$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft File: CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft (raw, json) Hash identifier: rKJj1Vr80szV8+rH1Rj6CqdAQXYv2Kg8ac+KoSFeaik= Subject key identifier: 38:1C:82:1B:2B:9D:E6:CE:E5:22:23:2D:30:AF:B1:5A:FF:C9:A0:AF Authority key identifier: 0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 Certificate issuer: /CN=A9176E1D/serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft Manifest number: 010E Signing time: Thu 23 Jul 2026 07:51:02 +0000 Manifest this update: Thu 23 Jul 2026 07:51:01 +0000 Manifest next update: Thu 30 Jul 2026 07:51:01 +0000 Files and hashes: 1: CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl (hash: K/4aR5GgKjD61tfQ5v4VcTI3hOBnDA/sNGynuR0Gldo=) 2: 4C9617646D0611F0BBBF9039C4F9AE02.roa (hash: dVVvRypUK9/KtfRB7/hEbBL1MeEBt6MHgMHLpJHk1uI=) 3: 8A5CF8F0FB7411EF83C11685C4F9AE02.roa (hash: S+nQRnmZXUnFE6DkSM3kkEvhuxoEZtbN5DKGaAMAS/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176E1D, serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Validity Not Before: Jul 23 07:51:01 2026 GMT Not After : Jul 30 07:51:01 2026 GMT Subject: CN=6a61c7e6-9f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:63:62:3f:f0:d2:21:ea:03:9b:8a:21:71:ed: 75:a5:17:52:49:ef:4c:c3:cf:0b:c4:56:6d:6c:8e: 4a:89:a9:e2:c0:04:26:c5:7d:ea:36:ba:fc:e7:76: 9d:9e:cd:eb:ef:07:1a:d5:c8:7b:2f:ea:66:8b:3a: 38:47:02:07:5e:37:ed:36:91:ba:db:e4:d3:a1:81: 3d:9b:e5:14:46:70:19:2c:ec:96:68:23:33:fd:53: cb:a6:16:a5:15:6b:b6:d3:02:b7:08:f5:e3:39:3b: e0:93:3e:cb:39:86:a2:1a:a2:a7:62:4e:61:7c:05: 8d:cf:89:2b:76:70:ce:87:e5:cc:8f:ce:78:87:ce: a9:35:51:4f:c7:06:b1:bf:c7:23:05:4e:ea:cf:2a: 1f:b8:08:82:1d:17:8e:b7:77:f3:52:3c:b2:2f:65: 6c:c8:64:06:47:6b:47:4b:e9:de:11:56:df:4e:0b: f0:74:f5:30:4e:7b:6b:83:16:27:22:df:c0:29:4a: 95:9f:0d:5d:03:f8:a1:44:81:a3:16:9c:5a:79:99: 1d:4c:39:f2:f1:ed:27:b6:14:80:c3:a5:45:90:2a: a4:b6:90:a0:5f:a0:f1:93:fc:92:51:10:3b:c1:a5: d8:e0:71:e3:37:74:5d:1c:14:59:34:db:40:5e:5a: 15:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:1C:82:1B:2B:9D:E6:CE:E5:22:23:2D:30:AF:B1:5A:FF:C9:A0:AF X509v3 Authority Key Identifier: keyid:0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:40:1d:9a:b7:62:82:23:02:8f:ed:34:ae:c2:ae:44:37:0b: