$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft File: IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft (raw, json) Hash identifier: XqOqSrveJMoEqCKQuzTDddgABuKeGidHM2e8Vm2XYzE= Subject key identifier: AB:01:DD:46:12:96:67:06:F1:F1:8A:1C:01:F9:AA:A3:C6:19:3B:6F Authority key identifier: 22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 Certificate issuer: /CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft Manifest number: 087B Signing time: Sun 06 Apr 2025 20:51:57 +0000 Manifest this update: Sun 06 Apr 2025 20:51:56 +0000 Manifest next update: Sun 13 Apr 2025 20:51:56 +0000 Files and hashes: 1: IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl (hash: Mdpktz4pTYCFGPg5CzeE68C1IxIqhdOuh4U9Gcx2n4M=) 2: 79057E1CEB1011EEB9CE4F19C4F9AE02.roa (hash: 8/axDs5qsmDACTYAZ5Y63PJlpZ3Ia2a5BRXxYdLZ9QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4 Validity Not Before: Apr 6 20:51:56 2025 GMT Not After : Apr 13 20:51:56 2025 GMT Subject: CN=67f2e96c-ee22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b0:ea:8e:49:e5:0f:95:d7:fe:41:66:2d:0d: c1:f7:b9:cc:18:31:c0:53:7a:5f:b5:8e:8a:f3:7d: 28:77:8e:d8:47:2a:2c:94:20:1d:9f:ee:b7:37:ca: 0b:1d:ab:81:23:ca:81:f2:7b:4e:48:a3:4c:5d:f1: ca:9b:c3:ee:d3:19:1f:de:db:fb:3e:07:e2:0e:90: f0:01:e9:b9:4d:8f:c0:04:81:e5:61:6f:dc:0e:f0: b7:86:c3:39:5d:55:5e:80:66:b3:06:55:2f:c8:29: 14:25:5a:05:03:8d:64:f2:c1:12:fa:a9:06:e7:61: 8f:27:87:94:8d:2f:62:21:35:e9:47:10:59:70:45: da:d0:0d:5c:84:f4:01:a1:bf:99:4e:97:20:31:76: 04:0c:fb:e1:e4:6c:b3:b0:c9:7b:fe:eb:d9:80:ff: 64:63:36:f8:83:28:b3:38:e1:d1:56:28:f6:c0:24: 2d:19:a2:dc:86:f1:ee:16:9d:81:00:72:fb:82:10: 9b:27:6d:6c:45:00:fd:d6:ae:be:e4:aa:19:81:bc: 31:a7:c8:44:66:50:b2:73:fe:58:ff:cb:a5:f7:77: 64:2a:af:7b:02:e0:96:b5:0b:42:32:5a:2e:2f:83: 8b:72:7f:fe:d6:bb:c2:60:9c:ab:a4:69:15:fe:cb: 6c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:01:DD:46:12:96:67:06:F1:F1:8A:1C:01:F9:AA:A3:C6:19:3B:6F X509v3 Authority Key Identifier: keyid:22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c1:33:9e:f5:36:de:01:1e:9c:82:49:b9:91:9b:4d:3f:95: f6:e0:f7:39:92:73:69:c3:f2:12:79:ef:c3:3c:87:b3:51:d2: 7e:a9:2c:ce:4b:4c:00:83:ce:99:b7:e6:8b:c2:ca:57:f1:c8: 0e:55:60:ff:3e:f4:e9:58:aa:c9:a8:71:01:e7:17:6e:81:2e: 5b:8a:a3:4e:33:8f:66:39:db:3e:ee:eb:b6:ed:8d:36:45:f4: 59:dd:03:89:4e:e5:20:e2:f6:af:62:66:36:98:cd:96:d4:ff: bd:9b:90:9b:4e:d5:59:04:b4:79:15:dd:dd:c3:5a:d1:2e:e3: 80:f7:93:c3:75:aa:78:e2:fb:9e:24:9b:63:fd:a0:1d:c3:58: 29:d8:e4:89:c7:41:52:fb:c9:12:6c:a9:25:ee:be:07:8a:d3: 66:1f:e9:51:15:da:9c:b5:91:3d:8a:25:dd:8f:1a:98:1a:38: 7c:60:a3:8b:fe:19:dc:e4:2b:97:82:83:87:7b:a2:02:8b:b1: 66:98:1f:22:8a:7e:e5:2d:8e:74:d7:c0:4d:9f:b8:5e:fd:4a: 5c:d7:a9:e2:49:b4:f4:80:74:c0:ca:61:98:40:12:3b:52:b2: c3:34:a7:ca:94:6d:37:3e:bf:1c:16:eb:6a:e0:30:e5:7d:1f: 82:91:a0:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RjQxMTAvBgNVBAUTKDIyQjRBOUFBQTk4MkFCQ0IzOUY5Nzg5ODZCQ0I2Nzcw QjYwMkMxQTQwHhcNMjUwNDA2MjA1MTU2WhcNMjUwNDEzMjA1MTU2WjAYMRYwFAYD VQQDEw02N2YyZTk2Yy1lZTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7DqjknlD5XX/kFmLQ3B97nMGDHAU3pftY6K830od47YRyoslCAdn+63N8oL HauBI8qB8ntOSKNMXfHKm8Pu0xkf3tv7PgfiDpDwAem5TY/ABIHlYW/cDvC3hsM5 XVVegGazBlUvyCkUJVoFA41k8sES+qkG52GPJ4eUjS9iITXpRxBZcEXa0A1chPQB ob+ZTpcgMXYEDPvh5GyzsMl7/uvZgP9kYzb4gyizOOHRVij2wCQtGaLchvHuFp2B AHL7ghCbJ21sRQD91q6+5KoZgbwxp8hEZlCyc/5Y/8ul93dkKq97AuCWtQtCMlou L4OLcn/+1rvCYJyrpGkV/stsowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsB3UYS lmcG8fGKHAH5qqPGGTtvMB8GA1UdIwQYMBaAFCK0qaqpgqvLOfl4mGvLZ3C2AsGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2 OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9JclNwcXFtQ3E4czUtWGlZYTh0bmNMWUN3 YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyU3BxcW1DcThzNS1YaVlhOHRuY0xZQ3dhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlGNC8zRDZCQTU3NEY2OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9JclNwcXFtQ3E4 czUtWGlZYTh0bmNMWUN3YVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAswTOe9TbeAR6cgkm5kZtNP5X24Pc5knNpw/ISee/DPIezUdJ+qSzO S0wAg86Zt+aLwspX8cgOVWD/PvTpWKrJqHEB5xdugS5biqNOM49mOds+7uu27Y02 RfRZ3QOJTuUg4vavYmY2mM2W1P+9m5CbTtVZBLR5Fd3dw1rRLuOA95PDdap44vue JJtj/aAdw1gp2OSJx0FS+8kSbKkl7r4HitNmH+lRFdqctZE9iiXdjxqYGjh8YKOL /hnc5CuXgoOHe6ICi7FmmB8iin7lLY5018BNn7he/Upc16niSbT0gHTAymGYQBI7 UrLDNKfKlG03Pr8cFutq4DDlfR+CkaBg -----END CERTIFICATE-----Generated at Mon Apr 7 00:12:00 2025 by rpki-client