$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: yR/cmA114k1NVxi3LB5t/fmHjM72gWL21PLIk8Cro7I= Subject key identifier: 72:73:20:5C:D5:61:16:B7:C1:64:5D:87:F3:0D:E9:37:38:D1:9A:D3 Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 0628 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 05FB Signing time: Fri 12 Jun 2026 23:01:41 +0000 Manifest this update: Fri 12 Jun 2026 23:01:41 +0000 Manifest next update: Fri 19 Jun 2026 23:01:41 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: D0OCLIMKQLrDfFY1ISi+aCuERqAGaFd0m6+BUMvxazg=) 2: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: R7x42wc8EHRs3ScgTPNSJkFZBvlsM8XZyRECvChhhvo=) 3: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: PUTT+fnSdjrAY+7iudZIcc7XalYBXt6JylgKlAJor4E=) 4: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: f/BUsgYAhkNh1wPi/Yncazl1ahCQTWo+tZlrMOar91c=) 5: 9E9B3200501911F190142F18C2833773.roa (hash: Kj6v87OEFz8cQA5cA+Jm6HLgvRIzSuFmr9yRbxjkoYg=) 6: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: LkTs19W0gCsrdxuY2K03JUvqdf72Vlm5uJXTCSQ9ySM=) 7: EDC6896617B611F08E260814C4F9AE02.roa (hash: RMVzH9M6Y3Mrbs5SX4Jp/BB7cFJIY13na8LTf0yfA+U=) 8: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: BDfe1PRp9XIpoYIOGRlSSH5YPkxZO+dYlcQlNG5RIG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 23:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1576 (0x628) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Jun 12 23:01:41 2026 GMT Not After : Jun 19 23:01:41 2026 GMT Subject: CN=6a2c8fd5-c782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:85:80:5a:cf:06:72:19:a3:5c:e5:ed:91:34: 0a:0e:97:b1:e3:4f:84:71:09:a2:12:99:89:82:d2: c8:d4:ac:2e:9f:92:15:36:54:a2:a9:6f:e5:bb:61: 02:13:1f:f6:42:99:70:a7:64:b7:34:bf:92:62:21: bc:8f:95:bf:2e:aa:97:d1:20:64:a9:5d:94:c8:a0: d2:b5:cf:ce:b1:0d:20:05:98:30:c9:a6:09:9c:27: af:1b:8e:90:de:f3:63:6f:2b:dc:2c:f0:44:dd:e2: 7f:47:8c:54:44:f8:a3:37:64:22:71:7a:8a:e2:7c: ab:55:50:44:2b:5c:26:37:e2:58:05:59:e7:17:ec: 83:92:75:fd:4c:fe:3f:2e:f1:1e:53:b0:91:e4:da: 2f:89:8d:bd:3f:1f:cd:bf:14:3f:ef:4f:1b:78:4d: 7b:47:39:63:42:c9:83:11:68:02:df:d5:03:e6:96: 10:6f:f8:9b:a8:43:ed:7c:e3:56:42:f9:bb:fe:fe: 41:16:f2:68:fd:d3:4c:fa:47:f1:a2:b6:15:56:e3: ba:72:82:73:b3:04:cb:b1:37:ee:66:73:3c:ee:2b: 46:1c:80:bc:ad:b5:62:f0:14:24:ad:f9:bc:98:fc: b2:9f:57:e7:3f:35:96:ab:af:23:18:d8:68:96:dd: 1d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:73:20:5C:D5:61:16:B7:C1:64:5D:87:F3:0D:E9:37:38:D1:9A:D3 X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:4a:d0:1f:6f:8b:35:df:ac:98:ce:30:e2:1b:e0:6a:bb:7b: 7e:30:e6:f8:05:c1:29:03:55:53:fa:ca:64:32:f9:e5:47:43: 93:7f:fd:8d:c2:84:4e:3c:17:39:94:40:f1:d1:8c:02:aa:bb: 0a:f2:49:0c:8a:5c:f1:b3:28:eb:3b:5d:ef:5a:6b:26:b3:38: 37:68:0a:f7:eb:dc:0d:76:bf:d8:64:09:49:7c:1a:7a:6f:d2: c1:45:6d:97:6c:4b:bb:5d:d1:e6:7f:87:bd:aa:d4:02:5d:ee: f1:b0:a8:20:85:a0:5c:3a:d0:c6:e0:76:42:e0:af:73:d4:19: a3:07:90:67:de:8d:0e:59:76:08:17:38:0d:0b:ff:7b:2f:74: 0d:9a:9b:13:8a:7a:fd:d7:00:fd:94:d1:6a:aa:8b:93:76:b5: 1c:65:3d:de:90:5b:0c:35:16:e8:d9:0d:c1:e3:52:90:2a:50: 04:ba:b0:69:e5:0d:59:e5:83:02:1f:c4:ef:1a:3f:1d:64:ec: 5c:83:f8:ad:28:6a:48:71:47:5c:6a:0c:29:b8:b9:03:43:42: b2:f0:e3:9c:bb:73:f3:63:b5:17:a2:d4:c5:9a:2c:99:2d:b2: b4:91:6c:dc:4e:b5:64:f0:11:dc:f5:00:ea:84:79:eb:2e:dc: e9:c9:53:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjYwNjEyMjMwMTQxWhcNMjYwNjE5MjMwMTQxWjAYMRYwFAYD VQQDEw02YTJjOGZkNS1jNzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYWAWs8GchmjXOXtkTQKDpex40+EcQmiEpmJgtLI1Kwun5IVNlSiqW/lu2EC Ex/2Qplwp2S3NL+SYiG8j5W/LqqX0SBkqV2UyKDStc/OsQ0gBZgwyaYJnCevG46Q 3vNjbyvcLPBE3eJ/R4xURPijN2QicXqK4nyrVVBEK1wmN+JYBVnnF+yDknX9TP4/ LvEeU7CR5NoviY29Px/NvxQ/708beE17RzljQsmDEWgC39UD5pYQb/ibqEPtfONW Qvm7/v5BFvJo/dNM+kfxorYVVuO6coJzswTLsTfuZnM87itGHIC8rbVi8BQkrfm8 mPyyn1fnPzWWq68jGNholt0dNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJzIFzV YRa3wWRdh/MN6Tc40ZrTMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACUrQH2+LNd+smM4w4hvgart7fjDm+AXBKQNVU/rKZDL55UdDk3/9jcKETjwX OZRA8dGMAqq7CvJJDIpc8bMo6ztd71prJrM4N2gK9+vcDXa/2GQJSXwaem/SwUVt l2xLu13R5n+HvarUAl3u8bCoIIWgXDrQxuB2QuCvc9QZoweQZ96NDll2CBc4DQv/ ey90DZqbE4p6/dcA/ZTRaqqLk3a1HGU93pBbDDUW6NkNweNSkCpQBLqwaeUNWeWD Ah/E7xo/HWTsXIP4rShqSHFHXGoMKbi5A0NCsvDjnLtz82O1F6LUxZosmS2ytJFs 3E61ZPAR3PUA6oR56y7c6clTWw== -----END CERTIFICATE-----Generated at Sat Jun 13 13:15:10 2026 by rpki-client