$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft File: avg9FyUOFuw4duVnrj4dq4MlHAY.mft (raw, json) Hash identifier: F9gVNXX2IuoTBU2yp4BOEqJpGD+vGghQq5KnfUk8dAM= Subject key identifier: DB:C4:8E:0A:4D:AF:1D:9C:CA:53:1E:B1:45:24:21:50:0D:FB:62:1C Authority key identifier: 6A:F8:3D:17:25:0E:16:EC:38:76:E5:67:AE:3E:1D:AB:83:25:1C:06 Certificate issuer: /CN=A9164B02/serialNumber=6AF83D17250E16EC3876E567AE3E1DAB83251C06 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft Manifest number: 56 Signing time: Tue 29 Jul 2025 07:47:08 +0000 Manifest this update: Tue 29 Jul 2025 07:47:08 +0000 Manifest next update: Tue 05 Aug 2025 07:47:08 +0000 Files and hashes: 1: avg9FyUOFuw4duVnrj4dq4MlHAY.crl (hash: CFQgbsU4Rtfuy9U+QXDrWOenyhGjA6j1a9Z0s8RWiXE=) 2: DC0082F6EE1F11EF9191EE31C4F9AE02.roa (hash: /3sx9qkns8VuuHaAsuXJH8HOSf3Re0TlGJBe6HbkiRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.crl rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 Aug 2025 07:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164B02, serialNumber=6AF83D17250E16EC3876E567AE3E1DAB83251C06 Validity Not Before: Jul 29 07:47:08 2025 GMT Not After : Aug 5 07:47:08 2025 GMT Subject: CN=68887c7c-d4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bf:27:72:40:80:d4:82:5d:05:89:fd:de:c9: a9:f5:55:61:72:c4:24:c5:54:c6:d1:bd:96:b8:46: ca:a6:a7:a1:49:fe:b0:ac:c0:d7:c4:75:74:d1:84: 94:55:cf:b0:b5:72:b4:90:a6:cf:fe:bd:4b:e8:10: d2:5c:b5:6e:b5:40:ba:a5:87:6e:69:d5:31:3d:1e: e3:b1:97:84:18:da:e6:8b:09:24:9c:c3:5a:06:65: 41:c2:1b:fb:c1:46:93:99:2f:58:b9:28:86:05:94: 51:3a:8b:04:94:bb:61:6d:99:da:f2:7f:7b:77:da: e6:f3:99:a5:16:83:5a:a2:91:02:5a:88:d7:54:d5: 43:89:c0:59:1c:9e:e3:a7:9d:36:fd:74:21:58:7d: 38:06:3b:82:03:84:8f:12:5a:94:b0:78:9e:0b:20: da:9c:4b:90:34:b7:7d:cf:65:34:d4:2a:47:fd:8e: 38:39:8c:18:2b:af:2d:a2:95:f0:fc:b3:0d:41:19: 5a:10:38:1f:56:0a:a0:d9:6b:ac:ac:68:8a:a7:c3: 2a:b5:db:a7:9a:8c:9d:95:b0:af:c6:24:cc:86:1f: 1f:55:90:db:66:f1:92:8c:13:bc:8d:63:52:bf:0b: 56:bc:01:4f:df:06:98:8f:1e:0a:92:5b:0e:4d:17: 35:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C4:8E:0A:4D:AF:1D:9C:CA:53:1E:B1:45:24:21:50:0D:FB:62:1C X509v3 Authority Key Identifier: keyid:6A:F8:3D:17:25:0E:16:EC:38:76:E5:67:AE:3E:1D:AB:83:25:1C:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:52:28:e2:a2:bf:8d:03:f1:92:39:29:f9:6a:a9:57:37:a7: 