$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft File: CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft (raw, json) Hash identifier: 8zRj6u5FtmpUSjVpuR6BOaU+MBtAjxpKBEiqb6Up7Oo= Subject key identifier: DA:8F:12:43:CD:6A:20:76:B3:F6:49:34:AF:14:5D:1C:EA:52:D5:9D Authority key identifier: 0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 Certificate issuer: /CN=A9176E1D/serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft Manifest number: 7D Signing time: Wed 22 Oct 2025 03:56:51 +0000 Manifest this update: Wed 22 Oct 2025 03:56:50 +0000 Manifest next update: Wed 29 Oct 2025 03:56:50 +0000 Files and hashes: 1: CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl (hash: hMpXIazaVpkri0k7oMPCrIHpirpt5POJzW7AgFce9N8=) 2: 8A5CF8F0FB7411EF83C11685C4F9AE02.roa (hash: gNUxEstcyYM8bAYzOWKSq0siVBhwvrTxTLZTCsVvFik=) 3: 4C9617646D0611F0BBBF9039C4F9AE02.roa (hash: Vaj7yoUJUzeUA3126kxNxsmUyuPrhpFqRcjaAWEYWYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 03:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176E1D, serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Validity Not Before: Oct 22 03:56:50 2025 GMT Not After : Oct 29 03:56:50 2025 GMT Subject: CN=68f85603-6ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:72:0e:ee:02:ad:48:ae:50:18:73:0e:00:ca: aa:73:51:3d:b4:a4:89:d1:70:dc:68:f7:c1:7d:33: c7:91:b4:1e:da:a0:9a:b7:bc:4d:a9:d9:7d:93:6a: ac:3c:06:f0:08:d1:12:5e:49:6d:51:65:a0:71:58: 48:e8:da:4f:da:6f:72:a2:cd:a3:08:bc:83:d1:89: 2e:d5:1a:9b:17:3f:03:52:72:5a:98:ed:e6:3e:75: 59:83:74:87:97:0c:10:1c:fc:e6:f9:06:31:12:bd: 1e:bd:54:48:5f:67:78:61:ff:2f:d0:b4:d0:cf:fd: 7a:df:ea:cf:ca:01:eb:c1:e8:12:4e:f5:1d:62:c4: 97:91:cf:71:3a:61:9d:57:b4:9a:cb:d2:b5:f1:86: c1:72:c1:2c:5d:5a:d2:39:37:81:ce:96:e0:f6:02: 3c:73:f7:e5:85:fc:05:9e:30:60:a7:a2:cd:8d:f5: 8a:df:03:ca:03:bf:2a:f4:1f:b3:6b:e5:f9:e5:97: c7:87:92:02:88:99:54:08:6f:58:b7:d5:1f:a4:1f: 45:fa:93:e8:88:df:15:09:aa:75:ac:79:3c:10:75: 74:f6:ed:76:d8:b1:bc:c3:3a:af:b9:4f:2b:87:92: 4e:2a:23:f6:83:d7:1e:d0:f2:b0:68:d2:74:24:58: 40:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8F:12:43:CD:6A:20:76:B3:F6:49:34:AF:14:5D:1C:EA:52:D5:9D X509v3 Authority Key Identifier: keyid:0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:a4:dd:3b:c1:33:7b:ff:cd:4d:f2:04:78:a4:52:5d:f2:99: 