e7:d1:62:1d:91:25:1d:29:8c:26:e5:fe:29:47:f8:6d:f8:e7: aa:24:7d:13:d3:f1:d8:8b:9b:ad:ff:18:dd:f2:fc:fe:fc:f8: 56:38:ec:14:fa:d2:4d:c7:46:f4:fd:30:ab:88:1c:74:b9:15: 22:4f:e0:35:92:44:03:ed:ae:e9:08:e5:16:5c:27:5a:f4:e2: 3f:23:fc:ad:f8:35:0e:0a:c7:de:bc:4c:e4:cb:fe:c7:48:cd: 44:ff:38:e7:50:70:37:4b:dc:f3:95:86:ec:d3:8c:a4:3d:96: 75:b1:5c:d9:2c:00:fc:87:16:14:7d:b7:0e:50:d1:97:70:8a: a4:75:8c:4e:fb:c3:7f:26:e7:d0:ef:d1:fe:6a:65:9f:86:1b: d4:9d:33:4d:b1:5c:db:94:0e:34:af:ee:73:fd:18:d2:9c:4b: f5:e9:21:3b:e7:40:87:1c:26:1c:06:2f:6f:df:4c:38:b5:22: 93:ba:c1:ef:f3:4f:e9:9b:0d:04:91:cb:3a:16:fd:67:4d:e6: 91:c8:e8:cb:49:d8:b4:68:7e:45:45:80:ea:72:f1:ee:05:30: 56:3e:08:49:eb:ad:af:97:70:ad:83:02:ee:ce:9f:3c:08:c5: af:05:35:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZFMUQxMTAvBgNVBAUTKDBBQTZFNDgzMjg0MjVFMTI0QzU2MUMyQUMxODdDOEEx OTYyNDcxMTAwHhcNMjYwNzIzMDc1MTAxWhcNMjYwNzMwMDc1MTAxWjAYMRYwFAYD VQQDEw02YTYxYzdlNi05ZjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGNiP/DSIeoDm4ohce11pRdSSe9Mw88LxFZtbI5KianiwAQmxX3qNrr853ad ns3r7wca1ch7L+pmizo4RwIHXjftNpG62+TToYE9m+UURnAZLOyWaCMz/VPLphal FWu20wK3CPXjOTvgkz7LOYaiGqKnYk5hfAWNz4krdnDOh+XMj854h86pNVFPxwax v8cjBU7qzyofuAiCHReOt3fzUjyyL2VsyGQGR2tHS+neEVbfTgvwdPUwTntrgxYn It/AKUqVnw1dA/ihRIGjFpxaeZkdTDny8e0nthSAw6VFkCqktpCgX6Dxk/ySURA7 waXY4HHjN3RdHBRZNNtAXloVTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDgcghsr nebO5SIjLTCvsVr/yaCvMB8GA1UdIwQYMBaAFAqm5IMoQl4STFYcKsGHyKGWJHEQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkUxRC9GRTg4MzVCQ0Y5 RjAxMUVGQjc3QThDNkVDNEY5QUUwMi9DcWJrZ3loQ1hoSk1WaHdxd1lmSW9aWWtj UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxYmtneWhDWGhKTVZod3F3WWZJb1pZa2NSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkUxRC9GRTg4MzVCQ0Y5RjAxMUVGQjc3QThDNkVDNEY5QUUwMi9DcWJrZ3loQ1ho Sk1WaHdxd1lmSW9aWWtjUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX0AdmrdigiMCj+00rsKuRDcL59FiHZElHSmMJuX+KUf4bfjnqiR9E9Px2Iub rf8Y3fL8/vz4VjjsFPrSTcdG9P0wq4gcdLkVIk/gNZJEA+2u6QjlFlwnWvTiPyP8 rfg1DgrH3rxM5Mv+x0jNRP8451BwN0vc85WG7NOMpD2WdbFc2SwA/IcWFH23DlDR l3CKpHWMTvvDfybn0O/R/mpln4Yb1J0zTbFc25QONK/uc/0Y0pxL9ekhO+dAhxwm HAYvb99MOLUik7rB7/NP6ZsNBJHLOhb9Z03mkcjoy0nYtGh+RUWA6nLx7gUwVj4I Seutr5dwrYMC7s6fPAjFrwU16Q== -----END CERTIFICATE-----Generated at Fri Jul 24 14:32:25 2026 by rpki-client