$ rpki-client -vvf rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft File: irlFgrAuqoOihfHJH8hZoOLBE1M.mft (raw, json) Hash identifier: 8cJ9R4X1U7blFhoMnYCFTuJQtEoo5aI1h0L7uqIfcMc= Subject key identifier: 93:6C:BF:34:CE:9A:4E:B7:0E:5C:61:49:01:C3:83:A7:AF:E3:D8:9B Authority key identifier: 8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53 Certificate issuer: /CN=A911049F/serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft Manifest number: 56 Signing time: Thu 07 Aug 2025 07:52:09 +0000 Manifest this update: Thu 07 Aug 2025 07:52:08 +0000 Manifest next update: Thu 14 Aug 2025 07:52:08 +0000 Files and hashes: 1: irlFgrAuqoOihfHJH8hZoOLBE1M.crl (hash: KxMUHEn3NdzZh1j4dlHtwo45Sj3xlkrbdFTGFJgZCyI=) 2: 347B37060B7011F0BED04B49C4F9AE02.roa (hash: pQpuCZn5VYJdmwXjLqjs5m3xSfcDbn3JK2oThkiWP20=) 3: 0431DDEEF8E611EFB9269C71C4F9AE02.roa (hash: onFwvD3ByPLzXVJ67F8/gNczv45XsvNKrHEcWpbgNvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911049F, serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353 Validity Not Before: Aug 7 07:52:08 2025 GMT Not After : Aug 14 07:52:08 2025 GMT Subject: CN=68945b29-67f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:35:77:1e:2b:11:02:a8:15:96:b9:c3:bd:10: 16:58:39:6b:35:d3:54:1d:49:22:71:98:5a:36:7f: de:3a:c6:92:b2:a3:e9:35:aa:a2:b4:22:a7:1c:a4: 2e:12:b4:1c:40:24:96:3e:92:49:f6:9f:8d:6d:a2: 90:94:e7:d8:83:58:dd:4b:30:1f:c5:5e:ea:6b:41: 46:ce:84:9c:9a:89:10:e1:7c:08:ee:ff:47:54:72: b3:e3:0f:65:d0:e0:c4:4e:c3:17:e4:1d:7d:48:76: 4e:a7:1c:f1:ac:79:91:95:a0:d8:ab:e5:e7:c9:f3: 39:93:44:b7:fb:d3:69:14:0d:08:21:f6:38:58:0a: 3c:76:2b:8c:51:98:ff:e4:89:be:3c:da:20:e2:5d: 77:8c:de:72:7a:2e:23:5c:f9:aa:6b:ec:75:7a:19: b4:c7:03:ae:07:79:0b:9e:dc:22:05:74:f5:92:ff: 01:9c:99:99:4f:50:ba:f6:3e:2b:43:b9:1f:9b:be: 19:af:18:82:84:a2:be:c3:46:73:ac:36:51:94:eb: 80:19:b3:49:d3:25:57:77:eb:b7:31:06:a5:68:be: a3:7c:cd:61:8b:93:40:b8:d5:39:43:d0:d3:1c:d6: c4:d6:18:31:a9:4f:20:ec:de:54:1c:a1:d1:0b:c8: 2d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:6C:BF:34:CE:9A:4E:B7:0E:5C:61:49:01:C3:83:A7:AF:E3:D8:9B X509v3 Authority Key Identifier: keyid:8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:27:46:13:fc:95:82:13:25:23:1d:2d:26:2c:c6:7a:d5:d9: fd:c5:c6:73:c5:11:19:db:73:7f:a8:c2:ab:fa:60:27:77:6c: 