$ rpki-client -vvf rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft File: AVyC748X910B8qMGeGhd_cJeH3w.mft (raw, json) Hash identifier: 1vvfDvCgn/4mYQAxe27XsSb5Sp0geBmS5ef0NkPIbA0= Subject key identifier: B4:C5:35:7D:3C:00:42:19:0D:A6:5A:A5:5B:EA:35:43:FD:3B:66:7E Authority key identifier: 01:5C:82:EF:8F:17:F7:5D:01:F2:A3:06:78:68:5D:FD:C2:5E:1F:7C Certificate issuer: /CN=A9193EEE/serialNumber=015C82EF8F17F75D01F2A30678685DFDC25E1F7C Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft Manifest number: 0A Signing time: Fri 25 Apr 2025 07:07:58 +0000 Manifest this update: Fri 25 Apr 2025 07:07:58 +0000 Manifest next update: Fri 02 May 2025 07:07:58 +0000 Files and hashes: 1: AVyC748X910B8qMGeGhd_cJeH3w.crl (hash: IAtgsk0J+1Jq4rxDZ1yySmry1NfGgGT4qMdp3f5lfX0=) 2: 39A906E8152C11F08DC35116C4F9AE02.roa (hash: Cz1xrc9bH/Qajq24iAukr+R/ULRnEJyRKhsQEM25fCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.crl rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193EEE, serialNumber=015C82EF8F17F75D01F2A30678685DFDC25E1F7C Validity Not Before: Apr 25 07:07:58 2025 GMT Not After : May 2 07:07:58 2025 GMT Subject: CN=680b34ce-b611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ed:73:e4:da:76:c2:db:c7:ff:fe:32:1f:52: 9e:e4:8a:7e:a7:51:18:36:b4:1f:ba:62:74:c2:59: d7:29:67:c7:59:57:b2:2b:4e:15:7b:75:94:ef:9c: 5e:b8:1a:e1:55:66:35:30:4f:e5:f3:6a:46:cf:a4: 0c:ad:4d:ee:f7:a2:aa:cf:15:6c:a4:77:19:89:b8: 25:98:4a:6a:d6:07:16:5a:62:60:d5:c7:bf:e5:96: 95:8e:3a:23:2d:1b:35:54:0e:23:78:0a:a2:a6:c2: 5b:7e:0d:7b:40:ec:3e:c1:6e:27:a9:5f:7d:83:c4: f2:e6:22:5f:bb:15:8a:b3:56:41:ec:31:37:23:ef: 16:da:77:6d:5f:34:65:3e:a5:4e:5f:4c:4c:f6:6d: 4c:8c:df:f7:d9:50:d4:1f:a3:d5:96:49:96:f9:1c: 7f:17:96:db:46:a4:55:f9:46:70:a1:de:49:ba:e9: 15:c2:42:9d:dd:fd:9d:c4:41:df:be:44:83:0f:4d: b7:34:6e:77:1e:24:1d:49:b4:87:72:75:d5:b1:6c: fc:ba:f2:f7:ee:6e:32:29:1a:c7:f9:08:94:56:70: a0:42:fd:8e:da:dd:ae:6f:ee:98:21:2f:d4:65:eb: f4:1c:16:91:ab:47:79:3a:b8:f6:3c:0f:45:7d:85: ae:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C5:35:7D:3C:00:42:19:0D:A6:5A:A5:5B:EA:35:43:FD:3B:66:7E X509v3 Authority Key Identifier: keyid:01:5C:82:EF:8F:17:F7:5D:01:F2:A3:06:78:68:5D:FD:C2:5E:1F:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:00:f0:bd:a7:bb:57:83:e2:0a:c8:85:05:fc:a3:70:21:bb: 