$ rpki-client -vvf rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft File: irlFgrAuqoOihfHJH8hZoOLBE1M.mft (raw, json) Hash identifier: SA4qKRTCVTJpse9L0XhW9wDLXHjsNWVA+WnugIUoU7o= Subject key identifier: D8:37:04:49:0E:37:89:1C:91:A7:53:FD:D7:62:B6:B6:E4:AF:A2:67 Authority key identifier: 8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53 Certificate issuer: /CN=A911049F/serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft Manifest number: 33 Signing time: Sat 31 May 2025 07:15:01 +0000 Manifest this update: Sat 31 May 2025 07:15:00 +0000 Manifest next update: Sat 07 Jun 2025 07:15:00 +0000 Files and hashes: 1: irlFgrAuqoOihfHJH8hZoOLBE1M.crl (hash: clel2rIusP2t6tpZYyye7evaia0Et1pkpD2scIssMOY=) 2: 347B37060B7011F0BED04B49C4F9AE02.roa (hash: pQpuCZn5VYJdmwXjLqjs5m3xSfcDbn3JK2oThkiWP20=) 3: 0431DDEEF8E611EFB9269C71C4F9AE02.roa (hash: onFwvD3ByPLzXVJ67F8/gNczv45XsvNKrHEcWpbgNvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911049F, serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353 Validity Not Before: May 31 07:15:00 2025 GMT Not After : Jun 7 07:15:00 2025 GMT Subject: CN=683aac75-0f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:20:86:3b:ba:80:9e:8e:d3:92:b8:60:51:a5: af:56:37:a3:20:ad:5f:27:b9:7d:e3:2b:45:1d:f4: ad:ed:bf:e7:9b:0f:f8:24:6a:fd:a3:18:a8:6f:99: 7d:a1:87:69:26:2f:93:82:c3:21:99:cb:f3:7f:34: 14:93:e0:c1:73:10:cd:cb:a5:43:5b:8d:53:cf:51: 8a:25:16:01:7d:42:27:e8:1b:79:59:55:ed:0b:e6: 12:30:52:db:d9:b9:76:10:bb:98:42:dd:cf:24:d8: 55:e6:74:62:7f:a0:cc:9c:4b:77:0e:c4:31:f0:e7: b5:1d:fb:c9:7a:f3:3f:01:5d:4f:ef:91:34:b9:dd: ff:90:17:0d:4c:46:f0:dd:2a:bd:06:20:63:0b:d8: 16:6c:64:ea:ed:83:c6:3c:e0:e7:50:d3:0e:7d:f5: 74:e2:4d:e8:a5:11:e1:e4:b1:33:df:5a:c6:54:af: e1:b2:a2:a4:79:9e:34:ab:a9:d4:2d:1a:f4:1b:ef: 02:bf:a6:ab:e4:16:03:02:e0:5d:ac:ed:48:8b:e2: 72:0d:d6:76:1b:18:3c:6f:e1:08:ad:69:ea:89:2b: 95:0a:c8:61:e7:1c:19:20:ca:16:53:4a:f6:00:f8: aa:04:0d:0b:11:a1:e7:c9:80:44:89:b2:ef:24:c9: 9f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:37:04:49:0E:37:89:1C:91:A7:53:FD:D7:62:B6:B6:E4:AF:A2:67 X509v3 Authority Key Identifier: keyid:8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:bb:7a:ac:2e:c7:5a:b7:39:92:2a:f9:32:6a:2d:9a:32:d1: 57:8e:3a:84:bb:b0:75:52:3d:9c:ea:1c:47:19:ce:fd:a0:0b: 