$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft File: avg9FyUOFuw4duVnrj4dq4MlHAY.mft (raw, json) Hash identifier: hgxv5u7WSs1jVPpKlI1QIhuHo9PXNa+UsJAFV35DGoc= Subject key identifier: 99:C4:12:1B:31:AF:20:37:A1:96:8C:33:B4:87:DB:B3:C2:3D:5E:90 Authority key identifier: 6A:F8:3D:17:25:0E:16:EC:38:76:E5:67:AE:3E:1D:AB:83:25:1C:06 Certificate issuer: /CN=A9164B02/serialNumber=6AF83D17250E16EC3876E567AE3E1DAB83251C06 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft Manifest number: 38 Signing time: Sat 31 May 2025 07:10:50 +0000 Manifest this update: Sat 31 May 2025 07:10:50 +0000 Manifest next update: Sat 07 Jun 2025 07:10:50 +0000 Files and hashes: 1: avg9FyUOFuw4duVnrj4dq4MlHAY.crl (hash: EaC83lqHvjVCPZSd19exkv2N00ta8i0aB50VaMM/hhg=) 2: DC0082F6EE1F11EF9191EE31C4F9AE02.roa (hash: /3sx9qkns8VuuHaAsuXJH8HOSf3Re0TlGJBe6HbkiRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.crl rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164B02, serialNumber=6AF83D17250E16EC3876E567AE3E1DAB83251C06 Validity Not Before: May 31 07:10:50 2025 GMT Not After : Jun 7 07:10:50 2025 GMT Subject: CN=683aab7a-9246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:56:cd:83:aa:15:39:de:0a:0e:78:19:95:7f: 59:d8:9b:f9:04:2c:ed:65:53:c2:e6:23:c8:61:49: e2:4b:e9:5a:6e:7a:a0:cd:c5:3f:9f:21:6b:22:eb: e8:ee:92:eb:c0:4f:5e:26:eb:e0:65:87:b7:77:e4: 07:7c:a3:ae:af:47:fb:66:0d:2b:d2:52:71:ac:39: e1:49:f4:8e:60:45:a9:ab:1d:4d:33:bf:ca:5f:ec: ef:cb:d4:59:e1:c2:4c:ab:10:4d:e7:13:36:3f:ae: 4a:d2:58:eb:a2:be:14:ae:f1:2f:c1:8d:0b:4b:01: 00:21:dd:e9:a5:90:f8:6c:bb:cc:2a:f3:04:34:4a: 1c:d2:4e:37:9d:b0:75:76:5c:a4:7d:13:ec:b1:ad: 45:6b:09:b2:48:68:b9:b1:4f:2c:f2:53:8c:f2:33: 74:e0:8e:66:61:33:17:02:4e:f3:fb:3a:76:c7:8a: 7d:08:0d:24:0e:bd:50:97:aa:df:51:11:97:2d:54: 80:79:c0:5a:a6:40:0d:eb:c9:98:c1:07:01:93:dd: b1:44:e0:42:a1:32:93:18:38:c0:7d:9c:d6:32:a3: f0:ab:7e:63:bf:45:18:90:46:6a:61:15:a0:46:aa: 43:05:c6:c3:9e:bb:10:bd:61:d8:c4:83:f7:c2:15: e1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C4:12:1B:31:AF:20:37:A1:96:8C:33:B4:87:DB:B3:C2:3D:5E:90 X509v3 Authority Key Identifier: keyid:6A:F8:3D:17:25:0E:16:EC:38:76:E5:67:AE:3E:1D:AB:83:25:1C:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a1:42:e9:ec:85:c3:a1:36:a4:dc:56:2f:bc:7c:8b:5e:6f: