$ rpki-client -vvf rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft File: avGRXIn1DHKtFvQZzTbvEvSto8c.mft (raw, json) Hash identifier: dHYlrtyqlZICnjKOh0sfgpYxlcetQG/f505hAbRqEvM= Subject key identifier: 1D:8D:F9:0E:25:6C:3E:50:83:29:01:A8:BB:2B:7E:ED:B4:D6:1D:D1 Authority key identifier: 6A:F1:91:5C:89:F5:0C:72:AD:16:F4:19:CD:36:EF:12:F4:AD:A3:C7 Certificate issuer: /CN=A9127F37/serialNumber=6AF1915C89F50C72AD16F419CD36EF12F4ADA3C7 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft Manifest number: 46 Signing time: Tue 01 Jul 2025 08:11:15 +0000 Manifest this update: Tue 01 Jul 2025 08:11:14 +0000 Manifest next update: Tue 08 Jul 2025 08:11:14 +0000 Files and hashes: 1: avGRXIn1DHKtFvQZzTbvEvSto8c.crl (hash: MW8mthtoYRUsiXvf7PmLv3QQyQmZWsN0P2ARJzmQW9Y=) 2: 4FFEB60AEE8411EF981CD840C4F9AE02.roa (hash: 6QHt7FPePc9ME7gIJCijX1TcfEpQyK9WI3BiH/AqMwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.crl rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127F37, serialNumber=6AF1915C89F50C72AD16F419CD36EF12F4ADA3C7 Validity Not Before: Jul 1 08:11:14 2025 GMT Not After : Jul 8 08:11:14 2025 GMT Subject: CN=68639823-7ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:59:41:69:c2:e4:8c:f1:3a:49:8b:ae:46:04: d1:ba:94:15:14:f5:3c:ee:74:e0:1b:fc:27:2b:1c: 1c:17:80:c4:19:10:b0:35:99:7e:08:b0:3e:c6:2b: 1c:3a:dc:63:7c:fd:64:74:bb:14:f5:39:64:aa:fd: 6c:79:eb:8a:7c:3a:e4:56:ab:cd:30:f0:16:87:1b: 78:97:cc:96:79:9b:f5:15:92:37:08:8b:62:8a:73: 06:99:dc:5c:9e:ea:9e:39:02:23:51:74:d3:5e:b0: f0:9a:f3:04:74:d0:19:9f:c1:c4:bb:7b:aa:f3:23: 36:8f:d5:ae:03:e3:b4:12:d8:17:f9:9a:96:64:7f: 14:b8:99:c0:52:d5:9d:4f:90:4a:fb:58:5d:e9:8f: 8a:9b:93:7e:ac:a0:ae:dd:1f:5c:8b:f9:4d:37:e2: 9b:62:ca:0f:29:a4:7f:b1:b4:64:32:7d:74:1a:dc: 85:98:fe:41:ae:c7:b4:8a:e9:0f:ea:2c:dc:7d:dc: 6e:b0:56:f8:75:29:f3:e5:d7:f5:ed:c2:90:63:04: 06:7e:82:63:3f:07:ad:ac:08:d5:12:57:08:f7:b7: 45:39:da:8f:f4:0c:2d:fa:f4:60:37:07:27:3a:ac: 0d:f8:82:80:11:c7:e8:64:2b:45:21:84:c8:80:70: 6b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8D:F9:0E:25:6C:3E:50:83:29:01:A8:BB:2B:7E:ED:B4:D6:1D:D1 X509v3 Authority Key Identifier: keyid:6A:F1:91:5C:89:F5:0C:72:AD:16:F4:19:CD:36:EF:12:F4:AD:A3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:bb:d8:a5:38:50:06:bd:97:52:85:25:07:34:2a:f4:b7:13: c0:3b:7e:18:62:3d:69:7d:46:7c:b0:13:bc:a8:57:98:07:a7: a0:9b:da:69:7e:19:69:51:a9:40:23:2e:e4:ec:7b:1a:91:20: 09:9a:5e:1b:a5:60:cb:f7:d9:05:2b:0a:94:65:be:c7:5f:cc: a8:48:4f:46:5c:53:8c:4c:3e:64:ae:83:87:a4:1d:db:b1:1c: f4:c9:75:c7:73:e6:96:10:5b:d0:3c:92:1b:23:50:53:d4:60: c8:bd:a7:e7:bf:87:0a:78:b3:49:2e:81:ca:90:80:ae:64:50: 30:42:8c:71:da:9d:57:e7:33:d9:f4:67:01:2a:5e:8b:20:42: fd:19:b3:a3:26:0d:63:47:c8:0d:a4:30:c6:06:73:fa:c6:47: 57:17:7f:83:35:dd:17:1c:fd:80:d7:f3:83:10:6e:13:02:8e: cf:35:05:79:b9:35:33:9b:3b:fb:4e:5b:c7:a7:c0:39:e7:28: 52:02:df:67:33:59:a9:f3:85:e8:a5:5f:ae:68:f4:f9:a1:82: 4a:f0:45:1d:a5:0c:68:67:67:de:07:f7:ff:9a:ae:5d:a8:cc: 0c:8c:0d:ce:54:df:ae:5f:03:dc:bd:4d:4f:62:c7:c4:d0:c1: f0:d0:05:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0YzNzExMC8GA1UEBRMoNkFGMTkxNUM4OUY1MEM3MkFEMTZGNDE5Q0QzNkVGMTJG NEFEQTNDNzAeFw0yNTA3MDEwODExMTRaFw0yNTA3MDgwODExMTRaMBgxFjAUBgNV BAMTDTY4NjM5ODIzLTdlZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRWUFpwuSM8TpJi65GBNG6lBUU9TzudOAb/CcrHBwXgMQZELA1mX4IsD7GKxw6 3GN8/WR0uxT1OWSq/Wx564p8OuRWq80w8BaHG3iXzJZ5m/UVkjcIi2KKcwaZ3Fye 6p45AiNRdNNesPCa8wR00BmfwcS7e6rzIzaP1a4D47QS2Bf5mpZkfxS4mcBS1Z1P kEr7WF3pj4qbk36soK7dH1yL+U034ptiyg8ppH+xtGQyfXQa3IWY/kGux7SK6Q/q LNx93G6wVvh1KfPl1/XtwpBjBAZ+gmM/B62sCNUSVwj3t0U52o/0DC369GA3Byc6 rA34goARx+hkK0UhhMiAcGu5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHY35DiVs PlCDKQGouyt+7bTWHdEwHwYDVR0jBBgwFoAUavGRXIn1DHKtFvQZzTbvEvSto8cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3RjM3L0U1MTIzN0VBRUU4 MzExRUZBRjU4QjczRkM0RjlBRTAyL2F2R1JYSW4xREhLdEZ2UVp6VGJ2RXZTdG84 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXZHUlhJbjFESEt0RnZRWnpUYnZFdlN0bzhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 RjM3L0U1MTIzN0VBRUU4MzExRUZBRjU4QjczRkM0RjlBRTAyL2F2R1JYSW4xREhL dEZ2UVp6VGJ2RXZTdG84Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG+72KU4UAa9l1KFJQc0KvS3E8A7fhhiPWl9RnywE7yoV5gHp6Cb2ml+ GWlRqUAjLuTsexqRIAmaXhulYMv32QUrCpRlvsdfzKhIT0ZcU4xMPmSug4ekHdux HPTJdcdz5pYQW9A8khsjUFPUYMi9p+e/hwp4s0kugcqQgK5kUDBCjHHanVfnM9n0 ZwEqXosgQv0Zs6MmDWNHyA2kMMYGc/rGR1cXf4M13Rcc/YDX84MQbhMCjs81BXm5 NTObO/tOW8enwDnnKFIC32czWanzheilX65o9PmhgkrwRR2lDGhnZ94H9/+arl2o zAyMDc5U365fA9y9TU9ix8TQwfDQBXA= -----END CERTIFICATE-----Generated at Thu Jul 3 06:09:34 2025 by rpki-client