$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft File: CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft (raw, json) Hash identifier: NAOswJKFd2TDMfR9zzsdSZMHRrKpCSg6o0JWlaoQYM8= Subject key identifier: 96:C1:FF:26:F9:53:38:51:2C:40:31:93:D8:DB:F7:F1:C4:71:AB:88 Authority key identifier: 0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 Certificate issuer: /CN=A9176E1D/serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft Manifest number: 0111 Signing time: Wed 29 Jul 2026 07:28:49 +0000 Manifest this update: Wed 29 Jul 2026 07:28:49 +0000 Manifest next update: Wed 05 Aug 2026 07:28:49 +0000 Files and hashes: 1: CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl (hash: Xicjhpx4JJB9JJuYdrIYNKZs5C/ngFxfQ5TQQUSStcw=) 2: 8A5CF8F0FB7411EF83C11685C4F9AE02.roa (hash: S+nQRnmZXUnFE6DkSM3kkEvhuxoEZtbN5DKGaAMAS/E=) 3: 4C9617646D0611F0BBBF9039C4F9AE02.roa (hash: dVVvRypUK9/KtfRB7/hEbBL1MeEBt6MHgMHLpJHk1uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 07:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176E1D, serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Validity Not Before: Jul 29 07:28:49 2026 GMT Not After : Aug 5 07:28:49 2026 GMT Subject: CN=6a69abb1-fd29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:00:63:4f:ef:2a:ac:e1:1d:6b:93:a2:59:26: c6:5c:54:09:0a:09:55:d0:9f:c4:08:16:14:96:0a: 38:6d:1d:5c:93:97:77:5e:8f:5b:9a:51:1e:8d:06: dc:9b:c4:6b:92:1c:16:8f:58:33:47:c8:ab:e7:16: 36:34:7e:f1:10:b3:55:7b:ea:83:4d:e6:47:a1:b8: 12:53:aa:9c:33:31:00:20:5c:ca:6c:fc:dd:2d:84: 5c:4a:1d:14:cf:ea:52:ae:39:a8:c2:f0:00:5b:c8: cb:51:a9:3a:5c:aa:97:fe:1f:d7:ec:bc:ba:42:22: 31:1e:f1:4c:9f:11:10:d2:a2:6d:91:22:8c:fc:b2: 4b:85:c6:f0:05:2c:ae:35:68:cc:09:37:22:02:8c: f8:12:a4:4d:3b:52:04:92:ca:4e:fc:50:25:28:4c: 55:64:c9:8a:ab:bb:34:da:3c:ce:61:19:90:9c:b2: e7:a2:13:55:44:a7:b8:cb:7f:02:6d:c6:85:0d:6b: 0f:65:ff:16:46:83:97:02:cc:31:11:52:0e:21:57: d4:8f:2d:b1:c4:ca:34:aa:34:e1:85:c0:cb:5d:84: b6:9d:5d:cf:22:21:1c:69:ee:20:66:ed:cd:af:38: 21:14:e7:07:a0:03:38:54:4e:10:e7:74:00:ca:96: 3c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C1:FF:26:F9:53:38:51:2C:40:31:93:D8:DB:F7:F1:C4:71:AB:88 X509v3 Authority Key Identifier: keyid:0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:21:81:e5:eb:c7:49:d7:b1:40:4f:dd:34:3d:ac:92:e6:21: 41:53:8a:e8:7e:e0:cb:31:68:e0:cc:06:2f:9b:3e:15:78:0a: ed:7b:05:2f:24:04:30:82:76:90:09:2e:e2:60:83:af:91:de: d2:bc:e7:1f:d2:ea:01:3a:88:8a:04:42:8d:e6:8e:f7:28:6f: 9f:5f:74:ea:cf:ac:6d:2c:d1:1b:df:1c:1d:2e:20:6d:c5:7e: 1b:3a:8a:55:7d:4f:4c:84:3f:25:cf:29:25:89:01:20:67:2f: 87:7b:76:73:be:60:30:cc:4b:27:74:7e:f5:6a:7e:fd:6e:85: f4:4d:82:4a:2f:28:39:58:9f:75:9a:c7:e0:8e:38:a5:53:45: 63:f9:f4:d5:1a:06:56:9b:71:d3:31:3d:66:5d:95:76:62:87: 83:10:17:13:da:b3:88:8f:9b:3d:0e:30:b9:df:ad:8b:e5:f5: e5:e6:6b:37:6b:1c:45:60:50:75:9d:4e:7d:d1:08:61:20:1d: c7:54:ea:46:2b:69:d9:8c:5d:c6:a0:0c:c6:54:57:73:ae:0b: 94:a0:0c:f9:68:03:27:90:4f:53:bc:9e:57:4b:da:a4:cb:be: ec:6d:3d:17:1a:7e:6b:32:0a:dd:65:dd:3e:f2:3f:98:04:34: 9f:14:fc:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZFMUQxMTAvBgNVBAUTKDBBQTZFNDgzMjg0MjVFMTI0QzU2MUMyQUMxODdDOEEx OTYyNDcxMTAwHhcNMjYwNzI5MDcyODQ5WhcNMjYwODA1MDcyODQ5WjAYMRYwFAYD VQQDEw02YTY5YWJiMS1mZDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzABjT+8qrOEda5OiWSbGXFQJCglV0J/ECBYUlgo4bR1ck5d3Xo9bmlEejQbc m8RrkhwWj1gzR8ir5xY2NH7xELNVe+qDTeZHobgSU6qcMzEAIFzKbPzdLYRcSh0U z+pSrjmowvAAW8jLUak6XKqX/h/X7Ly6QiIxHvFMnxEQ0qJtkSKM/LJLhcbwBSyu NWjMCTciAoz4EqRNO1IEkspO/FAlKExVZMmKq7s02jzOYRmQnLLnohNVRKe4y38C bcaFDWsPZf8WRoOXAswxEVIOIVfUjy2xxMo0qjThhcDLXYS2nV3PIiEcae4gZu3N rzghFOcHoAM4VE4Q53QAypY8HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJbB/yb5 UzhRLEAxk9jb9/HEcauIMB8GA1UdIwQYMBaAFAqm5IMoQl4STFYcKsGHyKGWJHEQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkUxRC9GRTg4MzVCQ0Y5 RjAxMUVGQjc3QThDNkVDNEY5QUUwMi9DcWJrZ3loQ1hoSk1WaHdxd1lmSW9aWWtj UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxYmtneWhDWGhKTVZod3F3WWZJb1pZa2NSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkUxRC9GRTg4MzVCQ0Y5RjAxMUVGQjc3QThDNkVDNEY5QUUwMi9DcWJrZ3loQ1ho Sk1WaHdxd1lmSW9aWWtjUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQiGB5evHSdexQE/dND2skuYhQVOK6H7gyzFo4MwGL5s+FXgK7XsFLyQEMIJ2 kAku4mCDr5He0rznH9LqATqIigRCjeaO9yhvn1906s+sbSzRG98cHS4gbcV+GzqK VX1PTIQ/Jc8pJYkBIGcvh3t2c75gMMxLJ3R+9Wp+/W6F9E2CSi8oOVifdZrH4I44 pVNFY/n01RoGVptx0zE9Zl2VdmKHgxAXE9qziI+bPQ4wud+ti+X15eZrN2scRWBQ dZ1OfdEIYSAdx1TqRitp2YxdxqAMxlRXc64LlKAM+WgDJ5BPU7yeV0vapMu+7G09 Fxp+azIK3WXdPvI/mAQ0nxT8NQ== -----END CERTIFICATE-----Generated at Wed Jul 29 19:22:47 2026 by rpki-client