$ rpki-client -vvf rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft File: avGRXIn1DHKtFvQZzTbvEvSto8c.mft (raw, json) Hash identifier: gAZ05txJ3BeDqWx6JXbtZiPE9+BHEclLD/pNQHcHjOo= Subject key identifier: 39:6A:6B:F8:72:84:28:B2:CA:6F:B2:26:D4:6C:53:15:A3:CC:17:4B Authority key identifier: 6A:F1:91:5C:89:F5:0C:72:AD:16:F4:19:CD:36:EF:12:F4:AD:A3:C7 Certificate issuer: /CN=A9127F37/serialNumber=6AF1915C89F50C72AD16F419CD36EF12F4ADA3C7 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft Manifest number: 61 Signing time: Sat 23 Aug 2025 07:19:33 +0000 Manifest this update: Sat 23 Aug 2025 07:19:32 +0000 Manifest next update: Sat 30 Aug 2025 07:19:32 +0000 Files and hashes: 1: avGRXIn1DHKtFvQZzTbvEvSto8c.crl (hash: KUysR9N9M9NirZdeOep9YTWd3q/sAF4qNX/pYbNqhQQ=) 2: 4FFEB60AEE8411EF981CD840C4F9AE02.roa (hash: 6QHt7FPePc9ME7gIJCijX1TcfEpQyK9WI3BiH/AqMwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.crl rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127F37, serialNumber=6AF1915C89F50C72AD16F419CD36EF12F4ADA3C7 Validity Not Before: Aug 23 07:19:32 2025 GMT Not After : Aug 30 07:19:32 2025 GMT Subject: CN=68a96b85-55f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ee:4c:6f:70:32:e5:9f:14:3c:1d:3c:14:5d: af:50:ed:83:96:14:cf:60:c2:37:30:9e:8f:fe:df: 1b:8d:3c:7e:b1:7f:02:f1:3e:42:75:98:cf:f7:78: 8b:bd:62:00:88:da:14:c2:d9:7e:96:4d:50:45:39: 47:75:64:1f:41:eb:af:d0:4a:10:c5:d8:28:f7:f9: b8:ea:09:6e:eb:6c:67:fc:fd:c5:c0:3b:86:b4:95: b2:a8:ee:61:51:0d:b8:1a:f4:a7:56:d3:09:88:d0: 59:75:06:41:01:16:40:b2:de:f9:63:49:57:e9:6d: 21:8e:09:ac:2b:13:4a:0a:7c:22:88:dc:87:20:41: 77:61:8f:12:bf:b5:6e:80:a0:58:67:2d:3e:64:fe: b3:2e:72:cb:2f:18:6a:60:50:dd:69:59:d8:4c:23: af:f6:7d:4b:f5:95:b7:2f:48:75:cc:4e:c8:0f:f8: 6a:75:30:b4:91:0b:59:2d:8d:49:e4:88:fc:c5:c2: b3:c6:6b:5f:8c:c8:9f:bf:6e:2f:16:b6:68:b0:bc: 06:8e:37:5d:3d:81:b7:d6:22:85:b5:9f:ab:71:e0: 4d:1d:71:bc:2a:9a:9b:c6:57:22:ee:10:78:9f:2d: 41:64:3f:0a:67:bb:5f:ca:0f:ce:0b:41:9a:68:b0: 1f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6A:6B:F8:72:84:28:B2:CA:6F:B2:26:D4:6C:53:15:A3:CC:17:4B X509v3 Authority Key Identifier: keyid:6A:F1:91:5C:89:F5:0C:72:AD:16:F4:19:CD:36:EF:12:F4:AD:A3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:c2:f5:bd:4d:f6:02:57:24:f0:bf:ea:19:1c:ed:c3:ec:7d: 