$ rpki-client -vvf rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft File: avGRXIn1DHKtFvQZzTbvEvSto8c.mft (raw, json) Hash identifier: 295GxT19Qd8R+JHuL5S+3AUGzU4xzgX0HhfR3LzLqf4= Subject key identifier: 54:D6:96:B1:8D:C1:C6:10:06:81:BB:56:9F:3D:71:5A:E0:F9:94:B2 Authority key identifier: 6A:F1:91:5C:89:F5:0C:72:AD:16:F4:19:CD:36:EF:12:F4:AD:A3:C7 Certificate issuer: /CN=A9127F37/serialNumber=6AF1915C89F50C72AD16F419CD36EF12F4ADA3C7 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft Manifest number: 25 Signing time: Fri 25 Apr 2025 06:48:27 +0000 Manifest this update: Fri 25 Apr 2025 06:48:26 +0000 Manifest next update: Fri 02 May 2025 06:48:26 +0000 Files and hashes: 1: avGRXIn1DHKtFvQZzTbvEvSto8c.crl (hash: KScAvZ5TD5eqDK5ROvgiCuimjAKcA3CoReA/383v3Xs=) 2: 4FFEB60AEE8411EF981CD840C4F9AE02.roa (hash: 6QHt7FPePc9ME7gIJCijX1TcfEpQyK9WI3BiH/AqMwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.crl rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127F37, serialNumber=6AF1915C89F50C72AD16F419CD36EF12F4ADA3C7 Validity Not Before: Apr 25 06:48:26 2025 GMT Not After : May 2 06:48:26 2025 GMT Subject: CN=680b303b-e556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:92:e5:4a:be:90:3e:93:61:84:0d:d0:6f:99: c7:94:0a:83:ed:18:c9:81:ba:7e:40:69:46:92:00: f7:37:69:63:c6:e5:bd:20:44:16:ed:0e:c8:90:f6: ad:c7:8e:22:01:74:75:d3:7b:b3:e2:ca:b6:74:2f: 5d:d2:84:11:aa:28:b9:37:c7:b3:0d:e7:ff:0b:ca: ab:a6:04:7d:96:47:e4:6b:b4:55:76:89:df:02:53: 0f:06:30:f1:55:32:ab:a5:41:4f:09:11:4c:6f:c1: d3:0a:e0:cb:d6:ec:2a:1f:4d:dc:9a:83:9b:98:cc: b2:6f:41:3e:21:0b:1d:2f:3b:ce:d7:3b:ba:89:e3: d4:11:74:c7:bd:a1:d1:c1:8b:88:ce:71:0a:33:49: 78:52:a3:c3:73:07:c0:be:7b:c5:79:98:62:34:ce: dd:1d:c5:da:19:2c:07:1d:56:88:f3:bf:e2:68:59: 5a:81:2d:69:1f:7c:c0:f1:6b:b8:55:ad:26:cb:70: 8a:3c:1b:3d:b4:f1:e3:04:08:d0:32:37:ed:ee:02: da:a4:f6:b8:41:86:05:0d:53:e4:dc:96:76:46:2a: ab:47:8d:5f:a7:86:fd:98:ee:e9:a7:17:ef:a2:c7: 4b:06:98:92:0f:93:00:2d:26:e1:87:b6:1b:96:7f: 2b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D6:96:B1:8D:C1:C6:10:06:81:BB:56:9F:3D:71:5A:E0:F9:94:B2 X509v3 Authority Key Identifier: keyid:6A:F1:91:5C:89:F5:0C:72:AD:16:F4:19:CD:36:EF:12:F4:AD:A3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:c5:e8:fa:96:c5:70:5b:05:7f:b9:88:61:ab:53:36:7e:17: 