$ rpki-client -vvf rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.mft File: AuKPnUYFERN7IUeII6e0gzlWUhI.mft (raw, json) Hash identifier: OUbAk4Gtz+iIi2jSh0dtBeNHvzHZ7khbAbM+gyUZij0= Subject key identifier: ED:01:2D:36:E0:BE:21:DE:99:78:CA:FD:84:6A:C2:18:E9:65:B5:ED Authority key identifier: 02:E2:8F:9D:46:05:11:13:7B:21:47:88:23:A7:B4:83:39:56:52:12 Certificate issuer: /CN=A9147609/serialNumber=02E28F9D460511137B21478823A7B48339565212 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuKPnUYFERN7IUeII6e0gzlWUhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.mft Manifest number: 1DAC Signing time: Fri 30 May 2025 16:59:13 +0000 Manifest this update: Fri 30 May 2025 16:59:13 +0000 Manifest next update: Fri 06 Jun 2025 16:59:13 +0000 Files and hashes: 1: AuKPnUYFERN7IUeII6e0gzlWUhI.crl (hash: NW6P1bN7ef9rQ3nkFlK2gGiYkfIl9Q9mD9lfmOmfP90=) 2: 1268CB8C4E3E11EF891FC80CC4F9AE02.roa (hash: 6CR+TZUsylxtx0zLgY8M428FtFKBQUPpWUog06aspTA=) 3: 65A7D4A0974A11EF961C4937C4F9AE02.roa (hash: bkINdpcrvpdCTVdYQexCjzhf30/7t8rUsEVGjSjglbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.crl rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuKPnUYFERN7IUeII6e0gzlWUhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147609, serialNumber=02E28F9D460511137B21478823A7B48339565212 Validity Not Before: May 30 16:59:13 2025 GMT Not After : Jun 6 16:59:13 2025 GMT Subject: CN=6839e3e1-172b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:70:1e:14:55:cb:ae:9e:ba:48:ed:e6:3a:22: 5f:93:c4:91:a2:f0:e3:e2:ca:e7:a7:74:9f:29:c1: 8b:46:3e:7e:e9:1b:7d:dc:95:51:39:33:3c:e3:27: 1d:17:5b:c5:59:77:67:85:77:8b:8f:e5:e8:f3:e4: 8f:94:94:a7:49:f2:67:6b:42:20:ac:01:4f:06:0d: 20:1a:93:20:44:f7:0c:b8:d1:d4:2b:26:6e:9f:cb: 03:8d:ce:a3:ca:6a:f7:9c:9a:16:44:8a:2f:3c:c9: 84:34:01:97:f1:48:fe:65:6d:6f:64:2b:4b:92:87: 77:c7:b2:17:ad:10:cd:1a:e2:8b:77:fd:93:e8:54: 50:72:6f:e1:c8:f9:d2:69:c4:47:fa:91:4e:b5:aa: ae:5c:b9:6c:6e:9b:69:2d:2c:b6:b4:a4:ef:06:2b: 2d:ad:a1:6a:58:9e:7f:72:6e:46:a1:91:e3:98:f7: a7:00:d4:05:d3:30:cb:34:ab:41:40:14:c4:96:2d: 23:1b:86:7f:b4:71:a3:eb:b9:be:1d:4a:45:96:be: 45:b9:cc:64:02:d0:31:96:ab:cf:a4:f4:1b:cc:7c: 7b:0d:5a:c9:59:53:e7:88:c2:d8:62:41:f5:7b:9e: 78:0d:c4:64:e2:23:9d:1c:06:33:f1:9f:fe:d1:83: ba:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:01:2D:36:E0:BE:21:DE:99:78:CA:FD:84:6A:C2:18:E9:65:B5:ED X509v3 Authority Key Identifier: keyid:02:E2:8F:9D:46:05:11:13:7B:21:47:88:23:A7:B4:83:39:56:52:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuKPnUYFERN7IUeII6e0gzlWUhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:65:58:44:0e:7e:0c:09:9d:80:ee:fb:59:23:b3:f5:81:20: b5:17:27:4d:d5:d9:1e:c8:b9:32:7f:3c:0a:7e:ef:1e:21:99: 11:61:23:b7:8a:d2:0f:9f:4e:2a:0c:68:a2:d0:07:88:16:af: 68:78:83:ad:d9:2e:bf:d9:cd:01:80:ad:e7:0c:df:bb:89:83: 39:5e:ba:d4:55:33:29:c6:8e:8b:64:6d:2c:8d:c3:87:4f:5f: 0a:6d:4d:f3:70:0d:f2:d9:ce:c8:aa:e2:d3:21:8d:d7:d4:f5: 1a:62:ec:01:d9:27:5e:6c:27:ae:bf:a6:44:ef:7e:1f:fd:7c: 87:ae:3a:56:59:19:5a:9f:f4:79:bd:b7:c4:0e:f5:38:15:e8: f6:ce:cc:5f:0e:15:66:18:74:0c:ac:db:3d:03:5b:10:cf:b2: a6:ed:bc:a2:24:f4:3c:e2:7d:2e:a4:6a:a3:df:b2:6d:ce:d7: 2f:e3:f1:ad:44:35:19:62:5e:72:11:76:b2:48:ca:1b:6f:af: f6:33:76:f0:73:32:d5:2c:af:3b:fb:12:29:13:36:af:a4:d8: 4e:56:8d:b7:60:27:f2:62:fe:1c:09:c9:9e:dc:c6:be:aa:e7: ed:b6:69:94:39:4b:b9:22:33:f3:db:1f:18:f0:69:80:9a:cd: a1:0b:e5:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc2MDkxMTAvBgNVBAUTKDAyRTI4RjlENDYwNTExMTM3QjIxNDc4ODIzQTdCNDgz Mzk1NjUyMTIwHhcNMjUwNTMwMTY1OTEzWhcNMjUwNjA2MTY1OTEzWjAYMRYwFAYD VQQDEw02ODM5ZTNlMS0xNzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnAeFFXLrp66SO3mOiJfk8SRovDj4srnp3SfKcGLRj5+6Rt93JVROTM84ycd F1vFWXdnhXeLj+Xo8+SPlJSnSfJna0IgrAFPBg0gGpMgRPcMuNHUKyZun8sDjc6j ymr3nJoWRIovPMmENAGX8Uj+ZW1vZCtLkod3x7IXrRDNGuKLd/2T6FRQcm/hyPnS acRH+pFOtaquXLlsbptpLSy2tKTvBistraFqWJ5/cm5GoZHjmPenANQF0zDLNKtB QBTEli0jG4Z/tHGj67m+HUpFlr5FucxkAtAxlqvPpPQbzHx7DVrJWVPniMLYYkH1 e554DcRk4iOdHAYz8Z/+0YO6/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0BLTbg viHemXjK/YRqwhjpZbXtMB8GA1UdIwQYMBaAFALij51GBRETeyFHiCOntIM5VlIS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzYwOS82MzJDMzBBRTQ0 MEUxMUU4OTAzRDNBNUJDNEY5QUUwMi9BdUtQblVZRkVSTjdJVWVJSTZlMGd6bFdV aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F1S1BuVVlGRVJON0lVZUlJNmUwZ3psV1VoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzYwOS82MzJDMzBBRTQ0MEUxMUU4OTAzRDNBNUJDNEY5QUUwMi9BdUtQblVZRkVS TjdJVWVJSTZlMGd6bFdVaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsZVhEDn4MCZ2A7vtZI7P1gSC1FydN1dkeyLkyfzwKfu8eIZkRYSO3 itIPn04qDGii0AeIFq9oeIOt2S6/2c0BgK3nDN+7iYM5XrrUVTMpxo6LZG0sjcOH T18KbU3zcA3y2c7IquLTIY3X1PUaYuwB2SdebCeuv6ZE734f/XyHrjpWWRlan/R5 vbfEDvU4Fej2zsxfDhVmGHQMrNs9A1sQz7Km7byiJPQ84n0upGqj37Jtztcv4/Gt RDUZYl5yEXaySMobb6/2M3bwczLVLK87+xIpEzavpNhOVo23YCfyYv4cCcme3Ma+ qufttmmUOUu5IjPz2x8Y8GmAms2hC+Wv -----END CERTIFICATE-----Generated at Sat May 31 17:49:33 2025 by rpki-client