$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft File: cnDzQpmiHqWwx27T1-suB7tnI_c.mft (raw, json) Hash identifier: 6qwSyRBsQKgrXbM7qfAVWdZ3nohhDRIJfQlUg+jRBqg= Subject key identifier: 56:F5:54:45:54:05:62:10:AD:E9:6E:F0:81:6A:33:71:56:43:19:17 Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 Certificate issuer: /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft Manifest number: 7B Signing time: Fri 13 Jun 2025 05:39:10 +0000 Manifest this update: Fri 13 Jun 2025 05:39:09 +0000 Manifest next update: Fri 20 Jun 2025 05:39:09 +0000 Files and hashes: 1: cnDzQpmiHqWwx27T1-suB7tnI_c.crl (hash: KTm+6NEfXwCdNshVcadrPu8JzOyzDmmMxLZgXABcYiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:39:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EAE, serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Validity Not Before: Jun 13 05:39:09 2025 GMT Not After : Jun 20 05:39:09 2025 GMT Subject: CN=684bb97d-5d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:9a:b8:51:3c:5e:7a:16:6d:73:0f:3f:97: 22:f9:7e:86:b9:83:0b:0f:c2:56:56:86:c4:ca:34: 17:44:9a:62:72:18:9e:26:b4:d3:e1:6e:48:68:2f: 9d:5a:81:f7:84:4f:5b:af:fb:8b:3f:37:ed:b1:5e: 94:50:bc:13:b7:18:b0:8c:63:d9:89:53:07:30:e7: ff:87:ad:26:0d:27:85:75:34:a7:64:13:04:64:d4: 83:7b:9a:68:95:22:40:fc:01:2e:32:bf:3c:8a:64: 18:ca:62:6c:ce:c9:c9:1c:29:4b:45:d3:7b:2a:9b: 19:fe:38:5c:51:8b:df:91:ce:d1:0d:fe:6f:5e:66: 66:a0:9e:8e:05:ef:8c:8b:8f:f6:17:1b:5e:73:02: 0d:0b:58:85:e6:3f:36:dc:f7:5e:73:1b:b6:bc:09: 3c:79:80:86:49:b0:da:56:46:cd:b4:b0:7d:7d:e4: 35:b2:ba:59:f9:2d:77:da:d1:49:37:23:55:68:ee: 9d:7e:e6:4a:6e:c5:1e:0a:85:1e:28:b3:f0:e0:39: 19:6d:f1:a8:95:f0:f2:7b:da:34:5c:de:5e:ac:70: 7f:f3:e8:b8:97:40:b6:7b:f8:09:26:3e:e2:29:9a: 90:34:31:93:9d:f5:73:3c:13:56:4a:a3:3d:32:77: f1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F5:54:45:54:05:62:10:AD:E9:6E:F0:81:6A:33:71:56:43:19:17 X509v3 Authority Key Identifier: keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d0:dd:a4:54:4a:69:32:ce:2c:df:bf:c4:ce:f2:e6:37:bf: ec:3c:20:10:5e:47:5a:33:c3:e1:66:8f:59:98:f1:b5:89:b3: b0:08:07:07:f2:c1:a4:3f:73:41:d7:79:f8:59:b1:66:78:ac: b9:ce:cb:c2:92:bd:e0:8b:f1:4b:5a:ca:21:fc:4f:2c:88:68: 85:c1:49:26:6b:3a:ef:6b:9f:15:e3:5e:70:5a:7e:60:9f:e1: 93:fb:86:37:21:69:a8:37:53:a9:5d:79:13:eb:79:57:59:12: 2b:3f:8d:d7:e6:94:0e:8d:79:1a:26:ca:65:b7:2e:be:62:6c: 24:c5:bc:b3:9f:e5:60:5d:2d:34:e1:d5:cc:3d:2b:41:24:fd: 26:3f:12:58:92:14:14:39:30:de:c9:e4:2f:07:aa:b9:dd:a7: 30:fe:a1:d4:d7:d0:a3:5c:c5:d1:cd:fd:75:9c:ca:03:b1:c7: 3b:42:5a:a5:52:c3:61:97:0a:36:77:15:ad:87:d0:05:45:76: 02:35:89:16:17:8c:e8:f2:d7:7c:bc:86:f8:51:c3:42:a8:d0: 8c:ed:4b:8c:6e:df:a3:31:6d:26:b4:35:ec:9e:84:d7:0d:30: 71:b9:eb:29:c2:7a:27:e9:4d:10:0a:9a:ba:b2:cc:63:cc:ee: ec:6a:64:bb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OUVBRTExMC8GA1UEBRMoNzI3MEYzNDI5OUEyMUVBNUIwQzc2RUQzRDdFQjJFMDdC QjY3MjNGNzAeFw0yNTA2MTMwNTM5MDlaFw0yNTA2MjAwNTM5MDlaMBgxFjAUBgNV BAMTDTY4NGJiOTdkLTVkMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2Apq4UTxeehZtcw8/lyL5foa5gwsPwlZWhsTKNBdEmmJyGJ4mtNPhbkhoL51a gfeET1uv+4s/N+2xXpRQvBO3GLCMY9mJUwcw5/+HrSYNJ4V1NKdkEwRk1IN7mmiV IkD8AS4yvzyKZBjKYmzOyckcKUtF03sqmxn+OFxRi9+RztEN/m9eZmagno4F74yL j/YXG15zAg0LWIXmPzbc915zG7a8CTx5gIZJsNpWRs20sH195DWyuln5LXfa0Uk3 I1Vo7p1+5kpuxR4KhR4os/DgORlt8aiV8PJ72jRc3l6scH/z6LiXQLZ7+AkmPuIp mpA0MZOd9XM8E1ZKoz0yd/ErAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVvVURVQF YhCt6W7wgWozcVZDGRcwHwYDVR0jBBgwFoAUcnDzQpmiHqWwx27T1+suB7tnI/cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5RUFFL0FFMDI4MDU2OEQw RTExRUZBOEZFOTM3MUM0RjlBRTAyL2NuRHpRcG1pSHFXd3gyN1QxLXN1Qjd0bklf Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY25EelFwbWlIcVd3eDI3VDEtc3VCN3RuSV9jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 RUFFL0FFMDI4MDU2OEQwRTExRUZBOEZFOTM3MUM0RjlBRTAyL2NuRHpRcG1pSHFX d3gyN1QxLXN1Qjd0bklfYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAzQ3aRUSmkyzizfv8TO8uY3v+w8IBBeR1ozw+Fmj1mY8bWJs7AIBwfy waQ/c0HXefhZsWZ4rLnOy8KSveCL8UtayiH8TyyIaIXBSSZrOu9rnxXjXnBafmCf 4ZP7hjchaag3U6ldeRPreVdZEis/jdfmlA6NeRomymW3Lr5ibCTFvLOf5WBdLTTh 1cw9K0Ek/SY/EliSFBQ5MN7J5C8HqrndpzD+odTX0KNcxdHN/XWcygOxxztCWqVS w2GXCjZ3Fa2H0AVFdgI1iRYXjOjy13y8hvhRw0Ko0IztS4xu36MxbSa0NeyehNcN MHG56ynCeifpTRAKmrqyzGPM7uxqZLs= -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:01 2025 by rpki-client