$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: zKxCv6clWwJ+ynFxbtjXkvqNZtY5I1MNDH5bgf3vfFY= Subject key identifier: 12:13:2A:3E:60:E8:3B:E0:50:8C:06:0E:A6:30:8B:35:4B:15:C7:D9 Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 05E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 05C3 Signing time: Sat 28 Feb 2026 23:42:47 +0000 Manifest this update: Sat 28 Feb 2026 23:42:46 +0000 Manifest next update: Sat 07 Mar 2026 23:42:46 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: GNp2gUCxc6QhYRRQb3fyPIRfVnRPkPO0wSgJes4SWfQ=) 2: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: mLHQ8FPso+ZmAaHO2o/MCAMgyAvNWTYy5WsKEiwbpt0=) 3: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: tUYKyj51w8FY5qrfQOEMkIv2L7xe24UEi8KjbC1Ydgg=) 4: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: osBPg0SLfRG0eb1YC88FnRgXyZmnCWV1UAz6jQOFPa8=) 5: EDC6896617B611F08E260814C4F9AE02.roa (hash: bppqSZ8PSCotLg3otrjVRqyexBIsOl6v9mc32VyO/nY=) 6: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: 2jt6Xm58KXfWaDCwoL1QNNF6hftEV3g4TXU+Cro75w8=) 7: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: Px42Wf8a/plz9LcLndqURmspCg6cQtfr3BUR2GqJiJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 23:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1507 (0x5e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Feb 28 23:42:46 2026 GMT Not After : Mar 7 23:42:46 2026 GMT Subject: CN=69a37d77-e2f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0c:be:1a:6b:ec:74:96:ab:f5:b5:98:e5:f7: 74:e0:72:a8:58:2a:38:27:48:fc:1e:fe:71:1d:7a: ee:27:35:b9:a5:83:1f:f3:f6:a9:86:4a:c8:09:00: 5e:5d:8a:6b:3b:be:81:01:7e:fd:09:8c:fd:5b:ce: 68:52:fa:7f:65:aa:a4:45:c1:ce:0c:2b:00:39:f5: fc:91:a5:fc:de:38:21:9c:a9:7f:71:4a:85:88:af: dc:da:ff:1e:ee:1f:48:18:d6:5b:ed:19:03:b2:5b: d1:59:e0:b2:6d:64:51:49:6f:a7:23:f1:54:ec:f4: a1:e2:c8:59:f6:ce:56:b5:9d:6b:ee:ba:64:98:b5: 8a:45:e6:fd:33:72:57:17:de:c9:ab:2b:05:ab:1e: 41:f7:21:7a:94:8a:ea:12:9f:75:42:09:52:97:61: 4d:54:70:35:3c:bf:24:c0:89:a4:05:c4:d2:62:6c: 28:e9:61:bf:9f:2f:a7:f2:87:21:8f:c2:55:f2:a0: e2:94:81:06:fb:1e:62:01:4a:42:b9:6f:4b:d7:a8: fc:94:4e:0b:f8:33:b0:f2:c1:07:4b:82:c8:34:0f: 13:c7:42:31:fa:d5:05:6f:24:f9:26:a7:2e:fa:27: 75:a6:6f:2d:11:ad:63:96:4a:e3:05:78:33:6b:0d: 4a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:13:2A:3E:60:E8:3B:E0:50:8C:06:0E:A6:30:8B:35:4B:15:C7:D9 X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:1b:b3:b6:f5:65:2e:85:7b:a8:92:8a:41:1b:2c:7f:f8:f9: 95:48:3b:a4:3d:c3:8b:f6:ac:f6:23:d8:5c:21:61:71:5a:d6: 79:8c:7e:3c:e7:3d:9c:ab:54:73:19:1f:2e:68:f2:0b:0f:4e: 4e:91:4b:f4:9d:0e:83:0e:19:2b:d5:da:8c:35:fe:27:68:dd: b7:ef:d6:4f:e0:ae:b7:89:6c:0b:01:1f:ec:80:3a:ca:31:d6: 31:57:a3:3a:ba:39:5a:f0:04:ad:b7:f3:9c:11:a7:fc:1e:6b: 9a:60:67:4d:bc:01:81:8b:62:e3:a6:06:03:db:a8:18:e1:e3: 0b:91:cf:dd:7e:f5:39:56:a1:f5:4d:40:6c:5d:a5:a3:13:55: fe:13:67:51:c1:4e:8d:a2:94:73:4d:e1:61:8a:a8:b6:aa:07: 4e:77:5a:15:d8:45:2d:9a:e9:57:0f:fa:e7:e5:ba:b0:da:cd: 81:85:69:fc:54:69:e3:4d:ce:fe:c8:61:56:e7:97:85:2d:c8: 22:81:7e:b3:0c:35:68:4e:d9:ec:53:e3:69:38:17:3b:01:3d: f2:79:9a:71:f9:c5:8e:b8:b6:05:98:45:aa:c5:2c:a7:c9:d4: 52:02:0a:5d:95:2d:fb:ad:6d:6f:aa:ab:1b:19:8b:8f:69:47: fc:e3:bf:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjYwMjI4MjM0MjQ2WhcNMjYwMzA3MjM0MjQ2WjAYMRYwFAYD VQQDDA02OWEzN2Q3Ny1lMmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwy+GmvsdJar9bWY5fd04HKoWCo4J0j8Hv5xHXruJzW5pYMf8/aphkrICQBe XYprO76BAX79CYz9W85oUvp/ZaqkRcHODCsAOfX8kaX83jghnKl/cUqFiK/c2v8e 7h9IGNZb7RkDslvRWeCybWRRSW+nI/FU7PSh4shZ9s5WtZ1r7rpkmLWKReb9M3JX F97JqysFqx5B9yF6lIrqEp91QglSl2FNVHA1PL8kwImkBcTSYmwo6WG/ny+n8och j8JV8qDilIEG+x5iAUpCuW9L16j8lE4L+DOw8sEHS4LINA8Tx0Ix+tUFbyT5Jqcu +id1pm8tEa1jlkrjBXgzaw1KEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBITKj5g 6DvgUIwGDqYwizVLFcfZMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIBuztvVlLoV7qJKKQRssf/j5lUg7pD3Di/as9iPYXCFhcVrWeYx+POc9nKtU cxkfLmjyCw9OTpFL9J0Ogw4ZK9XajDX+J2jdt+/WT+Cut4lsCwEf7IA6yjHWMVej Oro5WvAErbfznBGn/B5rmmBnTbwBgYti46YGA9uoGOHjC5HP3X71OVah9U1AbF2l oxNV/hNnUcFOjaKUc03hYYqotqoHTndaFdhFLZrpVw/65+W6sNrNgYVp/FRp403O /shhVueXhS3IIoF+sww1aE7Z7FPjaTgXOwE98nmacfnFjri2BZhFqsUsp8nUUgIK XZUt+61tb6qrGxmLj2lH/OO/fw== -----END CERTIFICATE-----Generated at Sun Mar 1 18:23:15 2026 by rpki-client