55:c5:46:0e:f7:27:2c:07:ad:5b:ca:7c:f0:d4:9e:52:8c:a5: bc:81:1e:e1:54:97:f0:61:99:98:5b:4a:4a:dc:d5:db:5d:cd: e8:e6:bb:76:2f:34:e6:79:e1:47:ca:b8:5a:7d:54:57:5b:a7: f3:9b:2f:ea:32:c1:79:ac:67:70:bd:0a:5c:eb:a6:a1:6c:49: 27:63:91:90:ad:45:24:f1:83:c6:60:27:d3:97:fc:2e:c8:14: 79:2d:07:96:7f:34:5e:82:a4:3b:97:a8:b4:87:bf:36:71:c6: 5b:ec:a7:6f:22:7f:a5:9d:97:37:fd:7f:35:16:f4:32:95:48: 84:06:1c:18:0d:68:27:aa:25:5e:2d:d2:cc:eb:32:33:8b:2e: 7f:f1:a4:92:60:f5:07:3f:b5:64:69:9e:e9:a9:1c:5a:21:c1: e6:bf:9f:35:81:ca:21:d8:11:04:0e:d2:df:d9:71:81:83:26: 69:27:2f:9f:02:b5:99:12:4a:78:47:7d:ce:1c:7c:1e:ea:b9: 25:4f:5c:8f:75:b7:8a:52:23:f9:8b:ed:0d:1d:4a:83:e9:c0: 81:42:6d:8c:4a:07:26:64:fa:ac:4f:ac:06:05:65:9e:f2:49: 1d:78:f4:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZFMUQxMTAvBgNVBAUTKDBBQTZFNDgzMjg0MjVFMTI0QzU2MUMyQUMxODdDOEEx OTYyNDcxMTAwHhcNMjUxMDIyMDM1NjUwWhcNMjUxMDI5MDM1NjUwWjAYMRYwFAYD VQQDEw02OGY4NTYwMy02YWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3IO7gKtSK5QGHMOAMqqc1E9tKSJ0XDcaPfBfTPHkbQe2qCat7xNqdl9k2qs PAbwCNESXkltUWWgcVhI6NpP2m9yos2jCLyD0Yku1RqbFz8DUnJamO3mPnVZg3SH lwwQHPzm+QYxEr0evVRIX2d4Yf8v0LTQz/163+rPygHrwegSTvUdYsSXkc9xOmGd V7Say9K18YbBcsEsXVrSOTeBzpbg9gI8c/flhfwFnjBgp6LNjfWK3wPKA78q9B+z a+X55ZfHh5ICiJlUCG9Yt9UfpB9F+pPoiN8VCap1rHk8EHV09u122LG8wzqvuU8r h5JOKiP2g9ce0PKwaNJ0JFhAUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqPEkPN aiB2s/ZJNK8UXRzqUtWdMB8GA1UdIwQYMBaAFAqm5IMoQl4STFYcKsGHyKGWJHEQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkUxRC9GRTg4MzVCQ0Y5 RjAxMUVGQjc3QThDNkVDNEY5QUUwMi9DcWJrZ3loQ1hoSk1WaHdxd1lmSW9aWWtj UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxYmtneWhDWGhKTVZod3F3WWZJb1pZa2NSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkUxRC9GRTg4MzVCQ0Y5RjAxMUVGQjc3QThDNkVDNEY5QUUwMi9DcWJrZ3loQ1ho Sk1WaHdxd1lmSW9aWWtjUkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1pN07wTN7/81N8gR4pFJd8plVxUYO9ycsB61bynzw1J5SjKW8gR7h VJfwYZmYW0pK3NXbXc3o5rt2LzTmeeFHyrhafVRXW6fzmy/qMsF5rGdwvQpc66ah bEknY5GQrUUk8YPGYCfTl/wuyBR5LQeWfzRegqQ7l6i0h782ccZb7KdvIn+lnZc3 /X81FvQylUiEBhwYDWgnqiVeLdLM6zIziy5/8aSSYPUHP7VkaZ7pqRxaIcHmv581 gcoh2BEEDtLf2XGBgyZpJy+fArWZEkp4R33OHHwe6rklT1yPdbeKUiP5i+0NHUqD 6cCBQm2MSgcmZPqsT6wGBWWe8kkdePSC -----END CERTIFICATE-----Generated at Thu Oct 23 09:53:35 2025 by rpki-client