$ rpki-client -vvf rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft File: IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft (raw, json) Hash identifier: Omly6LJwsx5Fi62dWKPREB3YTjMn8vyXcFuIjl2J9d4= Subject key identifier: 4F:CD:B9:B7:D7:62:F9:B9:E6:2D:2A:17:10:8A:18:39:8C:5F:C4:18 Authority key identifier: 20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17 Certificate issuer: /CN=A912905D/serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317 Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft Manifest number: 01B3 Signing time: Sat 31 May 2025 02:53:29 +0000 Manifest this update: Sat 31 May 2025 02:53:29 +0000 Manifest next update: Sat 07 Jun 2025 02:53:29 +0000 Files and hashes: 1: IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl (hash: 4uKHFOol1MX0+OK6hN/y6A6ee73w1RDa11XbM20xLV8=) 2: CE9A4D70D6EA11ED8F0C322EC4F9AE02.roa (hash: 4CwEmTha4EyNRaDNvqVWV7nGS4hmjE7Q73FoaaZV148=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912905D, serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317 Validity Not Before: May 31 02:53:29 2025 GMT Not After : Jun 7 02:53:29 2025 GMT Subject: CN=683a6f29-1c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:58:45:30:c6:9f:fd:d1:a7:c3:f1:21:16:9d: f8:d2:72:f0:c2:bb:8d:1e:d3:72:7d:e5:b6:e0:09: b8:21:9e:7f:6f:e9:1a:40:04:7d:5e:d8:7e:a3:92: e0:52:5b:ce:c5:4d:73:2e:a2:61:ad:2d:72:4e:05: 1e:33:36:05:34:4e:66:62:1f:f9:59:ef:c7:76:fe: 2a:a3:d1:09:6b:eb:35:d1:c5:b0:6c:fb:1a:da:3f: 77:60:cf:50:98:6d:8e:37:47:2c:3f:7c:c8:d8:9c: 7e:1e:5f:bb:bb:0c:d7:d7:ac:d4:7e:8a:47:5e:b5: 62:09:40:eb:79:b5:cd:9f:f7:53:15:3d:64:1d:e2: 05:4d:00:fa:d4:0a:e9:13:7a:81:b4:4f:6f:20:48: ac:33:a9:a5:87:c3:d9:3f:12:cd:8f:6a:4d:e0:f8: bd:9e:23:a2:b9:ac:80:42:03:32:5d:51:4a:de:d0: f7:4f:38:2c:fb:4f:6c:65:eb:58:c1:62:7d:4e:b2: 05:5f:b0:6b:0b:3a:fc:94:78:1f:32:da:a0:69:5a: 3e:94:7f:e9:1c:8b:20:a5:99:29:f9:0c:15:5b:06: 6c:84:6d:c4:45:36:37:ba:09:11:7d:13:04:30:c1: 21:d7:fe:22:7e:9b:c8:18:97:87:e3:09:4f:df:9b: 64:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CD:B9:B7:D7:62:F9:B9:E6:2D:2A:17:10:8A:18:39:8C:5F:C4:18 X509v3 Authority Key Identifier: keyid:20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:60:26:58:48:d1:44:53:fc:df:d5:0b:f0:b0:5a:1f:96:9d: bf:a9:37:ac:f6:f8:84:7a:a8:6a:8b:dd:d6:fa:8d:c6:9f:ca: ab:29:94:8e:9d:a2:23:13:16:d3:61:cc:57:d4:bf:0d:29:73: 89:d3:23:e4:97:f8:1e:0c:ba:76:3f:82:fa:2b:4c:97:c5:3f: 58:d5:3c:8f:26:81:5b:5f:68:b6:05:22:c9:8a:66:c4:de:56: 05:ce:2e:94:8b:63:81:0c:37:90:e6:70:8b:8a:b7:0d:83:62: 5f:27:af:ca:d2:55:99:e6:5e:01:e8:89:1b:00:18:cb:18:4f: 13:91:98:27:fa:31:8e:ab:bb:32:4d:2f:88:e0:4a:f6:d4:01: 87:c5:2e:20:4d:4c:cf:e5:05:60:c0:7f:d3:82:d0:bf:e9:37: 61:06:57:10:40:66:e7:24:2d:3d:1e:f0:ea:48:52:88:56:23: 81:ae:83:7d:90:82:46:93:ad:84:da:51:d7:13:a1:72:d3:99: 6e:d5:67:cb:cd:91:d3:6c:f0:df:b6:31:9e:31:c6:ff:63:00: 3e:73:ea:dc:9d:fc:36:16:3a:d9:c0:c2:ae:c8:ca:42:d4:21: b0:49:79:4d:6f:b2:00:93:98:3d:a0:0f:22:24:19:5b:21:c7: 09:b8:f1:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkwNUQxMTAvBgNVBAUTKDIwNDFBNTQ4MjE2RkYwMTQ4OTRCNzlDQzlGRDc3MzEx QkM3Q0EzMTcwHhcNMjUwNTMxMDI1MzI5WhcNMjUwNjA3MDI1MzI5WjAYMRYwFAYD VQQDEw02ODNhNmYyOS0xYzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11hFMMaf/dGnw/EhFp340nLwwruNHtNyfeW24Am4IZ5/b+kaQAR9Xth+o5Lg UlvOxU1zLqJhrS1yTgUeMzYFNE5mYh/5We/Hdv4qo9EJa+s10cWwbPsa2j93YM9Q mG2ON0csP3zI2Jx+Hl+7uwzX16zUfopHXrViCUDrebXNn/dTFT1kHeIFTQD61Arp E3qBtE9vIEisM6mlh8PZPxLNj2pN4Pi9niOiuayAQgMyXVFK3tD3Tzgs+09sZetY wWJ9TrIFX7BrCzr8lHgfMtqgaVo+lH/pHIsgpZkp+QwVWwZshG3ERTY3ugkRfRME MMEh1/4ifpvIGJeH4wlP35tkxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/NubfX Yvm55i0qFxCKGDmMX8QYMB8GA1UdIwQYMBaAFCBBpUghb/AUiUt5zJ/XcxG8fKMX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTA1RC8zNEJGOTkwOEFD M0QxMUVEQkQ0RDEzNUVDNEY5QUUwMi9JRUdsU0NGdjhCU0pTM25NbjlkekVieDhv eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lFR2xTQ0Z2OEJTSlMzbk1uOWR6RWJ4OG94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTA1RC8zNEJGOTkwOEFDM0QxMUVEQkQ0RDEzNUVDNEY5QUUwMi9JRUdsU0NGdjhC U0pTM25NbjlkekVieDhveGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUYCZYSNFEU/zf1QvwsFoflp2/qTes9viEeqhqi93W+o3Gn8qrKZSO naIjExbTYcxX1L8NKXOJ0yPkl/geDLp2P4L6K0yXxT9Y1TyPJoFbX2i2BSLJimbE 3lYFzi6Ui2OBDDeQ5nCLircNg2JfJ6/K0lWZ5l4B6IkbABjLGE8TkZgn+jGOq7sy TS+I4Er21AGHxS4gTUzP5QVgwH/TgtC/6TdhBlcQQGbnJC09HvDqSFKIViOBroN9 kIJGk62E2lHXE6Fy05lu1WfLzZHTbPDftjGeMcb/YwA+c+rcnfw2FjrZwMKuyMpC 1CGwSXlNb7IAk5g9oA8iJBlbIccJuPF8 -----END CERTIFICATE-----Generated at Sat May 31 15:04:30 2025 by rpki-client