$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft File: CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft (raw, json) Hash identifier: /rhzfYf1iDdA/EhqtQdlFc8L/BdvIzzeu3oIo70MMrs= Subject key identifier: 7E:C5:FC:0D:99:A7:5E:F3:C9:01:5D:18:96:6A:11:59:A9:94:51:F8 Authority key identifier: 0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 Certificate issuer: /CN=A9176E1D/serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft Manifest number: 4A Signing time: Sat 19 Jul 2025 07:38:31 +0000 Manifest this update: Sat 19 Jul 2025 07:38:30 +0000 Manifest next update: Sat 26 Jul 2025 07:38:30 +0000 Files and hashes: 1: CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl (hash: YEDID6l8oqlrzMCpxDX5lXp3GlpcealABaz/Ek6GZ2A=) 2: 8A5CF8F0FB7411EF83C11685C4F9AE02.roa (hash: gNUxEstcyYM8bAYzOWKSq0siVBhwvrTxTLZTCsVvFik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176E1D, serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Validity Not Before: Jul 19 07:38:30 2025 GMT Not After : Jul 26 07:38:30 2025 GMT Subject: CN=687b4b77-c725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0c:6c:10:f9:c8:0f:1f:f0:a4:db:9f:f7:a6: 97:d5:5d:71:b3:be:2b:4f:12:34:8a:e5:02:b1:52: 2b:7d:b5:64:8f:05:ac:3b:1c:7c:e3:f6:d7:bb:94: 40:3a:65:c6:7a:61:d7:6f:a6:ee:f3:5d:14:81:eb: 3f:7c:8d:7e:32:3d:a9:68:1c:58:a3:91:9a:88:65: 54:af:cc:16:33:3f:13:87:a1:25:1c:c3:e2:db:9c: fb:3f:6f:1e:fa:37:1a:3a:4f:fc:55:72:a5:24:4c: 15:8d:e8:55:c5:55:f1:87:e1:02:cf:fa:33:3c:f6: d8:30:d3:11:24:07:03:49:55:b3:af:58:c3:0a:a9: ac:26:17:d4:11:bb:70:aa:bb:e3:c2:1f:8b:f5:99: 84:c5:09:2e:25:6e:ab:9b:57:34:78:d3:86:2f:d8: 01:a4:06:0f:49:dc:65:b6:75:2b:e1:8b:d9:df:00: 91:55:2e:59:8f:43:46:6e:8c:07:82:cb:98:17:fb: c5:b1:41:4f:e7:c9:bd:84:0f:00:33:ed:ad:6c:41: 69:4f:be:49:03:79:42:89:d7:53:d7:bf:fb:41:86: ea:3c:ed:7b:69:b3:f7:c2:2a:c9:c7:6a:1f:71:a9: 78:f0:52:73:e1:43:84:81:33:30:27:c8:c6:1f:a8: f8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C5:FC:0D:99:A7:5E:F3:C9:01:5D:18:96:6A:11:59:A9:94:51:F8 X509v3 Authority Key Identifier: keyid:0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:93:26:d8:0f:d0:a7:cb:20:a6:85:4a:db:ef:1a:58:e7:bd: 90:fd:3d:a4:f2:57:cc:6c:f6:37:32:03:78:b1:dc:50:56:ad: 97:d7:45:e2:d8:24:ba:c1:7e:6f:74:6a:67:e8:66:38:8c:41: c6:0c:b3:ea:19:a3:7b:14:15:48:29:fc:a9:43:74:2d:4d:b2: a5:ad:cd:e4:89:18:ca:c8:0b:2f:2f:a1:e2:e6:4a:b3:7c:98: 47:eb:e7:03:38:2c:7d:01:ad:32:98:01:4f:a5:55:f2:e8:33: 3c:59:0b:21:f2:48:af:9b:2e:d0:20:af:e3:fb:36:0e:de:d8: 36:e6:0c:e6:e7:35:fa:fb:e0:b1:a4:79:32:97:83:57:c7:d5: 77:08:fc:a4:97:ce:2b:ac:08:87:17:ec:92:1f:0c:90:4b:33: 0b:b1:69:86:22:d3:ba:58:19:1c:9a:7a:9a:2f:86:c6:38:6b: 6e:a4:a4:c4:ce:bf:51:be:02:72:e0:58:66:2c:01:b8:5f:8c: 8f:c5:e7:c0:2a:58:be:24:03:ad:3e:34:27:5e:05:6d:a4:81: e1:7a:77:d8:cc:32:07:4e:88:0e:7f:df:57:c8:ea:da:54:6a: 8e:65:23:c1:1a:63:5f:0b:b6:2a:e3:e6:e3:60:74:ce:03:8e: a7:51:19:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NkUxRDExMC8GA1UEBRMoMEFBNkU0ODMyODQyNUUxMjRDNTYxQzJBQzE4N0M4QTE5 NjI0NzExMDAeFw0yNTA3MTkwNzM4MzBaFw0yNTA3MjYwNzM4MzBaMBgxFjAUBgNV BAMTDTY4N2I0Yjc3LWM3MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjDGwQ+cgPH/Ck25/3ppfVXXGzvitPEjSK5QKxUit9tWSPBaw7HHzj9te7lEA6 ZcZ6Yddvpu7zXRSB6z98jX4yPaloHFijkZqIZVSvzBYzPxOHoSUcw+LbnPs/bx76 Nxo6T/xVcqUkTBWN6FXFVfGH4QLP+jM89tgw0xEkBwNJVbOvWMMKqawmF9QRu3Cq u+PCH4v1mYTFCS4lbqubVzR404Yv2AGkBg9J3GW2dSvhi9nfAJFVLlmPQ0ZujAeC y5gX+8WxQU/nyb2EDwAz7a1sQWlPvkkDeUKJ11PXv/tBhuo87Xtps/fCKsnHah9x qXjwUnPhQ4SBMzAnyMYfqPgBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfsX8DZmn XvPJAV0YlmoRWamUUfgwHwYDVR0jBBgwFoAUCqbkgyhCXhJMVhwqwYfIoZYkcRAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2RTFEL0ZFODgzNUJDRjlG MDExRUZCNzdBOEM2RUM0RjlBRTAyL0NxYmtneWhDWGhKTVZod3F3WWZJb1pZa2NS QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3Fia2d5aENYaEpNVmh3cXdZZklvWllrY1JBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2 RTFEL0ZFODgzNUJDRjlGMDExRUZCNzdBOEM2RUM0RjlBRTAyL0NxYmtneWhDWGhK TVZod3F3WWZJb1pZa2NSQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFyTJtgP0KfLIKaFStvvGljnvZD9PaTyV8xs9jcyA3ix3FBWrZfXReLY JLrBfm90amfoZjiMQcYMs+oZo3sUFUgp/KlDdC1NsqWtzeSJGMrICy8voeLmSrN8 mEfr5wM4LH0BrTKYAU+lVfLoMzxZCyHySK+bLtAgr+P7Ng7e2DbmDObnNfr74LGk eTKXg1fH1XcI/KSXziusCIcX7JIfDJBLMwuxaYYi07pYGRyaepovhsY4a26kpMTO v1G+AnLgWGYsAbhfjI/F58AqWL4kA60+NCdeBW2kgeF6d9jMMgdOiA5/31fI6tpU ao5lI8EaY18Ltirj5uNgdM4DjqdRGaU= -----END CERTIFICATE-----Generated at Sun Jul 20 20:18:04 2025 by rpki-client