$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.mft File: myAvlYUe_EtkzjtAnGxgSzW0mNg.mft (raw, json) Hash identifier: niMNDgjjKBGgcqHkvhJr1qYk3xydbrx8LJCYe9Pd1OQ= Subject key identifier: 9A:BD:F5:DB:8A:41:9B:97:A2:5C:13:56:BF:47:C0:1B:04:E4:E4:33 Authority key identifier: 9B:20:2F:95:85:1E:FC:4B:64:CE:3B:40:9C:6C:60:4B:35:B4:98:D8 Certificate issuer: /CN=A91F5CE4/serialNumber=9B202F95851EFC4B64CE3B409C6C604B35B498D8 Certificate serial: 09B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myAvlYUe_EtkzjtAnGxgSzW0mNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.mft Manifest number: 09A9 Signing time: Wed 14 May 2025 07:05:08 +0000 Manifest this update: Wed 14 May 2025 07:05:07 +0000 Manifest next update: Wed 21 May 2025 07:05:07 +0000 Files and hashes: 1: myAvlYUe_EtkzjtAnGxgSzW0mNg.crl (hash: JpFWtrkcpUxP9TLwfhSZgQSO8/5qjTfxu7lD+xyNb9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.crl rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myAvlYUe_EtkzjtAnGxgSzW0mNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 07:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2486 (0x9b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5CE4, serialNumber=9B202F95851EFC4B64CE3B409C6C604B35B498D8 Validity Not Before: May 14 07:05:07 2025 GMT Not After : May 21 07:05:07 2025 GMT Subject: CN=682440a4-7aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:03:25:52:01:e5:3f:75:83:77:76:dc:49:ca: b8:aa:a1:a8:ad:08:b8:19:76:02:36:b5:34:76:c6: b1:73:71:4b:20:04:5c:55:29:bb:ad:6f:95:c6:ed: 9b:f9:db:cb:7f:cb:f3:4e:d2:54:02:09:04:d8:21: ef:23:91:03:de:7a:ac:1d:17:ff:48:57:4b:49:6e: 25:71:16:02:54:11:e2:c0:37:4c:57:81:42:de:a5: ce:50:78:6d:bf:2b:58:2d:a5:b8:0b:c0:05:ad:40: 75:41:c3:b0:f3:74:a6:b6:9b:6d:d4:cb:3f:f5:64: c1:70:84:25:16:83:e4:e6:07:0a:22:82:a2:67:83: 44:81:9d:ec:2e:01:db:ae:ef:06:9f:50:bc:61:e1: b8:9b:af:3e:11:55:1a:a2:4a:bc:a5:60:90:86:f6: 29:76:31:5e:02:60:26:50:2b:6b:46:5e:9e:40:8a: 44:c2:c6:5c:a6:2a:91:b2:d8:3b:1c:03:ed:8d:5e: 57:a8:7c:47:28:62:e2:11:c8:b9:5a:5c:a9:a7:c0: 8c:4a:e8:09:d7:7c:a9:db:3e:22:ff:ee:aa:f2:6c: 38:b4:b6:5d:df:7c:72:e8:e8:e9:a7:15:96:b0:b9: 96:f3:e0:c3:b2:19:36:0b:69:b7:6c:13:6b:a8:6d: 6f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BD:F5:DB:8A:41:9B:97:A2:5C:13:56:BF:47:C0:1B:04:E4:E4:33 X509v3 Authority Key Identifier: