$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft File: CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft (raw, json) Hash identifier: HbN13EHCsDhAnafhamdCbodBiA+CRywY4aRByINakKQ= Subject key identifier: D2:95:A4:32:85:CB:FF:D5:33:A9:40:BA:8A:9F:F3:BB:C5:52:C3:9A Authority key identifier: 0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 Certificate issuer: /CN=A9176E1D/serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft Manifest number: 0128 Signing time: Fri 11 Sep 2026 05:53:49 +0000 Manifest this update: Fri 11 Sep 2026 05:53:49 +0000 Manifest next update: Fri 18 Sep 2026 05:53:49 +0000 Files and hashes: 1: CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl (hash: yYavSuMmQJ38wzH0AqdxWxpmqR16i2sIU8xOHcM6Iag=) 2: 8A5CF8F0FB7411EF83C11685C4F9AE02.roa (hash: S+nQRnmZXUnFE6DkSM3kkEvhuxoEZtbN5DKGaAMAS/E=) 3: 4C9617646D0611F0BBBF9039C4F9AE02.roa (hash: dVVvRypUK9/KtfRB7/hEbBL1MeEBt6MHgMHLpJHk1uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176E1D, serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Validity Not Before: Sep 11 05:53:49 2026 GMT Not After : Sep 18 05:53:49 2026 GMT Subject: CN=6aa3976d-bb7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:31:4e:5b:5a:cc:a8:47:e3:06:4b:91:b7:8d: 03:31:c4:6e:bb:aa:fa:71:ab:67:35:b4:97:40:f2: d1:48:c1:57:20:02:5c:d3:08:96:4c:e9:bf:3e:15: 06:7f:db:b1:18:80:df:c4:d0:40:3b:b7:49:5e:43: 22:d5:8f:72:18:d7:8b:5f:c8:30:c4:c6:d2:97:2b: fd:53:55:62:21:b8:41:64:b3:7f:7f:86:07:de:22: 9e:19:0a:f2:1e:c2:00:ff:11:3d:6f:7a:d0:5c:44: 2f:50:11:df:de:c2:89:41:3f:32:2d:64:fe:49:7b: 00:43:e3:63:62:e4:34:33:54:36:80:01:a0:b2:82: a7:22:f1:bb:0f:98:24:5c:a9:24:cc:64:fc:2c:54: 2e:01:f8:69:6d:3a:a4:c9:78:69:20:ca:60:40:bb: 52:22:7c:5e:6a:f7:15:60:1d:fb:2a:96:36:57:ba: d7:40:09:53:84:42:6b:0f:39:8d:5a:b3:b6:9c:b6: c0:96:f4:29:ed:fd:72:3b:a2:62:ad:bf:a8:24:48: 33:18:57:d3:85:30:56:79:7b:3b:67:d5:7d:2f:14: 21:dc:d0:f9:d7:be:2a:66:69:8b:50:61:ea:62:43: 22:9a:43:1c:24:8d:f0:52:83:6d:b1:1c:f7:45:ef: 52:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:95:A4:32:85:CB:FF:D5:33:A9:40:BA:8A:9F:F3:BB:C5:52:C3:9A X509v3 Authority Key Identifier: keyid:0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:de:cf:b8:97:8b:10:6b:7f:26:fa:89:02:8f:ac:6e:f3:93: 1e:97:a4:50:1c:bb:12:19:d3:5b:45:49:2e:0e:62:2b:00:4b: fa:9d:47:1b:13:9a:2d:5b:e4:b3:5e:f5:fb:e6:e7:a1:81:18: 7e:18:79:88:62:90:96:16:91:be:19:c9:1c:dd:3d:53:2d:d8: 8b:95:88:2b:5b:e8:b5:06:da:3e:d8:40:4c:27:74:77:f3:bf: 9b:1d:08:cc:e8:b5:4c:76:8a:da:5b:81:a2:ab:92:61:b3:78: bf:d1:89:35:19:cc:ba:ff:c7:1f:b4:88:b5:9d:42:4e:5f:55: bb:db:59:a7:46:77:0b:c4:73:bc:d8:07:84:69:50:53:0e:6f: fe:d7:37:22:ac:9d:f4:7f:a5:5f:08:53:64:09:3b:05:a9:9e: 0b:db:5b:e3:46:46:19:31:41:f9:85:90:7f:f6:11:01:21:4b: 82:bd:9a:63:db:5f:b7:4b:f3:a0:5a:7d:a6:51:d5:ab:e0:9a: 2c:e5:01:4d:87:17:49:6c:9f:18:04:d8:9f:85:32:bb:97:3b: 1d:e5:2b:36:a6:20:75:a2:0f:1b:cf:e4:40:37:8a:df:01:46: 77:25:f4:22:0c:fd:6f:42:35:89:0a:d6:c7:bf:01:5a:d5:a3: c4:88:50:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZFMUQxMTAvBgNVBAUTKDBBQTZFNDgzMjg0MjVFMTI0QzU2MUMyQUMxODdDOEEx OTYyNDcxMTAwHhcNMjYwOTExMDU1MzQ5WhcNMjYwOTE4MDU1MzQ5WjAYMRYwFAYD VQQDEw02YWEzOTc2ZC1iYjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjFOW1rMqEfjBkuRt40DMcRuu6r6catnNbSXQPLRSMFXIAJc0wiWTOm/PhUG f9uxGIDfxNBAO7dJXkMi1Y9yGNeLX8gwxMbSlyv9U1ViIbhBZLN/f4YH3iKeGQry HsIA/xE9b3rQXEQvUBHf3sKJQT8yLWT+SXsAQ+NjYuQ0M1Q2gAGgsoKnIvG7D5gk XKkkzGT8LFQuAfhpbTqkyXhpIMpgQLtSInxeavcVYB37KpY2V7rXQAlThEJrDzmN WrO2nLbAlvQp7f1yO6Jirb+oJEgzGFfThTBWeXs7Z9V9LxQh3ND5174qZmmLUGHq YkMimkMcJI3wUoNtsRz3Re9SnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNKVpDKF y//VM6lAuoqf87vFUsOaMB8GA1UdIwQYMBaAFAqm5IMoQl4STFYcKsGHyKGWJHEQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkUxRC9GRTg4MzVCQ0Y5 RjAxMUVGQjc3QThDNkVDNEY5QUUwMi9DcWJrZ3loQ1hoSk1WaHdxd1lmSW9aWWtj UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxYmtneWhDWGhKTVZod3F3WWZJb1pZa2NSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkUxRC9GRTg4MzVCQ0Y5RjAxMUVGQjc3QThDNkVDNEY5QUUwMi9DcWJrZ3loQ1ho Sk1WaHdxd1lmSW9aWWtjUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUN7PuJeLEGt/JvqJAo+sbvOTHpekUBy7EhnTW0VJLg5iKwBL+p1HGxOaLVvk s171++bnoYEYfhh5iGKQlhaRvhnJHN09Uy3Yi5WIK1votQbaPthATCd0d/O/mx0I zOi1THaK2luBoquSYbN4v9GJNRnMuv/HH7SItZ1CTl9Vu9tZp0Z3C8RzvNgHhGlQ Uw5v/tc3Iqyd9H+lXwhTZAk7BameC9tb40ZGGTFB+YWQf/YRASFLgr2aY9tft0vz oFp9plHVq+CaLOUBTYcXSWyfGATYn4Uyu5c7HeUrNqYgdaIPG8/kQDeK3wFGdyX0 Igz9b0I1iQrWx78BWtWjxIhQ3w== -----END CERTIFICATE-----Generated at Fri Sep 11 17:15:27 2026 by rpki-client