0:9b:05:42: a5:c1:4c:75:1f:ee:ab:77:30:ab:db:03:c6:f0:cf: 66:27:9f:bd:cf:9a:18:77:89:7f:c0:4e:c3:4a:98: 49:ff:f0:e3:ae:89:00:49:37:ea:ec:64:ae:c0:e5: fe:1e:c3:63:50:8f:d7:ee:17:22:50:ca:c4:81:ac: 18:b5:8e:db:d1:18:8f:24:45:b7:66:ab:43:8b:6e: e9:b7:1b:93:ab:c3:48:be:77:b4:54:a7:24:12:ed: 4d:0f:af:97:60:3f:a9:c6:79:cd:a3:6f:39:30:9a: e6:82:d1:20:44:32:3e:78:72:a9:8e:80:4b:d5:ec: 83:97:e4:7d:8a:33:57:14:92:22:89:d0:d8:f2:04: 8e:7a:d6:b2:1d:73:97:be:52:db:c1:48:b5:cb:ef: 09:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:33:05:0C:41:23:91:1D:48:D5:F2:08:E5:4A:3A:22:F7:18:2F:AA X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:8d:d3:b3:1f:dc:f1:d2:7c:56:bf:fd:69:6b:64:cc:55:50: 45:e0:21:2b:06:17:84:90:79:3d:b0:46:58:e6:c4:bd:a8:eb: 46:6e:36:3b:9e:f2:fe:3d:1c:bf:75:54:af:9f:71:be:47:ea: 81:8e:35:97:f8:df:9d:71:98:63:5b:ab:40:dc:7b:26:81:22: 62:3f:a1:00:47:57:79:a4:24:54:c9:20:3a:80:d9:26:67:58: e7:06:7a:3b:95:4a:7f:e6:ab:c3:1b:a9:60:c2:48:21:c1:ba: 4a:e9:9f:3b:85:da:36:6c:e4:9b:1d:4d:ea:19:dc:3e:40:97: a7:33:d2:9b:8b:2b:a6:6e:cd:c4:cf:30:fc:a1:d6:11:24:ac: 97:dc:06:35:19:48:46:e3:f9:20:39:49:62:79:bd:9c:84:5f: 26:d7:32:53:07:0e:2f:22:6a:d0:16:03:d6:81:22:7d:24:b7: 5e:8d:fe:12:62:9b:89:55:38:b9:07:b4:48:b3:fc:3a:96:fe: 5a:d9:18:d7:a8:1d:08:a7:80:5a:c9:74:c7:26:a6:04:b4:57: c7:c4:9a:9d:3e:21:55:ac:52:f2:46:41:f8:aa:4a:18:0e:8b: 1e:21:30:d5:d0:d2:80:3d:63:08:3e:07:6d:b9:1d:8b:9c:e9: d4:5a:d1:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjYwNzIyMjM0MDE4WhcNMjYwNzI5MjM0MDE4WjAYMRYwFAYD VQQDEw02YTYxNTRlMi05YjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnFPYSoJrcEyxrGw50pPE/YUHuEVvK/AJkTHQCxiI35MX6byV9+SN9WjjSVI0 yBcWr/sVth2VNYWDhFSjTpsp1VS5fLX1nc6m44pQaVEpB5NPUKG0yhbxh9JxdrQr EuStfhBdxKCbBUKlwUx1H+6rdzCr2wPG8M9mJ5+9z5oYd4l/wE7DSphJ//DjrokA STfq7GSuwOX+HsNjUI/X7hciUMrEgawYtY7b0RiPJEW3ZqtDi27ptxuTq8NIvne0 VKckEu1ND6+XYD+pxnnNo285MJrmgtEgRDI+eHKpjoBL1eyDl+R9ijNXFJIiidDY 8gSOetayHXOXvlLbwUi1y+8JMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBYzBQxB I5EdSNXyCOVKOiL3GC+qMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPo3Tsx/c8dJ8Vr/9aWtkzFVQReAhKwYXhJB5PbBGWObEvajrRm42O57y/j0c v3VUr59xvkfqgY41l/jfnXGYY1urQNx7JoEiYj+hAEdXeaQkVMkgOoDZJmdY5wZ6 O5VKf+arwxupYMJIIcG6SumfO4XaNmzkmx1N6hncPkCXpzPSm4srpm7NxM8w/KHW ESSsl9wGNRlIRuP5IDlJYnm9nIRfJtcyUwcOLyJq0BYD1oEifSS3Xo3+EmKbiVU4 uQe0SLP8Opb+WtkY16gdCKeAWsl0xyamBLRXx8SanT4hVaxS8kZB+KpKGA6LHiEw 1dDSgD1jCD4Hbbkdi5zp1FrRfg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:11:28 2026 by rpki-client