$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft File: CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft (raw, json) Hash identifier: 2zIlD5LoiN6zCKHN2SePx4+MeERU/8Pg5k+9R/JLnK0= Subject key identifier: CE:D9:5E:BE:98:22:C6:C9:BF:01:DC:13:17:D5:7D:E0:61:C9:78:B8 Authority key identifier: 0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 Certificate issuer: /CN=A9176E1D/serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft Manifest number: 67 Signing time: Sun 07 Sep 2025 07:34:46 +0000 Manifest this update: Sun 07 Sep 2025 07:34:45 +0000 Manifest next update: Sun 14 Sep 2025 07:34:45 +0000 Files and hashes: 1: CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl (hash: ZJrPp3h1IM5GPTX0d72TmP1dM7/meOF1MjahhdCTtTs=) 2: 8A5CF8F0FB7411EF83C11685C4F9AE02.roa (hash: gNUxEstcyYM8bAYzOWKSq0siVBhwvrTxTLZTCsVvFik=) 3: 4C9617646D0611F0BBBF9039C4F9AE02.roa (hash: Vaj7yoUJUzeUA3126kxNxsmUyuPrhpFqRcjaAWEYWYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 07:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176E1D, serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Validity Not Before: Sep 7 07:34:45 2025 GMT Not After : Sep 14 07:34:45 2025 GMT Subject: CN=68bd3595-4f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:53:09:87:25:31:a4:09:24:7c:d8:2b:58:27: c7:68:3c:24:b5:0f:16:fe:24:32:e2:5c:f7:cb:05: 96:a4:d9:94:e1:f8:3f:98:bd:b5:11:c3:9e:19:36: bb:6f:59:eb:51:cf:64:2c:48:03:27:39:05:f5:61: 30:2c:a7:6b:49:fe:3c:98:7c:0c:30:4b:c1:2c:d2: 42:be:63:65:1c:f9:16:1f:29:57:45:9e:c6:36:f7: 91:da:fb:1f:72:53:95:f2:f4:f3:2b:17:14:fb:48: 3a:0b:b4:eb:0c:7c:73:44:60:54:94:f3:2a:0b:16: a2:05:5b:f7:8e:83:a2:ed:e3:99:2f:51:c6:20:c0: ad:8e:31:af:bf:8e:72:b9:ff:48:ff:43:07:94:28: 67:6a:a0:7e:f2:8f:bb:50:a8:f3:01:40:ea:82:57: 46:1d:ac:ae:84:16:ec:94:43:c8:8d:9e:10:ed:51: 1a:88:d4:79:0b:8f:d5:78:8e:ee:ea:39:fa:ef:de: df:29:9a:3c:ce:0b:8c:ff:e2:8c:9d:e0:60:f9:2f: ec:af:18:a7:5a:26:70:f0:b3:87:07:63:73:4d:47: aa:c7:59:e8:c9:65:6c:b3:1d:52:29:1c:ca:f4:3f: 5f:48:da:f0:8b:cd:7a:21:aa:68:34:91:9e:eb:ca: 5c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D9:5E:BE:98:22:C6:C9:BF:01:DC:13:17:D5:7D:E0:61:C9:78:B8 X509v3 Authority Key Identifier: keyid:0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:7e:0b:46:2e:14:f2:90:02:ef:3f:ea:f8:01:cc:fb:c8:01: