$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft File: AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft (raw, json) Hash identifier: bSWbLwkclvWR+3hJ3vIGKzh45SuzSqMw63mFcPbP+gE= Subject key identifier: DF:87:83:39:F1:04:41:9E:FC:FA:71:78:2E:30:0B:78:B0:0E:D2:77 Authority key identifier: 01:40:22:53:F3:1B:CA:CF:FB:73:D6:85:D7:00:C9:B6:B7:41:04:3C Certificate issuer: /CN=A91FAA31/serialNumber=01402253F31BCACFFB73D685D700C9B6B741043C Certificate serial: 1499 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AUAiU_Mbys_7c9aF1wDJtrdBBDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft Manifest number: 1490 Signing time: Mon 28 Apr 2025 17:06:23 +0000 Manifest this update: Mon 28 Apr 2025 17:06:22 +0000 Manifest next update: Mon 05 May 2025 17:06:22 +0000 Files and hashes: 1: AUAiU_Mbys_7c9aF1wDJtrdBBDw.crl (hash: j9S2Z4I/TMqeRYgKzspCWUgCciAFvmj0adjdpAEDUZc=) 2: 49CB8044609511E8BF4FB410C4F9AE02.roa (hash: l3UfwENOL7ee8Yc6k4lA7+v8EPlvnjmfOhmD+k8SMQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.crl rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AUAiU_Mbys_7c9aF1wDJtrdBBDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5273 (0x1499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAA31, serialNumber=01402253F31BCACFFB73D685D700C9B6B741043C Validity Not Before: Apr 28 17:06:22 2025 GMT Not After : May 5 17:06:22 2025 GMT Subject: CN=680fb58f-180b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:97:17:7f:cd:1c:67:e0:a7:fb:46:7a:1f:64: 3f:0f:b7:db:65:3b:ae:50:37:86:51:a7:4e:e6:cb: 6f:99:f7:3f:e8:3b:c5:b4:58:06:d9:f2:ab:7e:3b: 5a:3d:c7:8d:13:ff:31:3d:ff:dc:77:a0:a0:a5:d9: 7c:50:9e:9e:c5:a8:d3:d3:b3:84:31:8f:75:25:a7: bd:05:06:90:ae:3a:f9:93:38:20:d2:c6:11:a0:9a: 68:7d:4f:75:58:bd:36:07:bf:e6:92:5c:16:1b:a0: 6b:04:e3:a4:ac:6a:ba:9c:5e:98:54:df:c7:43:04: fe:54:0e:a9:1a:7c:5f:ce:05:6e:e9:1f:8b:9b:cb: fc:07:04:9d:6d:96:67:ec:45:5a:96:b0:ce:15:cf: df:5e:c4:b8:05:fe:71:51:99:52:4a:6a:c9:30:fd: c8:95:d6:be:fa:f9:30:ed:ad:21:6f:3a:58:e0:50: b1:af:46:64:97:f0:8f:6f:20:e4:fa:86:98:15:47: b3:9e:6a:a0:85:26:dc:d1:7b:ea:cf:b7:7e:4f:40: cd:76:2d:fc:1b:e0:28:5b:81:96:fc:22:1f:7f:04: 65:97:34:9b:ed:9c:ac:53:e7:ab:c3:93:35:c9:4b: 95:8b:f6:31:5c:83:a8:f1:af:2f:6d:75:bd:65:cf: 0f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:87:83:39:F1:04:41:9E:FC:FA:71:78:2E:30:0B:78:B0:0E:D2:77 X509v3 Authority Key Identifier: