$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft File: AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft (raw, json) Hash identifier: dVj+mTkXRyOXB2J3Ijllcbe26qye3AOzgLPwwmkTrh8= Subject key identifier: 07:C7:C8:A6:D0:74:82:8F:39:6B:AD:FB:79:55:2E:A2:DE:DB:C5:67 Authority key identifier: 01:40:22:53:F3:1B:CA:CF:FB:73:D6:85:D7:00:C9:B6:B7:41:04:3C Certificate issuer: /CN=A91FAA31/serialNumber=01402253F31BCACFFB73D685D700C9B6B741043C Certificate serial: 14AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AUAiU_Mbys_7c9aF1wDJtrdBBDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft Manifest number: 14A2 Signing time: Fri 30 May 2025 17:03:19 +0000 Manifest this update: Fri 30 May 2025 17:03:19 +0000 Manifest next update: Fri 06 Jun 2025 17:03:19 +0000 Files and hashes: 1: AUAiU_Mbys_7c9aF1wDJtrdBBDw.crl (hash: 5J7Tre9PABvck8NBwEU6hjPWgFp+HwRJilML0ffAZ+k=) 2: 49CB8044609511E8BF4FB410C4F9AE02.roa (hash: Mbdbpc3/wtRpTix5VC1xMy2eqJ1FLcHxKH2kFDSd6ik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.crl rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AUAiU_Mbys_7c9aF1wDJtrdBBDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5292 (0x14ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAA31, serialNumber=01402253F31BCACFFB73D685D700C9B6B741043C Validity Not Before: May 30 17:03:19 2025 GMT Not After : Jun 6 17:03:19 2025 GMT Subject: CN=6839e4d7-b63d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:81:53:21:c3:fe:4d:16:9f:f7:5e:43:97:6a: 55:3b:50:5c:06:a8:e0:c8:8e:02:81:f9:70:6c:b3: 62:a1:f7:25:2b:bb:62:69:bd:52:76:5f:51:7f:14: 75:a0:66:f9:9a:03:d4:22:61:af:57:7c:7b:77:17: 90:3e:1d:d3:7a:90:bb:45:cb:43:17:39:12:87:9e: df:a7:13:0f:58:c5:05:94:73:dd:60:9a:7d:a4:a8: d8:63:06:a6:79:b6:f8:59:2f:4c:2c:ac:a9:80:db: d3:ed:01:2c:2e:04:82:59:78:47:98:f5:a3:c5:8e: 02:78:bc:2b:6d:a1:aa:cc:6a:92:f2:a5:ea:49:b0: f9:d9:a8:b4:da:86:5e:4b:95:9a:ae:5f:c8:f8:83: fb:06:75:ac:ba:64:fe:56:69:ea:49:29:c9:d3:c2: 06:bd:40:55:80:2b:53:7b:39:f9:54:b3:8a:10:a0: ca:d5:ac:04:ca:5d:28:42:82:59:d9:45:27:21:5e: be:d5:be:51:c2:7d:57:60:66:0b:c9:70:9c:6b:b2: 21:37:cf:47:53:a4:45:ee:45:90:62:2f:86:63:7d: 27:d0:67:e4:5d:79:c9:87:8c:f5:ee:1a:3d:16:7c: 92:df:fc:41:ab:fd:c4:6c:9f:8b:75:a0:66:52:f6: 03:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C7:C8:A6:D0:74:82:8F:39:6B:AD:FB:79:55:2E:A2:DE:DB:C5:67 X509v3 Authority Key Identifier: keyid:01:40:22:53:F3:1B:CA:CF:FB:73:D6:85:D7:00:C9:B6:B7:41:04:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AUAiU_Mbys_7c9aF1wDJtrdBBDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:75:7e:ab:22:6f:61:0b:d7:2b:15:22:98:90:9a:13:35:7f: ea:a6:6a:45:fc:bb:f7:0a:c1:dc:a1:9b:0c:e7:a5:74:26:42: 01:2b:f8:9f:0c:43:89:18:57:87:92:f4:b4:f2:c5:a0:b6:d8: 89:e7:95:28:e5:9e:58:8e:22:9e:51:0c:9b:91:86:50:67:9f: d7:25:b6:2f:07:e9:76:1b:63:2f:4c:16:1a:c1:3f:66:72:68: a4:8e:50:2c:8f:e3:8b:70:08:cb:7f:cc:4a:e6:35:93:7b:19: 28:7c:78:8b:ef:aa:4e:d0:c1:53:75:ba:91:ee:7a:b1:dd:11: 13:74:e3:f5:fe:f6:75:8a:93:fe:73:46:71:05:98:7e:7f:3e: 49:42:af:6c:e4:b1:a7:37:62:be:bf:ff:17:e3:80:67:32:6f: 58:06:95:38:cb:33:e5:84:4c:f5:00:4f:25:b0:e9:70:37:18: e6:f9:a9:69:ff:ad:33:ba:12:4d:40:f9:21:8b:86:69:a8:8c: 9b:b5:d5:d3:b2:e5:94:8e:78:e2:6e:0b:04:71:10:ac:fa:66: 56:40:7f:bd:6f:9b:a3:0f:ec:2d:99:db:68:dc:47:f1:64:9c: 93:55:75:31:ad:c4:d3:80:09:b2:f0:9a:4f:70:d4:b6:a1:14: 55:57:f9:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFBMzExMTAvBgNVBAUTKDAxNDAyMjUzRjMxQkNBQ0ZGQjczRDY4NUQ3MDBDOUI2 Qjc0MTA0M0MwHhcNMjUwNTMwMTcwMzE5WhcNMjUwNjA2MTcwMzE5WjAYMRYwFAYD VQQDEw02ODM5ZTRkNy1iNjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04FTIcP+TRaf915Dl2pVO1BcBqjgyI4CgflwbLNiofclK7tiab1Sdl9RfxR1 oGb5mgPUImGvV3x7dxeQPh3TepC7RctDFzkSh57fpxMPWMUFlHPdYJp9pKjYYwam ebb4WS9MLKypgNvT7QEsLgSCWXhHmPWjxY4CeLwrbaGqzGqS8qXqSbD52ai02oZe S5Warl/I+IP7BnWsumT+VmnqSSnJ08IGvUBVgCtTezn5VLOKEKDK1awEyl0oQoJZ 2UUnIV6+1b5Rwn1XYGYLyXCca7IhN89HU6RF7kWQYi+GY30n0GfkXXnJh4z17ho9 FnyS3/xBq/3EbJ+LdaBmUvYDkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfHyKbQ dIKPOWut+3lVLqLe28VnMB8GA1UdIwQYMBaAFAFAIlPzG8rP+3PWhdcAyba3QQQ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUEzMS9ERDY0NDg3ODYw OTQxMUU4QjU2QzE4MTBDNEY5QUUwMi9BVUFpVV9NYnlzXzdjOWFGMXdESnRyZEJC RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FVQWlVX01ieXNfN2M5YUYxd0RKdHJkQkJEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUEzMS9ERDY0NDg3ODYwOTQxMUU4QjU2QzE4MTBDNEY5QUUwMi9BVUFpVV9NYnlz XzdjOWFGMXdESnRyZEJCRHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUdX6rIm9hC9crFSKYkJoTNX/qpmpF/Lv3CsHcoZsM56V0JkIBK/if DEOJGFeHkvS08sWgttiJ55Uo5Z5YjiKeUQybkYZQZ5/XJbYvB+l2G2MvTBYawT9m cmikjlAsj+OLcAjLf8xK5jWTexkofHiL76pO0MFTdbqR7nqx3RETdOP1/vZ1ipP+ c0ZxBZh+fz5JQq9s5LGnN2K+v/8X44BnMm9YBpU4yzPlhEz1AE8lsOlwNxjm+alp /60zuhJNQPkhi4ZpqIybtdXTsuWUjnjibgsEcRCs+mZWQH+9b5ujD+wtmdto3Efx ZJyTVXUxrcTTgAmy8JpPcNS2oRRVV/lY -----END CERTIFICATE-----Generated at Sat May 31 17:41:02 2025 by rpki-client