$ rpki-client -vvf rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft File: Aul8r2u1VIcberzm6NeDIOuURpE.mft (raw, json) Hash identifier: 0t1f+0WAhwaNzTsMIG41ylVA//Ak3LxSpbcYwdTJs7c= Subject key identifier: EB:D4:5C:6D:D5:00:AA:6A:7F:87:9E:0E:3B:52:B1:97:FD:4A:5D:EF Authority key identifier: 02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 Certificate issuer: /CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Certificate serial: 2422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft Manifest number: 240C Signing time: Thu 18 Sep 2025 15:53:55 +0000 Manifest this update: Thu 18 Sep 2025 15:53:55 +0000 Manifest next update: Thu 25 Sep 2025 15:53:55 +0000 Files and hashes: 1: Aul8r2u1VIcberzm6NeDIOuURpE.crl (hash: BJfvVg96zZOaLuYXXg1vS8ZYva+2V0MbVuvrTSZVAOk=) 2: 0B72CFAC049211EBB8144531C4F9AE02.roa (hash: 8qQ0fcDr/aGVnyD7P+G/6xo5kjUt3vBtdFXB7xYrVKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9250 (0x2422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A47E, serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Validity Not Before: Sep 18 15:53:55 2025 GMT Not After : Sep 25 15:53:55 2025 GMT Subject: CN=68cc2b13-a2b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a3:79:8a:70:e5:d3:06:6d:6d:8c:c7:5e:74: fe:e5:b5:26:fe:4b:63:45:87:9e:31:6e:28:1e:96: ad:84:38:19:eb:06:69:f9:40:ae:b7:e3:e9:14:ff: d1:de:68:8f:8b:b4:d8:39:ef:6f:9d:a8:7f:56:01: f1:5b:77:10:b4:72:35:38:ca:36:89:c8:7e:ca:a8: 0d:03:d7:08:1f:27:f9:39:87:70:b0:5a:4a:aa:3e: a1:74:0a:0f:81:be:e4:d9:f3:bb:82:65:39:cf:e4: 7b:14:0e:ac:0c:1f:49:c6:82:ed:04:7c:6c:3a:26: 63:85:c1:c3:9b:a2:1b:16:76:d9:d5:fa:ac:f9:97: 68:c7:3d:d6:81:fb:5d:3f:dd:61:d0:0e:7b:df:bf: 52:f0:8d:43:13:e0:f0:76:a0:c1:e6:f0:ac:e4:bd: 1c:37:67:f0:f6:7b:b4:e7:5a:ad:25:48:59:0f:8a: f4:88:bc:a5:b7:cc:68:f3:0c:fe:00:79:94:c7:0a: 23:c2:70:55:e6:7c:48:05:f1:2f:e3:5c:04:ee:99: ff:67:ed:b8:e0:e6:d5:d4:1a:6f:18:56:a3:70:72: 57:8f:6e:67:cd:2d:82:9a:28:90:22:f3:82:4d:6c: 33:a2:cb:0a:8e:ae:a4:cb:bb:72:7b:07:e4:d0:3e: 5d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D4:5C:6D:D5:00:AA:6A:7F:87:9E:0E:3B:52:B1:97:FD:4A:5D:EF X509v3 Authority Key Identifier: keyid:02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:7b:43:34:68:21:91:af:ea:18:75:cb:4f:c2:11:5e:e8:e4: 6b:0f:26:7a:4f:8f:14:08:e3:0d:f9:77:b5:d5:31:2f:f1:41: 6e:15:85:fb:11:6b:2a:7d:2d:16:9c:6a:65:cd:fa:82:a2:ad: 44:18:20:44:01:ca:fe:5c:da:40:a3:2b:d5:65:91:16:36:08: 19:f1:70:2a:7b:ac:5e:a1:6c:e9:e3:c1:aa:ff:29:d3:6c:5a: e6:b7:df:3a:93:ba:e6:ee:02:a5:79:49:be:99:90:41:02:2a: 2e:08:7c:e6:84:cf:a9:2e:1e:93:22:f5:02:42:64:a3:6a:4b: bc:82:d5:e0:e9:6f:a2:de:1c:99:32:29:9b:03:f8:4f:ee:09: 7f:c1:45:7b:ea:78:f8:31:f0:cd:37:17:17:a3:86:4b:8f:a9: 36:a3:6e:06:50:c5:a3:ed:85:14:cc:7c:99:f0:a0:74:70:b0: 9a:d7:9a:0b:ae:1f:e4:d9:40:fd:d6:ae:b9:ef:c3:b2:be:a1: 2a:d5:f0:db:4d:da:a3:98:f9:50:b8:79:37:11:b6:b3:d4:e4: 31:f6:1e:3c:e5:18:45:bf:19:4c:20:85:82:e7:05:72:ad:20: dd:8d:37:88:f0:f0:75:24:45:4a:f4:36:2e:31:7b:b3:54:13: 1b:94:4a:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0N0UxMTAvBgNVBAUTKDAyRTk3Q0FGNkJCNTU0ODcxQjdBQkNFNkU4RDc4MzIw RUI5NDQ2OTEwHhcNMjUwOTE4MTU1MzU1WhcNMjUwOTI1MTU1MzU1WjAYMRYwFAYD VQQDEw02OGNjMmIxMy1hMmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qN5inDl0wZtbYzHXnT+5bUm/ktjRYeeMW4oHpathDgZ6wZp+UCut+PpFP/R 3miPi7TYOe9vnah/VgHxW3cQtHI1OMo2ich+yqgNA9cIHyf5OYdwsFpKqj6hdAoP gb7k2fO7gmU5z+R7FA6sDB9JxoLtBHxsOiZjhcHDm6IbFnbZ1fqs+Zdoxz3Wgftd P91h0A57379S8I1DE+DwdqDB5vCs5L0cN2fw9nu051qtJUhZD4r0iLylt8xo8wz+ AHmUxwojwnBV5nxIBfEv41wE7pn/Z+244ObV1BpvGFajcHJXj25nzS2CmiiQIvOC TWwzossKjq6ky7tyewfk0D5d5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvUXG3V AKpqf4eeDjtSsZf9Sl3vMB8GA1UdIwQYMBaAFALpfK9rtVSHG3q85ujXgyDrlEaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ3RS8zRTZCRUM1NjY5 MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJY2JlcnptNk5lRElPdVVS cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F1bDhyMnUxVkljYmVyem02TmVESU91VVJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ3RS8zRTZCRUM1NjY5MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJ Y2JlcnptNk5lRElPdVVScEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBue0M0aCGRr+oYdctPwhFe6ORrDyZ6T48UCOMN+Xe11TEv8UFuFYX7 EWsqfS0WnGplzfqCoq1EGCBEAcr+XNpAoyvVZZEWNggZ8XAqe6xeoWzp48Gq/ynT bFrmt986k7rm7gKleUm+mZBBAiouCHzmhM+pLh6TIvUCQmSjaku8gtXg6W+i3hyZ MimbA/hP7gl/wUV76nj4MfDNNxcXo4ZLj6k2o24GUMWj7YUUzHyZ8KB0cLCa15oL rh/k2UD91q6578OyvqEq1fDbTdqjmPlQuHk3Ebaz1OQx9h485RhFvxlMIIWC5wVy rSDdjTeI8PB1JEVK9DYuMXuzVBMblEpX -----END CERTIFICATE-----Generated at Fri Sep 19 03:57:02 2025 by rpki-client