$ rpki-client -vvf rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft File: avGRXIn1DHKtFvQZzTbvEvSto8c.mft (raw, json) Hash identifier: kZI1CzY8IshiJWVn5VMvOPSoIpmHLTjDDObkdSws29w= Subject key identifier: 95:FB:87:A9:3F:87:C8:E0:9F:D6:93:2A:3F:57:03:66:D8:90:95:48 Authority key identifier: 6A:F1:91:5C:89:F5:0C:72:AD:16:F4:19:CD:36:EF:12:F4:AD:A3:C7 Certificate issuer: /CN=A9127F37/serialNumber=6AF1915C89F50C72AD16F419CD36EF12F4ADA3C7 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft Manifest number: 2F Signing time: Thu 15 May 2025 06:59:35 +0000 Manifest this update: Thu 15 May 2025 06:59:35 +0000 Manifest next update: Thu 22 May 2025 06:59:35 +0000 Files and hashes: 1: avGRXIn1DHKtFvQZzTbvEvSto8c.crl (hash: u52Lys9t38C3C2ezMOtGMpp6LBEreWdkJkRjSUP7VPU=) 2: 4FFEB60AEE8411EF981CD840C4F9AE02.roa (hash: 6QHt7FPePc9ME7gIJCijX1TcfEpQyK9WI3BiH/AqMwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.crl rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127F37, serialNumber=6AF1915C89F50C72AD16F419CD36EF12F4ADA3C7 Validity Not Before: May 15 06:59:35 2025 GMT Not After : May 22 06:59:35 2025 GMT Subject: CN=682590d7-4718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:20:37:73:55:33:9f:5d:a8:24:76:3c:9b:10: 03:f4:17:ba:81:fe:20:31:e9:86:65:d3:a4:8d:5c: b5:f5:65:d6:f7:a8:47:e0:74:19:b1:f2:03:f5:d3: b1:6d:e5:d3:fe:e9:c3:ff:50:a0:36:6c:61:7d:72: f7:70:23:bf:e0:cc:38:33:bc:e8:ed:0b:37:55:5f: 53:76:c3:fe:18:c5:34:b5:6c:bf:39:98:de:aa:6d: bf:b8:08:4e:34:b4:40:c6:94:1a:3b:f7:ea:13:f5: 11:83:18:cb:25:80:d0:e8:b1:db:c0:70:6d:76:58: 8a:4b:6d:92:f2:b0:63:f9:32:ff:a4:e7:ff:b7:40: c2:33:cd:0b:ad:66:5b:a3:92:61:c8:68:96:ee:e1: 75:40:7b:ac:fa:0f:ad:cd:5f:1c:a9:1d:b5:44:66: e1:d0:ac:a8:ca:02:83:33:97:25:54:99:eb:b6:42: 11:6d:0e:85:9f:8c:56:97:dd:6f:c3:90:ae:60:b5: ed:95:de:79:42:2f:d3:43:5f:da:5f:43:c5:3f:7c: 5d:0b:e4:f3:32:99:d0:2d:ee:b9:dc:64:78:0f:5d: f0:65:81:f5:17:75:13:32:6b:7e:df:94:f0:d8:40: 36:5a:c4:7c:28:d8:54:00:6b:3f:67:c1:7f:9f:f6: cf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FB:87:A9:3F:87:C8:E0:9F:D6:93:2A:3F:57:03:66:D8:90:95:48 X509v3 Authority Key Identifier: keyid:6A:F1:91:5C:89:F5:0C:72:AD:16:F4:19:CD:36:EF:12:F4:AD:A3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c2:45:30:90:8e:9b:ea:07:c2:87:a7:1a:0b:49:52:3f:3c: 