c8:aa:c3:7d:2e:3c:ec:cd:ad:6d:dd:22:a7:d9:6a:61:89:8b: d8:ea:64:a5:14:58:19:1d:b7:c1:d8:27:36:e4:ba:c8:bf:2e: 9b:e2:ed:65:56:2c:6f:86:9b:3b:86:b3:6e:73:00:f6:cc:e7: 9a:b4:78:4a:42:02:0f:d6:f3:e3:27:94:5d:a9:87:3f:70:87: 94:03:f5:f0:86:a9:fc:6d:f4:ed:f0:d4:4c:27:dc:2d:95:34: 26:75:ae:77:8c:74:7c:d5:02:6f:6d:dc:62:72:fb:b8:e4:33: 6b:ca:a8:f8:d0:d1:da:35:b2:29:00:87:79:69:0e:03:fb:b8: 59:97:92:f8:91:0f:37:41:cf:16:56:4d:18:82:64:ca:e7:17: ae:57:d1:d1:aa:3d:73:01:28:9e:eb:eb:2a:6f:95:4d:8d:4e: 5f:fb:5f:47:75:75:e3:72:80:f7:37:7b:80:62:e3:62:35:ae: 9a:5d:09:5e:0a:75:c6:b9:5b:46:a8:35:d2:23:20:d8:ca:6a: b4:42:11:e6:c0:49:07:8d:93:0d:6b:fe:eb:0b:58:f6:58:e6: 78:a1:36:22:62:64:68:58:56:10:30:3a:b0:10:35:ec:fa:1d: 22:08:1b:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NkUxRDExMC8GA1UEBRMoMEFBNkU0ODMyODQyNUUxMjRDNTYxQzJBQzE4N0M4QTE5 NjI0NzExMDAeFw0yNTA5MDcwNzM0NDVaFw0yNTA5MTQwNzM0NDVaMBgxFjAUBgNV BAMTDTY4YmQzNTk1LTRmMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/UwmHJTGkCSR82CtYJ8doPCS1Dxb+JDLiXPfLBZak2ZTh+D+YvbURw54ZNrtv WetRz2QsSAMnOQX1YTAsp2tJ/jyYfAwwS8Es0kK+Y2Uc+RYfKVdFnsY295Ha+x9y U5Xy9PMrFxT7SDoLtOsMfHNEYFSU8yoLFqIFW/eOg6Lt45kvUcYgwK2OMa+/jnK5 /0j/QweUKGdqoH7yj7tQqPMBQOqCV0YdrK6EFuyUQ8iNnhDtURqI1HkLj9V4ju7q Ofrv3t8pmjzOC4z/4oyd4GD5L+yvGKdaJnDws4cHY3NNR6rHWejJZWyzHVIpHMr0 P19I2vCLzXohqmg0kZ7rylwtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUztlevpgi xsm/AdwTF9V94GHJeLgwHwYDVR0jBBgwFoAUCqbkgyhCXhJMVhwqwYfIoZYkcRAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2RTFEL0ZFODgzNUJDRjlG MDExRUZCNzdBOEM2RUM0RjlBRTAyL0NxYmtneWhDWGhKTVZod3F3WWZJb1pZa2NS QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3Fia2d5aENYaEpNVmh3cXdZZklvWllrY1JBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2 RTFEL0ZFODgzNUJDRjlGMDExRUZCNzdBOEM2RUM0RjlBRTAyL0NxYmtneWhDWGhK TVZod3F3WWZJb1pZa2NSQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABt+C0YuFPKQAu8/6vgBzPvIAciqw30uPOzNrW3dIqfZamGJi9jqZKUU WBkdt8HYJzbkusi/Lpvi7WVWLG+GmzuGs25zAPbM55q0eEpCAg/W8+MnlF2phz9w h5QD9fCGqfxt9O3w1Ewn3C2VNCZ1rneMdHzVAm9t3GJy+7jkM2vKqPjQ0do1sikA h3lpDgP7uFmXkviRDzdBzxZWTRiCZMrnF65X0dGqPXMBKJ7r6ypvlU2NTl/7X0d1 deNygPc3e4Bi42I1rppdCV4Kdca5W0aoNdIjINjKarRCEebASQeNkw1r/usLWPZY 5nihNiJiZGhYVhAwOrAQNez6HSIIG8A= -----END CERTIFICATE-----Generated at Mon Sep 8 03:31:47 2025 by rpki-client