$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft File: CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft (raw, json) Hash identifier: clpKtt92Fyuj7vCuKl68DrgNVBu0JsGXSdeZV+D52kA= Subject key identifier: A5:15:C2:D2:E7:0B:83:70:35:AD:64:A4:CA:E2:F6:56:87:F4:4F:74 Authority key identifier: 0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 Certificate issuer: /CN=A9176E1D/serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft Manifest number: 56 Signing time: Tue 05 Aug 2025 07:53:39 +0000 Manifest this update: Tue 05 Aug 2025 07:53:38 +0000 Manifest next update: Tue 12 Aug 2025 07:53:38 +0000 Files and hashes: 1: CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl (hash: B1xSKq6IUBGcqZfw0IvGQA9xYWifljuycdF6G/iFEW0=) 2: 8A5CF8F0FB7411EF83C11685C4F9AE02.roa (hash: gNUxEstcyYM8bAYzOWKSq0siVBhwvrTxTLZTCsVvFik=) 3: 4C9617646D0611F0BBBF9039C4F9AE02.roa (hash: Vaj7yoUJUzeUA3126kxNxsmUyuPrhpFqRcjaAWEYWYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176E1D, serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Validity Not Before: Aug 5 07:53:38 2025 GMT Not After : Aug 12 07:53:38 2025 GMT Subject: CN=6891b883-7dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b1:b1:f7:b6:7b:15:f9:5c:63:81:a2:41:b8: 9a:7a:07:31:e6:e3:95:f9:0a:0e:c3:0f:c8:8a:8e: 80:d0:5d:1f:71:c2:65:57:42:05:40:1d:2d:75:f1: c1:f6:5b:2b:8b:53:a4:df:39:44:51:16:b0:1e:f9: 23:d8:2d:ae:c9:89:5a:fa:21:58:b7:16:06:7d:e2: d3:46:46:3c:fb:97:e2:7d:a6:a1:05:45:65:5f:4c: ef:f9:71:95:39:71:32:14:b8:41:46:12:fc:0f:fe: ad:1a:e6:ff:61:a6:6d:7f:d2:2b:8f:ae:a3:55:e8: 0f:12:62:9d:74:4b:41:56:11:4b:9f:a7:7e:81:57: 36:c1:47:13:ac:cb:60:8d:75:8c:e9:d8:47:42:8a: 26:64:9c:03:d2:28:8e:79:80:d8:cd:08:6e:f9:57: a0:85:d1:56:93:ba:f7:db:d0:ba:ca:44:dd:f1:f0: 04:60:ab:dc:4d:42:98:b9:ee:54:90:b6:bf:0b:38: fd:aa:a8:bc:99:22:6c:5d:c2:69:32:67:b6:c0:04: 65:2a:6c:3c:6f:8b:05:6d:e2:6d:e9:78:f0:65:43: 45:66:44:af:40:38:8d:ea:63:48:d8:1b:9f:1c:48: b2:ac:ba:dd:df:e8:a1:c3:13:64:42:bc:61:dc:ae: 1a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:15:C2:D2:E7:0B:83:70:35:AD:64:A4:CA:E2:F6:56:87:F4:4F:74 X509v3 Authority Key Identifier: keyid:0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:e7:bc:ba:3c:db:22:cd:4f:4f:3c:0f:b5:c6:6b:53:f4:fb: 02:41:81:1f:87:1d:1c:18:ee:83:1e:a7:4b:bc:3e:fa:89:8b: 0d:03:43:ab:9d:ef:79:3a:f3:55:7b:40:37:b8:e1:6e:e5:d5: d9:ea:f0:9a:95:20:0a:10:18:5f:82:92:f3:5f:b7:81:37:51: 84:14:7d:90:35:8f:88:ac:31:dd:e4:1f:0a:c0:59:26:f4:23: 1e:3e:5e:d8:ab:91:f1:04:99:17:21:36:ef:e1:c2:d0:3b:9f: fd:73:9d:d7:1c:09:12:c5:e8:84:ce:40:42:85:c5:b2:8c:59: b4:13:aa:e5:9a:85:01:87:4a:aa:8f:37:7c:e9:43:f7:ed:23: e1:1b:57:7b:37:cf:c8:46:37:74:c6:9a:a2:66:d0:b5:84:26: db:cc:cc:5b:80:a6:14:26:25:6f:6f:0c:fe:40:ec:7c:49:e7: b2:6b:11:8e:6c:02:f3:03:53:de:a1:3e:e0:69:fe:38:75:81: c8:ed:46:d4:19:93:f4:69:4e:1a:8a:bd:02:f2:0f:2c:ed:4e: 69:c8:11:27:29:7e:07:41:54:77:34:1b:28:42:27:f5:22:57: f6:e1:11:3f:b7:ae:77:56:bb:d6:a6:2d:70:36:dd:49:cf:3d: ae:f7:6c:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NkUxRDExMC8GA1UEBRMoMEFBNkU0ODMyODQyNUUxMjRDNTYxQzJBQzE4N0M4QTE5 NjI0NzExMDAeFw0yNTA4MDUwNzUzMzhaFw0yNTA4MTIwNzUzMzhaMBgxFjAUBgNV BAMTDTY4OTFiODgzLTdkY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBsbH3tnsV+VxjgaJBuJp6BzHm45X5Cg7DD8iKjoDQXR9xwmVXQgVAHS118cH2 WyuLU6TfOURRFrAe+SPYLa7JiVr6IVi3FgZ94tNGRjz7l+J9pqEFRWVfTO/5cZU5 cTIUuEFGEvwP/q0a5v9hpm1/0iuPrqNV6A8SYp10S0FWEUufp36BVzbBRxOsy2CN dYzp2EdCiiZknAPSKI55gNjNCG75V6CF0VaTuvfb0LrKRN3x8ARgq9xNQpi57lSQ tr8LOP2qqLyZImxdwmkyZ7bABGUqbDxviwVt4m3pePBlQ0VmRK9AOI3qY0jYG58c SLKsut3f6KHDE2RCvGHcrhrXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpRXC0ucL g3A1rWSkyuL2Vof0T3QwHwYDVR0jBBgwFoAUCqbkgyhCXhJMVhwqwYfIoZYkcRAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2RTFEL0ZFODgzNUJDRjlG MDExRUZCNzdBOEM2RUM0RjlBRTAyL0NxYmtneWhDWGhKTVZod3F3WWZJb1pZa2NS QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3Fia2d5aENYaEpNVmh3cXdZZklvWllrY1JBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2 RTFEL0ZFODgzNUJDRjlGMDExRUZCNzdBOEM2RUM0RjlBRTAyL0NxYmtneWhDWGhK TVZod3F3WWZJb1pZa2NSQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJjnvLo82yLNT088D7XGa1P0+wJBgR+HHRwY7oMep0u8PvqJiw0DQ6ud 73k681V7QDe44W7l1dnq8JqVIAoQGF+CkvNft4E3UYQUfZA1j4isMd3kHwrAWSb0 Ix4+XtirkfEEmRchNu/hwtA7n/1zndccCRLF6ITOQEKFxbKMWbQTquWahQGHSqqP N3zpQ/ftI+EbV3s3z8hGN3TGmqJm0LWEJtvMzFuAphQmJW9vDP5A7HxJ57JrEY5s AvMDU96hPuBp/jh1gcjtRtQZk/RpThqKvQLyDyztTmnIEScpfgdBVHc0GyhCJ/Ui V/bhET+3rndWu9amLXA23UnPPa73bJg= -----END CERTIFICATE-----Generated at Wed Aug 6 09:34:39 2025 by rpki-client