6d:09:10:71:b1:45:5f:15:82:d0:47:63:22:55:1d:f1:41:8b: 70:24:a1:b0:b2:ce:90:59:4a:a9:2c:77:b6:b2:a3:d2:72:ab: 6b:3d:9b:b1:f2:ea:15:de:20:f4:39:bb:cf:b9:40:f0:57:c7: ac:c2:fa:7d:10:29:ca:c3:50:1c:9a:bd:c0:44:cd:63:6b:ca: c4:fa:35:23:52:14:7a:67:7a:82:21:c1:b0:94:65:e0:93:a4: 9c:54:32:69:7d:94:53:49:94:60:ed:de:5e:43:76:ba:ee:0e: 87:8a:cf:75:72:d0:73:89:15:90:94:4e:02:a9:25:fb:1c:b9: 6a:2c:bb:a8:dc:ab:01:67:d5:48:97:c7:41:51:fa:d0:18:46: b2:15:b2:e2:26:4b:03:c6:31:f2:1a:61:47:a8:de:82:14:71: fd:2c:40:16:4a:72:e9:c8:a6:86:bc:06:df:49:d1:d8:09:4c: 53:ad:6f:9a:58:11:c9:6b:41:34:57:af:3a:e0:1a:1f:48:56: 17:62:6f:44:0f:2f:b7:92:b1:cf:06:f7:0d:6d:eb:c1:26:52: 5d:dd:5d:34:a3:1e:8d:4f:42:3b:60:98:29:41:02:81:35:2f: f8:e4:5f:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0YzNzExMC8GA1UEBRMoNkFGMTkxNUM4OUY1MEM3MkFEMTZGNDE5Q0QzNkVGMTJG NEFEQTNDNzAeFw0yNTA1MTUwNjU5MzVaFw0yNTA1MjIwNjU5MzVaMBgxFjAUBgNV BAMTDTY4MjU5MGQ3LTQ3MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyIDdzVTOfXagkdjybEAP0F7qB/iAx6YZl06SNXLX1Zdb3qEfgdBmx8gP107Ft 5dP+6cP/UKA2bGF9cvdwI7/gzDgzvOjtCzdVX1N2w/4YxTS1bL85mN6qbb+4CE40 tEDGlBo79+oT9RGDGMslgNDosdvAcG12WIpLbZLysGP5Mv+k5/+3QMIzzQutZluj kmHIaJbu4XVAe6z6D63NXxypHbVEZuHQrKjKAoMzlyVUmeu2QhFtDoWfjFaX3W/D kK5gte2V3nlCL9NDX9pfQ8U/fF0L5PMymdAt7rncZHgPXfBlgfUXdRMya37flPDY QDZaxHwo2FQAaz9nwX+f9s89AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlfuHqT+H yOCf1pMqP1cDZtiQlUgwHwYDVR0jBBgwFoAUavGRXIn1DHKtFvQZzTbvEvSto8cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3RjM3L0U1MTIzN0VBRUU4 MzExRUZBRjU4QjczRkM0RjlBRTAyL2F2R1JYSW4xREhLdEZ2UVp6VGJ2RXZTdG84 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXZHUlhJbjFESEt0RnZRWnpUYnZFdlN0bzhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 RjM3L0U1MTIzN0VBRUU4MzExRUZBRjU4QjczRkM0RjlBRTAyL2F2R1JYSW4xREhL dEZ2UVp6VGJ2RXZTdG84Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC3CRTCQjpvqB8KHpxoLSVI/PG0JEHGxRV8VgtBHYyJVHfFBi3AkobCy zpBZSqksd7ayo9Jyq2s9m7Hy6hXeIPQ5u8+5QPBXx6zC+n0QKcrDUByavcBEzWNr ysT6NSNSFHpneoIhwbCUZeCTpJxUMml9lFNJlGDt3l5DdrruDoeKz3Vy0HOJFZCU TgKpJfscuWosu6jcqwFn1UiXx0FR+tAYRrIVsuImSwPGMfIaYUeo3oIUcf0sQBZK cunIpoa8Bt9J0dgJTFOtb5pYEclrQTRXrzrgGh9IVhdib0QPL7eSsc8G9w1t68Em Ul3dXTSjHo1PQjtgmClBAoE1L/jkX70= -----END CERTIFICATE-----Generated at Fri May 16 05:09:11 2025 by rpki-client