$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft File: cnDzQpmiHqWwx27T1-suB7tnI_c.mft (raw, json) Hash identifier: aunahPEkkOoUJQ2b3SY9dPEqdX+dDCSToasYj5cHSyI= Subject key identifier: A6:20:12:B7:C6:76:57:9F:C0:F2:F9:82:16:63:15:15:E0:8F:9C:B6 Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 Certificate issuer: /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft Manifest number: 63 Signing time: Fri 25 Apr 2025 06:01:42 +0000 Manifest this update: Fri 25 Apr 2025 06:01:42 +0000 Manifest next update: Fri 02 May 2025 06:01:42 +0000 Files and hashes: 1: cnDzQpmiHqWwx27T1-suB7tnI_c.crl (hash: jKyJnaFSYQ+hhxFnqGvcvXIl1d4B0LgTecAzTtOIIfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EAE, serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Validity Not Before: Apr 25 06:01:42 2025 GMT Not After : May 2 06:01:42 2025 GMT Subject: CN=680b2546-001e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:21:cc:5e:76:8c:b8:9b:ff:73:16:56:87:04: 73:5d:2a:ab:8f:6f:9e:38:ea:3c:b9:cd:ba:c1:ca: 1b:2f:42:f5:66:11:8c:4b:2a:9c:74:30:d8:8b:7b: 4e:e4:6d:e4:73:57:78:81:d2:78:4e:cf:62:74:1c: b1:7f:4f:04:92:78:cc:e6:c3:51:75:b2:7e:66:29: d9:b4:19:02:c6:07:71:ec:56:c1:96:fb:88:d4:37: 7d:fd:a7:7a:dd:01:ec:3d:da:28:40:d4:b6:71:7f: c4:45:dd:ac:c0:41:48:ed:43:8f:39:95:9f:8f:f5: da:ba:24:21:f7:21:e4:a4:51:64:59:b9:d6:a3:2d: 6e:8a:de:a3:f2:08:0e:dd:09:99:20:d4:49:90:4d: 93:f5:fb:44:26:33:3a:0f:f3:e5:ad:b7:9a:3d:0b: 02:47:ff:bc:ea:60:34:ae:1e:b3:12:05:67:3b:9d: 27:6f:35:e6:db:9a:4b:58:9d:40:4c:0c:63:70:e3: 92:27:c5:a8:a1:3c:76:fc:fd:e9:35:36:01:64:b9: 90:d6:c1:c0:cc:66:25:aa:f8:51:fa:aa:d1:a4:d3: 0e:8f:a5:09:46:1d:bb:37:42:19:b8:70:a9:25:2d: c9:88:ab:d4:b4:16:c0:5a:3b:86:82:4f:15:c6:53: 88:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:20:12:B7:C6:76:57:9F:C0:F2:F9:82:16:63:15:15:E0:8F:9C:B6 X509v3 Authority Key Identifier: keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2c:f7:98:ba:17:f7:f4:f4:4a:62:a1:52:f2:95:15:1e:4f: 58:f0:4a:39:8f:a8:d7:73:5d:01:fd:1b:ea:1f:4d:40:fd:cb: 50:f9:2e:ab:6a:b6:4a:2a:ac:06:c0:e2:f3:fd:3a:46:f0:19: ca:4f:03:c9:82:cf:74:72:09:82:5a:34:cb:a3:ed:eb:e4:1b: 03:92:fb:0f:b8:7c:34:32:75:04:e0:3a:86:3e:05:16:b6:07: 62:90:2d:7a:0e:ef:28:27:d0:cf:88:80:1f:1d:d6:4b:43:a9: 3f:ec:39:35:d7:20:ab:78:0b:03:92:1b:54:3a:97:ee:cb:da: a2:26:f3:a1:33:67:cd:18:eb:91:31:be:81:b8:28:cf:c7:3f: dc:71:5a:5b:fb:6f:5d:ed:13:b0:2d:73:52:c0:d7:59:0a:80: 74:f3:03:22:cc:b0:2f:d7:33:2b:af:0f:8d:77:a7:4e:c4:a8: 97:f8:e0:fd:2c:b6:e4:fb:17:ad:a9:b7:39:8a:b8:14:b5:6f: 4a:c6:ed:eb:ca:7b:88:3e:11:b5:4b:60:d6:52:c6:0b:77:4c: 3f:99:3b:4d:81:e3:96:71:f0:13:c1:73:fc:12:70:9e:38:22: 3b:dc:8a:23:da:71:63:88:fc:c3:44:f4:1b:ff:2e:b4:ec:b6: af:e7:6e:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OUVBRTExMC8GA1UEBRMoNzI3MEYzNDI5OUEyMUVBNUIwQzc2RUQzRDdFQjJFMDdC QjY3MjNGNzAeFw0yNTA0MjUwNjAxNDJaFw0yNTA1MDIwNjAxNDJaMBgxFjAUBgNV BAMTDTY4MGIyNTQ2LTAwMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRIcxedoy4m/9zFlaHBHNdKquPb5446jy5zbrByhsvQvVmEYxLKpx0MNiLe07k beRzV3iB0nhOz2J0HLF/TwSSeMzmw1F1sn5mKdm0GQLGB3HsVsGW+4jUN339p3rd Aew92ihA1LZxf8RF3azAQUjtQ485lZ+P9dq6JCH3IeSkUWRZudajLW6K3qPyCA7d CZkg1EmQTZP1+0QmMzoP8+Wtt5o9CwJH/7zqYDSuHrMSBWc7nSdvNebbmktYnUBM DGNw45InxaihPHb8/ek1NgFkuZDWwcDMZiWq+FH6qtGk0w6PpQlGHbs3Qhm4cKkl LcmIq9S0FsBaO4aCTxXGU4hTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpiASt8Z2 V5/A8vmCFmMVFeCPnLYwHwYDVR0jBBgwFoAUcnDzQpmiHqWwx27T1+suB7tnI/cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5RUFFL0FFMDI4MDU2OEQw RTExRUZBOEZFOTM3MUM0RjlBRTAyL2NuRHpRcG1pSHFXd3gyN1QxLXN1Qjd0bklf Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY25EelFwbWlIcVd3eDI3VDEtc3VCN3RuSV9jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 RUFFL0FFMDI4MDU2OEQwRTExRUZBOEZFOTM3MUM0RjlBRTAyL2NuRHpRcG1pSHFX d3gyN1QxLXN1Qjd0bklfYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFos95i6F/f09EpioVLylRUeT1jwSjmPqNdzXQH9G+ofTUD9y1D5Lqtq tkoqrAbA4vP9OkbwGcpPA8mCz3RyCYJaNMuj7evkGwOS+w+4fDQydQTgOoY+BRa2 B2KQLXoO7ygn0M+IgB8d1ktDqT/sOTXXIKt4CwOSG1Q6l+7L2qIm86EzZ80Y65Ex voG4KM/HP9xxWlv7b13tE7Atc1LA11kKgHTzAyLMsC/XMyuvD413p07EqJf44P0s tuT7F62ptzmKuBS1b0rG7evKe4g+EbVLYNZSxgt3TD+ZO02B45Zx8BPBc/wScJ44 IjvciiPacWOI/MNE9Bv/LrTstq/nbro= -----END CERTIFICATE-----Generated at Sat Apr 26 13:10:41 2025 by rpki-client