$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft File: ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft (raw, json) Hash identifier: Ds6hFU1FamyGPYFcYZ92giyLHpaEr+jhBBQJyEvdkvU= Subject key identifier: 0F:43:01:84:E6:6E:D5:C2:AB:CE:EB:E9:D3:EF:B4:51:F5:B1:3F:18 Authority key identifier: 71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 Certificate issuer: /CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Certificate serial: 0290 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft Manifest number: 0285 Signing time: Fri 17 Apr 2026 01:36:40 +0000 Manifest this update: Fri 17 Apr 2026 01:36:39 +0000 Manifest next update: Fri 24 Apr 2026 01:36:39 +0000 Files and hashes: 1: ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl (hash: I6CCsNAywVNaGJFrga/c8ANLs1cOYhKwVLqSGKzpmiY=) 2: B46C8BFA89AD11ED93CAB75FC4F9AE02.roa (hash: B6zuGQHiLLMcpOAalP92RoQpZ8Tfo5uy0bH1HnD3XPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE570, serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Validity Not Before: Apr 17 01:36:39 2026 GMT Not After : Apr 24 01:36:39 2026 GMT Subject: CN=69e18ea7-9423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bc:55:69:a2:e1:36:c9:32:60:94:2e:ea:bd: 2b:f8:b3:83:9b:0b:6a:8c:42:ea:e5:68:0a:be:e9: 6d:0b:36:cf:9e:ac:85:ea:bf:f6:8f:da:b2:51:fe: 94:b1:e2:6d:b3:03:a1:82:36:60:ed:35:73:1e:4b: df:50:9f:14:2b:9b:15:f7:17:d5:8e:b5:65:8b:1e: b1:98:70:94:dc:b7:d5:be:37:7b:a1:00:70:d1:28: eb:8d:30:38:28:61:76:7e:8b:12:94:c7:65:e1:e1: cd:de:0f:49:fa:29:b5:e7:87:13:f2:ac:5a:28:15: 8c:ed:57:83:b2:d3:e3:a5:48:82:20:f2:4d:da:e3: d5:95:54:ef:fe:f6:5f:57:76:84:8d:55:17:24:5a: be:38:8e:8a:b9:e8:37:0a:7b:b1:13:d2:7b:5b:a2: b7:63:e5:c2:0a:40:10:de:80:db:7c:aa:ee:da:a5: fe:4d:ff:83:6b:69:5d:b1:11:e2:72:45:76:4b:a6: 16:b0:a7:32:77:d4:2d:0b:6e:ad:8c:94:8f:30:c1: 05:b7:da:d4:97:f7:77:a6:ab:e5:e8:6e:0f:9d:bb: 65:f9:b6:af:48:89:85:8c:0c:3a:2c:0a:49:14:ef: 66:e4:fa:c2:83:80:12:e1:52:0e:82:e4:02:9e:57: a7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:43:01:84:E6:6E:D5:C2:AB:CE:EB:E9:D3:EF:B4:51:F5:B1:3F:18 X509v3 Authority Key Identifier: keyid:71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3b:06:fa:e5:b0:3e:e6:e9:04:77:44:74:92:cc:e0:20:08: 9e:9f:7e:77:fb:f0:23:b5:d7:96:27:bd:f8:71:a5:30:af:51: e5:1b:24:22:d5:58:f2:5a:f4:c2:c3:8e:d6:89:cd:39:bb:54: 9c:24:16:57:c9:cb:79:77:38:e7:58:ef:8c:62:bb:b7:bd:fd: 01:10:de:82:fa:1c:d4:c7:57:8b:84:27:43:12:ad:c0:17:d8: f9:68:29:b0:15:71:21:4e:1a:76:b6:7c:e9:cc:43:4d:51:de: d0:4e:4a:da:55:2d:3a:68:12:cd:84:9c:78:6d:86:e3:22:6c: ac:77:39:81:f0:bc:7f:44:52:fc:46:92:89:d9:0f:6b:dc:c2: f1:42:17:6f:66:7b:3c:8e:c0:96:74:3f:1b:fe:39:46:80:49: 81:46:f5:59:3e:43:20:ae:62:5e:fd:63:2d:1b:70:0f:3a:6a: 30:3b:fb:2a:83:5d:17:95:b3:23:e8:aa:06:78:b5:99:5b:82: 65:ad:9e:e0:9c:fa:eb:a2:be:2e:6a:1e:0d:54:56:50:42:b7: 5e:3d:9c:f4:46:59:22:43:a2:9e:83:83:08:4d:7e:d2:68:5a: 2d:38:c3:d5:4b:d4:dd:0b:81:b9:25:31:47:ae:97:95:e2:39: 8b:ec:e8:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1NzAxMTAvBgNVBAUTKDcxQzEyN0QxQzA2QUZDN0M0NTRERDEwOTNFQjJDQjdF MTJENzg3QzAwHhcNMjYwNDE3MDEzNjM5WhcNMjYwNDI0MDEzNjM5WjAYMRYwFAYD VQQDEw02OWUxOGVhNy05NDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7xVaaLhNskyYJQu6r0r+LODmwtqjELq5WgKvultCzbPnqyF6r/2j9qyUf6U seJtswOhgjZg7TVzHkvfUJ8UK5sV9xfVjrVlix6xmHCU3LfVvjd7oQBw0SjrjTA4 KGF2fosSlMdl4eHN3g9J+im154cT8qxaKBWM7VeDstPjpUiCIPJN2uPVlVTv/vZf V3aEjVUXJFq+OI6Kueg3CnuxE9J7W6K3Y+XCCkAQ3oDbfKru2qX+Tf+Da2ldsRHi ckV2S6YWsKcyd9QtC26tjJSPMMEFt9rUl/d3pqvl6G4Pnbtl+bavSImFjAw6LApJ FO9m5PrCg4AS4VIOguQCnlenpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA9DAYTm btXCq87r6dPvtFH1sT8YMB8GA1UdIwQYMBaAFHHBJ9HAavx8RU3RCT6yy34S14fA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTU3MC9DMkNCMTE5QzY1 ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9IeEZUZEVKUHJMTGZoTFho OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjRW4wY0JxX0h4RlRkRUpQckxMZmhMWGg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTU3MC9DMkNCMTE5QzY1ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9I eEZUZEVKUHJMTGZoTFhoOEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmzsG+uWwPubpBHdEdJLM4CAInp9+d/vwI7XXlie9+HGlMK9R5RskItVY8lr0 wsOO1onNObtUnCQWV8nLeXc451jvjGK7t739ARDegvoc1MdXi4QnQxKtwBfY+Wgp sBVxIU4adrZ86cxDTVHe0E5K2lUtOmgSzYSceG2G4yJsrHc5gfC8f0RS/EaSidkP a9zC8UIXb2Z7PI7AlnQ/G/45RoBJgUb1WT5DIK5iXv1jLRtwDzpqMDv7KoNdF5Wz I+iqBni1mVuCZa2e4Jz666K+LmoeDVRWUEK3Xj2c9EZZIkOinoODCE1+0mhaLTjD 1UvU3QuBuSUxR66XleI5i+zocA== -----END CERTIFICATE-----Generated at Fri Apr 17 12:33:27 2026 by rpki-client