$ rpki-client -vvf rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft File: IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft (raw, json) Hash identifier: +cp5mc1Bk3RfQAtcHDdoivqTYHhRrL1HK/6QMfhYhok= Subject key identifier: FE:B3:78:D6:66:43:55:1F:74:FB:15:C7:D2:69:1A:6B:9B:30:ED:4E Authority key identifier: 20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17 Certificate issuer: /CN=A912905D/serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft Manifest number: 01D1 Signing time: Wed 23 Jul 2025 03:07:45 +0000 Manifest this update: Wed 23 Jul 2025 03:07:44 +0000 Manifest next update: Wed 30 Jul 2025 03:07:44 +0000 Files and hashes: 1: IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl (hash: IaWSgAVh5V1EBfXjcjrgPiHC551OMY1EKVUO2JAUMJE=) 2: CE9A4D70D6EA11ED8F0C322EC4F9AE02.roa (hash: d/kODO73Q/KifMio6xDH+g4+aS9A4hPWbQYW6hwYowo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 03:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912905D, serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317 Validity Not Before: Jul 23 03:07:44 2025 GMT Not After : Jul 30 03:07:44 2025 GMT Subject: CN=68805201-e9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3c:7f:0b:eb:4d:a5:55:db:1e:5e:8b:5d:e1: ef:cd:54:4a:b1:e2:96:53:23:ec:ca:d4:db:57:cb: 4d:a0:e3:97:39:89:e6:98:23:c3:0b:20:f6:0f:c1: 87:9b:eb:61:dd:27:7e:a8:ef:02:95:82:a2:f4:90: cc:0a:69:e0:a1:dd:54:d4:e5:4e:16:5d:e1:06:6c: 43:94:2c:3c:ed:88:1f:f5:19:8e:17:52:ae:b0:5f: 5a:ec:38:f2:2e:94:6c:0f:54:b5:40:cc:1f:74:47: 9b:cc:a7:80:c3:38:89:51:19:66:a1:9c:dc:db:42: 2b:b1:af:44:f9:fa:d8:5b:71:c8:76:5b:8c:9b:69: 73:e8:eb:75:e6:18:ec:b2:6e:c7:f8:83:30:4f:26: 9c:45:ff:1b:ad:76:78:cd:5a:c5:8f:c3:91:4e:74: 20:9a:ef:07:4b:c0:97:ce:ae:24:c4:6d:f3:59:e5: 90:46:42:ae:63:02:d3:cf:36:66:89:ac:80:ed:f2: 9c:b0:20:96:b6:5d:47:08:14:95:39:d7:e7:24:cf: 88:89:9e:29:14:7a:b6:a0:df:c0:2f:3d:05:9e:c8: 03:c9:5a:ff:d1:f9:63:d2:2e:95:a9:ad:5a:86:9e: 64:60:bf:00:3a:59:84:d5:d4:39:93:53:d4:fd:08: 15:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B3:78:D6:66:43:55:1F:74:FB:15:C7:D2:69:1A:6B:9B:30:ED:4E X509v3 Authority Key Identifier: keyid:20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:f8:63:2b:05:6b:bc:0e:0f:57:f0:6f:ba:a0:c6:cd:ad:5b: 32:37:04:99:20:52:19:f1:e5:f3:5c:54:dd:dd:85:a0:21:7f: 6d:6f:3b:e4:a8:7d:88:1d:1c:b4:9e:2c:02:0e:85:cf:c6:d2: f9:1d:c4:9a:e7:fe:4e:26:71:d6:3b:6c:f1:a9:c0:64:33:40: 35:5b:6d:05:f7:a1:c5:93:2c:08:bf:44:c1:1b:40:7d:6e:13: 64:1c:a4:86:62:68:ec:28:78:bd:e8:39:f2:ad:da:76:ef:a2: 83:0d:7f:11:6f:a3:e6:68:d4:b2:7b:c4:65:c4:41:67:4c:a3: 64:70:ac:5c:52:b8:02:a5:29:b8:72:9e:1b:6b:9f:53:ef:51: 7b:48:1d:ae:83:63:0e:f4:6a:26:e5:4d:ad:e2:18:e8:d1:0a: be:19:07:5e:85:e9:e8:53:1b:f7:b1:1b:29:75:d8:20:b9:f5: 2e:cb:6e:4a:0c:06:2d:f5:54:0c:38:f1:1a:97:a6:1d:dd:30: 8b:da:e3:be:61:32:9e:1b:c3:30:c6:d4:01:80:1f:0d:a3:d9: ee:81:57:98:fc:82:f0:66:30:b1:fb:0f:c8:70:f0:f9:5c:cd: c9:88:7e:bc:68:c5:4a:24:d6:18:f3:da:6a:3c:e8:c0:0c:8f: 9b:5e:65:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkwNUQxMTAvBgNVBAUTKDIwNDFBNTQ4MjE2RkYwMTQ4OTRCNzlDQzlGRDc3MzEx QkM3Q0EzMTcwHhcNMjUwNzIzMDMwNzQ0WhcNMjUwNzMwMDMwNzQ0WjAYMRYwFAYD VQQDEw02ODgwNTIwMS1lOWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDx/C+tNpVXbHl6LXeHvzVRKseKWUyPsytTbV8tNoOOXOYnmmCPDCyD2D8GH m+th3Sd+qO8ClYKi9JDMCmngod1U1OVOFl3hBmxDlCw87Ygf9RmOF1KusF9a7Djy LpRsD1S1QMwfdEebzKeAwziJURlmoZzc20Irsa9E+frYW3HIdluMm2lz6Ot15hjs sm7H+IMwTyacRf8brXZ4zVrFj8ORTnQgmu8HS8CXzq4kxG3zWeWQRkKuYwLTzzZm iayA7fKcsCCWtl1HCBSVOdfnJM+IiZ4pFHq2oN/ALz0FnsgDyVr/0flj0i6Vqa1a hp5kYL8AOlmE1dQ5k1PU/QgVHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6zeNZm Q1UfdPsVx9JpGmubMO1OMB8GA1UdIwQYMBaAFCBBpUghb/AUiUt5zJ/XcxG8fKMX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTA1RC8zNEJGOTkwOEFD M0QxMUVEQkQ0RDEzNUVDNEY5QUUwMi9JRUdsU0NGdjhCU0pTM25NbjlkekVieDhv eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lFR2xTQ0Z2OEJTSlMzbk1uOWR6RWJ4OG94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTA1RC8zNEJGOTkwOEFDM0QxMUVEQkQ0RDEzNUVDNEY5QUUwMi9JRUdsU0NGdjhC U0pTM25NbjlkekVieDhveGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC+GMrBWu8Dg9X8G+6oMbNrVsyNwSZIFIZ8eXzXFTd3YWgIX9tbzvk qH2IHRy0niwCDoXPxtL5HcSa5/5OJnHWO2zxqcBkM0A1W20F96HFkywIv0TBG0B9 bhNkHKSGYmjsKHi96Dnyrdp276KDDX8Rb6PmaNSye8RlxEFnTKNkcKxcUrgCpSm4 cp4ba59T71F7SB2ug2MO9Gom5U2t4hjo0Qq+GQdehenoUxv3sRspddggufUuy25K DAYt9VQMOPEal6Yd3TCL2uO+YTKeG8MwxtQBgB8No9nugVeY/ILwZjCx+w/IcPD5 XM3JiH68aMVKJNYY89pqPOjADI+bXmWW -----END CERTIFICATE-----Generated at Wed Jul 23 08:06:32 2025 by rpki-client