$ rpki-client -vvf rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft File: irlFgrAuqoOihfHJH8hZoOLBE1M.mft (raw, json) Hash identifier: /ytdu9fPebvxuI+9SG0B+j5G4rKsWo3KzH7L8qJt8IE= Subject key identifier: F8:13:BD:C5:F0:1D:82:EA:DF:2B:A4:4E:AB:BE:87:EB:B8:41:C7:24 Authority key identifier: 8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53 Certificate issuer: /CN=A911049F/serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft Manifest number: 18 Signing time: Sat 05 Apr 2025 07:17:55 +0000 Manifest this update: Sat 05 Apr 2025 07:17:54 +0000 Manifest next update: Sat 12 Apr 2025 07:17:54 +0000 Files and hashes: 1: irlFgrAuqoOihfHJH8hZoOLBE1M.crl (hash: pAQdW+qi4GWZyFXuVCVvHg3/Qbr/JJa+1ztUwCU5FkI=) 2: 347B37060B7011F0BED04B49C4F9AE02.roa (hash: pQpuCZn5VYJdmwXjLqjs5m3xSfcDbn3JK2oThkiWP20=) 3: 0431DDEEF8E611EFB9269C71C4F9AE02.roa (hash: onFwvD3ByPLzXVJ67F8/gNczv45XsvNKrHEcWpbgNvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911049F Validity Not Before: Apr 5 07:17:54 2025 GMT Not After : Apr 12 07:17:54 2025 GMT Subject: CN=67f0d922-7203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8c:22:12:9f:d4:b0:de:91:c2:c5:5e:2b:68: 8b:b5:fe:b9:75:e8:ad:31:8b:0c:de:7c:c9:87:e9: 89:17:63:7a:c3:3a:19:ff:24:cd:d0:24:4e:0b:a3: fe:1a:7a:3d:0f:31:81:57:1c:27:db:cc:86:79:e5: 5c:de:36:62:26:c6:11:51:de:44:33:f7:2e:e7:f3: 4d:fb:d1:dd:34:3f:41:94:23:0e:b1:07:16:50:90: c2:71:be:75:34:e4:73:bc:af:8a:cc:08:0b:42:5f: 73:6e:4b:ec:ec:45:46:f8:ab:7e:e5:a7:dd:8f:9b: f8:fa:f5:df:21:a1:da:06:6f:a5:4e:ea:e9:84:bd: b5:9e:8c:27:3a:c1:4c:d3:d4:de:b9:39:bd:dd:3d: 54:4b:eb:78:0e:28:dc:01:51:f3:21:4f:5f:ee:68: 07:f6:c6:06:ee:dc:71:c1:c8:a5:a8:40:82:9d:f8: 82:51:8b:b6:c2:19:a8:fd:12:d0:2f:20:8b:24:9a: 17:bb:46:c5:4b:c5:ca:4a:7c:7e:c6:f8:13:c1:0b: fe:78:49:63:be:41:dc:9a:7a:e7:6b:2d:41:3d:70: c2:fe:6e:2d:c9:84:a7:1e:b0:15:d6:00:c7:1b:da: 07:31:7c:b6:54:25:69:60:7b:e2:48:8d:c1:41:0b: 34:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:13:BD:C5:F0:1D:82:EA:DF:2B:A4:4E:AB:BE:87:EB:B8:41:C7:24 X509v3 Authority Key Identifier: keyid:8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a4:0f:68:b3:9b:0b:28:da:d4:4e:92:69:90:8a:c4:5b:10: 46:dd:a2:da:51:95:57:0d:2f:c0:7a:00:2e:37:78:8f:27:a7: f4:52:09:3f:7e:2a:d2:fa:d6:9b:90:e3:fa:be:17:32:3a:4e: 02:6d:88:79:58:87:99:cb:ad:2b:aa:19:c9:4f:9b:f7:c2:7d: 1c:34:f2:75:27:fd:4b:5a:83:c2:bf:ad:82:96:cb:99:6d:01: 03:1a:18:fe:f2:68:7c:6b:d0:1b:36:dc:a7:b7:7c:f2:47:a2: 31:52:e5:85:68:a6:26:3a:48:c7:8b:cf:3f:52:fa:74:11:a0: 48:6b:f4:04:6c:82:84:a7:bf:92:e7:73:0e:4c:87:1f:01:b2: 2c:76:27:59:9d:24:ba:73:fe:07:5c:c0:67:9c:db:88:0e:c4: 2c:8c:80:54:15:e3:64:35:9a:03:e6:0b:dc:71:dd:79:7f:e0: ce:7d:7a:01:9b:6d:95:4c:8f:17:a2:1e:c4:47:26:fa:67:f2: fd:b4:a4:9b:b2:d3:a2:8c:5d:b1:84:bb:a2:51:87:80:0a:99: 77:47:e3:99:fb:b0:60:57:b7:5f:19:87:d7:55:44:dc:2c:91: 90:29:40:7d:89:e1:1d:d5:43:1a:05:0d:1d:64:c9:c7:86:06: c9:4a:bd:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MDQ5RjExMC8GA1UEBRMoOEFCOTQ1ODJCMDJFQUE4M0EyODVGMUM5MUZDODU5QTBF MkMxMTM1MzAeFw0yNTA0MDUwNzE3NTRaFw0yNTA0MTIwNzE3NTRaMBgxFjAUBgNV BAMTDTY3ZjBkOTIyLTcyMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCujCISn9Sw3pHCxV4raIu1/rl16K0xiwzefMmH6YkXY3rDOhn/JM3QJE4Lo/4a ej0PMYFXHCfbzIZ55VzeNmImxhFR3kQz9y7n80370d00P0GUIw6xBxZQkMJxvnU0 5HO8r4rMCAtCX3NuS+zsRUb4q37lp92Pm/j69d8hodoGb6VO6umEvbWejCc6wUzT 1N65Ob3dPVRL63gOKNwBUfMhT1/uaAf2xgbu3HHByKWoQIKd+IJRi7bCGaj9EtAv IIskmhe7RsVLxcpKfH7G+BPBC/54SWO+QdyaeudrLUE9cML+bi3JhKcesBXWAMcb 2gcxfLZUJWlge+JIjcFBCzRnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+BO9xfAd gurfK6ROq76H67hBxyQwHwYDVR0jBBgwFoAUirlFgrAuqoOihfHJH8hZoOLBE1Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwNDlGL0MwNzRDNTFDRjhF NTExRUZCRUE1MjI3MUM0RjlBRTAyL2lybEZnckF1cW9PaWhmSEpIOGhab09MQkUx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaXJsRmdyQXVxb09paGZISkg4aFpvT0xCRTFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw NDlGL0MwNzRDNTFDRjhFNTExRUZCRUE1MjI3MUM0RjlBRTAyL2lybEZnckF1cW9P aWhmSEpIOGhab09MQkUxTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEukD2izmwso2tROkmmQisRbEEbdotpRlVcNL8B6AC43eI8np/RSCT9+ KtL61puQ4/q+FzI6TgJtiHlYh5nLrSuqGclPm/fCfRw08nUn/Utag8K/rYKWy5lt AQMaGP7yaHxr0Bs23Ke3fPJHojFS5YVopiY6SMeLzz9S+nQRoEhr9ARsgoSnv5Ln cw5Mhx8Bsix2J1mdJLpz/gdcwGec24gOxCyMgFQV42Q1mgPmC9xx3Xl/4M59egGb bZVMjxeiHsRHJvpn8v20pJuy06KMXbGEu6JRh4AKmXdH45n7sGBXt18Zh9dVRNws kZApQH2J4R3VQxoFDR1kyceGBslKvQc= -----END CERTIFICATE-----Generated at Sat Apr 5 19:24:47 2025 by rpki-client