42:9c:77:a1:80:41:12:a1:e5:bf:f1:32:72:2e:64:14:44:11: 0c:d6:9e:dc:57:07:a7:fe:4f:f4:e6:01:8a:67:ae:23:8c:99: a1:8e:f9:05:73:40:53:7a:45:7d:3b:43:15:41:e5:ec:18:44: 31:79:90:30:0a:28:48:d3:95:2a:44:f1:4e:2a:8c:7c:32:e2: 9c:45:a0:ac:d4:80:c8:5b:fa:a8:6b:6f:b6:6c:2b:12:ac:06: c3:b8:ae:06:5b:54:f7:06:b1:3a:ca:87:43:2e:72:85:f2:d8: ad:54:30:61:f2:76:8a:2d:04:87:15:5e:d5:9f:01:a4:ef:7f: 95:6e:21:8c:7b:63:2b:94:82:14:93:f4:b6:23:ad:69:d0:0d: a9:3e:86:54:7b:23:64:7c:61:20:28:24:32:82:2a:9a:90:02: a1:59:7e:64:b3:2d:09:01:88:b9:43:f0:78:74:4b:75:e0:df: 5a:38:66:5d:f9:5c:00:44:b8:2f:42:b0:7d:ee:72:be:a1:31: d1:f7:c3:3e:44:0f:88:38:55:dc:b3:64:78:9d:47:ca:94:46: bb:03:b1:a0:86:b6:1a:43:b4:77:a4:c3:cd:e1:8b:7c:46:4e: 2d:a3:9a:b7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0YzNzExMC8GA1UEBRMoNkFGMTkxNUM4OUY1MEM3MkFEMTZGNDE5Q0QzNkVGMTJG NEFEQTNDNzAeFw0yNTA4MjMwNzE5MzJaFw0yNTA4MzAwNzE5MzJaMBgxFjAUBgNV BAMTDTY4YTk2Yjg1LTU1ZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDl7kxvcDLlnxQ8HTwUXa9Q7YOWFM9gwjcwno/+3xuNPH6xfwLxPkJ1mM/3eIu9 YgCI2hTC2X6WTVBFOUd1ZB9B66/QShDF2Cj3+bjqCW7rbGf8/cXAO4a0lbKo7mFR Dbga9KdW0wmI0Fl1BkEBFkCy3vljSVfpbSGOCawrE0oKfCKI3IcgQXdhjxK/tW6A oFhnLT5k/rMucssvGGpgUN1pWdhMI6/2fUv1lbcvSHXMTsgP+Gp1MLSRC1ktjUnk iPzFwrPGa1+MyJ+/bi8WtmiwvAaON109gbfWIoW1n6tx4E0dcbwqmpvGVyLuEHif LUFkPwpnu1/KD84LQZposB/tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOWpr+HKE KLLKb7Im1GxTFaPMF0swHwYDVR0jBBgwFoAUavGRXIn1DHKtFvQZzTbvEvSto8cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3RjM3L0U1MTIzN0VBRUU4 MzExRUZBRjU4QjczRkM0RjlBRTAyL2F2R1JYSW4xREhLdEZ2UVp6VGJ2RXZTdG84 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXZHUlhJbjFESEt0RnZRWnpUYnZFdlN0bzhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 RjM3L0U1MTIzN0VBRUU4MzExRUZBRjU4QjczRkM0RjlBRTAyL2F2R1JYSW4xREhL dEZ2UVp6VGJ2RXZTdG84Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEbC9b1N9gJXJPC/6hkc7cPsfUKcd6GAQRKh5b/xMnIuZBREEQzWntxX B6f+T/TmAYpnriOMmaGO+QVzQFN6RX07QxVB5ewYRDF5kDAKKEjTlSpE8U4qjHwy 4pxFoKzUgMhb+qhrb7ZsKxKsBsO4rgZbVPcGsTrKh0MucoXy2K1UMGHydootBIcV XtWfAaTvf5VuIYx7YyuUghST9LYjrWnQDak+hlR7I2R8YSAoJDKCKpqQAqFZfmSz LQkBiLlD8Hh0S3Xg31o4Zl35XABEuC9CsH3ucr6hMdH3wz5ED4g4VdyzZHidR8qU RrsDsaCGthpDtHekw83hi3xGTi2jmrc= -----END CERTIFICATE-----Generated at Sun Aug 24 04:46:06 2025 by rpki-client