63:4a:38:fb:39:b3:c0:76:7c:a3:d5:0a:d3:1f:c5:6c:a4:3a: 13:c4:1e:7e:d8:75:bc:04:23:4b:b6:ed:f0:7f:02:60:b3:ca: c0:4a:f0:25:9b:90:81:e8:af:5d:19:0c:5c:58:7d:70:a7:1e: 34:73:c9:03:3f:1f:4d:23:e1:41:e1:9f:53:98:b9:74:52:1e: 56:75:c0:cf:71:ec:7d:e6:12:26:37:3e:cf:d5:b4:4d:78:38: 4c:ba:25:b7:cc:cf:09:8e:3a:0b:1b:d4:29:d4:88:32:f6:1e: ba:7a:4d:40:f4:9d:01:64:ef:b2:a0:30:75:09:31:de:a8:fc: 4c:07:65:7e:f4:36:35:e4:76:a5:f5:49:d9:d5:c8:a6:d8:8d: 69:fc:d4:90:85:1e:27:a3:bc:e4:45:8d:73:72:8f:4f:8a:bb: 99:09:b3:9b:2d:26:27:20:37:55:0d:3d:f8:de:88:ed:a4:0c: f1:72:bc:7a:48:29:56:6e:58:9d:20:2f:d2:2b:2f:b7:41:f5: 3d:5f:37:75:74:96:9c:c0:5f:94:75:9e:4f:29:d4:55:af:8b: ec:22:bb:38:89:03:7f:0c:50:ae:8d:30:15:3d:6b:ee:a1:87: e0:ea:c0:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NEIwMjExMC8GA1UEBRMoNkFGODNEMTcyNTBFMTZFQzM4NzZFNTY3QUUzRTFEQUI4 MzI1MUMwNjAeFw0yNTA3MjkwNzQ3MDhaFw0yNTA4MDUwNzQ3MDhaMBgxFjAUBgNV BAMTDTY4ODg3YzdjLWQ0ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQvydyQIDUgl0Fif3eyan1VWFyxCTFVMbRvZa4Rsqmp6FJ/rCswNfEdXTRhJRV z7C1crSQps/+vUvoENJctW61QLqlh25p1TE9HuOxl4QY2uaLCSScw1oGZUHCG/vB RpOZL1i5KIYFlFE6iwSUu2Ftmdryf3t32ubzmaUWg1qikQJaiNdU1UOJwFkcnuOn nTb9dCFYfTgGO4IDhI8SWpSweJ4LINqcS5A0t33PZTTUKkf9jjg5jBgrry2ilfD8 sw1BGVoQOB9WCqDZa6ysaIqnwyq126eajJ2VsK/GJMyGHx9VkNtm8ZKME7yNY1K/ C1a8AU/fBpiPHgqSWw5NFzV/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU28SOCk2v HZzKUx6xRSQhUA37YhwwHwYDVR0jBBgwFoAUavg9FyUOFuw4duVnrj4dq4MlHAYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0QjAyLzk5QjNBRDg4RUUx RjExRUZBRDJGNEIzMUM0RjlBRTAyL2F2ZzlGeVVPRnV3NGR1Vm5yajRkcTRNbEhB WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXZnOUZ5VU9GdXc0ZHVWbnJqNGRxNE1sSEFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 QjAyLzk5QjNBRDg4RUUxRjExRUZBRDJGNEIzMUM0RjlBRTAyL2F2ZzlGeVVPRnV3 NGR1Vm5yajRkcTRNbEhBWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACRSKOKiv40D8ZI5KflqqVc3p2NKOPs5s8B2fKPVCtMfxWykOhPEHn7Y dbwEI0u27fB/AmCzysBK8CWbkIHor10ZDFxYfXCnHjRzyQM/H00j4UHhn1OYuXRS HlZ1wM9x7H3mEiY3Ps/VtE14OEy6JbfMzwmOOgsb1CnUiDL2Hrp6TUD0nQFk77Kg MHUJMd6o/EwHZX70NjXkdqX1SdnVyKbYjWn81JCFHiejvORFjXNyj0+Ku5kJs5st JicgN1UNPfjeiO2kDPFyvHpIKVZuWJ0gL9IrL7dB9T1fN3V0lpzAX5R1nk8p1FWv i+wiuziJA38MUK6NMBU9a+6hh+DqwB0= -----END CERTIFICATE-----Generated at Wed Jul 30 08:06:35 2025 by rpki-client