keyid:01:40:22:53:F3:1B:CA:CF:FB:73:D6:85:D7:00:C9:B6:B7:41:04:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AUAiU_Mbys_7c9aF1wDJtrdBBDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:7d:9d:b3:9f:e0:1c:60:c5:c8:2b:7a:01:90:9b:e5:ea:7c: 80:db:4c:20:c6:01:29:92:83:d3:5b:a1:26:b8:03:d5:4e:05: 4d:32:23:3a:f3:77:55:62:90:91:20:9d:9e:5d:8c:e3:ec:40: 6b:7e:3a:9b:9a:86:29:fc:c9:ef:c9:72:20:27:51:3a:da:7c: c3:f3:41:6b:46:d8:95:eb:5c:3c:77:80:e2:f5:5d:31:c6:fd: 09:2c:a5:5b:4a:a8:7d:27:bc:c4:e1:9a:bf:0c:e5:79:44:ee: 12:60:76:fd:bf:cb:0b:b1:39:a8:9d:f2:7b:0c:e3:e0:97:93: 90:92:82:20:52:6e:7a:a2:f5:34:b3:bb:7d:8f:be:f9:63:39: ca:b6:da:a1:00:6b:2e:a2:0a:2c:72:00:5f:44:02:c8:43:fd: 8d:22:70:be:ad:a5:fa:55:6c:8e:d9:8d:6a:ed:59:07:ad:c6: 9b:7b:2f:fd:3b:83:07:18:5b:3e:90:2b:31:cb:e6:2c:99:37: 0e:88:de:27:81:68:d3:24:e7:5c:c3:38:57:6c:80:8e:7e:3c: ef:4c:e0:01:26:f1:51:14:fa:89:89:b6:a2:f8:9b:6f:2f:a1: ca:ac:1c:d9:38:07:09:40:06:10:bd:8c:80:01:fe:69:9a:6d: 33:f3:18:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFBMzExMTAvBgNVBAUTKDAxNDAyMjUzRjMxQkNBQ0ZGQjczRDY4NUQ3MDBDOUI2 Qjc0MTA0M0MwHhcNMjUwNDI4MTcwNjIyWhcNMjUwNTA1MTcwNjIyWjAYMRYwFAYD VQQDEw02ODBmYjU4Zi0xODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJcXf80cZ+Cn+0Z6H2Q/D7fbZTuuUDeGUadO5stvmfc/6DvFtFgG2fKrfjta PceNE/8xPf/cd6Cgpdl8UJ6exajT07OEMY91Jae9BQaQrjr5kzgg0sYRoJpofU91 WL02B7/mklwWG6BrBOOkrGq6nF6YVN/HQwT+VA6pGnxfzgVu6R+Lm8v8BwSdbZZn 7EValrDOFc/fXsS4Bf5xUZlSSmrJMP3Ilda++vkw7a0hbzpY4FCxr0Zkl/CPbyDk +oaYFUeznmqghSbc0Xvqz7d+T0DNdi38G+AoW4GW/CIffwRllzSb7ZysU+erw5M1 yUuVi/YxXIOo8a8vbXW9Zc8PuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+Hgznx BEGe/PpxeC4wC3iwDtJ3MB8GA1UdIwQYMBaAFAFAIlPzG8rP+3PWhdcAyba3QQQ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUEzMS9ERDY0NDg3ODYw OTQxMUU4QjU2QzE4MTBDNEY5QUUwMi9BVUFpVV9NYnlzXzdjOWFGMXdESnRyZEJC RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FVQWlVX01ieXNfN2M5YUYxd0RKdHJkQkJEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUEzMS9ERDY0NDg3ODYwOTQxMUU4QjU2QzE4MTBDNEY5QUUwMi9BVUFpVV9NYnlz XzdjOWFGMXdESnRyZEJCRHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHfZ2zn+AcYMXIK3oBkJvl6nyA20wgxgEpkoPTW6EmuAPVTgVNMiM6 83dVYpCRIJ2eXYzj7EBrfjqbmoYp/MnvyXIgJ1E62nzD80FrRtiV61w8d4Di9V0x xv0JLKVbSqh9J7zE4Zq/DOV5RO4SYHb9v8sLsTmonfJ7DOPgl5OQkoIgUm56ovU0 s7t9j775YznKttqhAGsuogoscgBfRALIQ/2NInC+raX6VWyO2Y1q7VkHrcabey/9 O4MHGFs+kCsxy+YsmTcOiN4ngWjTJOdcwzhXbICOfjzvTOABJvFRFPqJibai+Jtv L6HKrBzZOAcJQAYQvYyAAf5pmm0z8xgH -----END CERTIFICATE-----Generated at Mon Apr 28 20:11:17 2025 by rpki-client on console.sobornost.net