7c:3e:ff:57:00:3b:af:67:96:b6:2e:15:0c:85:08:5d:5f:e0: 9c:24:f4:44:f7:18:1d:ba:a7:3b:dd:b2:ae:fa:a2:b2:b1:55: f6:2e:fe:59:63:52:bc:98:b3:0c:19:69:6e:cb:b8:38:6d:cb: 6c:e2:d8:c5:54:33:cf:09:2d:d4:66:c8:bf:da:14:be:4b:3e: 4f:6b:ed:1d:2f:b8:80:d5:30:f2:98:86:28:dd:c8:b2:10:fa: 33:ea:01:8b:34:e6:c7:1e:eb:2e:c9:b6:11:bc:ce:9b:18:7b: 76:52:03:7b:13:a0:01:c1:f9:e8:2a:cc:09:b1:b8:19:38:05: a7:bc:05:ee:2a:12:b7:ea:65:b6:4a:9f:03:dd:0e:60:b7:07: 61:f1:ab:34:4a:0c:61:64:05:11:5f:75:9c:57:aa:f1:29:dd: 60:73:82:16:66:33:d4:a5:92:6f:5d:2e:74:a3:a2:9a:06:9a: d2:8c:3a:2d:54:78:0f:03:cc:51:f0:b7:f3:3a:e9:23:c6:40: 47:b9:a8:82:59:9c:85:22:c3:10:27:a2:3f:32:1e:bc:b6:a3: 14:80:02:55 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MDQ5RjExMC8GA1UEBRMoOEFCOTQ1ODJCMDJFQUE4M0EyODVGMUM5MUZDODU5QTBF MkMxMTM1MzAeFw0yNTA4MDcwNzUyMDhaFw0yNTA4MTQwNzUyMDhaMBgxFjAUBgNV BAMTDTY4OTQ1YjI5LTY3ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6NXceKxECqBWWucO9EBZYOWs101QdSSJxmFo2f946xpKyo+k1qqK0IqccpC4S tBxAJJY+kkn2n41topCU59iDWN1LMB/FXuprQUbOhJyaiRDhfAju/0dUcrPjD2XQ 4MROwxfkHX1Idk6nHPGseZGVoNir5efJ8zmTRLf702kUDQgh9jhYCjx2K4xRmP/k ib482iDiXXeM3nJ6LiNc+apr7HV6GbTHA64HeQue3CIFdPWS/wGcmZlPULr2PitD uR+bvhmvGIKEor7DRnOsNlGU64AZs0nTJVd367cxBqVovqN8zWGLk0C41TlD0NMc 1sTWGDGpTyDs3lQcodELyC2nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUk2y/NM6a TrcOXGFJAcODp6/j2JswHwYDVR0jBBgwFoAUirlFgrAuqoOihfHJH8hZoOLBE1Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwNDlGL0MwNzRDNTFDRjhF NTExRUZCRUE1MjI3MUM0RjlBRTAyL2lybEZnckF1cW9PaWhmSEpIOGhab09MQkUx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaXJsRmdyQXVxb09paGZISkg4aFpvT0xCRTFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw NDlGL0MwNzRDNTFDRjhFNTExRUZCRUE1MjI3MUM0RjlBRTAyL2lybEZnckF1cW9P aWhmSEpIOGhab09MQkUxTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKsnRhP8lYITJSMdLSYsxnrV2f3FxnPFERnbc3+owqv6YCd3bHw+/1cA O69nlrYuFQyFCF1f4Jwk9ET3GB26pzvdsq76orKxVfYu/lljUryYswwZaW7LuDht y2zi2MVUM88JLdRmyL/aFL5LPk9r7R0vuIDVMPKYhijdyLIQ+jPqAYs05sce6y7J thG8zpsYe3ZSA3sToAHB+egqzAmxuBk4Bae8Be4qErfqZbZKnwPdDmC3B2HxqzRK DGFkBRFfdZxXqvEp3WBzghZmM9Slkm9dLnSjopoGmtKMOi1UeA8DzFHwt/M66SPG QEe5qIJZnIUiwxAnoj8yHry2oxSAAlU= -----END CERTIFICATE-----Generated at Fri Aug 8 20:42:32 2025 by rpki-client