97:f2:95:f6:c6:03:93:0d:48:c8:c2:44:3b:f2:fb:a7:56:78: fb:46:3f:da:67:fb:59:8d:e3:94:cd:c3:ad:f6:c7:60:20:68: dc:a0:91:12:47:3d:d7:0e:d6:bc:19:d1:c7:08:e0:69:d1:98: a7:72:2f:33:99:f8:54:72:c6:df:4e:a2:ea:1d:9c:19:48:08: b0:5d:95:db:d3:bc:19:fa:5f:6f:1f:4c:13:3e:1e:ab:89:2b: 4d:81:9c:ed:fa:ab:97:72:99:27:d7:ec:ff:42:0b:00:6f:0a: ea:57:43:b9:8c:b5:f7:df:86:75:28:0b:d3:2d:25:c2:d1:78: 6b:32:52:50:6a:f5:0f:53:50:44:d1:6b:6a:2f:8c:23:fe:f3: e7:6a:2a:f2:3b:62:87:87:dd:f4:4c:e4:97:65:ce:27:48:6c: 4a:78:99:1b:ff:23:6f:b4:d9:44:24:b3:3b:0e:69:70:b4:6c: f1:c7:59:46:83:b6:55:dc:e4:fb:0d:09:3b:d7:a1:40:d5:07: a9:b1:c7:8d:5e:ac:52:e5:d4:d6:28:de:4c:86:23:af:ad:e0: 77:63:35:6e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MDQ5RjExMC8GA1UEBRMoOEFCOTQ1ODJCMDJFQUE4M0EyODVGMUM5MUZDODU5QTBF MkMxMTM1MzAeFw0yNTA1MzEwNzE1MDBaFw0yNTA2MDcwNzE1MDBaMBgxFjAUBgNV BAMTDTY4M2FhYzc1LTBmNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2IIY7uoCejtOSuGBRpa9WN6MgrV8nuX3jK0Ud9K3tv+ebD/gkav2jGKhvmX2h h2kmL5OCwyGZy/N/NBST4MFzEM3LpUNbjVPPUYolFgF9QifoG3lZVe0L5hIwUtvZ uXYQu5hC3c8k2FXmdGJ/oMycS3cOxDHw57Ud+8l68z8BXU/vkTS53f+QFw1MRvDd Kr0GIGML2BZsZOrtg8Y84OdQ0w599XTiTeilEeHksTPfWsZUr+GyoqR5njSrqdQt GvQb7wK/pqvkFgMC4F2s7UiL4nIN1nYbGDxv4QitaeqJK5UKyGHnHBkgyhZTSvYA +KoEDQsRoefJgESJsu8kyZ8VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2DcESQ43 iRyRp1P912K2tuSvomcwHwYDVR0jBBgwFoAUirlFgrAuqoOihfHJH8hZoOLBE1Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwNDlGL0MwNzRDNTFDRjhF NTExRUZCRUE1MjI3MUM0RjlBRTAyL2lybEZnckF1cW9PaWhmSEpIOGhab09MQkUx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaXJsRmdyQXVxb09paGZISkg4aFpvT0xCRTFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw NDlGL0MwNzRDNTFDRjhFNTExRUZCRUE1MjI3MUM0RjlBRTAyL2lybEZnckF1cW9P aWhmSEpIOGhab09MQkUxTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKW7eqwux1q3OZIq+TJqLZoy0VeOOoS7sHVSPZzqHEcZzv2gC5fylfbG A5MNSMjCRDvy+6dWePtGP9pn+1mN45TNw632x2AgaNygkRJHPdcO1rwZ0ccI4GnR mKdyLzOZ+FRyxt9OouodnBlICLBdldvTvBn6X28fTBM+HquJK02BnO36q5dymSfX 7P9CCwBvCupXQ7mMtfffhnUoC9MtJcLReGsyUlBq9Q9TUETRa2ovjCP+8+dqKvI7 YoeH3fRM5JdlzidIbEp4mRv/I2+02UQkszsOaXC0bPHHWUaDtlXc5PsNCTvXoUDV B6mxx41erFLl1NYo3kyGI6+t4HdjNW4= -----END CERTIFICATE-----Generated at Sat May 31 16:46:46 2025 by rpki-client