$ rpki-client -vvf rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft File: AVyC748X910B8qMGeGhd_cJeH3w.mft (raw, json) Hash identifier: +j9sOtOfA7JCXMU7xh5dSSmKH9/Y17BMz7fm97wWv/4= Subject key identifier: 48:7E:85:08:A6:43:AA:8B:BA:8D:D7:25:55:FF:3A:9D:6A:44:29:35 Authority key identifier: 01:5C:82:EF:8F:17:F7:5D:01:F2:A3:06:78:68:5D:FD:C2:5E:1F:7C Certificate issuer: /CN=A9193EEE/serialNumber=015C82EF8F17F75D01F2A30678685DFDC25E1F7C Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft Manifest number: 2B Signing time: Sun 29 Jun 2025 06:46:43 +0000 Manifest this update: Sun 29 Jun 2025 06:46:42 +0000 Manifest next update: Sun 06 Jul 2025 06:46:42 +0000 Files and hashes: 1: AVyC748X910B8qMGeGhd_cJeH3w.crl (hash: FMgplTD7PF3pmdzf6tx+3+PYWcyb5KMePgsnTI7sX5Y=) 2: 39A906E8152C11F08DC35116C4F9AE02.roa (hash: lIcyzY38uZj/o3kxtfvE9Qj547eH7wm81ctDEtOnewg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.crl rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193EEE, serialNumber=015C82EF8F17F75D01F2A30678685DFDC25E1F7C Validity Not Before: Jun 29 06:46:42 2025 GMT Not After : Jul 6 06:46:42 2025 GMT Subject: CN=6860e153-9089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:94:5e:c7:3b:11:7a:7d:a2:c8:46:f0:32:30: 83:a9:43:4e:46:a6:1f:15:ae:9d:1c:91:64:b5:ce: 3f:69:90:76:ad:f7:d3:a6:20:8f:da:c9:76:07:4a: f4:db:29:89:db:06:ce:29:91:0a:5c:f5:bb:6e:89: 44:fb:12:33:15:33:b7:31:a1:c0:eb:82:6b:73:0d: de:5f:10:a8:b0:ed:fe:07:f0:0e:12:a7:02:95:36: 5f:46:f0:e4:ce:33:df:8a:fc:ae:96:65:23:36:08: 69:a7:01:f3:60:7d:46:b4:ff:59:3e:cc:a1:65:33: 13:70:c8:2c:db:12:17:0d:5f:3d:3b:92:81:60:2e: ea:a0:32:9b:b2:96:8e:a9:b7:25:45:51:c8:bd:4f: 33:f0:8e:6b:2b:12:37:b4:39:46:18:f4:37:8e:8b: 07:31:6c:16:da:ef:3f:74:be:7a:0f:48:a9:66:d0: be:e3:87:ff:4d:d1:86:ae:a2:0b:71:6f:b8:52:a1: 7b:65:54:0f:0a:3c:89:bd:33:50:05:06:70:e4:27: e0:a1:29:6a:b3:6c:3a:9d:e3:73:e4:95:64:41:5b: e2:55:e3:26:df:20:82:c7:10:58:b5:8b:8b:9f:91: be:88:be:41:5f:c6:66:bb:5c:22:5e:f1:b0:eb:e7: fb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7E:85:08:A6:43:AA:8B:BA:8D:D7:25:55:FF:3A:9D:6A:44:29:35 X509v3 Authority Key Identifier: keyid:01:5C:82:EF:8F:17:F7:5D:01:F2:A3:06:78:68:5D:FD:C2:5E:1F:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e3:0e:dd:af:52:44:53:c4:25:6b:b6:f2:90:57:77:69:a2: 