$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft File: cnDzQpmiHqWwx27T1-suB7tnI_c.mft (raw, json) Hash identifier: 0ica7Mt2+swI8BqBQvClCVxc9JvAYF+iwSe6t6h0Raw= Subject key identifier: 48:F1:32:BC:8F:80:D3:E5:72:7C:AF:10:16:99:4E:09:7A:8A:CE:1C Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 Certificate issuer: /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft Manifest number: C7 Signing time: Wed 05 Nov 2025 06:02:23 +0000 Manifest this update: Wed 05 Nov 2025 06:02:22 +0000 Manifest next update: Wed 12 Nov 2025 06:02:22 +0000 Files and hashes: 1: cnDzQpmiHqWwx27T1-suB7tnI_c.crl (hash: 7yV1XiABwt3f87qJ7ag60r4x1c7sDtqyUuVyXMtS9Cc=) 2: 24DBC31AB1BA11F080D32309C4F9AE02.roa (hash: xWTSSGqR67OKvKEEEyv0yzrHrgxLHGhyMRwrlSGtqK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EAE, serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Validity Not Before: Nov 5 06:02:22 2025 GMT Not After : Nov 12 06:02:22 2025 GMT Subject: CN=690ae86e-8bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:98:27:d6:7e:48:f3:8f:13:53:5d:28:91:15: e9:7c:e3:f4:7e:72:9b:66:cf:4a:8f:6d:af:f3:49: e2:22:06:f5:10:44:50:ea:e3:81:08:46:47:70:b2: 9f:46:ef:33:98:2e:6f:81:d0:62:e4:d1:dd:92:5e: 93:2b:30:68:09:1c:0a:ff:8d:43:c1:a3:7f:d1:09: 8e:82:a2:33:2e:76:0d:f6:72:1f:ec:3c:e1:64:dd: ee:73:43:d7:5c:c6:c9:72:df:e2:3e:be:6a:72:5c: d3:ca:c2:a5:96:4c:c9:d0:9c:2e:76:c2:a4:e5:c1: fd:ec:14:8e:19:c0:b6:82:1e:f7:16:4c:2e:8d:0f: 92:fe:5d:b7:9f:ba:13:b6:9a:b8:78:ad:f8:a0:12: a4:e4:f7:36:53:bb:e6:7e:58:7b:98:10:2a:a5:c5: bf:fd:9e:10:20:c4:f6:98:5c:1e:a3:48:98:d6:76: 7e:67:44:94:6e:58:e6:e3:36:d0:c5:91:92:cb:47: b9:73:1b:61:3d:d4:fd:d6:0b:ce:3b:7d:c8:56:1b: 48:1e:4a:fc:30:d3:7b:b7:c1:ec:61:3d:b4:3e:be: 37:5d:cf:87:8b:52:7e:25:34:c1:1b:1a:c9:3c:a4: 37:af:e1:39:1c:42:02:8d:26:46:ed:62:b3:ba:f7: fc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F1:32:BC:8F:80:D3:E5:72:7C:AF:10:16:99:4E:09:7A:8A:CE:1C X509v3 Authority Key Identifier: keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:62:c3:97:72:40:f1:ac:95:95:82:30:af:f3:e5:f1:6c:50: 7b:ad:1b:03:11:f1:a0:56:76:86:d7:f0:f4:6c:32:f1:41:be: a7:8f:11:d9:c5:f8:d9:61:81:90:42:78:33:fa:d0:f5:c0:8b: 80:63:ca:cf:ee:8c:df:bb:d0:06:a9:0f:6a:39:df:6c:dc:d1: 5d:04:3f:11:a9:b3:1c:f9:c0:36:fa:37:54:2e:02:ad:a9:83: 6c:23:04:34:1e:43:fd:ec:f1:77:9b:52:91:c2:cd:3c:3d:d9: a1:d0:7a:3b:bd:c9:02:54:d2:40:eb:a3:a4:cc:a0:2f:a1:0a: 77:3b:6c:29:a9:f6:27:76:e1:96:73:0c:a2:ee:c9:73:68:b4: d4:f5:f3:26:e5:0c:de:a0:f0:bb:91:28:c9:b5:c9:58:5d:14: 65:4f:4c:1c:6b:07:7d:2d:e6:24:ff:c7:71:26:ea:4e:86:b7: fa:c6:47:2f:b9:d9:ea:45:a0:c7:ab:2f:84:66:05:74:9c:04: c7:26:67:86:f9:dc:1a:4c:82:5c:38:ca:76:ff:bd:e0:cc:8f: 6f:40:06:12:34:69:e5:1a:59:b1:dd:68:86:96:b8:e0:3c:af: bd:9d:04:cd:3e:31:02:d6:0f:01:d0:b6:26:db:47:78:8a:9c: f9:ff:f5:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlFQUUxMTAvBgNVBAUTKDcyNzBGMzQyOTlBMjFFQTVCMEM3NkVEM0Q3RUIyRTA3 QkI2NzIzRjcwHhcNMjUxMTA1MDYwMjIyWhcNMjUxMTEyMDYwMjIyWjAYMRYwFAYD VQQDEw02OTBhZTg2ZS04YmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Zgn1n5I848TU10okRXpfOP0fnKbZs9Kj22v80niIgb1EERQ6uOBCEZHcLKf Ru8zmC5vgdBi5NHdkl6TKzBoCRwK/41DwaN/0QmOgqIzLnYN9nIf7DzhZN3uc0PX XMbJct/iPr5qclzTysKllkzJ0JwudsKk5cH97BSOGcC2gh73FkwujQ+S/l23n7oT tpq4eK34oBKk5Pc2U7vmflh7mBAqpcW//Z4QIMT2mFweo0iY1nZ+Z0SUbljm4zbQ xZGSy0e5cxthPdT91gvOO33IVhtIHkr8MNN7t8HsYT20Pr43Xc+Hi1J+JTTBGxrJ PKQ3r+E5HEICjSZG7WKzuvf8wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjxMryP gNPlcnyvEBaZTgl6is4cMB8GA1UdIwQYMBaAFHJw80KZoh6lsMdu09frLge7ZyP3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVBRS9BRTAyODA1NjhE MEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhxV3d4MjdUMS1zdUI3dG5J X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuRHpRcG1pSHFXd3gyN1QxLXN1Qjd0bklfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUVBRS9BRTAyODA1NjhEMEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhx V3d4MjdUMS1zdUI3dG5JX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANYsOXckDxrJWVgjCv8+XxbFB7rRsDEfGgVnaG1/D0bDLxQb6njxHZ xfjZYYGQQngz+tD1wIuAY8rP7ozfu9AGqQ9qOd9s3NFdBD8RqbMc+cA2+jdULgKt qYNsIwQ0HkP97PF3m1KRws08Pdmh0Ho7vckCVNJA66OkzKAvoQp3O2wpqfYnduGW cwyi7slzaLTU9fMm5QzeoPC7kSjJtclYXRRlT0wcawd9LeYk/8dxJupOhrf6xkcv udnqRaDHqy+EZgV0nATHJmeG+dwaTIJcOMp2/73gzI9vQAYSNGnlGlmx3WiGlrjg PK+9nQTNPjEC1g8B0LYm20d4ipz5//V2 -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:06 2025 by rpki-client