$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft File: CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft (raw, json) Hash identifier: RpmCPu2OwlXKMnZhNEeHnFITemnxt08pM2zLf8S34YE= Subject key identifier: 31:90:98:1B:55:17:19:39:E1:7E:F4:23:7C:19:76:00:4F:09:1E:1A Authority key identifier: 0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 Certificate issuer: /CN=A9176E1D/serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft Manifest number: DF Signing time: Mon 27 Apr 2026 06:31:08 +0000 Manifest this update: Mon 27 Apr 2026 06:31:07 +0000 Manifest next update: Mon 04 May 2026 06:31:07 +0000 Files and hashes: 1: CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl (hash: mXUF3pNbMzzGHjT730xVe8BQs85ktNgjDUYJ0iYKnkE=) 2: 4C9617646D0611F0BBBF9039C4F9AE02.roa (hash: 6iagXbwelFTv+z13CzlJVVdQEfq1ejqOSRUBaH/dx/U=) 3: 8A5CF8F0FB7411EF83C11685C4F9AE02.roa (hash: BXF5GaN7BN9OMdHAEE/H/k4SW8586+AXOrre41n6sT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 06:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176E1D, serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Validity Not Before: Apr 27 06:31:07 2026 GMT Not After : May 4 06:31:07 2026 GMT Subject: CN=69ef02ac-d1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:be:dd:8c:f1:b8:86:fe:4f:e8:c0:58:d4:19: fb:18:80:5e:8b:87:76:2d:38:c4:aa:4e:73:36:98: 27:61:41:c1:2f:e9:10:c0:ec:79:3d:e0:01:af:92: 26:77:0d:7f:8b:b3:cd:b7:a1:e1:2b:f5:b0:45:0b: c9:d7:f3:64:98:66:09:44:1a:90:99:93:1c:a4:79: 1b:42:ce:38:0e:dc:cb:9a:7b:9c:a7:1a:96:5d:b5: 23:55:b7:22:76:76:eb:2b:14:ac:66:3b:87:7b:d3: e4:4b:82:3b:3d:e3:4a:0c:3e:d9:99:c2:ed:86:65: 56:2a:fd:d3:58:75:c5:02:1a:1a:40:b2:ca:87:82: d5:bc:e3:77:39:ab:6c:07:96:89:a1:24:de:81:f1: c7:47:a0:0e:57:9a:38:01:37:f1:1d:64:3c:a2:08: c2:15:4d:80:2b:ca:eb:f8:e7:de:c7:9c:2e:70:f4: 72:cd:56:07:0d:37:16:04:c5:db:8f:16:a2:c7:5b: 4a:24:19:8e:f2:e7:fb:5c:49:1e:6e:9c:0b:04:12: 6b:5b:c1:b3:0f:75:06:9c:8c:fe:59:e3:71:13:a7: 14:0d:0b:1b:db:47:9c:3c:ab:84:b4:35:9d:8b:6d: ea:cb:52:37:05:bc:ba:ca:13:cf:74:6d:cb:3c:a1: e9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:90:98:1B:55:17:19:39:E1:7E:F4:23:7C:19:76:00:4F:09:1E:1A X509v3 Authority Key Identifier: keyid:0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:88:b0:29:b3:c5:78:78:4b:4e:6e:b8:d5:34:a5:e1:ed:7b: 