$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft File: avg9FyUOFuw4duVnrj4dq4MlHAY.mft (raw, json) Hash identifier: zEzZWczPsDLPR+Hycg1FSEJa9OQx+WRcx0fcrIrKAQU= Subject key identifier: 6A:3F:32:27:6B:48:12:56:C4:0F:93:44:2F:13:F7:74:DA:98:B2:47 Authority key identifier: 6A:F8:3D:17:25:0E:16:EC:38:76:E5:67:AE:3E:1D:AB:83:25:1C:06 Certificate issuer: /CN=A9164B02/serialNumber=6AF83D17250E16EC3876E567AE3E1DAB83251C06 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft Manifest number: 6F Signing time: Mon 15 Sep 2025 07:22:36 +0000 Manifest this update: Mon 15 Sep 2025 07:22:35 +0000 Manifest next update: Mon 22 Sep 2025 07:22:35 +0000 Files and hashes: 1: avg9FyUOFuw4duVnrj4dq4MlHAY.crl (hash: uvqKj55OzjwEM27unKEAWFwpddlIexp3zRSiK69ptWo=) 2: DC0082F6EE1F11EF9191EE31C4F9AE02.roa (hash: /3sx9qkns8VuuHaAsuXJH8HOSf3Re0TlGJBe6HbkiRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.crl rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Sep 2025 07:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164B02, serialNumber=6AF83D17250E16EC3876E567AE3E1DAB83251C06 Validity Not Before: Sep 15 07:22:35 2025 GMT Not After : Sep 22 07:22:35 2025 GMT Subject: CN=68c7bebb-b6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:94:15:e2:af:b8:4d:60:21:7f:1e:4b:bb:f2: 72:fa:78:4e:45:a5:35:73:6a:ff:44:20:01:8a:b3: 2a:42:90:0c:92:0d:1d:76:9e:9c:10:cf:52:e5:17: 38:11:69:d9:6e:8e:21:b6:44:ac:4b:93:76:aa:7a: 75:b1:8b:e6:9f:a4:5d:3a:09:98:52:5b:af:fd:ff: 71:00:8a:57:4d:20:a0:51:8d:d6:c6:32:93:ec:0e: c2:77:50:c4:72:74:c5:f4:74:b2:61:64:4f:86:de: ea:51:ab:fa:57:46:cb:e8:1f:94:c2:88:ff:92:ec: 90:51:cf:fc:03:a8:db:31:e2:2b:80:67:f5:91:2d: 19:40:55:ba:1c:11:60:ed:12:b3:cc:60:c0:c0:e9: a4:5c:04:a4:df:f8:d3:4c:3c:e8:41:06:ac:19:70: bf:26:38:23:24:23:3c:ca:3e:f5:08:09:1e:f1:6e: 1d:83:95:82:fa:02:7e:ec:2b:81:09:95:9d:ef:a0: 1f:d0:ff:01:6c:47:cd:da:f2:c8:3d:16:4e:a8:9f: 96:ab:d5:79:9c:d2:4d:97:44:38:78:f3:ba:3c:b4: 09:2b:4c:64:ce:7d:a1:72:d6:7a:18:5c:ff:d0:e6: e1:ff:c0:66:58:ef:40:dd:4f:49:05:5d:bd:90:dd: 92:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3F:32:27:6B:48:12:56:C4:0F:93:44:2F:13:F7:74:DA:98:B2:47 X509v3 Authority Key Identifier: keyid:6A:F8:3D:17:25:0E:16:EC:38:76:E5:67:AE:3E:1D:AB:83:25:1C:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:0b:78:7f:eb:0d:fb:f8:87:60:f4:9c:b4:f5:3c:5a:4e:44: 