67:cd:c1:ff:e7:c1:b2:56:24:37:70:12:35:52:9e:0b:a7:46: 91:df:ec:4c:d4:28:99:9f:ce:19:f5:60:05:66:74:78:14:f3: 07:06:2d:9a:fe:1f:39:e8:34:e4:8d:e8:6f:9e:03:df:f2:76: a0:e3:b6:c8:3d:22:7f:40:c1:61:53:ee:de:a5:8d:33:dd:8c: db:1d:99:3f:78:44:2c:4c:ab:ea:09:db:86:c7:dd:79:8d:a7: 4e:f0:53:2c:97:45:7c:30:99:25:d1:05:a4:2c:7c:ec:8c:f1: 15:c7:cc:1b:f0:65:ee:05:ad:52:9a:3c:b3:a0:58:7d:3c:9e: be:b1:e4:48:78:47:b0:ba:5e:94:c4:d3:ae:50:22:69:46:90: 04:66:ac:2a:8c:11:ae:b9:62:22:41:31:15:84:21:15:e5:56: 7a:b3:34:c9:93:7c:f5:ee:e1:ba:84:b2:f4:09:ca:5a:db:f9: 4c:fa:5b:0f:c2:75:73:cf:66:d6:69:b1:0b:58:20:46:6b:7d: 4e:ab:1e:a1:e1:6d:67:58:bd:f5:a7:e7:1c:3a:79:39:aa:09: 25:7f:85:55:9b:15:20:13:cb:53:28:4e:88:98:4d:f1:e8:d6: 05:1a:4c:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0VFRTExMC8GA1UEBRMoMDE1QzgyRUY4RjE3Rjc1RDAxRjJBMzA2Nzg2ODVERkRD MjVFMUY3QzAeFw0yNTA0MjUwNzA3NThaFw0yNTA1MDIwNzA3NThaMBgxFjAUBgNV BAMTDTY4MGIzNGNlLWI2MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCd7XPk2nbC28f//jIfUp7kin6nURg2tB+6YnTCWdcpZ8dZV7IrThV7dZTvnF64 GuFVZjUwT+XzakbPpAytTe73oqrPFWykdxmJuCWYSmrWBxZaYmDVx7/llpWOOiMt GzVUDiN4CqKmwlt+DXtA7D7BbiepX32DxPLmIl+7FYqzVkHsMTcj7xbad21fNGU+ pU5fTEz2bUyM3/fZUNQfo9WWSZb5HH8XlttGpFX5RnCh3km66RXCQp3d/Z3EQd++ RIMPTbc0bnceJB1JtIdyddWxbPy68vfubjIpGsf5CJRWcKBC/Y7a3a5v7pghL9Rl 6/QcFpGrR3k6uPY8D0V9ha5NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtMU1fTwA QhkNplqlW+o1Q/07Zn4wHwYDVR0jBBgwFoAUAVyC748X910B8qMGeGhd/cJeH3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzRUVFL0RCQjg5RjlFMTUy QjExRjA4OTJGRDQ4MUM0RjlBRTAyL0FWeUM3NDhYOTEwQjhxTUdlR2hkX2NKZUgz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQVZ5Qzc0OFg5MTBCOHFNR2VHaGRfY0plSDN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz RUVFL0RCQjg5RjlFMTUyQjExRjA4OTJGRDQ4MUM0RjlBRTAyL0FWeUM3NDhYOTEw QjhxTUdlR2hkX2NKZUgzdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABsA8L2nu1eD4grIhQX8o3Ahu2fNwf/nwbJWJDdwEjVSngunRpHf7EzU KJmfzhn1YAVmdHgU8wcGLZr+HznoNOSN6G+eA9/ydqDjtsg9In9AwWFT7t6ljTPd jNsdmT94RCxMq+oJ24bH3XmNp07wUyyXRXwwmSXRBaQsfOyM8RXHzBvwZe4FrVKa PLOgWH08nr6x5Eh4R7C6XpTE065QImlGkARmrCqMEa65YiJBMRWEIRXlVnqzNMmT fPXu4bqEsvQJylrb+Uz6Ww/CdXPPZtZpsQtYIEZrfU6rHqHhbWdYvfWn5xw6eTmq CSV/hVWbFSATy1MoToiYTfHo1gUaTEw= -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:29 2025 by rpki-client