$ rpki-client -vvf rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft File: Aul8r2u1VIcberzm6NeDIOuURpE.mft (raw, json) Hash identifier: xZbKjOgGz6RqS0ZbPZfOqgRiNsG/iVIoNac2gLfI7cI= Subject key identifier: 9E:83:8A:9A:6A:DA:30:76:17:92:21:49:03:6F:63:5C:CE:B4:FF:43 Authority key identifier: 02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 Certificate issuer: /CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Certificate serial: 23EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft Manifest number: 23D5 Signing time: Fri 06 Jun 2025 15:53:00 +0000 Manifest this update: Fri 06 Jun 2025 15:52:59 +0000 Manifest next update: Fri 13 Jun 2025 15:52:59 +0000 Files and hashes: 1: Aul8r2u1VIcberzm6NeDIOuURpE.crl (hash: hcGjMsP7XH8q4bc5MTAvVEq6sODkH9KJiXLr23h8ISU=) 2: 0B72CFAC049211EBB8144531C4F9AE02.roa (hash: HoemRN9Bqh3dS3wFw1CGTUnb1f4mFjxNW0+qSLr4eCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 15:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9194 (0x23ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A47E, serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Validity Not Before: Jun 6 15:52:59 2025 GMT Not After : Jun 13 15:52:59 2025 GMT Subject: CN=68430edb-1c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:99:63:34:1c:d0:a7:ad:cc:18:ac:6e:e0:6d: 34:5b:b7:d6:25:5f:f0:34:79:7d:24:2d:89:4f:7f: 14:ba:af:85:39:27:16:12:f2:8b:ec:a8:72:81:52: 9c:3c:cb:ff:c9:df:b8:f7:f7:8e:93:b1:ca:06:e3: c2:83:69:72:d1:8c:4d:c4:5c:d2:05:94:2a:94:0a: b0:60:8d:97:6b:d7:fe:c7:a7:d7:5c:ac:74:23:64: e3:b2:1c:ee:90:0d:9e:3f:75:c6:48:31:ab:81:d8: e3:93:d7:4c:0b:27:21:aa:bb:62:9a:6f:af:2f:6d: 9a:40:46:3a:dc:25:a8:b4:78:83:11:a7:f3:72:dd: 6c:bc:c2:f8:a4:c4:99:d7:13:a8:e0:8f:f6:ff:0f: cd:32:79:da:8e:c8:43:c1:fe:7e:83:2e:42:84:a5: 72:af:36:31:fb:a7:9f:e2:1a:8c:cf:c7:c0:57:af: 2b:4b:5c:85:3d:58:25:33:a0:8c:29:83:c9:fb:83: 3b:d3:36:2e:68:70:c0:ef:db:f0:b7:90:89:e3:e2: 69:01:da:32:6b:28:56:fc:d5:3b:d2:45:4b:d2:5a: fb:76:7a:76:9c:09:48:d8:21:d6:86:42:47:29:aa: c8:2b:56:25:ef:fa:76:b0:84:ca:85:98:25:7f:6a: f4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:83:8A:9A:6A:DA:30:76:17:92:21:49:03:6F:63:5C:CE:B4:FF:43 X509v3 Authority Key Identifier: keyid:02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:68:21:f1:0b:dd:17:4b:2f:84:58:98:99:a6:dc:c0:39:a3: 51:2e:29:7e:d3:c1:5c:6d:6c:6d:a5:58:49:2b:7f:9d:1c:df: 2d:5b:c3:89:42:06:37:10:c8:a4:60:2f:47:32:46:e8:fd:a0: 7e:4e:c7:b3:ce:c7:a9:18:0a:08:5a:73:19:5e:c9:d8:74:81: b7:b3:5d:2d:0a:2f:ed:2b:29:96:7d:49:6a:8f:48:b1:db:62: cd:7e:42:bd:ec:75:3e:f5:b7:68:4f:43:1a:55:7b:a7:51:ad: c3:9e:d1:a0:4b:0b:72:8b:fd:e6:8c:c9:c1:62:c0:76:8e:be: 63:9c:dd:58:ed:11:6b:c1:b9:ab:ca:a3:f5:fd:c3:07:ae:03: 48:74:48:30:0b:30:fa:e8:11:15:30:f8:13:0e:6b:f5:77:d6: 2d:93:ea:ed:6c:0d:a3:6b:dd:46:c4:33:d7:2f:28:5a:c6:35: 1a:c4:49:bc:d9:7e:6b:01:77:35:a6:bb:1f:86:1f:05:69:da: a9:1f:d4:74:37:e5:5e:7e:20:f6:37:c9:4f:7a:27:cd:1d:ea: 15:e7:55:8e:d9:82:75:7a:0a:e9:52:6b:47:23:b4:39:69:76: 89:d3:e8:c7:8f:e8:c9:0f:7d:3d:e0:e2:fe:a0:4f:43:7b:2d: f1:47:5f:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0N0UxMTAvBgNVBAUTKDAyRTk3Q0FGNkJCNTU0ODcxQjdBQkNFNkU4RDc4MzIw RUI5NDQ2OTEwHhcNMjUwNjA2MTU1MjU5WhcNMjUwNjEzMTU1MjU5WjAYMRYwFAYD VQQDEw02ODQzMGVkYi0xYzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupljNBzQp63MGKxu4G00W7fWJV/wNHl9JC2JT38Uuq+FOScWEvKL7KhygVKc PMv/yd+49/eOk7HKBuPCg2ly0YxNxFzSBZQqlAqwYI2Xa9f+x6fXXKx0I2Tjshzu kA2eP3XGSDGrgdjjk9dMCychqrtimm+vL22aQEY63CWotHiDEafzct1svML4pMSZ 1xOo4I/2/w/NMnnajshDwf5+gy5ChKVyrzYx+6ef4hqMz8fAV68rS1yFPVglM6CM KYPJ+4M70zYuaHDA79vwt5CJ4+JpAdoyayhW/NU70kVL0lr7dnp2nAlI2CHWhkJH KarIK1Yl7/p2sITKhZglf2r0MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6Dippq 2jB2F5IhSQNvY1zOtP9DMB8GA1UdIwQYMBaAFALpfK9rtVSHG3q85ujXgyDrlEaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ3RS8zRTZCRUM1NjY5 MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJY2JlcnptNk5lRElPdVVS cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F1bDhyMnUxVkljYmVyem02TmVESU91VVJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ3RS8zRTZCRUM1NjY5MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJ Y2JlcnptNk5lRElPdVVScEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjaCHxC90XSy+EWJiZptzAOaNRLil+08FcbWxtpVhJK3+dHN8tW8OJ QgY3EMikYC9HMkbo/aB+TsezzsepGAoIWnMZXsnYdIG3s10tCi/tKymWfUlqj0ix 22LNfkK97HU+9bdoT0MaVXunUa3DntGgSwtyi/3mjMnBYsB2jr5jnN1Y7RFrwbmr yqP1/cMHrgNIdEgwCzD66BEVMPgTDmv1d9Ytk+rtbA2ja91GxDPXLyhaxjUaxEm8 2X5rAXc1prsfhh8FadqpH9R0N+VefiD2N8lPeifNHeoV51WO2YJ1egrpUmtHI7Q5 aXaJ0+jHj+jJD3094OL+oE9Dey3xR19b -----END CERTIFICATE-----Generated at Sat Jun 7 12:30:55 2025 by rpki-client