$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft File: CC8e6S_qY3P9odWuxG4vLYrorIc.mft (raw, json) Hash identifier: oNk8qa0/5wzBXDDyUsxqri2kM/X8PtvJD3RN2THqUfw= Subject key identifier: A0:B3:8F:93:E8:D5:88:72:BC:DB:BC:42:C3:EB:11:C7:B3:96:15:8C Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 Certificate issuer: /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Certificate serial: 0894 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft Manifest number: 614C Signing time: Thu 16 Apr 2026 14:15:20 +0000 Manifest this update: Thu 16 Apr 2026 14:15:19 +0000 Manifest next update: Thu 23 Apr 2026 14:15:19 +0000 Files and hashes: 1: CC8e6S_qY3P9odWuxG4vLYrorIc.crl (hash: CpYmLg+E8WCFBU9k0VYPgq6lNtL6sz44oBUxn232qV0=) 2: D64176D81B9911ECAB0E1678C4F9AE02.roa (hash: Bvd1DVqbTNJSqvO20x1gAUmMTRKzz6mu9NujNo2jErs=) 3: 813E372A946711F081C10711C4F9AE02.roa (hash: 57qvv/Ci0wiylgCxyBLGHmCnzd/A0UFm3lCKkdUKpX8=) 4: 8272E36003BD11EBB416B77DC4F9AE02.roa (hash: /zXttT1/Z+BZbViTAHk4/AzLjMQjrMWW94BldELHaro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2196 (0x894) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Validity Not Before: Apr 16 14:15:19 2026 GMT Not After : Apr 23 14:15:19 2026 GMT Subject: CN=69e0eef7-2d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d6:d9:11:3b:7f:39:fa:77:d7:3f:4a:a7:5e: ab:1a:ed:f3:08:f7:48:dc:dc:86:36:75:07:f0:46: 63:69:94:e1:21:c1:83:6b:93:a4:1e:cd:34:93:e3: 05:ba:c1:76:ca:aa:36:bb:d3:8c:3f:d8:3a:23:a4: 36:8c:8d:20:72:1b:4f:5f:46:8a:e9:2d:d4:6e:8c: d9:54:0e:0c:9a:be:69:a4:46:28:96:d6:14:37:f5: c3:42:8f:27:4f:84:5b:af:0a:5d:4d:f4:96:54:fb: 4d:a0:e5:d6:b8:42:f2:23:82:17:23:44:14:cb:74: 29:fd:a1:ec:81:13:d8:0e:4a:b3:bd:28:68:71:55: 23:e7:79:8e:49:cb:2d:2e:d0:a5:fc:c3:c4:a0:e9: db:58:30:85:95:09:a6:b1:75:1c:15:87:c7:f2:37: a1:1a:aa:2b:2e:09:ca:0b:76:97:09:ad:fe:b3:76: a8:f2:08:2e:be:aa:98:1d:4e:6d:10:2e:42:36:ed: b8:c7:56:3c:e4:07:4d:d7:61:77:19:6e:6b:21:1b: 75:70:3f:38:90:ac:19:ea:83:e8:76:1a:f2:01:19: 81:a9:40:a9:6f:55:62:07:4c:bc:fd:67:07:a6:50: f7:7e:2e:c2:fb:71:18:97:09:42:09:43:1d:8f:89: a2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B3:8F:93:E8:D5:88:72:BC:DB:BC:42:C3:EB:11:C7:B3:96:15:8C X509v3 Authority Key Identifier: keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:49:8c:60:5f:5e:d2:4b:9e:96:28:4a:fe:fd:f9:39:7c:05: e2:d3:24:94:64:63:b4:d7:42:66:e5:43:bc:85:a2:2c:4b:32: a2:3d:06:61:6a:d9:4a:e0:bf:04:8a:0a:77:6f:31:55:c5:13: 5d:b5:9c:21:57:5b:07:72:87:e9:37:04:46:5a:fe:a9:91:ef: c5:76:39:c8:f3:b8:99:1c:4c:96:6f:65:04:e8:c8:5f:bb:92: 41:a5:c9:e3:87:17:1c:91:81:c4:65:cf:fb:ca:b4:88:b8:e4: 7e:2e:e4:d6:d1:63:2d:0f:0b:2d:2c:dc:68:cb:8c:2c:94:05: fd:38:72:2d:ae:bb:35:b1:ee:c7:ea:9e:6b:81:08:1d:67:67: 3d:05:75:77:57:7a:90:24:18:94:db:03:36:07:81:be:55:ae: f7:6a:0e:0c:7c:25:7b:4d:fc:97:d7:d0:80:01:ea:d2:77:bb: 67:82:48:65:6b:27:59:77:40:0a:03:e1:f1:e2:0e:17:2d:f9: 45:98:d3:a7:64:1b:82:a7:b5:e3:b1:09:0b:e1:c8:19:43:c8: 4e:7c:8c:d7:2b:3c:37:df:e3:8a:c2:21:21:3f:7c:c2:c7:c4: 03:53:ac:8f:3a:80:88:53:6c:65:11:87:3f:7b:8e:12:46:10: d5:d2:07:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDA4MkYxRUU5MkZFQTYzNzNGREExRDVBRUM0NkUyRjJE OEFFOEFDODcwHhcNMjYwNDE2MTQxNTE5WhcNMjYwNDIzMTQxNTE5WjAYMRYwFAYD VQQDEw02OWUwZWVmNy0yZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNbZETt/Ofp31z9Kp16rGu3zCPdI3NyGNnUH8EZjaZThIcGDa5OkHs00k+MF usF2yqo2u9OMP9g6I6Q2jI0gchtPX0aK6S3UbozZVA4Mmr5ppEYoltYUN/XDQo8n T4RbrwpdTfSWVPtNoOXWuELyI4IXI0QUy3Qp/aHsgRPYDkqzvShocVUj53mOScst LtCl/MPEoOnbWDCFlQmmsXUcFYfH8jehGqorLgnKC3aXCa3+s3ao8gguvqqYHU5t EC5CNu24x1Y85AdN12F3GW5rIRt1cD84kKwZ6oPodhryARmBqUCpb1ViB0y8/WcH plD3fi7C+3EYlwlCCUMdj4miLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKCzj5Po 1YhyvNu8QsPrEcezlhWMMB8GA1UdIwQYMBaAFAgvHukv6mNz/aHVrsRuLy2K6KyH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkzUDlvZFd1eEc0dkxZcm9y SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NDOGU2U19xWTNQOW9kV3V4RzR2TFlyb3JJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkz UDlvZFd1eEc0dkxZcm9ySWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADkmMYF9e0kuelihK/v35OXwF4tMklGRjtNdCZuVDvIWiLEsyoj0GYWrZSuC/ BIoKd28xVcUTXbWcIVdbB3KH6TcERlr+qZHvxXY5yPO4mRxMlm9lBOjIX7uSQaXJ 44cXHJGBxGXP+8q0iLjkfi7k1tFjLQ8LLSzcaMuMLJQF/ThyLa67NbHux+qea4EI HWdnPQV1d1d6kCQYlNsDNgeBvlWu92oODHwle038l9fQgAHq0ne7Z4JIZWsnWXdA CgPh8eIOFy35RZjTp2Qbgqe147EJC+HIGUPITnyM1ys8N9/jisIhIT98wsfEA1Os jzqAiFNsZRGHP3uOEkYQ1dIH8g== -----END CERTIFICATE-----Generated at Fri Apr 17 05:28:12 2026 by rpki-client