$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: TgkwjdV6/VNINOOoTSOtWPxC0hRnbuyEuR/zEN11b+M= Subject key identifier: D0:0E:54:03:23:D7:5E:2F:39:86:9C:51:3D:10:C7:C5:65:34:04:FD Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 0627 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 05FA Signing time: Thu 11 Jun 2026 01:06:06 +0000 Manifest this update: Thu 11 Jun 2026 01:06:05 +0000 Manifest next update: Thu 18 Jun 2026 01:06:05 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: qhd0/Nuc3ZsqXXh0XEEO2AZVxkqGJDvs4naOH6jZ6cs=) 2: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: PUTT+fnSdjrAY+7iudZIcc7XalYBXt6JylgKlAJor4E=) 3: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: f/BUsgYAhkNh1wPi/Yncazl1ahCQTWo+tZlrMOar91c=) 4: 9E9B3200501911F190142F18C2833773.roa (hash: Kj6v87OEFz8cQA5cA+Jm6HLgvRIzSuFmr9yRbxjkoYg=) 5: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: BDfe1PRp9XIpoYIOGRlSSH5YPkxZO+dYlcQlNG5RIG8=) 6: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: R7x42wc8EHRs3ScgTPNSJkFZBvlsM8XZyRECvChhhvo=) 7: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: LkTs19W0gCsrdxuY2K03JUvqdf72Vlm5uJXTCSQ9ySM=) 8: EDC6896617B611F08E260814C4F9AE02.roa (hash: RMVzH9M6Y3Mrbs5SX4Jp/BB7cFJIY13na8LTf0yfA+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1575 (0x627) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Jun 11 01:06:05 2026 GMT Not After : Jun 18 01:06:05 2026 GMT Subject: CN=6a2a09fd-e899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1d:b7:3f:61:c7:cf:66:02:86:4a:06:fc:4d: f2:de:bd:91:2a:e5:b9:7a:0f:17:4c:17:13:75:2a: 0a:cf:26:5a:79:ef:05:be:38:3a:11:5e:3c:6a:5e: 3a:3e:72:30:35:ff:d0:25:a9:6d:72:bf:e1:90:89: fd:8f:a1:ca:ab:00:c3:2b:2f:f6:51:fe:16:fd:4f: ef:03:fd:37:b7:ff:94:f0:4a:74:09:97:d7:d7:b8: 8d:91:3c:53:7c:1c:61:72:d9:3f:da:52:1b:8f:4c: 90:e4:06:32:b0:71:11:7a:92:f7:86:6b:8d:db:55: 48:fa:01:a3:02:9e:07:d8:15:b8:e6:0d:a9:70:bd: 61:f5:1c:a6:52:2e:e4:7a:3b:e2:1f:c3:7f:d1:67: cd:51:99:27:c8:34:6d:7f:97:92:3d:32:28:1f:ab: 43:3b:6e:6a:66:fd:76:00:d5:ad:1b:d6:fd:5c:40: 22:2c:76:f1:6d:43:22:09:33:96:b0:cf:76:c7:6d: b3:9b:92:30:99:f4:85:7e:83:90:45:c9:90:e4:26: a8:78:3f:b5:ba:80:87:23:12:54:5a:b7:45:77:d1: 4d:70:6b:33:46:07:e4:6a:0c:68:45:07:5c:08:40: 25:d3:ab:c1:bd:32:88:19:56:3c:7f:79:38:24:62: 97:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0E:54:03:23:D7:5E:2F:39:86:9C:51:3D:10:C7:C5:65:34:04:FD X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:1c:3a:0b:79:dd:ca:ba:34:11:b4:b4:cd:ed:ee:53:ec:8c: 15:fa:ec:cd:98:d8:56:3e:61:81:6f:c0:d1:1c:3b:aa:bb:48: 3c:8f:df:01:b9:db:d1:3f:20:0d:d8:9b:04:0f:36:67:2b:a4: 3f:0f:87:0e:db:1e:c5:d6:22:52:f2:f9:dd:cf:9b:7c:89:04: 15:d7:fc:c3:40:2c:f8:42:41:f8:fe:8d:44:92:53:d6:b2:68: 40:57:c2:aa:aa:35:3a:9b:75:b7:a1:ae:bd:44:62:d7:2a:91: f0:dc:8e:83:4d:30:90:03:a2:d4:5f:42:61:b2:f7:40:5b:28: c2:fb:80:9c:a1:4e:a4:e0:6d:32:ff:22:a7:4e:31:dc:2a:fe: 84:69:96:e2:21:a6:d7:29:c9:1e:a7:97:f4:32:82:7b:4b:f2: 11:e4:89:f7:03:ad:45:a7:a3:3a:ed:18:ef:81:ab:12:c2:ad: 46:e4:08:1e:cb:35:b6:38:47:7e:f6:9e:98:6f:59:5a:76:b8: 9c:3f:2c:1f:2f:2d:da:ce:29:1d:7f:6a:5d:1e:7c:ff:0d:87: 71:9b:81:97:2c:31:e1:c7:36:1b:5e:8c:cc:69:a7:86:84:6d: c8:d2:55:dc:14:0e:99:63:5e:f4:e9:04:f8:ea:cb:63:34:79: 05:bd:7b:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjYwNjExMDEwNjA1WhcNMjYwNjE4MDEwNjA1WjAYMRYwFAYD VQQDEw02YTJhMDlmZC1lODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvx23P2HHz2YChkoG/E3y3r2RKuW5eg8XTBcTdSoKzyZaee8Fvjg6EV48al46 PnIwNf/QJaltcr/hkIn9j6HKqwDDKy/2Uf4W/U/vA/03t/+U8Ep0CZfX17iNkTxT fBxhctk/2lIbj0yQ5AYysHERepL3hmuN21VI+gGjAp4H2BW45g2pcL1h9RymUi7k ejviH8N/0WfNUZknyDRtf5eSPTIoH6tDO25qZv12ANWtG9b9XEAiLHbxbUMiCTOW sM92x22zm5IwmfSFfoOQRcmQ5CaoeD+1uoCHIxJUWrdFd9FNcGszRgfkagxoRQdc CEAl06vBvTKIGVY8f3k4JGKX7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNAOVAMj 114vOYacUT0Qx8VlNAT9MB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgxw6C3ndyro0EbS0ze3uU+yMFfrszZjYVj5hgW/A0Rw7qrtIPI/fAbnb0T8g DdibBA82ZyukPw+HDtsexdYiUvL53c+bfIkEFdf8w0As+EJB+P6NRJJT1rJoQFfC qqo1Opt1t6GuvURi1yqR8NyOg00wkAOi1F9CYbL3QFsowvuAnKFOpOBtMv8ip04x 3Cr+hGmW4iGm1ynJHqeX9DKCe0vyEeSJ9wOtRaejOu0Y74GrEsKtRuQIHss1tjhH fvaemG9ZWna4nD8sHy8t2s4pHX9qXR58/w2HcZuBlywx4cc2G16MzGmnhoRtyNJV 3BQOmWNe9OkE+OrLYzR5Bb17Ow== -----END CERTIFICATE-----Generated at Fri Jun 12 14:42:06 2026 by rpki-client