$ rpki-client -vvvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft File: cnDzQpmiHqWwx27T1-suB7tnI_c.mft (raw, json) Hash identifier: kUqlWvN1heNs23Eo2wsuHA/544CDJEz7IkhW5MlUTFk= Subject key identifier: AC:9F:EC:F1:61:B0:96:29:05:8F:D4:4A:11:20:39:D8:B2:B4:9B:E3 Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 Certificate issuer: /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft Manifest number: 0182 Signing time: Sun 25 Oct 2026 05:07:33 +0000 Manifest this update: Sun 25 Oct 2026 05:07:33 +0000 Manifest next update: Sun 01 Nov 2026 05:07:33 +0000 Files and hashes: 1: cnDzQpmiHqWwx27T1-suB7tnI_c.crl (hash: rX9UOz4vktoQYoLgNK+oPgPgd+Qmo/k7lKjM+VeWe1o=) 2: 24DBC31AB1BA11F080D32309C4F9AE02.roa (hash: p4a4dVFXyGYegzF068ON2uCyZmulHS7AQpUNoGSbKfc=) 3: F5AF18BEC86311F19C4AF9ED4511F970.roa (hash: H8utSn8B3xGp9vyuuYB85KmO+4+xwrFtRMxDhZTERi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 05:07:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EAE, serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Validity Not Before: Oct 25 05:07:33 2026 GMT Not After : Nov 1 05:07:33 2026 GMT Subject: CN=6add8e95-96cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:86:89:81:aa:d0:3a:17:55:3c:81:1c:a7:3a: 6a:1c:fc:2c:db:c3:f3:55:ef:00:35:f8:94:f7:eb: 17:bf:3a:c3:12:04:9b:3d:79:71:17:4d:ce:b3:23: 7e:39:5a:ea:df:da:98:e6:bf:d9:7a:8a:2a:36:94: 17:93:85:25:2d:66:b8:f6:aa:7b:d4:e1:b2:26:71: 2f:29:5f:fd:c2:2a:62:ec:83:42:e0:db:ad:05:b9: c0:1a:4a:ae:6c:37:13:12:a6:fa:ec:e3:2d:e5:53: 21:01:c1:ee:2e:7a:a0:52:0b:a4:3f:eb:d8:9a:c9: a3:a7:3a:7c:6e:58:81:85:0d:d0:3b:11:0e:1f:98: 32:68:4b:83:36:57:f9:a7:6b:fa:b1:b6:58:bf:d0: 8b:aa:24:20:14:b3:a7:3f:79:d9:ce:6e:f4:c2:45: 18:1b:5d:45:17:b4:9a:c5:4a:06:1b:8f:2d:cf:f2: bd:5f:d7:ea:ea:9d:a0:25:2d:6c:87:ff:61:f7:e9: 06:a3:ac:e0:ac:51:72:01:11:16:40:20:c7:ed:51: 9d:a1:11:f2:63:5c:d3:d8:75:86:0c:e0:b8:17:48: 3e:19:80:8a:8a:e8:c3:1a:87:9b:d4:af:38:68:8c: 94:04:7d:d7:32:0b:96:bf:1c:41:9f:b5:87:de:18: 57:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9F:EC:F1:61:B0:96:29:05:8F:D4:4A:11:20:39:D8:B2:B4:9B:E3 X509v3 Authority Key Identifier: keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:61:78:3a:31:0f:89:76:1c:3f:51:4b:af:4d:78:f0:d0:34: 7e:0d:81:dd:bd:f8:f2:25:80:81:d2:8d:08:f3:01:bb:be:d3: e4:a9:de:91:62:7e:d3:98:ce:9f:0a:1d:42:ed:64:e7:56:cb: dd:02:c7:09:5a:f0:48:89:50:fc:75:ac:40:59:72:12:6b:5b: a5:8c:0a:a1:04:e8:99:d2:e0:ca:a6:80:22:3f:3e:21:eb:6a: 76:11:4c:ac:6e:c5:a9:de:db:08:2d:fb:9d:5a:27:6d:fd:d6: d9:ea:ca:bc:7d:64:56:b9:87:bd:97:5d:3c:d7:09:6b:6d:28: 3c:ec:0e:e4:18:a7:0d:d1:40:45:47:d7:59:7e:16:e3:7a:02: 28:65:e2:82:af:04:c1:48:55:52:41:e3:c8:c6:0e:40:a8:8f: ec:9f:03:75:f3:5e:23:9c:60:d3:bf:6a:8c:71:ae:b8:af:1b: 35:14:10:79:4f:df:1f:7b:54:1b:03:52:a8:0a:6c:29:cf:c6: 6f:54:c6:b3:8a:37:2a:40:7a:2d:4e:b9:b3:01:b5:a9:fa:d0: 3e:64:f1:54:e7:81:28:0e:51:cc:b3:36:94:ef:48:4d:3b:d7: 2c:30:80:24:ab:07:02:c8:55:c9:3f:01:77:3a:c2:b5:30:73: 8f:03:ca:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlFQUUxMTAvBgNVBAUTKDcyNzBGMzQyOTlBMjFFQTVCMEM3NkVEM0Q3RUIyRTA3 QkI2NzIzRjcwHhcNMjYxMDI1MDUwNzMzWhcNMjYxMTAxMDUwNzMzWjAYMRYwFAYD VQQDEw02YWRkOGU5NS05NmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIaJgarQOhdVPIEcpzpqHPws28PzVe8ANfiU9+sXvzrDEgSbPXlxF03OsyN+ OVrq39qY5r/ZeooqNpQXk4UlLWa49qp71OGyJnEvKV/9wipi7INC4NutBbnAGkqu bDcTEqb67OMt5VMhAcHuLnqgUgukP+vYmsmjpzp8bliBhQ3QOxEOH5gyaEuDNlf5 p2v6sbZYv9CLqiQgFLOnP3nZzm70wkUYG11FF7SaxUoGG48tz/K9X9fq6p2gJS1s h/9h9+kGo6zgrFFyAREWQCDH7VGdoRHyY1zT2HWGDOC4F0g+GYCKiujDGoeb1K84 aIyUBH3XMguWvxxBn7WH3hhXxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKyf7PFh sJYpBY/UShEgOdiytJvjMB8GA1UdIwQYMBaAFHJw80KZoh6lsMdu09frLge7ZyP3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVBRS9BRTAyODA1NjhE MEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhxV3d4MjdUMS1zdUI3dG5J X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuRHpRcG1pSHFXd3gyN1QxLXN1Qjd0bklfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUVBRS9BRTAyODA1NjhEMEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhx V3d4MjdUMS1zdUI3dG5JX2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZGF4OjEPiXYcP1FLr0148NA0fg2B3b348iWAgdKNCPMBu77T5KnekWJ+05jO nwodQu1k51bL3QLHCVrwSIlQ/HWsQFlyEmtbpYwKoQTomdLgyqaAIj8+IetqdhFM rG7Fqd7bCC37nVonbf3W2erKvH1kVrmHvZddPNcJa20oPOwO5BinDdFARUfXWX4W 43oCKGXigq8EwUhVUkHjyMYOQKiP7J8DdfNeI5xg079qjHGuuK8bNRQQeU/fH3tU GwNSqApsKc/Gb1TGs4o3KkB6LU65swG1qfrQPmTxVOeBKA5RzLM2lO9ITTvXLDCA JKsHAshVyT8BdzrCtTBzjwPKdA== -----END CERTIFICATE-----Generated at Tue Oct 27 00:12:18 2026 by rpki-client