$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft File: AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft (raw, json) Hash identifier: mvxQEda6KV+EDFy0VDLMX8rIN+mEFShUQnXLl7P51Ag= Subject key identifier: 3B:F3:B3:C1:B9:03:AD:C4:05:DB:B6:28:58:2F:8C:FA:27:8A:E6:B0 Authority key identifier: 01:40:22:53:F3:1B:CA:CF:FB:73:D6:85:D7:00:C9:B6:B7:41:04:3C Certificate issuer: /CN=A91FAA31/serialNumber=01402253F31BCACFFB73D685D700C9B6B741043C Certificate serial: 1497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AUAiU_Mbys_7c9aF1wDJtrdBBDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft Manifest number: 148E Signing time: Thu 24 Apr 2025 16:53:33 +0000 Manifest this update: Thu 24 Apr 2025 16:53:33 +0000 Manifest next update: Thu 01 May 2025 16:53:33 +0000 Files and hashes: 1: AUAiU_Mbys_7c9aF1wDJtrdBBDw.crl (hash: 913ZvizjANJ8lclRVxnbf8MOCIYu5SAVLRl8mH8ZpD4=) 2: 49CB8044609511E8BF4FB410C4F9AE02.roa (hash: l3UfwENOL7ee8Yc6k4lA7+v8EPlvnjmfOhmD+k8SMQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.crl rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AUAiU_Mbys_7c9aF1wDJtrdBBDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:53:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5271 (0x1497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAA31, serialNumber=01402253F31BCACFFB73D685D700C9B6B741043C Validity Not Before: Apr 24 16:53:33 2025 GMT Not After : May 1 16:53:33 2025 GMT Subject: CN=680a6c8d-1413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:fe:aa:14:74:68:e1:91:68:ff:c8:f4:19: 7a:c5:cc:13:33:05:09:ba:fa:01:3d:f8:11:f6:2d: 3b:11:b9:5b:f6:33:9f:2e:90:97:7b:ac:9e:8f:e9: 29:8b:06:ea:74:e5:f1:67:79:c9:29:06:8f:8d:c8: 41:a8:a2:dc:5f:11:31:f6:2d:eb:07:50:95:3f:04: 0b:53:54:77:50:86:62:96:2b:03:d3:5c:69:a6:2e: 0a:36:dd:e7:0c:d3:47:00:07:54:b6:19:5f:56:ab: 48:a4:c2:38:ee:48:e3:0e:1c:c7:9e:e2:b6:9a:82: d0:f3:a0:88:37:3f:0a:b9:4c:5f:21:4f:60:46:eb: 6e:eb:25:bf:f1:30:f3:a3:e6:b2:70:8d:5d:19:3c: fb:cc:ac:59:0d:e1:b2:e4:bc:5b:d9:c7:9d:37:bf: bf:b3:f2:82:9e:9f:83:95:1f:f6:53:ea:3e:65:71: 66:6b:94:17:c1:af:45:47:85:9a:9e:e7:60:73:16: 95:f6:de:be:48:5a:1b:b5:9e:03:7a:c1:5c:3b:40: a9:73:5d:01:f1:dc:85:1e:b5:1f:04:1d:05:95:3f: 58:0c:27:6a:de:72:2f:a2:32:a0:28:d2:96:cd:c0: 1b:2f:c1:d5:7b:59:ac:0f:82:91:5f:c1:22:c0:f4: cf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F3:B3:C1:B9:03:AD:C4:05:DB:B6:28:58:2F:8C:FA:27:8A:E6:B0 X509v3 Authority Key Identifier: keyid:01:40:22:53:F3:1B:CA:CF:FB:73:D6:85:D7:00:C9:B6:B7:41:04:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AUAiU_Mbys_7c9aF1wDJtrdBBDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:a8:f8:48:a5:23:c2:f4:ed:71:13:1c:72:6a:95:46:c7:84: 1c:2d:78:1b:7f:78:9a:b9:b6:7a:27:a0:9c:84:16:45:89:c1: 88:16:dd:4d:58:67:17:86:ac:c2:f6:20:c7:58:48:c6:82:13: 50:84:4c:6f:22:35:aa:56:4d:88:88:ce:ad:64:47:9a:75:20: aa:34:a4:94:12:45:10:86:88:3f:2c:3b:f0:37:c6:2e:67:c8: 2b:12:50:c0:35:cc:51:61:95:db:0e:e2:ee:25:bb:53:1c:29: 4e:49:cf:41:a3:73:f4:ba:40:16:23:d6:dd:75:89:6c:82:d9: a4:0a:02:d1:78:01:f1:46:01:a8:1b:af:83:c1:0d:62:2e:68: 48:fb:65:1d:8d:b1:90:c3:ca:8c:15:fa:7d:cc:b8:a2:24:6b: 1d:8d:d0:33:7a:0a:05:b9:e3:fc:12:a6:38:00:16:48:5c:1e: 1f:29:f2:36:4b:5b:a8:91:e4:0b:17:21:55:f1:fb:1d:8d:51: 60:1d:3a:71:51:d3:8d:26:3c:e8:48:27:d7:64:a0:7f:71:b6: 0b:2f:43:80:cd:a8:b2:45:8f:4a:58:2f:cc:a2:2f:f4:f0:77: de:29:88:91:2b:ba:a1:97:11:39:4f:56:96:3c:27:6c:56:7d: 50:0d:d3:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFBMzExMTAvBgNVBAUTKDAxNDAyMjUzRjMxQkNBQ0ZGQjczRDY4NUQ3MDBDOUI2 Qjc0MTA0M0MwHhcNMjUwNDI0MTY1MzMzWhcNMjUwNTAxMTY1MzMzWjAYMRYwFAYD VQQDEw02ODBhNmM4ZC0xNDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHz+qhR0aOGRaP/I9Bl6xcwTMwUJuvoBPfgR9i07Eblb9jOfLpCXe6yej+kp iwbqdOXxZ3nJKQaPjchBqKLcXxEx9i3rB1CVPwQLU1R3UIZilisD01xppi4KNt3n DNNHAAdUthlfVqtIpMI47kjjDhzHnuK2moLQ86CINz8KuUxfIU9gRutu6yW/8TDz o+aycI1dGTz7zKxZDeGy5Lxb2cedN7+/s/KCnp+DlR/2U+o+ZXFma5QXwa9FR4Wa nudgcxaV9t6+SFobtZ4DesFcO0Cpc10B8dyFHrUfBB0FlT9YDCdq3nIvojKgKNKW zcAbL8HVe1msD4KRX8EiwPTPywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvzs8G5 A63EBdu2KFgvjPoniuawMB8GA1UdIwQYMBaAFAFAIlPzG8rP+3PWhdcAyba3QQQ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUEzMS9ERDY0NDg3ODYw OTQxMUU4QjU2QzE4MTBDNEY5QUUwMi9BVUFpVV9NYnlzXzdjOWFGMXdESnRyZEJC RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FVQWlVX01ieXNfN2M5YUYxd0RKdHJkQkJEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUEzMS9ERDY0NDg3ODYwOTQxMUU4QjU2QzE4MTBDNEY5QUUwMi9BVUFpVV9NYnlz XzdjOWFGMXdESnRyZEJCRHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACqPhIpSPC9O1xExxyapVGx4QcLXgbf3iaubZ6J6CchBZFicGIFt1N WGcXhqzC9iDHWEjGghNQhExvIjWqVk2IiM6tZEeadSCqNKSUEkUQhog/LDvwN8Yu Z8grElDANcxRYZXbDuLuJbtTHClOSc9Bo3P0ukAWI9bddYlsgtmkCgLReAHxRgGo G6+DwQ1iLmhI+2UdjbGQw8qMFfp9zLiiJGsdjdAzegoFueP8EqY4ABZIXB4fKfI2 S1uokeQLFyFV8fsdjVFgHTpxUdONJjzoSCfXZKB/cbYLL0OAzaiyRY9KWC/Moi/0 8HfeKYiRK7qhlxE5T1aWPCdsVn1QDdNn -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:48 2025 by rpki-client