40:17:60:80:9f:95:53:79:43:52:2c:2e:55:d5:44:41:9c:c5: 57:d0:59:39:6f:78:16:4f:58:69:5a:38:3e:42:b9:7a:e5:a8: 94:70:8b:ab:82:9e:f4:b5:44:06:ce:be:dd:c5:45:af:9f:76: f3:4d:f8:0a:ed:92:7b:74:b5:05:46:38:57:23:36:e7:51:be: 55:c9:0f:1f:cf:13:bd:97:91:b8:5c:82:2e:6c:0a:18:51:1e: b2:3b:91:37:90:70:dd:0c:3d:34:47:71:c5:ee:0d:64:98:3a: cd:8c:02:f5:f2:d7:ad:31:46:35:b2:b2:33:66:9c:a3:f5:20: 17:ed:22:d5:b1:1c:ec:71:99:98:00:86:52:62:92:31:d4:4c: 51:6e:40:bf:56:6d:68:26:cd:cc:41:46:be:6e:b9:c2:56:f1: 2f:b3:88:31:c9:33:b1:a2:db:0f:b7:6b:6c:41:cc:5e:13:9f: 07:8d:7a:c6:8c:5a:67:e7:8d:64:d2:09:f0:37:7a:57:a9:1e: a3:3d:89:a3:d1:62:14:4f:19:18:d9:42:c1:4a:c9:48:78:3a: a8:6d:6f:96:c9:12:44:7a:9d:e6:c3:43:2f:ef:6b:c7:6a:b7: 26:a7:4f:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0VFRTExMC8GA1UEBRMoMDE1QzgyRUY4RjE3Rjc1RDAxRjJBMzA2Nzg2ODVERkRD MjVFMUY3QzAeFw0yNTA2MjkwNjQ2NDJaFw0yNTA3MDYwNjQ2NDJaMBgxFjAUBgNV BAMTDTY4NjBlMTUzLTkwODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4lF7HOxF6faLIRvAyMIOpQ05Gph8Vrp0ckWS1zj9pkHat99OmII/ayXYHSvTb KYnbBs4pkQpc9btuiUT7EjMVM7cxocDrgmtzDd5fEKiw7f4H8A4SpwKVNl9G8OTO M9+K/K6WZSM2CGmnAfNgfUa0/1k+zKFlMxNwyCzbEhcNXz07koFgLuqgMpuylo6p tyVFUci9TzPwjmsrEje0OUYY9DeOiwcxbBba7z90vnoPSKlm0L7jh/9N0Yauogtx b7hSoXtlVA8KPIm9M1AFBnDkJ+ChKWqzbDqd43PklWRBW+JV4ybfIILHEFi1i4uf kb6IvkFfxma7XCJe8bDr5/tHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSH6FCKZD qou6jdclVf86nWpEKTUwHwYDVR0jBBgwFoAUAVyC748X910B8qMGeGhd/cJeH3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzRUVFL0RCQjg5RjlFMTUy QjExRjA4OTJGRDQ4MUM0RjlBRTAyL0FWeUM3NDhYOTEwQjhxTUdlR2hkX2NKZUgz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQVZ5Qzc0OFg5MTBCOHFNR2VHaGRfY0plSDN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz RUVFL0RCQjg5RjlFMTUyQjExRjA4OTJGRDQ4MUM0RjlBRTAyL0FWeUM3NDhYOTEw QjhxTUdlR2hkX2NKZUgzdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI7jDt2vUkRTxCVrtvKQV3dpokAXYICflVN5Q1IsLlXVREGcxVfQWTlv eBZPWGlaOD5CuXrlqJRwi6uCnvS1RAbOvt3FRa+fdvNN+Artknt0tQVGOFcjNudR vlXJDx/PE72Xkbhcgi5sChhRHrI7kTeQcN0MPTRHccXuDWSYOs2MAvXy160xRjWy sjNmnKP1IBftItWxHOxxmZgAhlJikjHUTFFuQL9WbWgmzcxBRr5uucJW8S+ziDHJ M7Gi2w+3a2xBzF4TnweNesaMWmfnjWTSCfA3elepHqM9iaPRYhRPGRjZQsFKyUh4 Oqhtb5bJEkR6nebDQy/va8dqtyanTyg= -----END CERTIFICATE-----Generated at Sun Jun 29 10:44:39 2025 by rpki-client