bc:c3:87:54:85:ea:b9:3f:7d:df:61:75:b7:20:2d:45:56:52: 0b:7b:3f:1a:91:2a:bb:9c:b5:89:c3:98:ca:8d:bc:bc:ae:cf: 82:1f:ce:b6:08:15:20:dd:f6:b1:8b:06:16:4f:5d:fa:ae:9b: fe:09:47:42:5d:7a:65:87:0f:aa:ea:56:da:86:57:6b:1c:1e: ea:e0:37:52:12:35:d4:e5:fe:2e:89:ba:8e:3e:ba:3a:fb:83: 93:96:62:c2:93:e1:ed:ca:7c:24:a6:f7:3e:dc:53:62:a5:b2: 42:4f:56:b4:40:7f:8e:5d:b2:e2:c4:77:c5:16:c4:e7:b5:6f: 6b:a9:9d:25:2d:5f:1e:8a:71:54:54:51:46:05:76:64:ee:9a: ae:2f:39:09:22:57:4e:95:47:77:6b:2d:37:21:02:f6:39:7b: ae:5c:37:e1:f1:c9:b4:e5:d5:c5:05:0b:6e:dc:96:50:f0:a9: c0:c5:3b:9e:d6:83:58:d3:80:31:92:04:eb:d7:8c:76:ac:dd: 61:eb:90:2b:1a:1b:83:de:7d:23:62:5d:48:8f:fe:13:a1:3c: 61:fa:06:4a:0a:ac:8c:4a:8d:9e:6e:71:c2:0b:42:9c:02:90: 6a:27:d2:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NEIwMjExMC8GA1UEBRMoNkFGODNEMTcyNTBFMTZFQzM4NzZFNTY3QUUzRTFEQUI4 MzI1MUMwNjAeFw0yNTA1MzEwNzEwNTBaFw0yNTA2MDcwNzEwNTBaMBgxFjAUBgNV BAMTDTY4M2FhYjdhLTkyNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPVs2DqhU53goOeBmVf1nYm/kELO1lU8LmI8hhSeJL6VpueqDNxT+fIWsi6+ju kuvAT14m6+Blh7d35Ad8o66vR/tmDSvSUnGsOeFJ9I5gRamrHU0zv8pf7O/L1Fnh wkyrEE3nEzY/rkrSWOuivhSu8S/BjQtLAQAh3emlkPhsu8wq8wQ0ShzSTjedsHV2 XKR9E+yxrUVrCbJIaLmxTyzyU4zyM3TgjmZhMxcCTvP7OnbHin0IDSQOvVCXqt9R EZctVIB5wFqmQA3ryZjBBwGT3bFE4EKhMpMYOMB9nNYyo/CrfmO/RRiQRmphFaBG qkMFxsOeuxC9YdjEg/fCFeE7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmcQSGzGv IDehlowztIfbs8I9XpAwHwYDVR0jBBgwFoAUavg9FyUOFuw4duVnrj4dq4MlHAYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0QjAyLzk5QjNBRDg4RUUx RjExRUZBRDJGNEIzMUM0RjlBRTAyL2F2ZzlGeVVPRnV3NGR1Vm5yajRkcTRNbEhB WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXZnOUZ5VU9GdXc0ZHVWbnJqNGRxNE1sSEFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 QjAyLzk5QjNBRDg4RUUxRjExRUZBRDJGNEIzMUM0RjlBRTAyL2F2ZzlGeVVPRnV3 NGR1Vm5yajRkcTRNbEhBWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAuhQunshcOhNqTcVi+8fIteb7zDh1SF6rk/fd9hdbcgLUVWUgt7PxqR KructYnDmMqNvLyuz4IfzrYIFSDd9rGLBhZPXfqum/4JR0JdemWHD6rqVtqGV2sc HurgN1ISNdTl/i6Juo4+ujr7g5OWYsKT4e3KfCSm9z7cU2KlskJPVrRAf45dsuLE d8UWxOe1b2upnSUtXx6KcVRUUUYFdmTumq4vOQkiV06VR3drLTchAvY5e65cN+Hx ybTl1cUFC27cllDwqcDFO57Wg1jTgDGSBOvXjHas3WHrkCsaG4PefSNiXUiP/hOh PGH6BkoKrIxKjZ5uccILQpwCkGon0js= -----END CERTIFICATE-----Generated at Sat May 31 15:51:49 2025 by rpki-client