$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft File: cnDzQpmiHqWwx27T1-suB7tnI_c.mft (raw, json) Hash identifier: kZZj/CQv8A9IamIxpufYi8Rwyzk/pLChrA4RDSvyvpw= Subject key identifier: D7:98:F1:D7:27:69:79:38:84:AB:8A:76:4C:B8:16:A6:F9:25:29:DB Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 Certificate issuer: /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft Manifest number: 9E Signing time: Thu 21 Aug 2025 06:30:45 +0000 Manifest this update: Thu 21 Aug 2025 06:30:44 +0000 Manifest next update: Thu 28 Aug 2025 06:30:44 +0000 Files and hashes: 1: cnDzQpmiHqWwx27T1-suB7tnI_c.crl (hash: 6KQq0cJCBFvV/oaKV7yssYYAuoWz06cwUtw82/FUs2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 06:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EAE, serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Validity Not Before: Aug 21 06:30:44 2025 GMT Not After : Aug 28 06:30:44 2025 GMT Subject: CN=68a6bd14-d64c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9c:e4:c9:41:b1:19:3d:6f:86:77:e4:ff:d7: 6b:d7:8b:31:8a:82:d6:8b:cf:ad:d6:77:fe:09:c5: 27:b0:90:3f:58:9b:5c:3a:eb:f2:ab:cd:6e:45:6b: 65:dc:d8:29:26:72:ae:95:fd:d6:dc:37:3d:8a:04: 44:81:ae:3e:34:1a:b8:58:47:ac:f1:b2:eb:8c:4e: 58:f6:78:28:97:f5:ca:98:36:fe:66:2e:dc:1b:06: 67:19:f7:1a:f8:a5:5e:1e:13:4a:90:4e:61:c5:e1: d2:43:4b:09:13:b5:12:13:66:bd:4c:77:7f:4d:3a: b1:c6:91:30:eb:fc:5c:c9:e4:ca:fb:29:b8:29:f6: 2e:4c:e5:de:38:a8:dd:a1:be:52:16:4b:a9:5d:ca: 91:b4:28:36:68:04:20:5f:cc:8c:9b:3d:9c:1b:61: 24:4d:0c:db:e4:3b:15:69:cd:79:49:a8:88:36:aa: d2:52:11:5b:ba:b8:73:ac:28:d9:ff:1a:7a:60:ca: 27:8a:88:c6:da:4b:73:9b:11:7a:4d:61:02:a3:c6: ba:94:e0:2c:02:6c:8c:57:dd:ce:c3:fa:33:04:85: bc:7b:ad:33:f4:9d:19:a3:b8:f6:b5:97:f7:fd:39: da:ed:ed:b7:bb:fa:c6:61:68:cd:ee:b3:12:a7:16: 5c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:98:F1:D7:27:69:79:38:84:AB:8A:76:4C:B8:16:A6:F9:25:29:DB X509v3 Authority Key Identifier: keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:df:ec:a6:77:ac:70:2f:16:8b:73:14:55:fa:45:a4:87:c7: 79:47:c0:b7:47:da:3f:8b:53:87:30:24:44:81:ca:7f:a8:48: 74:2b:7b:a0:3b:d5:ff:b2:1e:90:63:fe:b5:5f:a1:5f:0e:0e: b7:7e:b4:d5:0d:00:5f:66:af:78:63:25:65:fd:d6:0d:14:8b: 54:a2:bb:b8:7a:4b:a1:77:65:3d:86:3a:69:e3:6c:5c:88:92: aa:b8:e6:8c:72:fd:8d:82:83:5e:ca:2d:cf:f4:52:53:ea:29: b2:8c:ef:f9:61:da:03:e9:d6:3e:e4:95:06:74:76:e1:2a:e7: 96:be:57:ca:c9:04:d8:cb:b7:db:34:d2:0a:fd:13:ff:85:da: 26:99:e8:05:8f:cd:e5:c9:45:45:37:c7:d0:c5:30:5b:78:bd: ec:69:e7:43:0a:e3:ba:a8:f8:9d:74:bb:b5:17:34:6f:e2:00: fd:7d:50:0f:44:c2:e5:eb:ae:58:c7:eb:cc:5d:f5:8f:47:e4: 2e:50:ea:37:99:ec:11:56:9c:c0:d4:85:68:96:f5:7f:83:67: c2:ca:d4:70:a7:a8:b7:ff:b2:2a:41:57:c2:fa:e4:77:9b:b6: e2:68:ef:b0:ca:08:6b:80:f4:01:1a:19:38:08:80:d5:af:ec: 8e:3c:d8:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlFQUUxMTAvBgNVBAUTKDcyNzBGMzQyOTlBMjFFQTVCMEM3NkVEM0Q3RUIyRTA3 QkI2NzIzRjcwHhcNMjUwODIxMDYzMDQ0WhcNMjUwODI4MDYzMDQ0WjAYMRYwFAYD VQQDEw02OGE2YmQxNC1kNjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJzkyUGxGT1vhnfk/9dr14sxioLWi8+t1nf+CcUnsJA/WJtcOuvyq81uRWtl 3NgpJnKulf3W3Dc9igREga4+NBq4WEes8bLrjE5Y9ngol/XKmDb+Zi7cGwZnGfca +KVeHhNKkE5hxeHSQ0sJE7USE2a9THd/TTqxxpEw6/xcyeTK+ym4KfYuTOXeOKjd ob5SFkupXcqRtCg2aAQgX8yMmz2cG2EkTQzb5DsVac15SaiINqrSUhFburhzrCjZ /xp6YMoniojG2ktzmxF6TWECo8a6lOAsAmyMV93Ow/ozBIW8e60z9J0Zo7j2tZf3 /Tna7e23u/rGYWjN7rMSpxZcXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNeY8dcn aXk4hKuKdky4Fqb5JSnbMB8GA1UdIwQYMBaAFHJw80KZoh6lsMdu09frLge7ZyP3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVBRS9BRTAyODA1NjhE MEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhxV3d4MjdUMS1zdUI3dG5J X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuRHpRcG1pSHFXd3gyN1QxLXN1Qjd0bklfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUVBRS9BRTAyODA1NjhEMEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhx V3d4MjdUMS1zdUI3dG5JX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJ3+ymd6xwLxaLcxRV+kWkh8d5R8C3R9o/i1OHMCREgcp/qEh0K3ug O9X/sh6QY/61X6FfDg63frTVDQBfZq94YyVl/dYNFItUoru4ekuhd2U9hjpp42xc iJKquOaMcv2NgoNeyi3P9FJT6imyjO/5YdoD6dY+5JUGdHbhKueWvlfKyQTYy7fb NNIK/RP/hdommegFj83lyUVFN8fQxTBbeL3saedDCuO6qPiddLu1FzRv4gD9fVAP RMLl665Yx+vMXfWPR+QuUOo3mewRVpzA1IVolvV/g2fCytRwp6i3/7IqQVfC+uR3 m7biaO+wyghrgPQBGhk4CIDVr+yOPNiu -----END CERTIFICATE-----Generated at Fri Aug 22 16:35:13 2025 by rpki-client