keyid:9B:20:2F:95:85:1E:FC:4B:64:CE:3B:40:9C:6C:60:4B:35:B4:98:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myAvlYUe_EtkzjtAnGxgSzW0mNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:28:8c:d7:1c:6f:2a:89:f2:88:4e:aa:d7:e5:c1:fa:4e:d4: 77:f4:60:b0:9a:82:2f:f1:99:bc:56:ad:22:8e:0e:a1:f8:2f: 00:8d:14:ba:79:2c:62:38:1d:df:a1:72:e8:99:9c:1f:3d:4d: 53:c4:06:60:0a:c3:16:b4:74:45:5d:98:7f:96:f1:20:b8:41: 36:41:c9:c2:56:3e:85:80:76:aa:9e:e1:34:e1:25:34:ac:ac: 38:16:a0:5b:d3:e7:e7:70:c9:34:61:2c:94:1d:d3:c0:22:fe: ec:c5:34:a2:0b:58:a6:9b:53:15:b2:52:ac:a9:a0:f1:d9:e3: cd:30:23:6d:72:87:38:9e:d9:2c:8e:e2:a6:12:b3:e4:f5:13: b1:fb:eb:9f:bd:c2:b9:9b:36:b8:5a:2e:8f:df:36:cb:16:95: 00:08:df:22:56:ea:03:fb:67:cd:d3:0e:61:5b:47:34:67:f8: c9:17:f5:ba:18:27:14:ad:be:65:54:49:61:e9:02:be:c9:0a: fa:59:e2:a1:a8:97:41:f4:90:13:3a:7e:ff:a8:6a:f2:2c:14: fb:10:75:b2:34:76:0c:9c:66:57:36:4c:8e:e2:a9:30:53:50: a1:8f:3c:29:03:13:f0:ad:f3:3b:22:72:94:36:0f:49:11:6d: 8b:2b:b5:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVDRTQxMTAvBgNVBAUTKDlCMjAyRjk1ODUxRUZDNEI2NENFM0I0MDlDNkM2MDRC MzVCNDk4RDgwHhcNMjUwNTE0MDcwNTA3WhcNMjUwNTIxMDcwNTA3WjAYMRYwFAYD VQQDEw02ODI0NDBhNC03YWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygMlUgHlP3WDd3bcScq4qqGorQi4GXYCNrU0dsaxc3FLIARcVSm7rW+Vxu2b +dvLf8vzTtJUAgkE2CHvI5ED3nqsHRf/SFdLSW4lcRYCVBHiwDdMV4FC3qXOUHht vytYLaW4C8AFrUB1QcOw83Smtptt1Ms/9WTBcIQlFoPk5gcKIoKiZ4NEgZ3sLgHb ru8Gn1C8YeG4m68+EVUaokq8pWCQhvYpdjFeAmAmUCtrRl6eQIpEwsZcpiqRstg7 HAPtjV5XqHxHKGLiEci5Wlypp8CMSugJ13yp2z4i/+6q8mw4tLZd33xy6OjppxWW sLmW8+DDshk2C2m3bBNrqG1v0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJq99duK QZuXolwTVr9HwBsE5OQzMB8GA1UdIwQYMBaAFJsgL5WFHvxLZM47QJxsYEs1tJjY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUNFNC8zRUZGMUE5QTg2 MzYxMUVBQUU2QjExNDJDNEY5QUUwMi9teUF2bFlVZV9FdGt6anRBbkd4Z1N6VzBt TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL215QXZsWVVlX0V0a3pqdEFuR3hnU3pXMG1OZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUNFNC8zRUZGMUE5QTg2MzYxMUVBQUU2QjExNDJDNEY5QUUwMi9teUF2bFlVZV9F dGt6anRBbkd4Z1N6VzBtTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARKIzXHG8qifKITqrX5cH6TtR39GCwmoIv8Zm8Vq0ijg6h+C8AjRS6 eSxiOB3foXLomZwfPU1TxAZgCsMWtHRFXZh/lvEguEE2QcnCVj6FgHaqnuE04SU0 rKw4FqBb0+fncMk0YSyUHdPAIv7sxTSiC1imm1MVslKsqaDx2ePNMCNtcoc4ntks juKmErPk9ROx++ufvcK5mza4Wi6P3zbLFpUACN8iVuoD+2fN0w5hW0c0Z/jJF/W6 GCcUrb5lVElh6QK+yQr6WeKhqJdB9JATOn7/qGryLBT7EHWyNHYMnGZXNkyO4qkw U1ChjzwpAxPwrfM7InKUNg9JEW2LK7V1 -----END CERTIFICATE-----Generated at Wed May 14 19:53:08 2025 by rpki-client