$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft File: CC8e6S_qY3P9odWuxG4vLYrorIc.mft (raw, json) Hash identifier: KqCKDMybt436GJQ0n/s/g8GpSuaCt9HNuDy6jGZZlgY= Subject key identifier: 59:3C:F9:6D:E7:9C:89:FF:4D:58:C9:55:F6:AB:58:DE:86:E3:67:1F Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 Certificate issuer: /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Certificate serial: 0888 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft Manifest number: 6134 Signing time: Tue 24 Mar 2026 14:15:20 +0000 Manifest this update: Tue 24 Mar 2026 14:15:19 +0000 Manifest next update: Tue 31 Mar 2026 14:15:19 +0000 Files and hashes: 1: CC8e6S_qY3P9odWuxG4vLYrorIc.crl (hash: atVNqpbZ8OmVcQgJHo4rn/Y7hnR5Ctgp421YdohfwB8=) 2: D64176D81B9911ECAB0E1678C4F9AE02.roa (hash: Bvd1DVqbTNJSqvO20x1gAUmMTRKzz6mu9NujNo2jErs=) 3: 813E372A946711F081C10711C4F9AE02.roa (hash: 57qvv/Ci0wiylgCxyBLGHmCnzd/A0UFm3lCKkdUKpX8=) 4: 8272E36003BD11EBB416B77DC4F9AE02.roa (hash: /zXttT1/Z+BZbViTAHk4/AzLjMQjrMWW94BldELHaro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2184 (0x888) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Validity Not Before: Mar 24 14:15:19 2026 GMT Not After : Mar 31 14:15:19 2026 GMT Subject: CN=69c29c78-077c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:65:28:75:18:9a:3b:1f:0d:46:6a:a6:39:50: bd:04:f4:ca:6e:b7:bf:26:2e:b1:c9:36:e5:8e:3d: a7:52:57:00:fd:b2:e1:21:58:d3:9a:f4:16:ea:ba: 3f:3b:8e:54:89:ba:13:1b:5c:9d:91:01:1b:6e:ee: c7:6d:2b:dc:85:b2:e6:de:99:0b:c3:cd:b8:46:39: 76:eb:ab:0d:7d:5d:b6:08:b7:d0:6d:5e:a8:3f:1d: fe:03:52:d3:58:a8:93:2f:e4:d3:d9:ef:3a:f8:06: af:d9:29:11:59:dc:fe:ce:34:f6:25:28:22:7e:c0: 1d:c5:cb:f3:0e:44:84:5b:0d:35:9e:bc:f9:dc:45: c8:a5:15:b9:02:6e:b7:25:aa:5e:0d:ed:2a:3e:1a: aa:c6:99:e1:22:92:54:46:b0:b6:90:4b:b3:2d:64: 39:b7:ed:a3:80:77:d7:7a:2f:c7:2d:70:c1:43:b1: 5e:ad:ba:7a:8e:2a:3d:6a:31:79:db:00:75:34:7d: ee:61:58:d5:4b:86:19:ec:20:ca:e8:38:17:a4:bb: 1e:a5:2f:05:77:23:4d:3b:02:88:52:b5:cf:94:90: 26:28:24:87:2c:e1:c2:14:16:d9:8b:9c:e9:75:db: 70:fe:76:ad:3b:db:87:12:c3:29:41:ea:e0:c1:b1: 17:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3C:F9:6D:E7:9C:89:FF:4D:58:C9:55:F6:AB:58:DE:86:E3:67:1F X509v3 Authority Key Identifier: keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:bb:79:d1:48:ba:c5:64:5a:e6:3d:61:49:6c:c1:9c:05:90: b5:f2:d6:a1:63:b5:a4:05:e4:56:7a:09:22:7e:8a:96:d2:34: 7c:31:b5:d9:86:85:6f:da:91:fd:0e:e7:98:e7:8c:01:50:63: 99:d1:fd:18:79:5b:5d:dc:de:d1:74:3e:68:cb:a9:00:f1:b4: a4:b8:e3:96:b2:99:89:bf:85:38:4e:03:e5:5b:93:51:9f:56: b0:84:41:25:14:f9:ee:1e:fe:34:25:4d:63:2c:9f:f7:da:df: f8:4f:43:3a:52:1b:c9:45:1b:07:0e:78:47:e1:64:6a:3a:0b: 56:cc:be:9b:19:34:fa:c5:b0:b3:5a:94:78:7b:46:35:dd:03: d8:23:9c:83:37:c4:8b:63:f1:c2:4a:76:91:e0:09:fb:8c:d6: 1b:06:30:50:fc:c2:0f:e7:9f:0a:82:d3:50:d4:12:d9:23:12: df:c4:72:f8:57:99:cb:3e:8a:ab:0a:e5:9a:82:ba:40:fe:f0: 31:43:45:c2:65:29:4c:f2:42:b3:db:07:75:d2:61:3a:ef:f5: 78:80:15:f7:2e:a8:56:3e:e9:cd:cd:19:1b:d5:2a:28:81:00: e0:e1:18:b7:35:5a:cf:da:37:41:b6:9a:3a:6c:6d:bc:17:61: 2c:c4:5c:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDA4MkYxRUU5MkZFQTYzNzNGREExRDVBRUM0NkUyRjJE OEFFOEFDODcwHhcNMjYwMzI0MTQxNTE5WhcNMjYwMzMxMTQxNTE5WjAYMRYwFAYD VQQDEw02OWMyOWM3OC0wNzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32UodRiaOx8NRmqmOVC9BPTKbre/Ji6xyTbljj2nUlcA/bLhIVjTmvQW6ro/ O45UiboTG1ydkQEbbu7HbSvchbLm3pkLw824Rjl266sNfV22CLfQbV6oPx3+A1LT WKiTL+TT2e86+Aav2SkRWdz+zjT2JSgifsAdxcvzDkSEWw01nrz53EXIpRW5Am63 JapeDe0qPhqqxpnhIpJURrC2kEuzLWQ5t+2jgHfXei/HLXDBQ7Ferbp6jio9ajF5 2wB1NH3uYVjVS4YZ7CDK6DgXpLsepS8FdyNNOwKIUrXPlJAmKCSHLOHCFBbZi5zp ddtw/natO9uHEsMpQergwbEXoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFk8+W3n nIn/TVjJVfarWN6G42cfMB8GA1UdIwQYMBaAFAgvHukv6mNz/aHVrsRuLy2K6KyH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkzUDlvZFd1eEc0dkxZcm9y SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NDOGU2U19xWTNQOW9kV3V4RzR2TFlyb3JJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkz UDlvZFd1eEc0dkxZcm9ySWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAErt50Ui6xWRa5j1hSWzBnAWQtfLWoWO1pAXkVnoJIn6KltI0fDG12YaFb9qR /Q7nmOeMAVBjmdH9GHlbXdze0XQ+aMupAPG0pLjjlrKZib+FOE4D5VuTUZ9WsIRB JRT57h7+NCVNYyyf99rf+E9DOlIbyUUbBw54R+FkajoLVsy+mxk0+sWws1qUeHtG Nd0D2COcgzfEi2Pxwkp2keAJ+4zWGwYwUPzCD+efCoLTUNQS2SMS38Ry+FeZyz6K qwrlmoK6QP7wMUNFwmUpTPJCs9sHddJhOu/1eIAV9y6oVj7pzc0ZG9UqKIEA4OEY tzVaz9o3QbaaOmxtvBdhLMRcUg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:38:10 2026 by rpki-client