$ rpki-client -vvf rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft File: Aul8r2u1VIcberzm6NeDIOuURpE.mft (raw, json) Hash identifier: UztjQmck4hvrHJa/1amKcNfdHzBYnMZVKVTs4Hkx2tI= Subject key identifier: EF:BF:27:10:B0:BF:9D:33:36:11:27:5B:30:14:BB:CE:26:83:9D:50 Authority key identifier: 02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 Certificate issuer: /CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Certificate serial: 23CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft Manifest number: 23B5 Signing time: Fri 04 Apr 2025 15:52:33 +0000 Manifest this update: Fri 04 Apr 2025 15:52:33 +0000 Manifest next update: Fri 11 Apr 2025 15:52:33 +0000 Files and hashes: 1: Aul8r2u1VIcberzm6NeDIOuURpE.crl (hash: s7TLX2YALKJ4n/5cFylJi1JHdTTzByBFc45wfM7+Jvg=) 2: 0B72CFAC049211EBB8144531C4F9AE02.roa (hash: HoemRN9Bqh3dS3wFw1CGTUnb1f4mFjxNW0+qSLr4eCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9162 (0x23ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A47E Validity Not Before: Apr 4 15:52:33 2025 GMT Not After : Apr 11 15:52:33 2025 GMT Subject: CN=67f00041-6d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6e:e6:19:28:28:18:42:18:2a:d0:5c:66:5a: 84:a3:17:0f:1b:ca:ec:80:6c:9d:da:91:08:ee:42: 54:b5:df:cb:f3:21:1d:48:48:a9:25:f6:68:85:4e: 86:44:24:70:87:e9:29:5c:bd:93:d1:4d:a1:ba:c3: 9b:f3:6a:6c:18:76:6d:cd:c9:77:be:b7:0c:c3:ca: 9a:d4:6f:e2:9c:59:aa:5e:3c:8e:02:bd:7d:99:00: 0e:13:28:54:14:32:92:99:ee:ee:de:a4:44:30:97: a5:81:3c:0e:7f:75:2c:8d:32:43:f2:59:c5:1a:a0: 7d:83:dd:b6:6a:d8:a5:c9:31:77:69:c9:fa:77:85: 12:c3:53:f2:dc:ff:45:9c:9d:49:79:71:ee:3c:7d: 18:5e:8d:6a:4e:5b:b0:25:93:70:b3:41:b1:c4:4b: f5:8f:fc:a7:c9:cb:08:33:f7:e6:29:71:07:60:6e: c7:b6:1f:74:12:a2:81:ed:ea:11:56:21:d5:b5:26: 0c:73:c0:f9:64:fd:46:f8:c9:1c:07:38:15:44:dd: 67:76:65:52:06:c6:b4:37:bd:1c:4a:f8:8a:c1:9e: 91:d1:25:f3:e0:a0:5b:ae:c3:0e:94:0f:c3:68:fd: c8:00:6d:4e:fd:37:da:99:d4:75:2e:64:1e:a3:3b: 25:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BF:27:10:B0:BF:9D:33:36:11:27:5B:30:14:BB:CE:26:83:9D:50 X509v3 Authority Key Identifier: keyid:02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:a0:7b:ea:16:e6:20:c6:38:f5:d7:c8:01:1c:fe:1d:df:52: f7:87:8e:6b:9c:d2:28:a9:9f:af:92:4c:22:28:69:42:85:54: 1d:74:e6:08:e7:11:4f:50:31:34:01:57:51:e7:45:0e:3e:c7: 14:fc:8f:b5:74:d9:d7:c8:93:bc:e1:7c:32:25:2c:9d:7a:cd: e4:98:4d:37:f6:35:f3:42:48:0f:4d:b2:26:13:96:ab:0e:aa: 38:2b:83:4a:d4:93:72:b6:27:a8:e3:9f:69:3c:e7:57:a7:19: 43:75:65:d1:6b:c0:d8:f9:41:8c:74:00:c8:ab:ab:30:e1:af: 83:15:27:ac:f5:93:87:ab:41:f5:0f:47:95:bf:ce:56:2e:ed: fb:94:53:fd:1c:a4:96:af:49:79:7a:fa:11:84:ac:c1:3b:02: ae:b1:6c:a6:ba:58:a3:d5:c5:31:df:2b:3a:70:a9:c8:13:bc: ba:87:60:db:a2:da:8d:fa:9e:9d:76:98:da:d8:d2:b3:0e:e4: 56:ab:75:e3:c1:14:14:72:2d:2f:78:4d:29:08:14:ca:df:4b: ed:65:ad:1f:db:6c:da:7c:2f:48:bd:5f:ca:17:c4:aa:4a:00: 82:c6:3c:c4:ef:bb:38:b6:05:02:bd:ef:57:7d:0c:9a:60:02: 48:41:04:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0N0UxMTAvBgNVBAUTKDAyRTk3Q0FGNkJCNTU0ODcxQjdBQkNFNkU4RDc4MzIw RUI5NDQ2OTEwHhcNMjUwNDA0MTU1MjMzWhcNMjUwNDExMTU1MjMzWjAYMRYwFAYD VQQDEw02N2YwMDA0MS02ZDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxm7mGSgoGEIYKtBcZlqEoxcPG8rsgGyd2pEI7kJUtd/L8yEdSEipJfZohU6G RCRwh+kpXL2T0U2husOb82psGHZtzcl3vrcMw8qa1G/inFmqXjyOAr19mQAOEyhU FDKSme7u3qREMJelgTwOf3UsjTJD8lnFGqB9g922atilyTF3acn6d4USw1Py3P9F nJ1JeXHuPH0YXo1qTluwJZNws0GxxEv1j/ynycsIM/fmKXEHYG7Hth90EqKB7eoR ViHVtSYMc8D5ZP1G+MkcBzgVRN1ndmVSBsa0N70cSviKwZ6R0SXz4KBbrsMOlA/D aP3IAG1O/TfamdR1LmQeozsljwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+/JxCw v50zNhEnWzAUu84mg51QMB8GA1UdIwQYMBaAFALpfK9rtVSHG3q85ujXgyDrlEaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ3RS8zRTZCRUM1NjY5 MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJY2JlcnptNk5lRElPdVVS cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F1bDhyMnUxVkljYmVyem02TmVESU91VVJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ3RS8zRTZCRUM1NjY5MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJ Y2JlcnptNk5lRElPdVVScEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXoHvqFuYgxjj118gBHP4d31L3h45rnNIoqZ+vkkwiKGlChVQddOYI 5xFPUDE0AVdR50UOPscU/I+1dNnXyJO84XwyJSydes3kmE039jXzQkgPTbImE5ar Dqo4K4NK1JNytieo459pPOdXpxlDdWXRa8DY+UGMdADIq6sw4a+DFSes9ZOHq0H1 D0eVv85WLu37lFP9HKSWr0l5evoRhKzBOwKusWymulij1cUx3ys6cKnIE7y6h2Db otqN+p6ddpja2NKzDuRWq3XjwRQUci0veE0pCBTK30vtZa0f22zafC9IvV/KF8Sq SgCCxjzE77s4tgUCve9XfQyaYAJIQQRJ -----END CERTIFICATE-----Generated at Sun Apr 6 02:26:39 2025 by rpki-client