$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft File: cnDzQpmiHqWwx27T1-suB7tnI_c.mft (raw, json) Hash identifier: IO6ZTk0wv7wxxSedhY3f06q569kSs3jt1K7eVloBJZQ= Subject key identifier: FE:13:F1:A9:1E:64:25:33:3D:BD:19:43:5B:C5:57:B9:90:D5:AD:5E Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 Certificate issuer: /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft Manifest number: 99 Signing time: Mon 11 Aug 2025 06:35:15 +0000 Manifest this update: Mon 11 Aug 2025 06:35:14 +0000 Manifest next update: Mon 18 Aug 2025 06:35:14 +0000 Files and hashes: 1: cnDzQpmiHqWwx27T1-suB7tnI_c.crl (hash: VcxIK+0aT1YNgyczWdcOstpShzylunHM5FJX2Jqvht0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 06:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EAE, serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Validity Not Before: Aug 11 06:35:14 2025 GMT Not After : Aug 18 06:35:14 2025 GMT Subject: CN=68998f22-ec18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b3:5e:d7:3b:ed:c6:87:f3:39:ea:08:92:3f: 5d:50:5c:db:da:1f:ca:31:db:d3:a2:75:cf:ee:70: 3a:cc:8c:87:ba:b0:c6:0b:16:d4:83:7b:92:6e:0f: 76:6b:50:14:5a:0a:f3:9d:da:cf:8a:e8:b6:2b:17: 17:f7:df:e9:d5:49:01:4b:ed:09:55:1c:dc:a2:da: ad:2e:53:f3:b3:9b:9a:5e:93:9c:09:48:f8:24:17: 68:d8:61:b8:22:5d:61:19:e1:b2:89:54:34:97:84: 5e:e8:02:2f:f7:4f:16:3d:bf:32:f3:fa:e9:8b:ec: 00:5f:9c:b0:95:17:64:c5:73:bc:ad:f5:76:c4:1f: 7f:35:b0:9c:1d:aa:b9:7e:64:58:e4:e3:d8:1b:da: 2c:63:92:b9:bf:49:e4:af:fa:11:b8:03:d3:f2:67: 3c:30:e7:4e:40:7e:6d:ba:b8:15:79:b5:fa:3e:cd: 22:6e:f7:37:2a:6d:68:6b:12:47:2b:ec:fa:9d:fc: 07:17:c2:e5:72:d0:5b:8f:6d:11:aa:92:6a:76:74: 0d:e3:3f:44:fb:03:b5:27:c8:b8:63:48:00:5f:76: ae:dd:34:1b:11:8e:0d:65:83:6d:da:c7:d5:a4:a7: 36:8e:4f:c9:ca:51:ea:d1:bb:8f:1e:87:51:7a:86: b7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:13:F1:A9:1E:64:25:33:3D:BD:19:43:5B:C5:57:B9:90:D5:AD:5E X509v3 Authority Key Identifier: keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:ac:a0:8e:83:b5:14:c1:a2:04:86:26:99:43:d4:ac:29:67: a7:20:18:bb:eb:80:0e:00:9a:30:64:a7:66:29:07:1a:ab:fa: 6f:fb:a6:ca:17:3c:e3:e2:ed:18:2e:89:fb:b2:ac:25:ee:11: 9f:1d:f2:03:bb:33:d8:c3:b6:64:c5:1e:33:80:d1:19:f3:fc: 52:ac:ef:df:84:b5:4b:91:a8:fd:83:ac:a0:1e:d4:57:70:6e: 09:df:a2:f8:67:f5:ad:79:75:16:56:8e:0a:b9:30:82:5d:68: a4:1e:09:d3:35:5b:1e:30:67:cc:13:85:a3:8e:25:1e:c9:77: 68:a9:87:a7:f6:21:75:4a:a3:08:b2:ff:fe:e9:29:82:35:56: 76:01:9f:3c:85:34:8e:c2:49:7b:e8:8a:52:83:ad:39:91:20: 91:0e:8f:df:05:9d:95:1e:1f:c7:df:77:c8:c1:00:15:dd:e2: e4:f6:1e:16:65:d0:b4:7f:7c:f5:f4:ae:be:61:6b:28:87:38: 28:db:80:7d:f6:96:20:f5:71:12:15:b5:fe:b8:aa:f7:0d:6c: ae:af:48:e0:b6:77:ab:4e:01:f4:c3:7b:f3:96:31:e9:7d:9e: 17:c7:c9:94:51:08:f7:c2:62:d9:11:18:52:6e:9c:89:6d:71: 47:49:fe:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlFQUUxMTAvBgNVBAUTKDcyNzBGMzQyOTlBMjFFQTVCMEM3NkVEM0Q3RUIyRTA3 QkI2NzIzRjcwHhcNMjUwODExMDYzNTE0WhcNMjUwODE4MDYzNTE0WjAYMRYwFAYD VQQDEw02ODk5OGYyMi1lYzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnLNe1zvtxofzOeoIkj9dUFzb2h/KMdvTonXP7nA6zIyHurDGCxbUg3uSbg92 a1AUWgrzndrPiui2KxcX99/p1UkBS+0JVRzcotqtLlPzs5uaXpOcCUj4JBdo2GG4 Il1hGeGyiVQ0l4Re6AIv908WPb8y8/rpi+wAX5ywlRdkxXO8rfV2xB9/NbCcHaq5 fmRY5OPYG9osY5K5v0nkr/oRuAPT8mc8MOdOQH5turgVebX6Ps0ibvc3Km1oaxJH K+z6nfwHF8LlctBbj20RqpJqdnQN4z9E+wO1J8i4Y0gAX3au3TQbEY4NZYNt2sfV pKc2jk/JylHq0buPHodReoa3KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4T8ake ZCUzPb0ZQ1vFV7mQ1a1eMB8GA1UdIwQYMBaAFHJw80KZoh6lsMdu09frLge7ZyP3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVBRS9BRTAyODA1NjhE MEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhxV3d4MjdUMS1zdUI3dG5J X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuRHpRcG1pSHFXd3gyN1QxLXN1Qjd0bklfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUVBRS9BRTAyODA1NjhEMEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhx V3d4MjdUMS1zdUI3dG5JX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWrKCOg7UUwaIEhiaZQ9SsKWenIBi764AOAJowZKdmKQcaq/pv+6bK Fzzj4u0YLon7sqwl7hGfHfIDuzPYw7ZkxR4zgNEZ8/xSrO/fhLVLkaj9g6ygHtRX cG4J36L4Z/WteXUWVo4KuTCCXWikHgnTNVseMGfME4WjjiUeyXdoqYen9iF1SqMI sv/+6SmCNVZ2AZ88hTSOwkl76IpSg605kSCRDo/fBZ2VHh/H33fIwQAV3eLk9h4W ZdC0f3z19K6+YWsohzgo24B99pYg9XESFbX+uKr3DWyur0jgtnerTgH0w3vzljHp fZ4Xx8mUUQj3wmLZERhSbpyJbXFHSf6S -----END CERTIFICATE-----Generated at Tue Aug 12 14:02:08 2025 by rpki-client