$ rpki-client -vvvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: K4teRXy20gIKX/TFqYZmrbDaCCAvIRrTuBo/QJGvurU= Subject key identifier: 6D:B9:5B:AC:9E:F1:F1:A8:7A:B5:3A:96:85:C9:03:E3:9D:07:BD:8E Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 0686 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 064E Signing time: Sat 14 Nov 2026 22:34:09 +0000 Manifest this update: Sat 14 Nov 2026 22:34:08 +0000 Manifest next update: Sat 21 Nov 2026 22:34:08 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: RnGTTZeW9GyLMoE3Z5m+Jk7nKuDwTA5JLUK3Mo+ckaI=) 2: 70119E246AF411F1AA3EA8907547A888.roa (hash: 8GASCAuKD3JefhswogvdCew9PptW7R0xItuKF2lq0jk=) 3: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: DJbDpiQ3rU0bMgBMh/N/o+RwGPCgo5LDUj6HZU7dXEc=) 4: ABA1BD78744C11F196D52A676DA30FBC.roa (hash: ZJ7fUF7ayqITpB76/tiGpNGMu70cZwBzOOQwAyPxS+I=) 5: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: gwNaZICMR1+AYU2FYR4M7fbd7Kn+ZzRATrMmBQ4Jajs=) 6: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: UZUA9U3yCEz6yaWf/DlQZkJQZdQQhLZgxGOZX2qQyg8=) 7: EDC6896617B611F08E260814C4F9AE02.roa (hash: Bx7gLJ6K0CD6axyNymvk3cr+VYcomB6o5DsW4CK/Htg=) 8: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: Io7wgRi5NfMwoOxaB7Zuekqg6+kgj5e9y/7frng6bEA=) 9: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: yf91foKSRft8KE2N88s6nLAPVY1jcsjXqApAwMmyBxc=) 10: 9E9B3200501911F190142F18C2833773.roa (hash: DrEcPBK0A9UkBhkYeJ3WY7x1CPHJvF306Fg2pWDrLjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 22:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1670 (0x686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Nov 14 22:34:08 2026 GMT Not After : Nov 21 22:34:08 2026 GMT Subject: CN=6af8e1e0-5d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8f:2a:6b:63:bd:83:30:a8:74:5c:4b:5d:27: 2c:2c:29:03:d5:bd:c6:c4:9e:6c:89:d6:a3:47:dc: b7:87:24:73:56:54:7e:ab:18:8e:dc:ec:74:82:79: bc:48:00:29:2c:64:10:3b:39:43:ee:92:1d:1b:e4: 8e:2e:fa:c8:fb:08:be:27:1e:90:92:1a:8f:6a:97: f9:9c:db:14:ec:6b:ed:bf:0c:54:32:42:56:b4:fe: 84:af:47:07:0b:9f:68:1e:ef:03:96:79:20:5e:1a: 04:70:64:40:7b:bd:c8:b3:38:17:75:32:b6:bf:da: c4:c1:40:8f:8f:8b:2a:ae:43:b2:59:2a:4b:3c:70: a4:c3:ab:49:06:9a:90:3e:b2:7f:12:13:eb:b1:ba: 12:c1:5c:10:22:c4:74:24:b2:f7:35:82:d7:f4:3e: 05:db:cd:46:9f:89:65:8d:eb:08:ee:bb:22:8a:d3: 58:be:f1:65:58:f7:7b:63:79:e3:0b:ee:aa:60:59: 45:3d:2b:a6:a4:15:bd:07:7e:75:03:5c:3b:a2:8b: 0f:3d:06:da:01:78:28:b7:f8:e9:09:1b:e6:5b:9c: 23:34:98:a4:d4:5a:75:a7:4b:6e:fb:1c:1b:86:a6: 09:69:9f:f5:79:39:6c:c6:8e:2b:15:c4:43:92:ed: ad:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B9:5B:AC:9E:F1:F1:A8:7A:B5:3A:96:85:C9:03:E3:9D:07:BD:8E X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5c:69:6e:d4:f3:57:30:b9:8b:fc:87:fb:fd:53:83:83:de: d0:61:ac:3e:a4:4d:b3:b7:21:3b:cc:32:d4:35:4a:7b:7c:c6: 26:e5:3e:11:3f:60:2f:8b:4a:a7:fe:f8:56:24:00:5a:43:6b: af:70:1c:ad:d7:3c:56:e7:c2:6f:7a:5e:94:79:63:1a:91:c8: 31:66:2b:04:e2:52:42:c6:15:67:17:36:a9:c1:ac:1d:a4:03: 5c:0c:30:a8:e3:3e:27:64:49:27:00:8d:b9:28:8c:24:b2:b2: 0e:42:1f:0a:37:b2:71:49:15:cd:c4:15:0a:39:cc:c7:87:1f: 01:61:8a:ca:6a:61:6a:04:57:4f:ab:04:a8:29:9a:c2:30:b2: 87:ad:be:1c:11:64:ba:b2:c2:93:ae:84:96:78:16:f7:15:24: 14:f8:89:6c:bd:c9:ea:29:a7:d5:42:51:2b:b9:ed:f9:bb:3c: 7c:74:fc:eb:62:f5:5f:47:f5:7c:86:88:ce:51:1b:d1:8c:8e: 10:26:a0:de:a7:28:50:10:c5:bc:02:f4:65:a3:a6:2d:e3:15: 97:6c:c3:3e:33:49:3d:fb:18:ce:a6:97:1b:26:a7:58:e2:06: 2a:7d:23:bb:b9:b8:91:14:1f:c5:44:b4:12:75:86:6a:95:87: 90:47:93:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjYxMTE0MjIzNDA4WhcNMjYxMTIxMjIzNDA4WjAYMRYwFAYD VQQDEw02YWY4ZTFlMC01ZDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnI8qa2O9gzCodFxLXScsLCkD1b3GxJ5sidajR9y3hyRzVlR+qxiO3Ox0gnm8 SAApLGQQOzlD7pIdG+SOLvrI+wi+Jx6QkhqPapf5nNsU7GvtvwxUMkJWtP6Er0cH C59oHu8DlnkgXhoEcGRAe73IszgXdTK2v9rEwUCPj4sqrkOyWSpLPHCkw6tJBpqQ PrJ/EhPrsboSwVwQIsR0JLL3NYLX9D4F281Gn4lljesI7rsiitNYvvFlWPd7Y3nj C+6qYFlFPSumpBW9B351A1w7oosPPQbaAXgot/jpCRvmW5wjNJik1Fp1p0tu+xwb hqYJaZ/1eTlsxo4rFcRDku2tQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG25W6ye 8fGoerU6loXJA+OdB72OMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG1xpbtTzVzC5i/yH+/1Tg4Pe0GGsPqRNs7chO8wy1DVKe3zGJuU+ET9gL4tK p/74ViQAWkNrr3Acrdc8VufCb3pelHljGpHIMWYrBOJSQsYVZxc2qcGsHaQDXAww qOM+J2RJJwCNuSiMJLKyDkIfCjeycUkVzcQVCjnMx4cfAWGKymphagRXT6sEqCma wjCyh62+HBFkurLCk66ElngW9xUkFPiJbL3J6imn1UJRK7nt+bs8fHT862L1X0f1 fIaIzlEb0YyOECag3qcoUBDFvAL0ZaOmLeMVl2zDPjNJPfsYzqaXGyanWOIGKn0j u7m4kRQfxUS0EnWGapWHkEeTqw== -----END CERTIFICATE-----Generated at Sun Nov 15 12:19:41 2026 by rpki-client