$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft File: IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft (raw, json) Hash identifier: gEv5xYfAPWyB4YBCZYZOAc+0svy5r3mpaLQFKGtEloQ= Subject key identifier: 58:6C:BA:E4:24:1B:BB:CC:7B:5B:F7:F2:9D:D4:09:DA:F8:BA:4E:92 Authority key identifier: 22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 Certificate issuer: /CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft Manifest number: 08B3 Signing time: Mon 02 Jun 2025 21:17:49 +0000 Manifest this update: Mon 02 Jun 2025 21:17:49 +0000 Manifest next update: Mon 09 Jun 2025 21:17:49 +0000 Files and hashes: 1: IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl (hash: yUgtrG/GF+Gy+DpzRohU1NNF/3ldFXY/3wB2wiV2c8k=) 2: 79057E1CEB1011EEB9CE4F19C4F9AE02.roa (hash: 8/axDs5qsmDACTYAZ5Y63PJlpZ3Ia2a5BRXxYdLZ9QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4, serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Validity Not Before: Jun 2 21:17:49 2025 GMT Not After : Jun 9 21:17:49 2025 GMT Subject: CN=683e14fd-2383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:95:3f:6a:d5:ba:86:27:63:e2:5d:ea:35:16: 4f:4c:94:1a:1c:9a:89:8d:8d:12:2e:23:47:73:e9: 05:9f:da:ac:93:a1:5f:13:93:94:f5:1d:47:9c:0e: 06:f6:aa:e0:9a:6b:7f:36:4f:28:09:96:20:b0:7a: 96:1d:98:04:96:44:2a:0e:cd:73:3a:35:89:2f:36: 54:ed:ac:68:d2:93:00:50:d9:da:90:31:7b:19:62: 2b:99:00:64:f7:5d:65:c7:a1:4e:d0:8c:fb:c8:bd: 89:7a:8e:bf:65:5b:b3:8e:e0:84:65:1b:61:ad:7e: 7f:49:27:70:4c:4e:66:3b:67:d6:04:ec:30:bc:9c: 41:a9:9d:b5:bc:6a:b2:b1:6b:62:fc:b4:37:07:b9: 65:2c:f3:09:5d:72:18:2c:1a:6b:79:bf:0c:b3:69: 9d:62:bc:8d:8b:dc:86:30:ee:8b:5c:d9:31:3f:22: 7d:59:65:4f:0c:d9:9e:97:5e:2c:63:ab:4e:49:38: 72:27:50:1a:9c:a7:93:87:8f:cc:50:19:11:51:33: 77:48:41:8d:cd:bd:b8:ca:aa:0c:62:ae:05:69:29: 3f:1f:b1:e6:fc:c6:8f:77:c7:18:a6:68:c0:62:6f: d3:9e:77:a4:cb:e7:94:7e:06:0d:f4:16:59:52:00: 16:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6C:BA:E4:24:1B:BB:CC:7B:5B:F7:F2:9D:D4:09:DA:F8:BA:4E:92 X509v3 Authority Key Identifier: keyid:22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:17:5f:98:2c:f2:a0:f6:69:b6:99:70:a7:0e:1c:13:08:4b: 13:bb:a9:1a:10:f4:25:c5:1b:26:f1:82:e9:0a:d7:31:2b:67: f8:66:8a:f0:d4:c9:26:31:0e:4e:b5:67:a4:8a:1d:76:0d:64: 77:db:02:5a:a4:32:ab:fd:8c:53:2a:dd:71:14:ac:08:a2:26: 51:f6:7a:cb:fb:da:8b:f3:f6:c2:71:47:76:10:b7:49:5b:f7: 94:99:96:df:47:ac:08:51:f0:bf:8d:3a:61:0f:d1:f3:f6:b6: c9:20:0a:9b:eb:52:24:a1:8c:fb:3d:97:ea:70:a7:3b:b0:de: 37:2c:f3:96:a1:a2:f1:cb:2f:73:eb:24:22:ef:6c:4e:10:60: 82:6d:4c:58:6d:17:4a:c5:05:9b:40:17:85:84:50:9d:1b:ef: 7b:d5:6c:32:1f:5a:c3:57:e6:39:f9:ee:ab:61:eb:41:08:50: 73:c1:58:b4:9f:fb:97:5f:8f:61:ad:2c:f8:4d:ac:34:3a:de: 4d:7f:4d:76:06:bd:be:7e:3f:7f:c4:9f:02:15:4f:8d:fb:8d: 5f:99:f8:04:b6:0c:81:37:7b:cf:06:32:80:a0:3f:07:da:90: 45:9f:7f:42:24:ef:1f:d8:0b:bc:3a:2d:b0:c0:7e:dc:53:5f: b9:10:74:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RjQxMTAvBgNVBAUTKDIyQjRBOUFBQTk4MkFCQ0IzOUY5Nzg5ODZCQ0I2Nzcw QjYwMkMxQTQwHhcNMjUwNjAyMjExNzQ5WhcNMjUwNjA5MjExNzQ5WjAYMRYwFAYD VQQDEw02ODNlMTRmZC0yMzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25U/atW6hidj4l3qNRZPTJQaHJqJjY0SLiNHc+kFn9qsk6FfE5OU9R1HnA4G 9qrgmmt/Nk8oCZYgsHqWHZgElkQqDs1zOjWJLzZU7axo0pMAUNnakDF7GWIrmQBk 911lx6FO0Iz7yL2Jeo6/ZVuzjuCEZRthrX5/SSdwTE5mO2fWBOwwvJxBqZ21vGqy sWti/LQ3B7llLPMJXXIYLBpreb8Ms2mdYryNi9yGMO6LXNkxPyJ9WWVPDNmel14s Y6tOSThyJ1AanKeTh4/MUBkRUTN3SEGNzb24yqoMYq4FaSk/H7Hm/MaPd8cYpmjA Ym/Tnneky+eUfgYN9BZZUgAWdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhsuuQk G7vMe1v38p3UCdr4uk6SMB8GA1UdIwQYMBaAFCK0qaqpgqvLOfl4mGvLZ3C2AsGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2 OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9JclNwcXFtQ3E4czUtWGlZYTh0bmNMWUN3 YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyU3BxcW1DcThzNS1YaVlhOHRuY0xZQ3dhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlGNC8zRDZCQTU3NEY2OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9JclNwcXFtQ3E4 czUtWGlZYTh0bmNMWUN3YVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgF1+YLPKg9mm2mXCnDhwTCEsTu6kaEPQlxRsm8YLpCtcxK2f4Zorw 1MkmMQ5OtWekih12DWR32wJapDKr/YxTKt1xFKwIoiZR9nrL+9qL8/bCcUd2ELdJ W/eUmZbfR6wIUfC/jTphD9Hz9rbJIAqb61IkoYz7PZfqcKc7sN43LPOWoaLxyy9z 6yQi72xOEGCCbUxYbRdKxQWbQBeFhFCdG+971WwyH1rDV+Y5+e6rYetBCFBzwVi0 n/uXX49hrSz4Taw0Ot5Nf012Br2+fj9/xJ8CFU+N+41fmfgEtgyBN3vPBjKAoD8H 2pBFn39CJO8f2Au8Oi2wwH7cU1+5EHRG -----END CERTIFICATE-----Generated at Tue Jun 3 23:49:03 2025 by rpki-client