$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft File: IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json) Hash identifier: KWXc1pC5chYJmJvrlFsxwQyKddH0AyK7PIdOvZdokEU= Subject key identifier: E3:34:27:77:6F:3B:37:C3:9B:33:04:FC:22:38:A7:21:5E:4C:4E:CB Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 1117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft Manifest number: 10EE Signing time: Fri 30 May 2025 17:29:14 +0000 Manifest this update: Fri 30 May 2025 17:29:13 +0000 Manifest next update: Fri 06 Jun 2025 17:29:13 +0000 Files and hashes: 1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: wciXCvz10nPFNASB7lCq2ijB3ib/XKl4D6fKB585oYc=) 2: 13D21C6EFEBA11ED9D83553FC4F9AE02.roa (hash: mPVwkbrmgIGFwgmxOu/KgFG11TMB51WhYaitUgpspRc=) 3: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: GKHRKfwk3bqrqOFGPvJ+kjY0NTnB33jXoiW8bXeNOjw=) 4: 6521A70C395411F0AF136459C4F9AE02.roa (hash: 4Idad4dFmk8KzOmK1O+klRuBqcKZ7Fg2fSUd52ueJnE=) 5: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: PDXFymAQeHbTCItIfy8LqqoHr3PVKA+eJZNU6voGL5A=) 6: 1856F8E8CCC411EFBDE7CF74C4F9AE02.roa (hash: 3ZvdvOYIsr/GLwsfHu77Tcpi6csxMwAyCAlksdMfA5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4375 (0x1117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: May 30 17:29:13 2025 GMT Not After : Jun 6 17:29:13 2025 GMT Subject: CN=6839eaea-f1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6b:02:58:3b:69:b9:b0:23:6c:8d:57:9c:fe: 38:55:be:e0:07:1c:d7:be:6b:85:a0:89:93:cb:b9: 9a:0c:ae:e7:ac:96:52:75:5f:9c:0f:4b:6b:35:5b: ec:83:f7:b0:bc:de:7b:1a:c5:79:bf:a4:e6:e9:f5: e0:c1:74:55:9a:86:01:22:34:f0:06:65:e1:16:98: 19:23:13:ab:c6:87:a7:bf:37:d0:85:e3:ab:b5:7f: b5:51:42:85:6c:ec:17:f6:74:cb:67:31:96:5f:b4: 70:e9:57:5c:56:c2:ea:45:bb:dc:f5:c0:67:3d:e2: e0:fa:3b:ae:83:eb:f2:77:a6:7c:0d:66:0f:89:b3: 80:6f:4e:06:8c:ea:54:27:58:4e:77:2f:df:68:ab: 7e:80:13:0e:6e:2a:c6:f7:78:a4:85:20:e5:e8:11: f4:d7:09:f4:ed:6d:09:a1:19:fb:c2:6d:12:1b:87: 60:7c:15:6b:ad:5d:05:13:35:cd:ab:19:f9:ee:67: c8:4e:13:b9:b9:8a:20:d6:10:4d:cc:96:50:e6:2d: 01:8f:4f:dd:6d:8f:f7:a9:2d:10:13:01:7e:84:39: 1d:f4:eb:0c:55:39:79:64:1c:8c:d4:a1:5c:ac:ff: f7:e0:23:cf:6b:de:5c:69:9f:c1:ae:f9:98:fc:34: 6f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:34:27:77:6F:3B:37:C3:9B:33:04:FC:22:38:A7:21:5E:4C:4E:CB X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ff:a3:c8:a1:78:f9:c1:2f:32:2c:c4:78:1c:90:39:50:b4: 72:35:9e:cb:38:39:72:b6:aa:87:03:33:18:29:11:86:20:b1: 04:f8:b3:15:74:23:d2:fb:49:32:d8:c7:c5:9c:f6:bf:3d:a2: b5:a3:02:db:33:46:c9:94:a7:41:64:eb:0d:55:eb:10:df:0a: d2:6c:0e:c0:df:ad:61:13:e0:a3:d7:c6:7a:31:56:a9:62:2d: 4f:29:f9:c4:c2:c2:ba:ce:bf:7d:bb:df:97:f8:7b:7e:5f:bc: 73:fb:16:2c:9b:ed:6c:c5:89:2d:65:80:65:b9:26:86:20:ef: bb:e4:ba:c2:2c:8d:69:38:a0:b3:69:52:e7:cd:f0:c1:b2:eb: 89:e3:7f:f8:71:a7:77:9b:c8:82:cf:7d:90:31:59:0b:bb:4b: e0:61:ae:87:b7:d8:23:e0:0e:92:8a:2e:74:90:d8:9e:9e:48: 53:da:c4:2e:1f:7d:b6:74:d3:92:4b:64:29:39:8b:23:f1:fa: a5:82:d0:2c:17:54:7c:bd:cf:e5:64:95:c8:3e:4e:1a:11:70: 96:29:49:75:ea:98:24:53:37:82:a0:6e:ba:37:b1:7c:5c:e7: 27:fc:07:8f:2c:88:72:96:89:9d:fd:10:cb:ea:cd:58:bd:34: 5c:57:f9:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICERcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjUwNTMwMTcyOTEzWhcNMjUwNjA2MTcyOTEzWjAYMRYwFAYD VQQDEw02ODM5ZWFlYS1mMWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWsCWDtpubAjbI1XnP44Vb7gBxzXvmuFoImTy7maDK7nrJZSdV+cD0trNVvs g/ewvN57GsV5v6Tm6fXgwXRVmoYBIjTwBmXhFpgZIxOrxoenvzfQheOrtX+1UUKF bOwX9nTLZzGWX7Rw6VdcVsLqRbvc9cBnPeLg+juug+vyd6Z8DWYPibOAb04GjOpU J1hOdy/faKt+gBMObirG93ikhSDl6BH01wn07W0JoRn7wm0SG4dgfBVrrV0FEzXN qxn57mfIThO5uYog1hBNzJZQ5i0Bj0/dbY/3qS0QEwF+hDkd9OsMVTl5ZByM1KFc rP/34CPPa95caZ/BrvmY/DRvswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOM0J3dv OzfDmzME/CI4pyFeTE7LMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdEQy8zNUY3OTg2NjFGMDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85 aEhPUjhzTHBabDVPN2h0MEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx/6PIoXj5wS8yLMR4HJA5ULRyNZ7LODlytqqHAzMYKRGGILEE+LMV dCPS+0ky2MfFnPa/PaK1owLbM0bJlKdBZOsNVesQ3wrSbA7A361hE+Cj18Z6MVap Yi1PKfnEwsK6zr99u9+X+Ht+X7xz+xYsm+1sxYktZYBluSaGIO+75LrCLI1pOKCz aVLnzfDBsuuJ43/4cad3m8iCz32QMVkLu0vgYa6Ht9gj4A6Sii50kNienkhT2sQu H322dNOSS2QpOYsj8fqlgtAsF1R8vc/lZJXIPk4aEXCWKUl16pgkUzeCoG66N7F8 XOcn/AePLIhylomd/RDL6s1YvTRcV/kQ -----END CERTIFICATE-----Generated at Sat May 31 15:31:50 2025 by rpki-client