$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft File: cnDzQpmiHqWwx27T1-suB7tnI_c.mft (raw, json) Hash identifier: gC3vN+RmR+/H5XKAaQ1G0YF553NHzoI8xglE6MSf1WU= Subject key identifier: 9A:5C:A4:D9:78:57:CC:1D:3B:09:C6:99:29:5E:A5:75:46:08:FD:B0 Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 Certificate issuer: /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft Manifest number: 55 Signing time: Sat 29 Mar 2025 06:31:48 +0000 Manifest this update: Sat 29 Mar 2025 06:31:47 +0000 Manifest next update: Sat 05 Apr 2025 06:31:47 +0000 Files and hashes: 1: cnDzQpmiHqWwx27T1-suB7tnI_c.crl (hash: uVzVbt9smDe3KllNyd8n1TWsjxX+6UE9hjiuP8ajnkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EAE Validity Not Before: Mar 29 06:31:47 2025 GMT Not After : Apr 5 06:31:47 2025 GMT Subject: CN=67e793d3-2bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:06:0e:b0:b4:89:81:f4:18:92:12:4e:43:12: e2:e6:6a:aa:0f:86:fb:d4:ea:9f:52:61:b5:cc:99: 00:22:51:8d:ca:d3:67:bc:29:76:e5:28:7b:cd:24: 6f:5a:68:66:59:fb:a2:1f:3a:69:df:a2:83:e4:38: 89:a2:65:29:b9:f9:81:36:ce:37:c3:2e:b0:1f:61: 1f:ea:b9:bb:ce:6f:97:f8:a8:49:77:43:82:d6:eb: 98:06:e5:53:d3:7b:5d:2a:d6:33:70:f3:98:d6:4b: 40:5d:3b:0f:cb:f0:85:88:74:d9:a1:f7:aa:75:33: d8:07:00:5b:6c:2c:13:f6:a1:9d:04:fe:1b:31:3e: c7:92:d2:4e:d8:f4:1f:83:3d:93:9c:25:57:08:64: 68:5d:99:4e:7d:f9:8e:3d:da:7c:ef:be:d9:4c:de: a2:a9:f8:ef:8e:b0:c0:c4:18:b1:7e:9f:b6:9a:74: 57:d9:0a:45:56:d0:bd:e3:d9:63:db:ad:fa:34:14: ac:19:68:4d:33:8d:2d:ce:c8:cc:f1:02:46:bf:f8: cb:6d:dd:14:68:41:0b:e4:bd:52:4c:e9:2f:1d:bc: 16:77:59:7b:c4:f4:f2:b7:ef:81:68:15:ea:95:bb: 49:91:08:17:f6:4e:b0:9d:d2:bc:ee:3e:4e:9e:40: 9a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5C:A4:D9:78:57:CC:1D:3B:09:C6:99:29:5E:A5:75:46:08:FD:B0 X509v3 Authority Key Identifier: keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:69:69:38:f5:0f:57:e8:61:83:6a:25:45:27:f7:75:e0:95: 08:20:fe:a3:75:a8:24:79:54:5f:e1:9e:fb:46:ee:dd:78:af: 43:e6:f5:43:3b:36:a7:22:5c:a6:5b:f1:52:f6:9a:44:83:61: a8:f6:b0:a8:39:0b:54:02:29:b0:45:b4:fb:e9:2f:1c:df:e2: 76:6b:2b:3c:e9:ea:9b:22:c0:4e:21:24:1f:16:70:d0:aa:7f: 2d:71:d0:9f:fe:9b:33:b6:ff:ac:53:33:3d:4b:a4:43:89:f7: be:00:fb:c8:15:53:0c:df:5a:71:b3:49:d7:81:6a:5f:2e:1b: cd:76:14:f8:73:03:da:19:6d:df:14:6a:bd:06:aa:7b:16:f2: 8d:0c:5d:cb:4d:88:88:b9:39:cc:42:e9:33:3a:11:62:74:20: ef:3b:6d:a8:21:ca:24:da:ff:36:29:c7:d4:0e:23:93:18:44: b5:9f:8f:32:90:96:08:59:46:32:7b:79:91:4f:ef:4b:a0:a3: 3a:0d:aa:5e:75:1c:04:a8:a5:e8:17:0d:df:35:6b:02:86:31: 1a:20:7a:c6:fa:82:6a:37:be:f6:b1:3d:1c:10:26:3c:d8:74: 0a:9c:08:f0:d2:b3:55:e6:ff:e3:eb:63:6d:fe:2c:7e:98:3e: f5:94:8d:c9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OUVBRTExMC8GA1UEBRMoNzI3MEYzNDI5OUEyMUVBNUIwQzc2RUQzRDdFQjJFMDdC QjY3MjNGNzAeFw0yNTAzMjkwNjMxNDdaFw0yNTA0MDUwNjMxNDdaMBgxFjAUBgNV BAMTDTY3ZTc5M2QzLTJiZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsBg6wtImB9BiSEk5DEuLmaqoPhvvU6p9SYbXMmQAiUY3K02e8KXblKHvNJG9a aGZZ+6IfOmnfooPkOImiZSm5+YE2zjfDLrAfYR/qubvOb5f4qEl3Q4LW65gG5VPT e10q1jNw85jWS0BdOw/L8IWIdNmh96p1M9gHAFtsLBP2oZ0E/hsxPseS0k7Y9B+D PZOcJVcIZGhdmU59+Y492nzvvtlM3qKp+O+OsMDEGLF+n7aadFfZCkVW0L3j2WPb rfo0FKwZaE0zjS3OyMzxAka/+Mtt3RRoQQvkvVJM6S8dvBZ3WXvE9PK374FoFeqV u0mRCBf2TrCd0rzuPk6eQJqvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmlyk2XhX zB07CcaZKV6ldUYI/bAwHwYDVR0jBBgwFoAUcnDzQpmiHqWwx27T1+suB7tnI/cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5RUFFL0FFMDI4MDU2OEQw RTExRUZBOEZFOTM3MUM0RjlBRTAyL2NuRHpRcG1pSHFXd3gyN1QxLXN1Qjd0bklf Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY25EelFwbWlIcVd3eDI3VDEtc3VCN3RuSV9jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 RUFFL0FFMDI4MDU2OEQwRTExRUZBOEZFOTM3MUM0RjlBRTAyL2NuRHpRcG1pSHFX d3gyN1QxLXN1Qjd0bklfYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE9paTj1D1foYYNqJUUn93XglQgg/qN1qCR5VF/hnvtG7t14r0Pm9UM7 NqciXKZb8VL2mkSDYaj2sKg5C1QCKbBFtPvpLxzf4nZrKzzp6psiwE4hJB8WcNCq fy1x0J/+mzO2/6xTMz1LpEOJ974A+8gVUwzfWnGzSdeBal8uG812FPhzA9oZbd8U ar0GqnsW8o0MXctNiIi5OcxC6TM6EWJ0IO87baghyiTa/zYpx9QOI5MYRLWfjzKQ lghZRjJ7eZFP70ugozoNql51HASopegXDd81awKGMRogesb6gmo3vvaxPRwQJjzY dAqcCPDSs1Xm/+PrY23+LH6YPvWUjck= -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:30 2025 by rpki-client