$ rpki-client -vvf rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft File: AVyC748X910B8qMGeGhd_cJeH3w.mft (raw, json) Hash identifier: z6TSnr4heD95yCHtBJ2VtAy5Dt+rRD6OLyBmYJj3GXQ= Subject key identifier: 67:4D:45:40:5A:42:00:72:DE:D4:C2:97:AF:A6:C4:65:F3:B8:A7:6C Authority key identifier: 01:5C:82:EF:8F:17:F7:5D:01:F2:A3:06:78:68:5D:FD:C2:5E:1F:7C Certificate issuer: /CN=A9193EEE/serialNumber=015C82EF8F17F75D01F2A30678685DFDC25E1F7C Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft Manifest number: 3F Signing time: Sun 03 Aug 2025 07:56:30 +0000 Manifest this update: Sun 03 Aug 2025 07:56:29 +0000 Manifest next update: Sun 10 Aug 2025 07:56:29 +0000 Files and hashes: 1: AVyC748X910B8qMGeGhd_cJeH3w.crl (hash: o4BIwZ69vUDWDzW7bz+R7IT17RMam46o3Qs5UIc8I9M=) 2: 39A906E8152C11F08DC35116C4F9AE02.roa (hash: LpZGZLncTzWOvQxmXibbHB08wMwsFC9T1sCL9HoJGDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.crl rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 07:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193EEE, serialNumber=015C82EF8F17F75D01F2A30678685DFDC25E1F7C Validity Not Before: Aug 3 07:56:29 2025 GMT Not After : Aug 10 07:56:29 2025 GMT Subject: CN=688f162e-9257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7d:dd:16:b8:83:0c:5e:1c:6c:39:10:a8:3b: 40:dd:e8:84:3d:15:8c:3e:db:a0:a6:13:71:3d:97: 67:25:f0:6a:f8:90:4e:e0:3e:ac:04:01:c1:90:73: 84:18:48:82:f7:15:bc:9b:73:d4:b6:a7:80:5c:51: dd:45:fd:51:56:98:17:f8:33:ba:e1:5b:ae:7f:98: 1d:e9:0d:ff:df:e6:87:1f:02:be:8a:6b:2f:f7:3e: d2:07:09:ce:0c:4a:43:86:48:7f:6c:5c:87:4f:46: 0a:19:08:81:94:8e:a0:e7:6d:e2:38:39:7e:1d:0d: 5a:c5:91:d5:73:68:ad:d5:14:9d:fc:d1:41:11:1f: 74:b6:a9:fd:9f:66:f3:a6:18:5c:57:fe:df:af:18: 73:a9:b3:d2:d3:97:f3:bc:9d:40:ea:76:70:bb:9a: d4:61:9f:71:f6:d7:bb:bc:af:63:1f:b5:69:74:60: 11:14:58:3a:c9:dc:e2:9d:53:65:de:60:25:ac:9b: 34:fa:cc:a1:42:0f:8f:b5:1f:b5:83:4e:69:30:4f: b6:32:06:8a:42:51:22:87:ad:8e:a1:b2:3e:0c:12: 1c:b1:60:ac:46:b6:e8:ff:3b:22:8b:5a:bc:da:c9: 77:0c:98:3b:23:b0:db:be:30:7f:77:cd:0d:f1:c5: 09:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4D:45:40:5A:42:00:72:DE:D4:C2:97:AF:A6:C4:65:F3:B8:A7:6C X509v3 Authority Key Identifier: keyid:01:5C:82:EF:8F:17:F7:5D:01:F2:A3:06:78:68:5D:FD:C2:5E:1F:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:cb:32:f4:28:46:f1:22:b5:dc:db:d8:5f:7c:03:4c:99:d0: 