$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: AFf2XpdooTqKJh6qIsaFDl/dioMexWRArAW9haJAIR0= Subject key identifier: DE:25:1C:96:E4:EC:24:A0:1A:02:DA:CE:95:9B:E9:0B:AC:E5:65:36 Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 05F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 05CB Signing time: Thu 12 Mar 2026 22:43:31 +0000 Manifest this update: Thu 12 Mar 2026 22:43:30 +0000 Manifest next update: Thu 19 Mar 2026 22:43:30 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: t4RKMW6o+Qq1ehbJoGWiRDuLkRzfTLBmwcskPZeYDBM=) 2: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: BDfe1PRp9XIpoYIOGRlSSH5YPkxZO+dYlcQlNG5RIG8=) 3: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: PUTT+fnSdjrAY+7iudZIcc7XalYBXt6JylgKlAJor4E=) 4: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: R7x42wc8EHRs3ScgTPNSJkFZBvlsM8XZyRECvChhhvo=) 5: EDC6896617B611F08E260814C4F9AE02.roa (hash: RMVzH9M6Y3Mrbs5SX4Jp/BB7cFJIY13na8LTf0yfA+U=) 6: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: f/BUsgYAhkNh1wPi/Yncazl1ahCQTWo+tZlrMOar91c=) 7: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: LkTs19W0gCsrdxuY2K03JUvqdf72Vlm5uJXTCSQ9ySM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 22:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1527 (0x5f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Mar 12 22:43:30 2026 GMT Not After : Mar 19 22:43:30 2026 GMT Subject: CN=69b34192-4c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:aa:fa:57:40:4d:73:e4:e1:bf:3c:c8:e1:e0: cb:4d:3d:10:b0:42:a5:ef:ec:34:b0:70:a5:0a:a3: ed:1a:94:a3:f9:04:b0:e1:df:b7:69:06:1e:6a:ef: f4:c9:86:45:75:69:ab:ae:0d:f2:a3:a6:3e:e0:28: ff:2a:d5:13:b4:96:b4:c1:68:4d:38:62:f5:c9:a5: 79:8e:17:bd:3b:4a:2c:c2:f9:a0:08:3f:fe:5e:31: f8:18:fb:f1:55:9c:3c:50:fa:f3:d8:10:ad:41:bb: bd:a4:03:c0:aa:f3:43:49:8a:45:07:c8:37:64:24: fe:76:f7:d1:82:24:8a:5a:15:89:16:fc:cc:45:a0: 97:da:46:ee:0f:49:08:4f:56:a8:9a:73:88:1e:25: 5c:63:5b:d6:8a:9f:0a:01:e6:c7:65:ce:0c:23:dc: f6:34:ea:5d:81:2a:02:d5:19:f5:08:cd:5a:92:d2: ac:ec:55:7f:d0:ef:53:a9:6d:b1:5b:d8:a5:5f:79: c0:c0:d5:f1:a6:7f:32:90:55:d2:e7:49:e9:56:95: 9c:60:4b:b7:8f:d5:88:b5:da:d0:51:5e:b6:71:3f: 92:77:9f:83:e1:da:7c:62:55:a3:90:6a:c5:13:3a: d3:9a:e2:7e:cc:3d:20:94:f8:8d:f9:69:7c:c4:05: 4c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:25:1C:96:E4:EC:24:A0:1A:02:DA:CE:95:9B:E9:0B:AC:E5:65:36 X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:b1:80:01:be:60:c9:20:c6:7a:57:b1:72:cd:6b:59:92:9d: 1f:2f:8c:51:45:91:77:20:f3:44:0e:64:21:b3:eb:80:ac:94: cf:cd:e2:8f:03:c7:05:f2:79:23:95:49:54:d7:9f:52:57:01: b6:ba:52:00:40:04:c1:13:ee:96:6b:9e:4d:34:c3:65:56:31: de:da:0c:d4:89:1c:fb:a2:4a:63:1f:12:2a:1f:72:e7:60:cb: 56:38:7c:0b:9b:51:7d:86:8c:27:91:25:b9:9b:c4:11:6c:b6: 9f:67:00:7d:4c:91:52:fd:9e:d5:cf:34:d3:4d:02:2a:21:d0: 70:ed:fd:bc:42:49:5f:00:d2:ae:ae:7c:5b:a5:07:e9:ec:3a: 62:44:0b:a1:30:dc:11:3d:3d:7b:92:25:b1:ad:13:f7:e1:25: 02:09:cc:da:48:c2:1d:94:3f:6f:b7:db:57:72:60:55:66:e2: 94:5e:a8:1b:30:e8:b2:e6:c8:b5:ec:de:34:a3:f9:b3:e5:77: 6a:b0:66:2c:d7:0f:58:77:c2:6d:1f:ef:76:b8:6c:81:81:bd: 98:9f:c7:37:86:33:e7:32:d7:74:d6:7d:3c:6a:70:be:89:28: 21:4a:66:35:38:89:8e:02:94:d7:27:c4:ac:26:70:b1:ec:d9: 9c:1b:5c:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjYwMzEyMjI0MzMwWhcNMjYwMzE5MjI0MzMwWjAYMRYwFAYD VQQDEw02OWIzNDE5Mi00Yzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmqr6V0BNc+ThvzzI4eDLTT0QsEKl7+w0sHClCqPtGpSj+QSw4d+3aQYeau/0 yYZFdWmrrg3yo6Y+4Cj/KtUTtJa0wWhNOGL1yaV5jhe9O0oswvmgCD/+XjH4GPvx VZw8UPrz2BCtQbu9pAPAqvNDSYpFB8g3ZCT+dvfRgiSKWhWJFvzMRaCX2kbuD0kI T1aomnOIHiVcY1vWip8KAebHZc4MI9z2NOpdgSoC1Rn1CM1aktKs7FV/0O9TqW2x W9ilX3nAwNXxpn8ykFXS50npVpWcYEu3j9WItdrQUV62cT+Sd5+D4dp8YlWjkGrF EzrTmuJ+zD0glPiN+Wl8xAVMGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN4lHJbk 7CSgGgLazpWb6Qus5WU2MB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGbGAAb5gySDGelexcs1rWZKdHy+MUUWRdyDzRA5kIbPrgKyUz83ijwPHBfJ5 I5VJVNefUlcBtrpSAEAEwRPulmueTTTDZVYx3toM1Ikc+6JKYx8SKh9y52DLVjh8 C5tRfYaMJ5EluZvEEWy2n2cAfUyRUv2e1c80000CKiHQcO39vEJJXwDSrq58W6UH 6ew6YkQLoTDcET09e5Ilsa0T9+ElAgnM2kjCHZQ/b7fbV3JgVWbilF6oGzDosubI tezeNKP5s+V3arBmLNcPWHfCbR/vdrhsgYG9mJ/HN4Yz5zLXdNZ9PGpwvokoIUpm NTiJjgKU1yfErCZwsezZnBtcyw== -----END CERTIFICATE-----Generated at Fri Mar 13 12:11:35 2026 by rpki-client