$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft File: cnDzQpmiHqWwx27T1-suB7tnI_c.mft (raw, json) Hash identifier: z8XdlT/xMQ+vKofA7+W3S6JCiWsLFNKoNhJI7Z1Ogr8= Subject key identifier: 3B:E3:6E:07:DF:F0:41:19:3B:4E:A8:D8:E0:09:7C:CE:63:89:F4:21 Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 Certificate issuer: /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft Manifest number: 74 Signing time: Sat 31 May 2025 06:23:24 +0000 Manifest this update: Sat 31 May 2025 06:23:23 +0000 Manifest next update: Sat 07 Jun 2025 06:23:23 +0000 Files and hashes: 1: cnDzQpmiHqWwx27T1-suB7tnI_c.crl (hash: xtCU++rrcZdpZwTHye1E1RP92yn8z4/eD38dkpAV3ZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EAE, serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Validity Not Before: May 31 06:23:23 2025 GMT Not After : Jun 7 06:23:23 2025 GMT Subject: CN=683aa05c-7cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f1:04:01:34:89:72:8a:c1:ef:11:07:2f:d4: dc:d4:88:f9:13:46:ae:9a:17:b9:9f:9e:f4:fe:1a: 4c:85:81:88:dc:75:34:d6:c9:93:2b:e3:3b:e7:71: 00:df:5b:93:19:9c:ec:fe:ca:3e:d5:83:b3:9f:71: a6:eb:85:8e:21:08:89:79:0a:b2:f7:ab:f5:fe:89: b2:ad:ef:8f:a7:2b:40:f8:1d:84:c2:ef:a9:ab:b9: 12:39:b0:27:72:a5:07:1e:e8:32:08:d3:78:54:98: e2:49:46:a1:68:38:14:b4:d4:9a:da:6f:3d:21:ae: 2c:60:07:bc:11:50:91:bf:b0:fc:fa:f2:0c:80:12: 15:d5:b5:cf:37:24:ce:57:fc:45:e6:8e:4f:62:8e: 55:66:09:a2:2b:d9:e3:f0:89:45:9f:40:86:c3:a0: 3a:0b:96:09:13:31:d4:18:bb:59:de:0c:7a:78:1d: 47:d6:7f:76:b3:22:f0:5d:de:fb:20:94:59:ba:b5: 0f:ff:82:66:d0:ac:1d:a2:92:be:e2:75:ff:a8:24: 44:64:b2:67:02:4a:03:34:e3:2f:8f:f4:6d:9b:a1: 81:b6:1e:16:6f:d7:d7:01:96:01:f2:67:b7:b2:d1: 23:e8:58:53:5b:73:36:f8:fb:fc:e5:8c:05:42:7a: 48:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E3:6E:07:DF:F0:41:19:3B:4E:A8:D8:E0:09:7C:CE:63:89:F4:21 X509v3 Authority Key Identifier: keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:77:49:3c:d6:9b:90:5a:3c:01:f1:9e:1c:99:be:c4:91:88: bd:ba:7e:2f:cd:e1:df:b3:0e:63:21:4a:37:ef:3a:3a:8e:22: 0f:09:cf:27:a1:77:c5:72:46:8b:d1:3e:ab:56:4a:bf:55:b4: 80:82:dc:0e:9c:68:77:00:d8:9b:cd:8f:eb:4d:47:94:04:c4: 47:de:6d:b3:9d:a3:2e:7d:cb:a6:ad:40:6e:49:3c:77:8e:c0: 4a:a0:9f:7b:06:68:95:16:61:2f:15:09:87:47:9b:e5:1a:6f: 32:e4:a2:c8:18:0e:9d:4b:d7:3b:10:ee:e7:d3:04:83:e0:34: a3:30:50:9a:6c:4c:a0:c3:c2:1d:ab:80:dc:86:08:1e:d1:69: b1:aa:7c:c8:5e:14:44:f7:2b:2b:ee:ce:01:3b:e0:e2:b0:fa: 6f:15:ad:89:0d:88:ca:61:06:e2:85:ef:8c:aa:83:62:cf:77: ca:39:f2:70:d0:35:d6:42:36:b1:b3:e3:30:85:5c:36:1b:fd: bc:f9:19:b9:69:ff:1e:e4:37:0b:02:64:6f:a4:bd:75:cf:1d: bb:2b:41:53:91:c6:15:d8:7b:71:da:bb:ae:8a:6d:5f:6a:4d: a9:ba:fc:1c:70:bb:c1:d0:d0:c8:48:0e:3e:9f:56:d1:11:7f: ba:05:0b:10 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OUVBRTExMC8GA1UEBRMoNzI3MEYzNDI5OUEyMUVBNUIwQzc2RUQzRDdFQjJFMDdC QjY3MjNGNzAeFw0yNTA1MzEwNjIzMjNaFw0yNTA2MDcwNjIzMjNaMBgxFjAUBgNV BAMTDTY4M2FhMDVjLTdjYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCq8QQBNIlyisHvEQcv1NzUiPkTRq6aF7mfnvT+GkyFgYjcdTTWyZMr4zvncQDf W5MZnOz+yj7Vg7OfcabrhY4hCIl5CrL3q/X+ibKt74+nK0D4HYTC76mruRI5sCdy pQce6DII03hUmOJJRqFoOBS01Jrabz0hrixgB7wRUJG/sPz68gyAEhXVtc83JM5X /EXmjk9ijlVmCaIr2ePwiUWfQIbDoDoLlgkTMdQYu1neDHp4HUfWf3azIvBd3vsg lFm6tQ//gmbQrB2ikr7idf+oJERksmcCSgM04y+P9G2boYG2HhZv19cBlgHyZ7ey 0SPoWFNbczb4+/zljAVCekgFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO+NuB9/w QRk7TqjY4Al8zmOJ9CEwHwYDVR0jBBgwFoAUcnDzQpmiHqWwx27T1+suB7tnI/cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5RUFFL0FFMDI4MDU2OEQw RTExRUZBOEZFOTM3MUM0RjlBRTAyL2NuRHpRcG1pSHFXd3gyN1QxLXN1Qjd0bklf Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY25EelFwbWlIcVd3eDI3VDEtc3VCN3RuSV9jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 RUFFL0FFMDI4MDU2OEQwRTExRUZBOEZFOTM3MUM0RjlBRTAyL2NuRHpRcG1pSHFX d3gyN1QxLXN1Qjd0bklfYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANd3STzWm5BaPAHxnhyZvsSRiL26fi/N4d+zDmMhSjfvOjqOIg8Jzyeh d8VyRovRPqtWSr9VtICC3A6caHcA2JvNj+tNR5QExEfebbOdoy59y6atQG5JPHeO wEqgn3sGaJUWYS8VCYdHm+UabzLkosgYDp1L1zsQ7ufTBIPgNKMwUJpsTKDDwh2r gNyGCB7RabGqfMheFET3KyvuzgE74OKw+m8VrYkNiMphBuKF74yqg2LPd8o58nDQ NdZCNrGz4zCFXDYb/bz5Gblp/x7kNwsCZG+kvXXPHbsrQVORxhXYe3Hau66KbV9q Tam6/Bxwu8HQ0MhIDj6fVtERf7oFCxA= -----END CERTIFICATE-----Generated at Sat May 31 17:53:09 2025 by rpki-client