$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft File: AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft (raw, json) Hash identifier: bWk2kby+vCgSrDQ+pSSfuOlg7138EAc8sLCNRUNCNPg= Subject key identifier: 5B:76:A2:9D:7E:7E:D3:47:61:66:10:C5:A1:7A:B4:63:F4:24:4F:64 Authority key identifier: 01:40:22:53:F3:1B:CA:CF:FB:73:D6:85:D7:00:C9:B6:B7:41:04:3C Certificate issuer: /CN=A91FAA31/serialNumber=01402253F31BCACFFB73D685D700C9B6B741043C Certificate serial: 14C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AUAiU_Mbys_7c9aF1wDJtrdBBDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft Manifest number: 14BE Signing time: Thu 24 Jul 2025 16:59:07 +0000 Manifest this update: Thu 24 Jul 2025 16:59:07 +0000 Manifest next update: Thu 31 Jul 2025 16:59:07 +0000 Files and hashes: 1: AUAiU_Mbys_7c9aF1wDJtrdBBDw.crl (hash: /AWZrn4+nDEyo2+mL2dftdOz9kgmkY/wPPEFgeLVd8w=) 2: 49CB8044609511E8BF4FB410C4F9AE02.roa (hash: Mbdbpc3/wtRpTix5VC1xMy2eqJ1FLcHxKH2kFDSd6ik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.crl rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AUAiU_Mbys_7c9aF1wDJtrdBBDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 16:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5320 (0x14c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAA31, serialNumber=01402253F31BCACFFB73D685D700C9B6B741043C Validity Not Before: Jul 24 16:59:07 2025 GMT Not After : Jul 31 16:59:07 2025 GMT Subject: CN=6882665b-bedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:77:b7:96:59:52:c2:8f:51:91:c9:28:02:aa: ab:fc:a8:e5:b6:78:12:c3:45:19:5d:d0:6b:9d:50: 87:bb:bf:e9:46:c8:45:f7:5e:da:40:77:ab:2d:4d: e6:e9:ab:f3:66:13:6b:ec:09:8b:2c:aa:49:ee:87: 36:ab:32:3d:88:a0:78:a4:4d:7d:8b:1a:76:1d:ec: 4f:4d:f1:15:d3:60:8b:4b:7d:18:dc:39:d0:9a:01: c3:e1:f6:58:77:e8:41:df:4b:1b:df:24:cb:81:43: 24:f9:f8:f1:23:42:28:9a:42:bf:ce:3c:c9:1e:24: 34:49:19:d2:fd:aa:92:5b:73:e3:8d:12:77:53:21: ea:81:5b:ca:98:51:07:e8:c8:f9:64:65:c2:72:21: 88:c4:39:69:b3:e2:c4:42:d2:72:99:71:41:31:00: e4:17:16:56:5d:65:4d:42:52:85:f5:0d:dd:10:b5: be:bf:f7:40:50:58:3a:31:6e:7d:82:a5:d5:13:7a: 1d:3c:58:8d:3b:21:b2:3c:36:08:b4:87:5a:b1:71: 86:4e:fe:62:a1:6d:eb:f0:73:ab:12:79:e7:b8:cc: 2a:a0:bd:00:06:45:39:c0:ed:63:b3:c4:0b:46:c9: e3:8a:62:04:72:cb:55:fc:9c:05:f9:24:9d:fd:95: 26:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:76:A2:9D:7E:7E:D3:47:61:66:10:C5:A1:7A:B4:63:F4:24:4F:64 X509v3 Authority Key Identifier: