$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft File: CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft (raw, json) Hash identifier: yNKBi77YS26j9BbiJJyTVC7oFANCx4bOf6ETSBFpdbA= Subject key identifier: 09:1A:B2:52:CA:CB:99:C7:38:C9:31:74:9B:E5:70:0F:8A:F1:E9:81 Authority key identifier: 0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 Certificate issuer: /CN=A9176E1D/serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft Manifest number: 84 Signing time: Mon 03 Nov 2025 06:44:13 +0000 Manifest this update: Mon 03 Nov 2025 06:44:13 +0000 Manifest next update: Mon 10 Nov 2025 06:44:13 +0000 Files and hashes: 1: CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl (hash: 2WNU/inXiE21s1+GWa+9Tq/Ohy4ORJGmjqzRA8EKxnA=) 2: 8A5CF8F0FB7411EF83C11685C4F9AE02.roa (hash: gNUxEstcyYM8bAYzOWKSq0siVBhwvrTxTLZTCsVvFik=) 3: 4C9617646D0611F0BBBF9039C4F9AE02.roa (hash: Vaj7yoUJUzeUA3126kxNxsmUyuPrhpFqRcjaAWEYWYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176E1D, serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Validity Not Before: Nov 3 06:44:13 2025 GMT Not After : Nov 10 06:44:13 2025 GMT Subject: CN=69084f3d-2904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:44:49:9e:9c:80:b5:83:bf:66:0c:26:c1:5d: 48:85:58:44:14:cf:04:fd:ef:48:7f:3b:77:16:08: 0e:db:bd:ef:50:9f:55:92:23:8a:a9:d4:94:86:1c: 1f:f6:ae:3e:59:9d:2a:29:28:90:3d:70:16:94:b9: 12:98:a1:da:b5:e2:f7:58:0a:cd:34:52:21:dc:21: c4:c5:ea:a0:d7:2c:ef:15:6b:5a:64:0f:de:69:54: d7:cc:5c:9a:de:49:c2:89:c8:c8:c3:8e:7f:cd:60: d1:09:05:8f:84:6f:49:89:b3:7d:a3:41:33:af:31: a7:2e:35:3f:8a:6c:fe:e9:d6:5a:94:b5:54:c1:d2: c9:49:4b:cc:c9:2d:9b:8c:a2:15:48:fb:c4:94:4b: 75:a3:2d:ef:1c:90:a0:1a:06:31:5d:f4:fc:d6:cd: b7:e0:15:dc:e5:1c:93:95:21:3b:40:ed:e4:3b:dc: 47:bb:c1:fa:16:8b:11:62:4d:eb:6d:7a:6b:db:0e: ab:e4:94:de:4c:38:de:b9:cd:41:89:2b:8e:99:f5: a5:74:b8:f3:68:8a:b9:27:da:0f:5e:b1:a3:49:33: 91:2b:6c:95:a0:60:a4:3e:2d:71:71:a3:4b:2b:a8: 24:87:b8:46:f4:f2:7f:9f:3c:84:a6:72:e1:4d:ef: 8f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1A:B2:52:CA:CB:99:C7:38:C9:31:74:9B:E5:70:0F:8A:F1:E9:81 X509v3 Authority Key Identifier: keyid:0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:08:54:20:d4:0f:71:ba:df:5e:40:a5:dc:1f:99:d8:a3:2f: db:6b:af:69:a1:7e:23:3c:85:c1:e2:eb:fe:fb:3f:26:07:43: 51:fe:70:2f:8a:98:e3:34:a9:63:a5:37:d4:53:8e:78:1a:fa: d2:a0:3c:c2:cd:c4:1a:87:ed:56:c8:bc:a9:1f:b6:4a:d2:92: 48:17:dc:51:68:6d:d0:d0:67:b9:93:ca:86:db:c1:66:33:b7: 63:6d:4e:77:e9:90:a3:a7:92:f6:98:51:fa:e7:29:73:ba:84: ea:69:df:90:14:46:4d:61:9a:ae:e3:25:c8:5c:93:f7:61:a5: d3:d4:73:a9:10:85:8e:be:8f:06:ba:01:36:e6:2f:61:a7:90: 3b:1d:e0:5f:53:17:13:9d:99:05:a3:bd:dd:10:af:0c:05:f2: 02:8e:91:f2:6c:f4:4e:13:38:a5:d2:e8:47:3a:9d:82:23:3e: ba:3b:b2:20:86:4f:f0:18:b5:07:a2:81:5a:51:7c:a2:38:cf: c9:15:a7:36:4e:ad:d1:06:ce:e7:5e:89:2c:79:d4:b2:c9:6e: 56:94:b5:e4:58:d3:9b:08:9b:de:fb:b5:51:d0:d1:73:a4:6b: c7:25:5e:4a:28:5c:be:ed:50:6a:13:f8:c6:f4:97:eb:6a:cc: a0:69:70:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZFMUQxMTAvBgNVBAUTKDBBQTZFNDgzMjg0MjVFMTI0QzU2MUMyQUMxODdDOEEx OTYyNDcxMTAwHhcNMjUxMTAzMDY0NDEzWhcNMjUxMTEwMDY0NDEzWjAYMRYwFAYD VQQDEw02OTA4NGYzZC0yOTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2URJnpyAtYO/ZgwmwV1IhVhEFM8E/e9Ifzt3FggO273vUJ9VkiOKqdSUhhwf 9q4+WZ0qKSiQPXAWlLkSmKHateL3WArNNFIh3CHExeqg1yzvFWtaZA/eaVTXzFya 3knCicjIw45/zWDRCQWPhG9JibN9o0EzrzGnLjU/imz+6dZalLVUwdLJSUvMyS2b jKIVSPvElEt1oy3vHJCgGgYxXfT81s234BXc5RyTlSE7QO3kO9xHu8H6FosRYk3r bXpr2w6r5JTeTDjeuc1BiSuOmfWldLjzaIq5J9oPXrGjSTORK2yVoGCkPi1xcaNL K6gkh7hG9PJ/nzyEpnLhTe+PxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkaslLK y5nHOMkxdJvlcA+K8emBMB8GA1UdIwQYMBaAFAqm5IMoQl4STFYcKsGHyKGWJHEQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkUxRC9GRTg4MzVCQ0Y5 RjAxMUVGQjc3QThDNkVDNEY5QUUwMi9DcWJrZ3loQ1hoSk1WaHdxd1lmSW9aWWtj UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxYmtneWhDWGhKTVZod3F3WWZJb1pZa2NSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkUxRC9GRTg4MzVCQ0Y5RjAxMUVGQjc3QThDNkVDNEY5QUUwMi9DcWJrZ3loQ1ho Sk1WaHdxd1lmSW9aWWtjUkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+CFQg1A9xut9eQKXcH5nYoy/ba69poX4jPIXB4uv++z8mB0NR/nAv ipjjNKljpTfUU454GvrSoDzCzcQah+1WyLypH7ZK0pJIF9xRaG3Q0Ge5k8qG28Fm M7djbU536ZCjp5L2mFH65ylzuoTqad+QFEZNYZqu4yXIXJP3YaXT1HOpEIWOvo8G ugE25i9hp5A7HeBfUxcTnZkFo73dEK8MBfICjpHybPROEzil0uhHOp2CIz66O7Ig hk/wGLUHooFaUXyiOM/JFac2Tq3RBs7nXoksedSyyW5WlLXkWNObCJve+7VR0NFz pGvHJV5KKFy+7VBqE/jG9JfrasygaXD7 -----END CERTIFICATE-----Generated at Wed Nov 5 04:54:11 2025 by rpki-client