50:95:7e:13:7e:eb:ee:ca:08:52:a7:18:47:14:a1:3e:35:ea: 63:72:23:52:3b:76:ce:48:c7:a5:d9:72:3f:3f:89:e8:9b:cb: 33:d9:f9:b3:13:29:19:ef:f8:a0:63:56:d9:3b:78:19:2d:30: a4:82:46:f1:28:51:0d:a6:0e:c5:1c:b7:1b:8a:05:a1:d2:d6: 3e:63:ff:09:09:b3:c2:50:6c:a8:cb:17:ac:20:4f:2a:79:f2: 1e:53:d4:2e:f3:b1:39:f6:ed:61:07:81:11:8d:e7:b8:44:5d: 88:23:df:0b:c7:d1:fe:c5:8f:af:2d:98:18:22:ef:17:66:59: 1e:ac:07:1f:5b:1f:11:b2:e1:04:46:1f:4f:0f:cf:54:24:80: 55:9c:5e:78:a0:07:1e:89:48:d2:25:2a:75:bf:9c:e9:85:1c: d7:a1:23:c0:2e:99:2c:b6:73:19:ca:1d:a4:9b:95:9f:11:dc: 15:d3:ab:b8:75:62:bc:7c:d7:fb:ff:17:e9:27:f7:20:10:84: 28:11:18:3b:43:89:44:bb:32:ed:2f:a1:ca:c1:28:43:a8:93: 47:a0:00:9a:80:2b:34:81:06:92:ff:e3:c9:cd:9a:fa:3f:0f: eb:ad:b1:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0YzNzExMC8GA1UEBRMoNkFGMTkxNUM4OUY1MEM3MkFEMTZGNDE5Q0QzNkVGMTJG NEFEQTNDNzAeFw0yNTA0MjUwNjQ4MjZaFw0yNTA1MDIwNjQ4MjZaMBgxFjAUBgNV BAMTDTY4MGIzMDNiLWU1NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkkuVKvpA+k2GEDdBvmceUCoPtGMmBun5AaUaSAPc3aWPG5b0gRBbtDsiQ9q3H jiIBdHXTe7PiyrZ0L13ShBGqKLk3x7MN5/8LyqumBH2WR+RrtFV2id8CUw8GMPFV MqulQU8JEUxvwdMK4MvW7CofTdyag5uYzLJvQT4hCx0vO87XO7qJ49QRdMe9odHB i4jOcQozSXhSo8NzB8C+e8V5mGI0zt0dxdoZLAcdVojzv+JoWVqBLWkffMDxa7hV rSbLcIo8Gz208eMECNAyN+3uAtqk9rhBhgUNU+TclnZGKqtHjV+nhv2Y7umnF++i x0sGmJIPkwAtJuGHthuWfyvhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVNaWsY3B xhAGgbtWnz1xWuD5lLIwHwYDVR0jBBgwFoAUavGRXIn1DHKtFvQZzTbvEvSto8cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3RjM3L0U1MTIzN0VBRUU4 MzExRUZBRjU4QjczRkM0RjlBRTAyL2F2R1JYSW4xREhLdEZ2UVp6VGJ2RXZTdG84 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXZHUlhJbjFESEt0RnZRWnpUYnZFdlN0bzhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 RjM3L0U1MTIzN0VBRUU4MzExRUZBRjU4QjczRkM0RjlBRTAyL2F2R1JYSW4xREhL dEZ2UVp6VGJ2RXZTdG84Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACjF6PqWxXBbBX+5iGGrUzZ+F1CVfhN+6+7KCFKnGEcUoT416mNyI1I7 ds5Ix6XZcj8/ieibyzPZ+bMTKRnv+KBjVtk7eBktMKSCRvEoUQ2mDsUctxuKBaHS 1j5j/wkJs8JQbKjLF6wgTyp58h5T1C7zsTn27WEHgRGN57hEXYgj3wvH0f7Fj68t mBgi7xdmWR6sBx9bHxGy4QRGH08Pz1QkgFWcXnigBx6JSNIlKnW/nOmFHNehI8Au mSy2cxnKHaSblZ8R3BXTq7h1Yrx81/v/F+kn9yAQhCgRGDtDiUS7Mu0vocrBKEOo k0egAJqAKzSBBpL/48nNmvo/D+utsc4= -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:24 2025 by rpki-client