keyid:01:40:22:53:F3:1B:CA:CF:FB:73:D6:85:D7:00:C9:B6:B7:41:04:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AUAiU_Mbys_7c9aF1wDJtrdBBDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:73:bc:f0:7c:c2:28:e2:bf:da:6e:d0:6b:df:87:6b:30:a8: 20:a8:0c:c4:74:96:f8:61:bb:67:07:c3:c7:2a:e5:19:89:8a: fd:67:da:84:1a:9e:8c:d5:26:0a:9a:c6:e5:47:bd:e1:69:3e: 5b:49:ea:c5:b7:84:e4:4c:99:35:5b:8c:71:e6:a9:7a:57:24: cb:74:cd:6c:76:1e:01:ba:14:2c:77:e2:c5:03:49:f1:4f:f1: c0:c2:c5:70:f0:e5:cb:ce:2f:62:4b:2c:f6:98:6d:47:04:c5: 15:fb:4d:4a:41:b1:87:af:98:07:5a:02:e8:09:27:b9:9a:32: 23:9a:6d:92:19:94:a7:52:c0:3f:ba:b0:a6:f8:5a:90:21:ac: b0:92:5c:51:49:31:bd:9e:d0:41:68:cd:80:82:0e:7b:6c:d2: b3:0e:92:da:f5:3b:56:44:5c:cd:04:ed:a8:87:78:f5:c2:49: 42:01:06:f0:a3:ad:c1:98:bc:02:ae:c1:9c:5f:6b:69:1e:48: 71:8c:91:03:1e:d5:43:45:5e:72:7a:5b:a1:37:8c:d4:20:41: 6f:8b:14:de:9d:7f:3f:cc:e1:4d:a7:2e:4d:d8:09:14:aa:c3: aa:ec:e0:00:c3:7c:30:25:06:5e:49:b8:6e:40:61:20:89:86: c1:61:6f:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFBMzExMTAvBgNVBAUTKDAxNDAyMjUzRjMxQkNBQ0ZGQjczRDY4NUQ3MDBDOUI2 Qjc0MTA0M0MwHhcNMjUwNzI0MTY1OTA3WhcNMjUwNzMxMTY1OTA3WjAYMRYwFAYD VQQDEw02ODgyNjY1Yi1iZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3He3lllSwo9RkckoAqqr/KjltngSw0UZXdBrnVCHu7/pRshF917aQHerLU3m 6avzZhNr7AmLLKpJ7oc2qzI9iKB4pE19ixp2HexPTfEV02CLS30Y3DnQmgHD4fZY d+hB30sb3yTLgUMk+fjxI0IomkK/zjzJHiQ0SRnS/aqSW3PjjRJ3UyHqgVvKmFEH 6Mj5ZGXCciGIxDlps+LEQtJymXFBMQDkFxZWXWVNQlKF9Q3dELW+v/dAUFg6MW59 gqXVE3odPFiNOyGyPDYItIdasXGGTv5ioW3r8HOrEnnnuMwqoL0ABkU5wO1js8QL RsnjimIEcstV/JwF+SSd/ZUmDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFt2op1+ ftNHYWYQxaF6tGP0JE9kMB8GA1UdIwQYMBaAFAFAIlPzG8rP+3PWhdcAyba3QQQ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUEzMS9ERDY0NDg3ODYw OTQxMUU4QjU2QzE4MTBDNEY5QUUwMi9BVUFpVV9NYnlzXzdjOWFGMXdESnRyZEJC RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FVQWlVX01ieXNfN2M5YUYxd0RKdHJkQkJEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUEzMS9ERDY0NDg3ODYwOTQxMUU4QjU2QzE4MTBDNEY5QUUwMi9BVUFpVV9NYnlz XzdjOWFGMXdESnRyZEJCRHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYc7zwfMIo4r/abtBr34drMKggqAzEdJb4YbtnB8PHKuUZiYr9Z9qE Gp6M1SYKmsblR73haT5bSerFt4TkTJk1W4xx5ql6VyTLdM1sdh4BuhQsd+LFA0nx T/HAwsVw8OXLzi9iSyz2mG1HBMUV+01KQbGHr5gHWgLoCSe5mjIjmm2SGZSnUsA/ urCm+FqQIaywklxRSTG9ntBBaM2Agg57bNKzDpLa9TtWRFzNBO2oh3j1wklCAQbw o63BmLwCrsGcX2tpHkhxjJEDHtVDRV5yeluhN4zUIEFvixTenX8/zOFNpy5N2AkU qsOq7OAAw3wwJQZeSbhuQGEgiYbBYW8D -----END CERTIFICATE-----Generated at Sat Jul 26 02:02:43 2025 by rpki-client