04:aa:74:69:17:1d:6b:e8:08:54:16:07:b7:6a:80:36:d7:63: 13:a6:24:bb:ab:3f:54:88:14:72:33:a2:29:e5:48:9c:c1:5f: 42:e6:c6:ef:18:3c:67:9c:9b:47:89:1f:88:82:0e:42:c1:c0: 9b:6f:23:a1:94:89:8d:19:ca:fc:c4:bf:6b:98:1f:58:ea:4d: 85:ee:43:cb:6c:5e:67:e4:7e:16:f0:9a:9c:e3:b7:6c:f0:23: 76:b5:79:f1:ff:4c:ed:80:d9:7a:ac:c0:b8:d9:0f:11:68:ed: bb:fa:8e:ff:25:a0:d9:50:a1:bc:d7:bf:5e:ec:87:fb:dd:32: b7:44:2c:6a:30:c0:09:62:80:eb:fb:78:e2:da:bb:1b:41:90: 1e:66:07:fb:8b:41:fe:42:81:da:9c:e1:13:63:9e:6c:18:9d: 8b:48:77:4d:ec:66:73:d7:d8:2e:ff:79:66:4c:1b:cb:8e:74: 57:ce:38:8a:85:0a:40:bf:63:9b:4a:d2:d0:1c:64:cb:ee:b1: 9c:28:a8:5d:03:00:2b:07:96:44:f0:cc:97:b0:8b:1d:36:3f: f1:8c:9d:69:59:d6:83:2e:b5:a7:c0:58:a0:b3:05:c1:78:64: e1:e8:3c:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0VFRTExMC8GA1UEBRMoMDE1QzgyRUY4RjE3Rjc1RDAxRjJBMzA2Nzg2ODVERkRD MjVFMUY3QzAeFw0yNTA4MDMwNzU2MjlaFw0yNTA4MTAwNzU2MjlaMBgxFjAUBgNV BAMTDTY4OGYxNjJlLTkyNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbfd0WuIMMXhxsORCoO0Dd6IQ9FYw+26CmE3E9l2cl8Gr4kE7gPqwEAcGQc4QY SIL3Fbybc9S2p4BcUd1F/VFWmBf4M7rhW65/mB3pDf/f5ocfAr6Kay/3PtIHCc4M SkOGSH9sXIdPRgoZCIGUjqDnbeI4OX4dDVrFkdVzaK3VFJ380UERH3S2qf2fZvOm GFxX/t+vGHOps9LTl/O8nUDqdnC7mtRhn3H217u8r2MftWl0YBEUWDrJ3OKdU2Xe YCWsmzT6zKFCD4+1H7WDTmkwT7YyBopCUSKHrY6hsj4MEhyxYKxGtuj/OyKLWrza yXcMmDsjsNu+MH93zQ3xxQljAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZ01FQFpC AHLe1MKXr6bEZfO4p2wwHwYDVR0jBBgwFoAUAVyC748X910B8qMGeGhd/cJeH3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzRUVFL0RCQjg5RjlFMTUy QjExRjA4OTJGRDQ4MUM0RjlBRTAyL0FWeUM3NDhYOTEwQjhxTUdlR2hkX2NKZUgz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQVZ5Qzc0OFg5MTBCOHFNR2VHaGRfY0plSDN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz RUVFL0RCQjg5RjlFMTUyQjExRjA4OTJGRDQ4MUM0RjlBRTAyL0FWeUM3NDhYOTEw QjhxTUdlR2hkX2NKZUgzdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAILLMvQoRvEitdzb2F98A0yZ0ASqdGkXHWvoCFQWB7dqgDbXYxOmJLur P1SIFHIzoinlSJzBX0Lmxu8YPGecm0eJH4iCDkLBwJtvI6GUiY0ZyvzEv2uYH1jq TYXuQ8tsXmfkfhbwmpzjt2zwI3a1efH/TO2A2XqswLjZDxFo7bv6jv8loNlQobzX v17sh/vdMrdELGowwAligOv7eOLauxtBkB5mB/uLQf5Cgdqc4RNjnmwYnYtId03s ZnPX2C7/eWZMG8uOdFfOOIqFCkC/Y5tK0tAcZMvusZwoqF0DACsHlkTwzJewix02 P/GMnWlZ1oMutafAWKCzBcF4ZOHoPJA= -----END CERTIFICATE-----Generated at Mon Aug 4 15:06:57 2025 by rpki-client