$ rpki-client -vvvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: QXWtMo9H2LzhYW8Dxk5EFnUketa8w2EQgUGcxBePeHA= Subject key identifier: 86:04:AD:9B:D4:2A:C3:9F:F8:A4:B1:5B:54:6D:BB:CB:BB:EC:1F:DA Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 0671 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 0639 Signing time: Sun 04 Oct 2026 22:50:32 +0000 Manifest this update: Sun 04 Oct 2026 22:50:32 +0000 Manifest next update: Sun 11 Oct 2026 22:50:32 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: S48RqzG4TwzkWGidcy4Ru7w6oP7s+ElatSI9IDcD0Cg=) 2: EDC6896617B611F08E260814C4F9AE02.roa (hash: Bx7gLJ6K0CD6axyNymvk3cr+VYcomB6o5DsW4CK/Htg=) 3: 70119E246AF411F1AA3EA8907547A888.roa (hash: 8GASCAuKD3JefhswogvdCew9PptW7R0xItuKF2lq0jk=) 4: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: gwNaZICMR1+AYU2FYR4M7fbd7Kn+ZzRATrMmBQ4Jajs=) 5: 9E9B3200501911F190142F18C2833773.roa (hash: DrEcPBK0A9UkBhkYeJ3WY7x1CPHJvF306Fg2pWDrLjo=) 6: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: yf91foKSRft8KE2N88s6nLAPVY1jcsjXqApAwMmyBxc=) 7: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: DJbDpiQ3rU0bMgBMh/N/o+RwGPCgo5LDUj6HZU7dXEc=) 8: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: Io7wgRi5NfMwoOxaB7Zuekqg6+kgj5e9y/7frng6bEA=) 9: ABA1BD78744C11F196D52A676DA30FBC.roa (hash: ZJ7fUF7ayqITpB76/tiGpNGMu70cZwBzOOQwAyPxS+I=) 10: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: UZUA9U3yCEz6yaWf/DlQZkJQZdQQhLZgxGOZX2qQyg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 22:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1649 (0x671) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Oct 4 22:50:32 2026 GMT Not After : Oct 11 22:50:32 2026 GMT Subject: CN=6ac2d838-7e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e3:18:76:8f:db:ca:db:4e:ed:8b:5e:b0:5d: a5:c0:34:74:c0:19:cf:9a:20:37:51:48:06:71:1e: 6e:6f:74:cc:78:0b:fa:d9:22:1f:c1:b4:98:22:35: ae:1d:5e:9e:4e:58:61:5c:19:e9:41:87:0b:c9:3d: 88:30:51:20:77:60:98:c1:3b:08:6c:b4:2a:f6:34: 4a:1c:48:00:5a:c2:77:51:01:42:9f:29:24:58:5a: 04:54:52:f4:3d:c8:34:de:14:e0:ee:62:0e:22:32: a1:e0:92:a4:d7:df:38:28:80:9e:39:eb:e1:32:cd: bc:83:87:90:65:3c:83:a6:20:3c:43:28:8e:b8:3f: c4:85:c5:09:b6:90:d0:9b:52:94:a7:3c:50:a3:d9: b4:97:6c:52:43:c1:3e:6b:43:53:88:57:23:7a:19: 7c:15:ee:9d:8d:38:27:7a:84:fa:92:d6:f9:97:bd: 17:47:62:01:77:f2:7a:2f:09:37:28:3c:70:00:c3: 7d:f8:87:84:78:d9:5a:ce:d9:59:98:4f:a0:ef:07: e4:6a:0f:cf:24:e9:da:96:29:7d:b2:7a:5a:df:86: c7:b5:6d:3d:84:ce:e2:bd:5a:e3:73:34:53:2f:ae: 53:96:78:ab:0e:dd:63:fe:02:ae:25:2c:4d:83:54: 05:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:04:AD:9B:D4:2A:C3:9F:F8:A4:B1:5B:54:6D:BB:CB:BB:EC:1F:DA X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:cf:0a:38:b5:47:b7:52:ca:df:35:4d:b7:8f:74:ab:80:fb: 05:6d:79:b7:17:81:12:fc:ec:00:a8:51:db:b0:ab:3d:af:7c: 74:af:e9:ca:b2:26:c2:9a:51:a2:57:96:5b:f5:89:89:c1:9d: c5:ea:06:8d:63:7b:a4:50:c8:78:d7:b4:ec:6e:ca:77:2c:09: ff:2f:6d:76:41:d4:13:a6:d3:3d:43:67:ac:94:ee:c4:42:f9: a5:c4:b6:bb:29:5d:02:e3:40:89:51:02:36:0a:83:bd:48:6c: 5d:6f:96:10:cf:aa:b5:18:14:ce:0a:b4:29:54:b2:75:e3:de: a5:ff:6b:37:9e:75:47:fb:29:b1:63:05:a1:1b:21:8f:c2:f3: f7:e9:ca:c1:0d:5a:06:ec:50:ab:2d:97:3c:53:38:37:7e:dd: 84:25:1c:01:84:05:8c:9c:0b:ad:35:5c:43:ed:16:40:fc:b8: e4:ec:f8:4c:bf:3e:27:30:a2:1c:f7:3a:36:33:54:d3:ae:67: 7a:cf:cf:32:be:d8:f9:04:a5:c4:30:cb:4c:e1:5b:6b:14:c4: f6:e5:65:1e:d5:2a:e0:51:5d:87:97:64:24:7f:bf:ce:1b:a5: 70:f6:9c:87:6f:e3:99:74:a5:04:e1:27:a9:78:75:f2:ba:3f: 29:fd:c6:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjYxMDA0MjI1MDMyWhcNMjYxMDExMjI1MDMyWjAYMRYwFAYD VQQDEw02YWMyZDgzOC03ZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+MYdo/byttO7YtesF2lwDR0wBnPmiA3UUgGcR5ub3TMeAv62SIfwbSYIjWu HV6eTlhhXBnpQYcLyT2IMFEgd2CYwTsIbLQq9jRKHEgAWsJ3UQFCnykkWFoEVFL0 Pcg03hTg7mIOIjKh4JKk1984KICeOevhMs28g4eQZTyDpiA8QyiOuD/EhcUJtpDQ m1KUpzxQo9m0l2xSQ8E+a0NTiFcjehl8Fe6djTgneoT6ktb5l70XR2IBd/J6Lwk3 KDxwAMN9+IeEeNlaztlZmE+g7wfkag/PJOnalil9snpa34bHtW09hM7ivVrjczRT L65TlnirDt1j/gKuJSxNg1QFRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIYErZvU KsOf+KSxW1Rtu8u77B/aMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgs8KOLVHt1LK3zVNt490q4D7BW15txeBEvzsAKhR27CrPa98dK/pyrImwppR oleWW/WJicGdxeoGjWN7pFDIeNe07G7KdywJ/y9tdkHUE6bTPUNnrJTuxEL5pcS2 uyldAuNAiVECNgqDvUhsXW+WEM+qtRgUzgq0KVSydePepf9rN551R/spsWMFoRsh j8Lz9+nKwQ1aBuxQqy2XPFM4N37dhCUcAYQFjJwLrTVcQ+0WQPy45Oz4TL8+JzCi HPc6NjNU065nes/PMr7Y+QSlxDDLTOFbaxTE9uVlHtUq4FFdh5dkJH+/zhulcPac h2/jmXSlBOEnqXh18ro/Kf3Grg== -----END CERTIFICATE-----Generated at Tue Oct 6 21:50:39 2026 by rpki-client