$ rpki-client -vvvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: ykWr5hbxJeGnmwyBoG0CP+oI2iVdz5tnLGfHBB8UQtM= Subject key identifier: 1E:65:81:B1:F5:90:5B:51:4F:7C:97:B1:58:EC:6D:D3:B4:8F:FA:64 Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 066A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 0632 Signing time: Sun 20 Sep 2026 22:41:52 +0000 Manifest this update: Sun 20 Sep 2026 22:41:52 +0000 Manifest next update: Sun 27 Sep 2026 22:41:52 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: bszcpcWKKyUE9w23mz28MgJ3ijwvYnVD4LpA8+Ysv00=) 2: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: UZUA9U3yCEz6yaWf/DlQZkJQZdQQhLZgxGOZX2qQyg8=) 3: 9E9B3200501911F190142F18C2833773.roa (hash: DrEcPBK0A9UkBhkYeJ3WY7x1CPHJvF306Fg2pWDrLjo=) 4: ABA1BD78744C11F196D52A676DA30FBC.roa (hash: ZJ7fUF7ayqITpB76/tiGpNGMu70cZwBzOOQwAyPxS+I=) 5: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: Io7wgRi5NfMwoOxaB7Zuekqg6+kgj5e9y/7frng6bEA=) 6: 70119E246AF411F1AA3EA8907547A888.roa (hash: 8GASCAuKD3JefhswogvdCew9PptW7R0xItuKF2lq0jk=) 7: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: DJbDpiQ3rU0bMgBMh/N/o+RwGPCgo5LDUj6HZU7dXEc=) 8: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: gwNaZICMR1+AYU2FYR4M7fbd7Kn+ZzRATrMmBQ4Jajs=) 9: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: yf91foKSRft8KE2N88s6nLAPVY1jcsjXqApAwMmyBxc=) 10: EDC6896617B611F08E260814C4F9AE02.roa (hash: Bx7gLJ6K0CD6axyNymvk3cr+VYcomB6o5DsW4CK/Htg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1642 (0x66a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Sep 20 22:41:52 2026 GMT Not After : Sep 27 22:41:52 2026 GMT Subject: CN=6ab06130-835e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5a:0b:42:2d:73:0a:ef:74:de:f6:b8:ad:c3: b4:cd:a8:f4:11:b3:38:5b:90:29:c4:49:1b:c0:40: 5a:fb:a1:a9:eb:92:1c:a8:00:e1:b0:a5:de:64:b7: 53:81:58:6c:6b:43:9a:b1:b5:b9:cd:43:88:02:36: b7:69:a0:3f:62:b4:0f:14:d2:42:84:49:72:8b:ee: 11:0d:69:da:a5:76:7a:6e:fe:e5:7a:b1:c3:1a:af: cc:9d:6b:f9:73:33:97:f7:77:4e:31:42:e4:ab:7e: 9e:12:f6:3d:b9:98:29:98:b9:9c:1e:8d:70:f1:c0: ba:cc:c5:7b:92:7c:ae:67:f5:7e:b9:1d:99:39:ae: c3:aa:7e:f9:9c:70:1f:f0:6f:9e:36:b8:8a:c0:07: e9:9d:c0:0e:b6:dc:4d:2f:56:6e:6f:f6:24:06:8b: 27:04:1b:b0:29:21:47:25:ec:4e:f9:c8:1c:40:9f: 92:74:47:90:63:bc:47:c4:33:0d:64:e9:3a:39:c1: 8f:64:88:e4:9c:e8:97:48:8d:a1:81:5b:24:80:06: d8:dd:00:c6:a4:09:88:50:05:6a:6f:d4:84:76:d8: 72:68:cd:00:37:89:c1:f9:6f:2e:ff:d0:91:60:f7: 7c:fc:c2:9d:e7:8f:9c:8d:6d:6e:37:b0:12:18:ec: 65:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:65:81:B1:F5:90:5B:51:4F:7C:97:B1:58:EC:6D:D3:B4:8F:FA:64 X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:51:a9:72:8c:20:84:f2:2c:9f:b4:21:d5:0d:92:6f:23:5f: 36:61:06:ca:61:21:0e:1f:c8:7f:1e:78:24:2c:90:dd:23:95: f6:30:aa:38:88:68:81:d5:05:dc:13:f2:20:81:51:83:b8:80: 69:2b:b8:ff:74:e4:b1:a1:b6:ac:a1:cd:24:8f:33:ba:a3:64: 52:4c:6a:a9:89:a6:a6:68:6f:5a:36:8d:e8:9c:6a:41:bc:fd: 88:d6:64:d3:fa:3f:4d:52:a8:3f:92:9f:76:8f:f5:47:3b:8b: 93:f1:ab:1b:98:f9:91:9b:f9:d6:21:3e:0c:fe:6f:48:77:c0: fd:a3:46:69:0d:ee:10:01:79:e1:2a:de:9b:fa:08:db:cb:c1: bc:e3:5c:fe:0d:8d:6a:07:cc:d7:f5:8a:7d:37:57:96:5e:b4: 54:88:af:94:05:9c:85:3c:ab:50:0f:81:ff:78:b5:bf:e7:e0: 0d:c5:b9:a2:8e:b6:cb:92:69:97:8f:51:9c:be:a9:7e:3b:48: 97:c9:c0:0e:32:dd:2b:ef:12:12:0c:03:6b:d8:0c:40:34:23: 4c:0b:68:18:89:08:4f:9c:6c:22:31:a8:6a:04:e5:a9:93:63: a4:a8:ba:a2:f8:55:32:8a:72:b2:1b:33:cc:be:f7:3d:90:dd: 07:b5:7b:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjYwOTIwMjI0MTUyWhcNMjYwOTI3MjI0MTUyWjAYMRYwFAYD VQQDEw02YWIwNjEzMC04MzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmVoLQi1zCu903va4rcO0zaj0EbM4W5ApxEkbwEBa+6Gp65IcqADhsKXeZLdT gVhsa0OasbW5zUOIAja3aaA/YrQPFNJChElyi+4RDWnapXZ6bv7lerHDGq/MnWv5 czOX93dOMULkq36eEvY9uZgpmLmcHo1w8cC6zMV7knyuZ/V+uR2ZOa7Dqn75nHAf 8G+eNriKwAfpncAOttxNL1Zub/YkBosnBBuwKSFHJexO+cgcQJ+SdEeQY7xHxDMN ZOk6OcGPZIjknOiXSI2hgVskgAbY3QDGpAmIUAVqb9SEdthyaM0AN4nB+W8u/9CR YPd8/MKd54+cjW1uN7ASGOxlFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB5lgbH1 kFtRT3yXsVjsbdO0j/pkMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcVGpcowghPIsn7Qh1Q2SbyNfNmEGymEhDh/Ifx54JCyQ3SOV9jCqOIhogdUF 3BPyIIFRg7iAaSu4/3TksaG2rKHNJI8zuqNkUkxqqYmmpmhvWjaN6JxqQbz9iNZk 0/o/TVKoP5Kfdo/1RzuLk/GrG5j5kZv51iE+DP5vSHfA/aNGaQ3uEAF54Srem/oI 28vBvONc/g2NagfM1/WKfTdXll60VIivlAWchTyrUA+B/3i1v+fgDcW5oo62y5Jp l49RnL6pfjtIl8nADjLdK+8SEgwDa9gMQDQjTAtoGIkIT5xsIjGoagTlqZNjpKi6 ovhVMopyshszzL73PZDdB7V7Wg== -----END CERTIFICATE-----Generated at Mon Sep 21 03:32:35 2026 by rpki-client