$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft File: ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft (raw, json) Hash identifier: eoWfDe/8jkxcMWGPH2gQDq9HmZRzqD1n60X5SzFtvo4= Subject key identifier: CC:02:82:39:4B:5D:AD:F5:9B:53:33:C7:44:D0:31:CB:86:72:27:4C Authority key identifier: 71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 Certificate issuer: /CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft Manifest number: 027A Signing time: Fri 27 Mar 2026 01:28:53 +0000 Manifest this update: Fri 27 Mar 2026 01:28:52 +0000 Manifest next update: Fri 03 Apr 2026 01:28:52 +0000 Files and hashes: 1: ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl (hash: lErzideElRZHF2IYoSyG9ceOhaBe+A4/cRhuSFp7oJ0=) 2: B46C8BFA89AD11ED93CAB75FC4F9AE02.roa (hash: B6zuGQHiLLMcpOAalP92RoQpZ8Tfo5uy0bH1HnD3XPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 01:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE570, serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Validity Not Before: Mar 27 01:28:52 2026 GMT Not After : Apr 3 01:28:52 2026 GMT Subject: CN=69c5dd55-1857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:c3:63:c7:ae:e5:d9:61:23:74:81:62:bf: a3:b4:4e:69:9e:d6:8c:25:8f:1c:f1:57:f1:48:23: 70:5e:a0:c1:4c:52:5c:c7:2a:f0:94:8d:96:82:d6: 82:db:6d:1b:bf:fb:6d:1a:0a:6a:1f:8e:0a:b9:7b: db:b6:9e:49:37:f3:c2:22:d4:d4:3a:7d:d6:e0:71: 7e:14:00:d5:d8:a4:7e:e6:20:cb:54:d0:99:85:32: f6:32:62:ae:e3:5a:40:3b:b4:ee:d3:8f:5e:70:82: cd:44:d1:89:6e:2e:98:89:2c:5d:0e:f7:10:fd:2f: 51:4b:d7:23:d9:aa:d9:17:65:a2:b6:13:fa:da:b6: b8:b2:34:64:d3:36:e4:87:e0:75:fe:fc:37:3e:64: 38:dd:36:2b:20:e2:56:b4:86:45:5c:34:04:4d:91: ce:7e:34:e3:5f:31:ca:98:9f:d3:3f:3d:02:43:df: 3e:c9:21:fb:24:bb:3e:a4:fe:3d:28:1f:98:64:70: 97:fd:fc:3a:4b:f7:06:a3:1c:b3:25:78:ac:72:87: 1b:a0:61:19:2f:d9:1e:d8:94:78:90:6b:a5:7e:e9: 7b:c7:31:b9:55:db:27:af:45:52:17:ed:97:f5:8c: 7b:9f:28:10:7c:fe:91:9b:3d:d4:e0:52:1e:38:eb: ea:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:02:82:39:4B:5D:AD:F5:9B:53:33:C7:44:D0:31:CB:86:72:27:4C X509v3 Authority Key Identifier: keyid:71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:54:2f:95:89:db:4f:96:2c:94:2b:8d:e2:56:c8:b3:9e:09: f4:b0:5e:31:89:f9:0d:ce:2b:34:f2:cf:8c:c9:97:55:92:30: 88:e2:94:22:be:bf:ae:f4:53:7a:63:4e:81:10:97:25:4e:45: e0:53:f4:45:a1:db:d6:ef:40:10:b0:ce:4a:ac:da:c8:f2:3d: eb:f9:78:1f:1d:1a:52:9b:c0:a7:4f:f5:1d:e4:95:5b:49:f6: d9:51:dc:07:e2:fd:ea:aa:00:b9:f1:10:ac:0f:1a:98:0d:b4: 12:a3:b8:bc:68:80:b5:71:76:16:8d:c9:8b:96:69:44:6b:ab: ea:5a:31:73:f7:da:08:16:f1:22:44:93:6a:43:a3:7e:7f:0f: 88:4d:33:81:3f:66:da:f3:09:ec:71:d0:7c:4e:f5:c8:ea:39: 65:b0:06:86:d3:28:c8:91:8f:57:9c:e6:d1:ed:2d:f6:28:cd: 44:92:44:a5:d0:c3:b3:55:5b:27:5f:cb:a2:99:af:13:05:e0: 18:6d:47:5b:1c:f5:e2:ad:69:25:fe:46:c2:3c:b1:08:ad:99: 43:08:68:05:1d:d9:fd:d6:40:90:8b:21:95:83:47:fa:0a:5b: 50:dc:c3:c4:af:4c:a9:7b:8f:36:f6:4e:ca:56:65:d9:9b:11: 2e:97:91:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1NzAxMTAvBgNVBAUTKDcxQzEyN0QxQzA2QUZDN0M0NTRERDEwOTNFQjJDQjdF MTJENzg3QzAwHhcNMjYwMzI3MDEyODUyWhcNMjYwNDAzMDEyODUyWjAYMRYwFAYD VQQDEw02OWM1ZGQ1NS0xODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCXDY8eu5dlhI3SBYr+jtE5pntaMJY8c8VfxSCNwXqDBTFJcxyrwlI2WgtaC 220bv/ttGgpqH44KuXvbtp5JN/PCItTUOn3W4HF+FADV2KR+5iDLVNCZhTL2MmKu 41pAO7Tu049ecILNRNGJbi6YiSxdDvcQ/S9RS9cj2arZF2WithP62ra4sjRk0zbk h+B1/vw3PmQ43TYrIOJWtIZFXDQETZHOfjTjXzHKmJ/TPz0CQ98+ySH7JLs+pP49 KB+YZHCX/fw6S/cGoxyzJXiscocboGEZL9ke2JR4kGulful7xzG5Vdsnr0VSF+2X 9Yx7nygQfP6Rmz3U4FIeOOvqPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMwCgjlL Xa31m1Mzx0TQMcuGcidMMB8GA1UdIwQYMBaAFHHBJ9HAavx8RU3RCT6yy34S14fA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTU3MC9DMkNCMTE5QzY1 ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9IeEZUZEVKUHJMTGZoTFho OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjRW4wY0JxX0h4RlRkRUpQckxMZmhMWGg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTU3MC9DMkNCMTE5QzY1ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9I eEZUZEVKUHJMTGZoTFhoOEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXlQvlYnbT5YslCuN4lbIs54J9LBeMYn5Dc4rNPLPjMmXVZIwiOKUIr6/rvRT emNOgRCXJU5F4FP0RaHb1u9AELDOSqzayPI96/l4Hx0aUpvAp0/1HeSVW0n22VHc B+L96qoAufEQrA8amA20EqO4vGiAtXF2Fo3Ji5ZpRGur6loxc/faCBbxIkSTakOj fn8PiE0zgT9m2vMJ7HHQfE71yOo5ZbAGhtMoyJGPV5zm0e0t9ijNRJJEpdDDs1Vb J1/LopmvEwXgGG1HWxz14q1pJf5GwjyxCK2ZQwhoBR3Z/dZAkIshlYNH+gpbUNzD xK9MqXuPNvZOylZl2ZsRLpeRRA== -----END CERTIFICATE-----Generated at Sat Mar 28 10:42:18 2026 by rpki-client