54:9f:68:e7:48:21:73:c8:ae:a1:c3:18:5c:41:9c:57:50:0b: e8:d5:f5:4e:8c:27:45:51:14:07:78:7d:e0:f9:ce:2d:ee:21: dc:03:d1:2f:ab:c2:7e:70:fc:6b:8d:81:3e:5e:3e:bd:3b:d4: eb:8d:e7:56:95:a8:87:7d:46:c8:49:ef:f3:63:cc:4a:2a:c2: 55:00:b6:ba:2c:9f:e6:e6:60:68:22:38:5c:48:7d:43:51:9b: 06:5f:68:38:54:1e:23:5e:ac:65:85:b9:f4:60:a5:b4:d5:74: 93:20:c4:ff:ec:34:d6:fe:31:fa:fe:cf:60:84:9c:63:e9:74: 04:a1:6e:c2:58:82:70:fa:5f:c1:b0:b7:22:fb:88:bc:9a:0d: 8f:61:02:bc:b2:dc:03:30:5a:14:a1:9b:22:46:4f:7e:4c:0c: 7b:f5:c4:98:85:59:6b:60:f7:c0:5e:16:5c:10:2c:8e:fd:f8: 22:de:64:c3:bf:dc:e7:7d:6a:d8:eb:54:f3:99:60:53:ac:b8: 78:d6:51:d9:9a:86:9e:81:fe:96:b9:14:d3:70:b0:15:78:4a: d9:ba:ec:b4:fc:23:22:15:1a:8b:de:6c:50:60:59:93:fd:71: 8f:18:77:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NEIwMjExMC8GA1UEBRMoNkFGODNEMTcyNTBFMTZFQzM4NzZFNTY3QUUzRTFEQUI4 MzI1MUMwNjAeFw0yNTA5MTUwNzIyMzVaFw0yNTA5MjIwNzIyMzVaMBgxFjAUBgNV BAMTDTY4YzdiZWJiLWI2ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtlBXir7hNYCF/Hku78nL6eE5FpTVzav9EIAGKsypCkAySDR12npwQz1LlFzgR adlujiG2RKxLk3aqenWxi+afpF06CZhSW6/9/3EAildNIKBRjdbGMpPsDsJ3UMRy dMX0dLJhZE+G3upRq/pXRsvoH5TCiP+S7JBRz/wDqNsx4iuAZ/WRLRlAVbocEWDt ErPMYMDA6aRcBKTf+NNMPOhBBqwZcL8mOCMkIzzKPvUICR7xbh2DlYL6An7sK4EJ lZ3voB/Q/wFsR83a8sg9Fk6on5ar1Xmc0k2XRDh487o8tAkrTGTOfaFy1noYXP/Q 5uH/wGZY70DdT0kFXb2Q3ZKlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaj8yJ2tI ElbED5NELxP3dNqYskcwHwYDVR0jBBgwFoAUavg9FyUOFuw4duVnrj4dq4MlHAYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0QjAyLzk5QjNBRDg4RUUx RjExRUZBRDJGNEIzMUM0RjlBRTAyL2F2ZzlGeVVPRnV3NGR1Vm5yajRkcTRNbEhB WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXZnOUZ5VU9GdXc0ZHVWbnJqNGRxNE1sSEFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 QjAyLzk5QjNBRDg4RUUxRjExRUZBRDJGNEIzMUM0RjlBRTAyL2F2ZzlGeVVPRnV3 NGR1Vm5yajRkcTRNbEhBWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKoLeH/rDfv4h2D0nLT1PFpORFSfaOdIIXPIrqHDGFxBnFdQC+jV9U6M J0VRFAd4feD5zi3uIdwD0S+rwn5w/GuNgT5ePr071OuN51aVqId9RshJ7/NjzEoq wlUAtrosn+bmYGgiOFxIfUNRmwZfaDhUHiNerGWFufRgpbTVdJMgxP/sNNb+Mfr+ z2CEnGPpdAShbsJYgnD6X8GwtyL7iLyaDY9hAryy3AMwWhShmyJGT35MDHv1xJiF WWtg98BeFlwQLI79+CLeZMO/3Od9atjrVPOZYFOsuHjWUdmahp6B/pa5FNNwsBV4 Stm67LT8IyIVGovebFBgWZP9cY8Yd68= -----END CERTIFICATE-----Generated at Tue Sep 16 14:20:26 2025 by rpki-client