$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: pjnfT97kWiYTG6qoSuNlq+O/BSsPI9veTh4TBq0pyGY= Subject key identifier: 44:46:D5:25:1F:34:0F:1B:8F:28:69:F8:03:23:81:39:49:47:65:E1 Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 0642 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 0613 Signing time: Sun 26 Jul 2026 23:47:18 +0000 Manifest this update: Sun 26 Jul 2026 23:47:17 +0000 Manifest next update: Sun 02 Aug 2026 23:47:17 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: RgUi33hF37UrbzCqQjkoV0HrXhnheED/xwoNWCpwoE4=) 2: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: f/BUsgYAhkNh1wPi/Yncazl1ahCQTWo+tZlrMOar91c=) 3: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: PUTT+fnSdjrAY+7iudZIcc7XalYBXt6JylgKlAJor4E=) 4: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: LkTs19W0gCsrdxuY2K03JUvqdf72Vlm5uJXTCSQ9ySM=) 5: 70119E246AF411F1AA3EA8907547A888.roa (hash: c02C70pNwf0Uz4fz4O8kvOgsxfMETv+MMeBRcCYdv9c=) 6: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: R7x42wc8EHRs3ScgTPNSJkFZBvlsM8XZyRECvChhhvo=) 7: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: BDfe1PRp9XIpoYIOGRlSSH5YPkxZO+dYlcQlNG5RIG8=) 8: 9E9B3200501911F190142F18C2833773.roa (hash: Kj6v87OEFz8cQA5cA+Jm6HLgvRIzSuFmr9yRbxjkoYg=) 9: EDC6896617B611F08E260814C4F9AE02.roa (hash: RMVzH9M6Y3Mrbs5SX4Jp/BB7cFJIY13na8LTf0yfA+U=) 10: ABA1BD78744C11F196D52A676DA30FBC.roa (hash: U8AUG3NbmOsnMqHI/8y4ghn5ByCRQC+eqjewJ8pzQck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1602 (0x642) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Jul 26 23:47:17 2026 GMT Not After : Aug 2 23:47:17 2026 GMT Subject: CN=6a669c86-2da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:80:34:e9:b6:88:d0:5a:11:aa:10:2c:c6:82: fc:44:74:0f:9c:81:48:1e:9f:73:3a:1e:f0:b5:bc: 29:67:22:6c:ae:ca:e9:f6:0e:b1:d5:2a:53:ac:15: 29:ec:f1:98:aa:0a:a7:90:8f:21:a8:9d:a7:22:e5: 52:97:2f:81:e1:a6:9f:4b:92:64:cc:40:84:60:df: cb:91:bc:99:db:bf:9e:c2:a2:ea:05:69:09:1c:84: 1e:8b:a5:ca:40:79:92:b1:56:61:a3:17:c5:cb:77: d1:e8:cd:d5:bb:37:5f:fb:6a:5c:64:e6:78:8c:89: 2c:c2:dc:d0:ce:85:eb:bd:6e:e7:62:8c:8a:d0:67: b4:a4:52:cd:b9:eb:28:47:ac:ae:50:54:6c:5f:ce: 48:35:a6:7f:23:a0:cb:00:02:5f:ab:d7:b5:e6:de: 6b:11:f8:b4:de:a9:16:86:75:4a:55:ff:f6:da:5b: d8:89:90:a1:a4:db:44:a9:97:df:7b:70:44:19:01: 30:25:ad:3c:7e:6d:d1:04:d1:6c:4a:bd:e8:41:8c: 9d:a6:23:68:a0:c7:7e:2c:ca:8e:d4:6b:79:aa:65: 8e:d6:1b:4e:f4:27:18:91:f2:55:73:af:ff:00:0f: 4d:ae:0c:64:dc:16:37:71:bd:63:fc:d3:d6:30:68: 4e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:46:D5:25:1F:34:0F:1B:8F:28:69:F8:03:23:81:39:49:47:65:E1 X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:87:b4:a7:e8:a8:de:3b:58:e4:65:47:81:af:67:67:ba:f1: ee:30:c9:65:4d:4a:b2:80:d4:2a:4c:b5:00:e3:ab:91:e9:12: fd:5c:1e:f0:f4:b6:da:91:ec:64:80:95:23:83:09:55:4d:b6: 75:f4:61:15:9d:07:2c:10:5d:1d:2c:0c:9b:38:85:8c:06:36: 1b:c2:31:fd:55:3d:92:03:89:c8:e7:cf:98:e6:11:fd:94:69: 50:1b:87:1c:c5:81:7a:4a:12:d1:22:84:3d:4e:7c:be:54:1e: f9:d3:32:c1:14:d0:e8:3b:5b:a0:be:45:1a:6a:7d:53:63:b3: 97:11:99:54:e7:b2:7d:58:68:24:97:15:e2:71:6f:6d:c2:5d: 72:11:a0:78:fe:5b:e0:a2:fb:9e:0c:68:07:b3:96:3f:f2:cc: 57:9a:0b:15:d5:50:68:7c:d9:a8:81:10:4a:9f:37:f4:3a:9c: 51:9e:45:0f:9c:7b:4c:e3:d7:dc:cb:53:39:34:51:a9:af:85: 37:a3:5e:5a:58:ad:5f:ef:a2:9a:87:c8:9a:e5:4a:14:18:c6: 94:6c:7d:bf:c8:90:79:5d:03:75:c1:59:80:a0:38:37:52:f6: 16:24:1a:17:6c:d8:45:1d:65:a3:02:c8:97:ec:94:65:e3:84: 38:c1:0f:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjYwNzI2MjM0NzE3WhcNMjYwODAyMjM0NzE3WjAYMRYwFAYD VQQDEw02YTY2OWM4Ni0yZGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IA06baI0FoRqhAsxoL8RHQPnIFIHp9zOh7wtbwpZyJsrsrp9g6x1SpTrBUp 7PGYqgqnkI8hqJ2nIuVSly+B4aafS5JkzECEYN/LkbyZ27+ewqLqBWkJHIQei6XK QHmSsVZhoxfFy3fR6M3Vuzdf+2pcZOZ4jIkswtzQzoXrvW7nYoyK0Ge0pFLNueso R6yuUFRsX85INaZ/I6DLAAJfq9e15t5rEfi03qkWhnVKVf/22lvYiZChpNtEqZff e3BEGQEwJa08fm3RBNFsSr3oQYydpiNooMd+LMqO1Gt5qmWO1htO9CcYkfJVc6// AA9Nrgxk3BY3cb1j/NPWMGhOSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFERG1SUf NA8bjyhp+AMjgTlJR2XhMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI4e0p+io3jtY5GVHga9nZ7rx7jDJZU1KsoDUKky1AOOrkekS/Vwe8PS22pHs ZICVI4MJVU22dfRhFZ0HLBBdHSwMmziFjAY2G8Ix/VU9kgOJyOfPmOYR/ZRpUBuH HMWBekoS0SKEPU58vlQe+dMywRTQ6DtboL5FGmp9U2OzlxGZVOeyfVhoJJcV4nFv bcJdchGgeP5b4KL7ngxoB7OWP/LMV5oLFdVQaHzZqIEQSp839DqcUZ5FD5x7TOPX 3MtTOTRRqa+FN6NeWlitX++imofImuVKFBjGlGx9v8iQeV0DdcFZgKA4N1L2FiQa F2zYRR1lowLIl+yUZeOEOMEP+g== -----END CERTIFICATE-----Generated at Tue Jul 28 21:35:55 2026 by rpki-client