$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: 4AYCMt3+Xk/3DsOAafd4J2e6E7JVNERbqC81OnqHquQ= Subject key identifier: 3D:60:06:51:2D:36:2C:07:C7:FE:0E:73:F3:F2:27:3E:FC:21:6F:C0 Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 0609 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 05DD Signing time: Thu 16 Apr 2026 22:59:02 +0000 Manifest this update: Thu 16 Apr 2026 22:59:01 +0000 Manifest next update: Thu 23 Apr 2026 22:59:01 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: 5gCkz0UwRE6Kot/kWcbCl+BKYrmmZT69LUlH3SKFI9g=) 2: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: PUTT+fnSdjrAY+7iudZIcc7XalYBXt6JylgKlAJor4E=) 3: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: LkTs19W0gCsrdxuY2K03JUvqdf72Vlm5uJXTCSQ9ySM=) 4: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: BDfe1PRp9XIpoYIOGRlSSH5YPkxZO+dYlcQlNG5RIG8=) 5: EDC6896617B611F08E260814C4F9AE02.roa (hash: RMVzH9M6Y3Mrbs5SX4Jp/BB7cFJIY13na8LTf0yfA+U=) 6: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: R7x42wc8EHRs3ScgTPNSJkFZBvlsM8XZyRECvChhhvo=) 7: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: f/BUsgYAhkNh1wPi/Yncazl1ahCQTWo+tZlrMOar91c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1545 (0x609) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Apr 16 22:59:01 2026 GMT Not After : Apr 23 22:59:01 2026 GMT Subject: CN=69e169b6-5206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5c:a4:24:28:d1:43:02:5e:06:58:1e:08:22: e1:0c:96:ee:6c:5e:bf:5f:09:5e:a5:9f:e4:6a:c0: 92:bc:9b:a2:10:fd:23:a0:3e:bc:f5:f6:91:ad:19: 4a:b2:ab:ae:93:03:52:54:1a:af:3c:38:5c:c3:a6: a4:db:d6:d3:27:99:c5:66:6f:b1:c4:83:fb:1e:97: 61:a0:c5:09:0c:ce:f0:c9:c2:52:2d:6e:28:be:cb: bd:01:60:aa:c0:6f:dc:d4:66:68:86:16:52:84:9d: 7d:33:24:3e:50:f0:67:eb:a3:76:28:f2:22:c9:03: 0a:87:97:e2:e5:d2:60:b8:7a:cc:4e:f0:c0:56:2c: 13:37:db:95:51:3f:0c:a2:5e:cf:6a:74:06:b5:95: 98:be:d0:c7:52:20:16:0f:e6:b5:fc:77:a6:49:cd: 63:47:ed:fd:bb:f4:43:19:3b:a7:3f:36:a6:a9:79: a6:97:d9:99:1b:00:32:85:6d:e6:1c:e7:05:ee:84: 5c:6b:21:67:33:00:57:e4:e3:1c:64:c1:70:7e:e4: 02:cc:3d:ab:ba:5d:23:1e:df:06:a0:76:eb:c3:da: 80:3d:54:ec:d5:26:bf:4c:f0:ab:45:5d:7d:41:75: d3:ec:31:25:60:d0:79:58:0e:e5:0a:d2:46:01:91: 39:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:60:06:51:2D:36:2C:07:C7:FE:0E:73:F3:F2:27:3E:FC:21:6F:C0 X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:ac:8d:d8:83:6f:44:fc:b2:2c:d3:0e:2f:20:79:cb:e6:57: 45:0e:36:60:45:3f:a5:d1:ce:04:56:a9:b4:2b:f4:88:8b:58: b7:50:34:91:71:6d:fb:20:6f:77:4f:e6:5b:f7:e5:d1:2e:c1: ec:f1:df:98:46:4b:a2:db:78:b1:ea:48:10:7e:30:b5:f1:f1: 58:51:44:fb:e0:f4:47:78:72:a1:0b:4e:f7:60:1c:2b:86:03: b6:b3:6e:f1:98:25:89:1c:83:60:f9:17:ae:7d:ca:37:00:ec: f1:20:c7:bd:3f:56:32:e2:f4:00:7e:b5:9e:6f:8d:d1:90:80: e5:98:0b:ac:c9:2f:58:6d:ae:73:54:44:87:3a:0a:6d:6f:58: 4a:09:56:ab:10:02:c6:ab:cc:e8:30:42:18:43:99:6d:bd:26: 14:24:fc:58:80:77:b2:5c:00:d7:31:f6:7d:aa:ff:49:67:bb: eb:ca:10:6e:df:87:22:81:e8:a1:06:9b:ec:a4:8b:a2:7d:96: 16:8b:6b:39:a3:8c:d4:9b:fd:1f:39:4d:38:11:d3:41:a4:8f: 83:12:dc:78:ba:8e:c7:b8:61:fc:15:cd:63:08:d5:a5:89:d5: 0e:cb:32:59:2d:2f:9d:8d:b7:4e:bb:cf:f3:af:4f:15:a4:6c: a8:38:9a:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjYwNDE2MjI1OTAxWhcNMjYwNDIzMjI1OTAxWjAYMRYwFAYD VQQDEw02OWUxNjliNi01MjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1ykJCjRQwJeBlgeCCLhDJbubF6/XwlepZ/kasCSvJuiEP0joD689faRrRlK squukwNSVBqvPDhcw6ak29bTJ5nFZm+xxIP7HpdhoMUJDM7wycJSLW4ovsu9AWCq wG/c1GZohhZShJ19MyQ+UPBn66N2KPIiyQMKh5fi5dJguHrMTvDAViwTN9uVUT8M ol7PanQGtZWYvtDHUiAWD+a1/HemSc1jR+39u/RDGTunPzamqXmml9mZGwAyhW3m HOcF7oRcayFnMwBX5OMcZMFwfuQCzD2rul0jHt8GoHbrw9qAPVTs1Sa/TPCrRV19 QXXT7DElYNB5WA7lCtJGAZE5WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD1gBlEt NiwHx/4Oc/PyJz78IW/AMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACayN2INvRPyyLNMOLyB5y+ZXRQ42YEU/pdHOBFaptCv0iItYt1A0kXFt+yBv d0/mW/fl0S7B7PHfmEZLott4sepIEH4wtfHxWFFE++D0R3hyoQtO92AcK4YDtrNu 8ZgliRyDYPkXrn3KNwDs8SDHvT9WMuL0AH61nm+N0ZCA5ZgLrMkvWG2uc1REhzoK bW9YSglWqxACxqvM6DBCGEOZbb0mFCT8WIB3slwA1zH2far/SWe768oQbt+HIoHo oQab7KSLon2WFotrOaOM1Jv9HzlNOBHTQaSPgxLceLqOx7hh/BXNYwjVpYnVDssy WS0vnY23TrvP869PFaRsqDiaVw== -----END CERTIFICATE-----Generated at Fri Apr 17 09:45:31 2026 by rpki-client