$ rpki-client -vvf rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft File: AVyC748X910B8qMGeGhd_cJeH3w.mft (raw, json) Hash identifier: AsDTPtCeTlfONbmSx7c/Q6xK4Uu+YQs7kJsModMuuQs= Subject key identifier: 59:E9:9B:E0:2D:2D:8E:DC:2E:18:5E:64:5F:D6:A3:63:7C:35:E5:28 Authority key identifier: 01:5C:82:EF:8F:17:F7:5D:01:F2:A3:06:78:68:5D:FD:C2:5E:1F:7C Certificate issuer: /CN=A9193EEE/serialNumber=015C82EF8F17F75D01F2A30678685DFDC25E1F7C Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft Manifest number: 23 Signing time: Fri 13 Jun 2025 06:45:17 +0000 Manifest this update: Fri 13 Jun 2025 06:45:17 +0000 Manifest next update: Fri 20 Jun 2025 06:45:17 +0000 Files and hashes: 1: AVyC748X910B8qMGeGhd_cJeH3w.crl (hash: 2Wrm/zB4FKiI6+2mukqJb7YUwVe9/mKCmp9+tKtGNA0=) 2: 39A906E8152C11F08DC35116C4F9AE02.roa (hash: lIcyzY38uZj/o3kxtfvE9Qj547eH7wm81ctDEtOnewg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.crl rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193EEE, serialNumber=015C82EF8F17F75D01F2A30678685DFDC25E1F7C Validity Not Before: Jun 13 06:45:17 2025 GMT Not After : Jun 20 06:45:17 2025 GMT Subject: CN=684bc8fd-546b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:55:6c:8e:ca:ee:54:6f:ae:5c:65:b6:cd:1d: c2:90:96:b6:47:fb:f6:75:dd:0c:9b:60:83:6b:1f: 10:40:c0:2e:04:c8:b2:20:db:ea:e6:34:6d:70:b1: 10:c4:32:50:bc:6c:8d:1f:9f:f6:ae:b8:76:ce:99: 33:44:9c:64:a0:33:c1:21:58:cd:cd:2c:4a:84:53: c9:fc:10:f3:17:31:9f:d9:79:67:b0:c0:5b:67:04: d5:61:42:db:5c:16:00:1e:f9:9f:11:c9:e6:c7:47: e9:99:f1:80:26:63:16:c8:51:ba:35:a0:d7:9f:0d: 90:a6:f7:32:0c:7f:53:e4:e4:d6:21:a2:e4:be:54: 07:c9:8b:49:2e:fe:d6:8a:c9:61:d3:e5:34:17:14: b7:3a:5b:a6:84:e4:fb:ef:6b:95:9d:d3:c5:ae:1a: ad:ea:6d:c8:f5:66:bb:0b:f5:77:45:88:5a:65:fd: b5:e1:2c:0f:fa:bb:84:99:c6:5b:73:3f:9f:a3:55: 68:c6:77:d7:8e:ae:13:1c:58:73:93:49:36:09:04: 5a:db:43:a0:93:9a:2b:f1:fc:ee:64:e7:03:ea:24: a1:5d:a8:c3:16:6d:cf:12:aa:88:77:24:fb:d6:5c: 58:a1:2f:ae:b4:08:70:70:f2:59:6e:7a:d2:73:b7: e8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E9:9B:E0:2D:2D:8E:DC:2E:18:5E:64:5F:D6:A3:63:7C:35:E5:28 X509v3 Authority Key Identifier: keyid:01:5C:82:EF:8F:17:F7:5D:01:F2:A3:06:78:68:5D:FD:C2:5E:1F:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:d6:c0:6d:37:1d:19:49:02:8d:7f:ad:a1:78:d1:56:d1:f5: b9:9d:33:51:cd:73:32:32:72:6e:f9:c9:2d:fd:d7:f1:85:38: 45:6c:31:23:85:d4:8a:42:73:29:03:19:d2:27:af:0a:39:52: 0e:dd:27:b5:ac:10:22:8d:b1:4a:27:d1:9b:76:fc:e0:d9:bc: ef:b0:19:c3:1a:44:e5:c8:03:53:d2:2a:0c:5c:27:3e:63:a5: 54:60:c6:ae:6a:53:54:36:59:72:c7:ba:8e:7e:92:47:c6:47: 20:0b:b5:b0:6b:08:53:29:3e:b8:be:f6:0d:7f:e7:90:dd:96: 82:c9:85:c5:29:5e:dc:0b:0d:bb:cf:6c:83:a1:56:a2:53:cc: 6d:80:50:ee:4c:6d:9f:60:77:75:fc:7f:5e:00:11:b4:25:95: 2e:5b:07:bd:4c:51:34:fc:a3:d6:38:b0:c4:d1:e3:36:9e:33: 70:6b:83:ed:3d:12:5f:a2:68:35:a6:30:11:ba:91:6a:23:d9: 17:18:88:07:e8:3f:72:75:1e:9f:8c:fb:12:79:6e:c2:3b:10: 06:73:67:f7:4c:06:f2:7b:72:46:71:cf:3e:f1:22:53:03:df: d9:f7:a9:89:84:9d:a8:2f:d3:36:f5:83:d7:c6:1e:d9:42:61: b3:4c:61:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0VFRTExMC8GA1UEBRMoMDE1QzgyRUY4RjE3Rjc1RDAxRjJBMzA2Nzg2ODVERkRD MjVFMUY3QzAeFw0yNTA2MTMwNjQ1MTdaFw0yNTA2MjAwNjQ1MTdaMBgxFjAUBgNV BAMTDTY4NGJjOGZkLTU0NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyVWyOyu5Ub65cZbbNHcKQlrZH+/Z13QybYINrHxBAwC4EyLIg2+rmNG1wsRDE MlC8bI0fn/auuHbOmTNEnGSgM8EhWM3NLEqEU8n8EPMXMZ/ZeWewwFtnBNVhQttc FgAe+Z8RyebHR+mZ8YAmYxbIUbo1oNefDZCm9zIMf1Pk5NYhouS+VAfJi0ku/taK yWHT5TQXFLc6W6aE5Pvva5Wd08WuGq3qbcj1ZrsL9XdFiFpl/bXhLA/6u4SZxltz P5+jVWjGd9eOrhMcWHOTSTYJBFrbQ6CTmivx/O5k5wPqJKFdqMMWbc8Sqoh3JPvW XFihL660CHBw8lluetJzt+i3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWemb4C0t jtwuGF5kX9ajY3w15SgwHwYDVR0jBBgwFoAUAVyC748X910B8qMGeGhd/cJeH3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzRUVFL0RCQjg5RjlFMTUy QjExRjA4OTJGRDQ4MUM0RjlBRTAyL0FWeUM3NDhYOTEwQjhxTUdlR2hkX2NKZUgz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQVZ5Qzc0OFg5MTBCOHFNR2VHaGRfY0plSDN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz RUVFL0RCQjg5RjlFMTUyQjExRjA4OTJGRDQ4MUM0RjlBRTAyL0FWeUM3NDhYOTEw QjhxTUdlR2hkX2NKZUgzdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIzWwG03HRlJAo1/raF40VbR9bmdM1HNczIycm75yS391/GFOEVsMSOF 1IpCcykDGdInrwo5Ug7dJ7WsECKNsUon0Zt2/ODZvO+wGcMaROXIA1PSKgxcJz5j pVRgxq5qU1Q2WXLHuo5+kkfGRyALtbBrCFMpPri+9g1/55DdloLJhcUpXtwLDbvP bIOhVqJTzG2AUO5MbZ9gd3X8f14AEbQllS5bB71MUTT8o9Y4sMTR4zaeM3Brg+09 El+iaDWmMBG6kWoj2RcYiAfoP3J1Hp+M+xJ5bsI7EAZzZ/dMBvJ7ckZxzz7xIlMD 39n3qYmEnagv0zb1g9fGHtlCYbNMYR8= -----END CERTIFICATE-----Generated at Sun Jun 15 04:53:01 2025 by rpki-client