37:06:09:bc:9c:ab:c0:f0:58:b9:cf:53:a0:62:e5:de:8b:72: 0f:87:ef:bc:2d:3b:79:9b:3a:91:e4:61:f4:74:51:df:11:9e: 6a:f9:94:ec:6d:e0:01:d2:d1:b9:7a:64:be:3e:7d:b0:09:7d: 4d:23:87:4b:e2:9e:fc:17:f6:00:d8:84:a7:7d:30:b1:1d:60: d1:f3:5b:01:32:6a:e9:8a:83:bd:bd:60:dc:32:ef:0e:ff:08: ba:06:1b:06:21:07:08:e4:ff:dd:f3:4e:13:3c:c2:64:fc:2b: 74:af:7f:4f:f4:a6:66:f4:f0:dd:c6:77:c2:71:df:e7:09:6f: b8:12:ac:55:0c:37:b2:35:a7:56:b3:47:61:d7:7c:85:e3:22: 78:18:ba:9b:f3:1c:2e:dd:9d:72:c1:d0:d2:6f:2a:61:23:d6: 4e:31:ec:f4:02:8f:23:f5:c9:11:55:f4:3d:cd:4a:8d:59:81: 0e:e0:9f:30:36:d4:26:91:01:49:0d:9a:cc:9e:3c:8c:0f:db: 64:bd:6d:51:76:d2:10:6f:9e:4a:ad:3c:2d:76:9a:80:6c:98: b4:6e:6a:e9:c2:49:82:0d:6a:eb:f3:27:3f:e7:ba:01:43:81: 5a:f3:e0:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZFMUQxMTAvBgNVBAUTKDBBQTZFNDgzMjg0MjVFMTI0QzU2MUMyQUMxODdDOEEx OTYyNDcxMTAwHhcNMjYwNDI3MDYzMTA3WhcNMjYwNTA0MDYzMTA3WjAYMRYwFAYD VQQDEw02OWVmMDJhYy1kMWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlL7djPG4hv5P6MBY1Bn7GIBei4d2LTjEqk5zNpgnYUHBL+kQwOx5PeABr5Im dw1/i7PNt6HhK/WwRQvJ1/NkmGYJRBqQmZMcpHkbQs44DtzLmnucpxqWXbUjVbci dnbrKxSsZjuHe9PkS4I7PeNKDD7ZmcLthmVWKv3TWHXFAhoaQLLKh4LVvON3Oats B5aJoSTegfHHR6AOV5o4ATfxHWQ8ogjCFU2AK8rr+Ofex5wucPRyzVYHDTcWBMXb jxaix1tKJBmO8uf7XEkebpwLBBJrW8GzD3UGnIz+WeNxE6cUDQsb20ecPKuEtDWd i23qy1I3Bby6yhPPdG3LPKHpXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDGQmBtV Fxk54X70I3wZdgBPCR4aMB8GA1UdIwQYMBaAFAqm5IMoQl4STFYcKsGHyKGWJHEQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkUxRC9GRTg4MzVCQ0Y5 RjAxMUVGQjc3QThDNkVDNEY5QUUwMi9DcWJrZ3loQ1hoSk1WaHdxd1lmSW9aWWtj UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxYmtneWhDWGhKTVZod3F3WWZJb1pZa2NSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkUxRC9GRTg4MzVCQ0Y5RjAxMUVGQjc3QThDNkVDNEY5QUUwMi9DcWJrZ3loQ1ho Sk1WaHdxd1lmSW9aWWtjUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOIiwKbPFeHhLTm641TSl4e17NwYJvJyrwPBYuc9ToGLl3otyD4fvvC07eZs6 keRh9HRR3xGeavmU7G3gAdLRuXpkvj59sAl9TSOHS+Ke/Bf2ANiEp30wsR1g0fNb ATJq6YqDvb1g3DLvDv8IugYbBiEHCOT/3fNOEzzCZPwrdK9/T/SmZvTw3cZ3wnHf 5wlvuBKsVQw3sjWnVrNHYdd8heMieBi6m/McLt2dcsHQ0m8qYSPWTjHs9AKPI/XJ EVX0Pc1KjVmBDuCfMDbUJpEBSQ2azJ48jA/bZL1tUXbSEG+eSq08LXaagGyYtG5q 6cJJgg1q6/MnP+e6AUOBWvPg+A== -----END CERTIFICATE-----Generated at Tue Apr 28 13:39:34 2026 by rpki-client