$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft File: cnDzQpmiHqWwx27T1-suB7tnI_c.mft (raw, json) Hash identifier: pr60GvwQUo7e1rMPOmSCaQX00mqn6Lg7CVAAGFUfKpU= Subject key identifier: 98:05:FF:83:E8:7B:76:5C:36:AA:24:08:6C:E2:7E:24:7C:E5:F5:89 Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 Certificate issuer: /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft Manifest number: BC Signing time: Sun 19 Oct 2025 09:04:50 +0000 Manifest this update: Sun 19 Oct 2025 09:04:50 +0000 Manifest next update: Sun 26 Oct 2025 09:04:50 +0000 Files and hashes: 1: cnDzQpmiHqWwx27T1-suB7tnI_c.crl (hash: 3KBGoyl3QIwgi8raDSAD44AlzPMEYTrbIZoqFDmrt5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EAE, serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Validity Not Before: Oct 19 09:04:50 2025 GMT Not After : Oct 26 09:04:50 2025 GMT Subject: CN=68f4a9b2-ce1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a6:50:01:fa:39:68:6a:81:0f:7d:18:92:10: 4a:f5:1d:68:12:8e:29:cf:53:39:47:79:06:d4:fd: 78:fb:21:e6:5b:52:1f:cf:73:12:93:86:77:eb:60: e1:a7:87:97:db:89:cd:a4:44:c1:e7:22:8a:63:3f: 31:40:d3:c9:a1:8f:17:7a:67:ca:e9:94:cf:75:d4: ab:4e:c6:93:74:16:d7:d3:96:b5:43:7e:bf:29:2d: c0:15:f0:40:b9:2d:99:50:03:57:07:8d:3f:40:c7: cb:48:32:8e:8e:4e:eb:82:77:cd:b3:89:b9:61:74: f1:4a:4c:50:cd:ce:89:79:ec:f8:dc:7a:28:d2:d5: 5a:fa:ee:f6:96:dc:87:dc:38:4f:a0:1d:8f:8f:81: 8b:5e:68:cc:ad:43:43:f3:56:a6:0f:ce:ca:a2:c8: a3:c7:d7:4c:c2:b8:ff:ee:47:29:b9:c3:69:cd:1c: b9:35:d3:a3:b2:9f:df:01:25:d5:15:da:9e:37:a8: 60:5b:5c:76:4a:d5:c7:4d:5c:1a:6a:c8:ab:f0:89: fe:84:bc:b8:05:58:6f:6e:fd:ab:3f:b8:f0:cb:fc: c4:95:8e:10:be:fa:2f:a8:cf:25:13:84:45:23:3c: 82:d6:42:a6:da:7a:26:a4:1e:39:35:a2:01:e9:79: a4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:05:FF:83:E8:7B:76:5C:36:AA:24:08:6C:E2:7E:24:7C:E5:F5:89 X509v3 Authority Key Identifier: keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:f4:3c:c3:a7:9a:d0:f9:eb:34:48:ab:7e:2d:69:a2:84:6c: 6d:74:fe:9d:00:0a:2d:5e:ee:4b:68:ad:f2:a2:0f:11:7c:b6: 6e:b6:23:f0:6e:30:5b:74:11:02:e2:3b:5f:7b:58:57:46:7c: d2:a2:03:5b:7a:f9:f8:70:fe:93:dc:48:2c:9a:3e:88:55:03: 63:06:30:b4:6a:43:34:4b:ff:1c:b1:2d:d5:9a:88:6c:81:67: 0e:7f:bd:3e:e3:58:55:23:be:4e:4e:40:6a:9a:c1:75:64:f9: 5d:47:bf:68:25:ba:9d:1e:91:b8:ed:16:60:b2:9c:00:98:d4: a5:23:25:70:2e:23:87:48:6a:86:69:52:d2:9e:3f:29:f5:d5: 58:a1:cf:af:f0:fc:17:6a:f8:c5:9f:33:6c:f9:f5:59:e3:ca: ba:f0:1a:6d:6c:a0:9c:25:a7:01:b4:8f:98:75:aa:10:09:b2: 51:cf:c9:70:c4:01:45:b1:d8:a5:9a:e5:89:b4:4e:fe:54:28: d7:28:77:0f:02:68:f4:11:5c:2a:56:d5:b2:25:42:e7:27:f2: ac:69:bc:67:d2:24:f4:97:33:b1:17:b6:30:bf:e3:3b:6d:30: a3:38:5a:a7:d3:a5:e5:e4:69:d1:32:f4:8c:dd:d9:8b:c6:7a: fa:e7:de:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlFQUUxMTAvBgNVBAUTKDcyNzBGMzQyOTlBMjFFQTVCMEM3NkVEM0Q3RUIyRTA3 QkI2NzIzRjcwHhcNMjUxMDE5MDkwNDUwWhcNMjUxMDI2MDkwNDUwWjAYMRYwFAYD VQQDEw02OGY0YTliMi1jZTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8KZQAfo5aGqBD30YkhBK9R1oEo4pz1M5R3kG1P14+yHmW1Ifz3MSk4Z362Dh p4eX24nNpETB5yKKYz8xQNPJoY8XemfK6ZTPddSrTsaTdBbX05a1Q36/KS3AFfBA uS2ZUANXB40/QMfLSDKOjk7rgnfNs4m5YXTxSkxQzc6Jeez43Hoo0tVa+u72ltyH 3DhPoB2Pj4GLXmjMrUND81amD87Kosijx9dMwrj/7kcpucNpzRy5NdOjsp/fASXV FdqeN6hgW1x2StXHTVwaasir8In+hLy4BVhvbv2rP7jwy/zElY4QvvovqM8lE4RF IzyC1kKm2nompB45NaIB6XmknQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgF/4Po e3ZcNqokCGzifiR85fWJMB8GA1UdIwQYMBaAFHJw80KZoh6lsMdu09frLge7ZyP3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVBRS9BRTAyODA1NjhE MEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhxV3d4MjdUMS1zdUI3dG5J X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuRHpRcG1pSHFXd3gyN1QxLXN1Qjd0bklfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUVBRS9BRTAyODA1NjhEMEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhx V3d4MjdUMS1zdUI3dG5JX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj9DzDp5rQ+es0SKt+LWmihGxtdP6dAAotXu5LaK3yog8RfLZutiPw bjBbdBEC4jtfe1hXRnzSogNbevn4cP6T3Egsmj6IVQNjBjC0akM0S/8csS3Vmohs gWcOf70+41hVI75OTkBqmsF1ZPldR79oJbqdHpG47RZgspwAmNSlIyVwLiOHSGqG aVLSnj8p9dVYoc+v8PwXavjFnzNs+fVZ48q68BptbKCcJacBtI+YdaoQCbJRz8lw xAFFsdilmuWJtE7+VCjXKHcPAmj0EVwqVtWyJULnJ/Ksabxn0iT0lzOxF7Ywv+M7 bTCjOFqn06Xl5GnRMvSM3dmLxnr6594Q -----END CERTIFICATE-----Generated at Mon Oct 20 19:29:45 2025 by rpki-client