$ rpki-client -vvf rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft File: Aul8r2u1VIcberzm6NeDIOuURpE.mft (raw, json) Hash identifier: pMSUrJdFvlzzG3oDCCw0+qDD9CGD9jkVTHx8mCoHY7U= Subject key identifier: 4D:8C:89:FC:BF:B4:8B:27:67:7F:59:BC:64:15:ED:C4:89:BE:E3:6B Authority key identifier: 02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 Certificate issuer: /CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Certificate serial: 2403 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft Manifest number: 23EE Signing time: Sat 26 Jul 2025 15:50:26 +0000 Manifest this update: Sat 26 Jul 2025 15:50:25 +0000 Manifest next update: Sat 02 Aug 2025 15:50:25 +0000 Files and hashes: 1: Aul8r2u1VIcberzm6NeDIOuURpE.crl (hash: sf+rZ8m6XBtYIo45yAuwc2J/jT56WMmtSL7P8X4b5Fw=) 2: 0B72CFAC049211EBB8144531C4F9AE02.roa (hash: HoemRN9Bqh3dS3wFw1CGTUnb1f4mFjxNW0+qSLr4eCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Aug 2025 15:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9219 (0x2403) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A47E, serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Validity Not Before: Jul 26 15:50:25 2025 GMT Not After : Aug 2 15:50:25 2025 GMT Subject: CN=6884f941-031e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:55:35:03:48:53:e3:75:1c:91:73:1a:2e:04: 70:eb:26:1d:3f:04:f6:a5:86:56:58:1b:52:a6:36: 89:b3:b0:34:a6:9a:dd:be:14:59:e7:01:bc:65:8c: d1:41:0f:43:05:9e:72:46:47:da:75:9d:f0:fe:8d: a5:9c:a5:bf:03:e3:2a:d1:c3:d8:08:87:5b:98:f7: bc:7a:e1:1b:16:d8:1a:5d:01:e0:ea:7b:1e:80:fe: 9e:3f:6f:e7:af:7b:5d:04:db:88:57:cc:31:9a:10: 97:83:d6:10:1a:c9:1a:71:6f:16:0d:a7:a2:08:7c: e4:ca:bf:8c:8b:ac:e2:23:46:dd:ca:97:f9:42:14: 06:c9:a2:36:56:e0:c0:86:3a:c7:72:16:e2:53:f4: 66:af:c0:62:15:ac:49:57:7b:cb:f5:a1:fc:8c:b2: 8d:f6:9d:eb:da:18:60:ab:20:fa:4a:77:e7:b6:76: 81:00:ea:2a:90:c0:90:e4:5c:ef:77:47:8d:4b:d9: 61:be:05:07:5f:d9:51:ed:a5:fd:0f:15:83:48:ef: 21:bc:d6:aa:90:2f:65:78:b2:29:02:35:fd:6c:a3: a3:6e:46:d5:28:ff:3d:2c:af:9e:ad:87:94:3b:39: cf:8b:3b:7d:56:b2:60:c5:af:d5:ca:f2:44:6d:ad: 8c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8C:89:FC:BF:B4:8B:27:67:7F:59:BC:64:15:ED:C4:89:BE:E3:6B X509v3 Authority Key Identifier: keyid:02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ac:ab:37:02:65:7f:08:0c:18:2f:48:f9:1e:88:55:58:0a: da:06:b0:a2:46:41:ad:b6:a0:55:88:39:4f:ba:63:50:95:96: 94:72:71:d3:ff:15:68:e3:01:15:cf:e0:7f:7e:29:12:67:b8: 18:fc:b6:8b:51:1c:ff:d9:06:ad:80:0c:4b:ce:c8:87:5a:d9: 56:24:8c:e2:5c:03:e7:db:dc:c8:d1:25:76:89:a9:c8:2a:88: a7:2f:5e:11:fc:45:1a:87:ec:c4:3f:b5:11:43:89:69:70:bd: 65:4c:8d:b8:f8:ea:3e:59:0e:f7:31:f3:c6:16:10:db:19:32: 00:3b:27:98:f2:7d:d2:93:c8:b1:2b:62:32:f2:62:d7:62:f1: 81:07:1c:66:7c:30:32:2b:12:93:b9:35:a7:e6:c4:c9:b1:bf: ac:a9:55:d7:12:70:79:59:75:ab:d1:cc:b7:39:42:61:fc:ae: e5:7c:e5:4d:64:1e:c6:4c:04:af:3e:94:97:ad:26:e0:74:83: 39:32:0e:5c:ed:0c:e4:22:54:bc:ec:cc:7b:e4:05:db:10:3e: 2f:57:b8:37:fc:3b:7b:af:77:07:80:8d:1e:17:57:4c:0f:58: ff:7f:b7:09:03:f5:60:47:7d:5a:5a:83:f0:ba:d8:a8:2c:be: 83:67:c0:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0N0UxMTAvBgNVBAUTKDAyRTk3Q0FGNkJCNTU0ODcxQjdBQkNFNkU4RDc4MzIw RUI5NDQ2OTEwHhcNMjUwNzI2MTU1MDI1WhcNMjUwODAyMTU1MDI1WjAYMRYwFAYD VQQDEw02ODg0Zjk0MS0wMzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21U1A0hT43UckXMaLgRw6yYdPwT2pYZWWBtSpjaJs7A0pprdvhRZ5wG8ZYzR QQ9DBZ5yRkfadZ3w/o2lnKW/A+Mq0cPYCIdbmPe8euEbFtgaXQHg6nsegP6eP2/n r3tdBNuIV8wxmhCXg9YQGskacW8WDaeiCHzkyr+Mi6ziI0bdypf5QhQGyaI2VuDA hjrHchbiU/Rmr8BiFaxJV3vL9aH8jLKN9p3r2hhgqyD6SnfntnaBAOoqkMCQ5Fzv d0eNS9lhvgUHX9lR7aX9DxWDSO8hvNaqkC9leLIpAjX9bKOjbkbVKP89LK+erYeU OznPizt9VrJgxa/VyvJEba2M6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2Mify/ tIsnZ39ZvGQV7cSJvuNrMB8GA1UdIwQYMBaAFALpfK9rtVSHG3q85ujXgyDrlEaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ3RS8zRTZCRUM1NjY5 MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJY2JlcnptNk5lRElPdVVS cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F1bDhyMnUxVkljYmVyem02TmVESU91VVJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ3RS8zRTZCRUM1NjY5MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJ Y2JlcnptNk5lRElPdVVScEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9rKs3AmV/CAwYL0j5HohVWAraBrCiRkGttqBViDlPumNQlZaUcnHT /xVo4wEVz+B/fikSZ7gY/LaLURz/2QatgAxLzsiHWtlWJIziXAPn29zI0SV2ianI KoinL14R/EUah+zEP7URQ4lpcL1lTI24+Oo+WQ73MfPGFhDbGTIAOyeY8n3Sk8ix K2Iy8mLXYvGBBxxmfDAyKxKTuTWn5sTJsb+sqVXXEnB5WXWr0cy3OUJh/K7lfOVN ZB7GTASvPpSXrSbgdIM5Mg5c7QzkIlS87Mx75AXbED4vV7g3/Dt7r3cHgI0eF1dM D1j/f7cJA/VgR31aWoPwutioLL6DZ8DO -----END CERTIFICATE-----Generated at Mon Jul 28 08:27:21 2025 by rpki-client