$ rpki-client -vvf rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft File: irlFgrAuqoOihfHJH8hZoOLBE1M.mft (raw, json) Hash identifier: W0wS76oijTNcYSDBVv3bWJWnQBX4kzIa9gCW6dQ2Jq0= Subject key identifier: D3:1B:89:FF:88:C7:3D:F3:CE:1A:C1:41:05:A2:3D:AB:70:E5:8C:C1 Authority key identifier: 8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53 Certificate issuer: /CN=A911049F/serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft Manifest number: 3C Signing time: Tue 17 Jun 2025 06:27:12 +0000 Manifest this update: Tue 17 Jun 2025 06:27:12 +0000 Manifest next update: Tue 24 Jun 2025 06:27:12 +0000 Files and hashes: 1: irlFgrAuqoOihfHJH8hZoOLBE1M.crl (hash: JHxQ1KucSuinN0pMhbUF2KgEPzhE7dwSL1e/2CRi8Vk=) 2: 347B37060B7011F0BED04B49C4F9AE02.roa (hash: pQpuCZn5VYJdmwXjLqjs5m3xSfcDbn3JK2oThkiWP20=) 3: 0431DDEEF8E611EFB9269C71C4F9AE02.roa (hash: onFwvD3ByPLzXVJ67F8/gNczv45XsvNKrHEcWpbgNvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911049F, serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353 Validity Not Before: Jun 17 06:27:12 2025 GMT Not After : Jun 24 06:27:12 2025 GMT Subject: CN=68510ac0-16e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ed:2a:f1:f1:6b:5f:cf:d6:c3:51:07:e4:9f: e8:39:78:d2:f5:77:36:3f:2c:be:ea:6b:61:7e:39: 8a:57:3a:d3:79:54:d0:0f:8b:7b:76:0c:4b:f6:9a: 42:9e:0c:96:d5:84:45:74:f2:a2:e7:1f:bd:70:ed: c6:45:a7:76:93:bd:20:6b:95:1b:02:3a:5c:05:62: e0:15:f7:60:0c:3f:79:60:77:fd:5d:6b:b0:b3:93: 50:9b:20:46:73:89:90:ab:6e:47:c8:f9:5f:3b:39: d6:d1:41:3e:42:c5:27:77:58:cf:48:a9:99:a0:5a: 12:65:67:23:04:27:61:b3:fc:04:84:98:44:f5:d8: 1e:8f:bf:8d:61:71:8e:7d:4a:3a:da:88:94:fb:b9: f1:a7:62:2b:bb:0a:1f:b9:c4:09:0f:20:46:e9:6a: 55:2e:6e:d0:b5:de:b3:5a:32:e0:b0:39:fe:70:dc: 49:8c:5e:46:25:b5:1f:5d:a4:06:03:6a:9d:0e:71: a7:25:fd:99:03:8e:af:a0:89:90:59:4f:c3:c8:44: 4c:59:61:7b:4c:f9:80:3c:88:14:74:4a:9d:33:ee: da:51:17:35:3c:cb:a2:1b:81:1f:6e:52:9d:97:4d: 85:38:81:62:48:12:b0:fe:0a:f5:16:8f:11:04:fc: 9f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1B:89:FF:88:C7:3D:F3:CE:1A:C1:41:05:A2:3D:AB:70:E5:8C:C1 X509v3 Authority Key Identifier: keyid:8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:8b:9a:1c:d3:95:3f:60:b5:a4:65:34:de:8d:16:06:5b:ef: 5b:1f:79:8a:30:cb:5c:57:99:b8:2d:71:4f:4d:96:17:1b:0a: 99:64:e1:34:39:e5:b7:76:ab:5d:9c:91:84:5c:2b:f9:59:1c: 51:71:01:34:ca:48:d1:16:6a:32:ba:da:95:8e:13:e9:87:31: bf:65:00:87:3d:89:a3:62:28:36:9e:b2:00:e0:b6:58:7a:3d: 90:e1:65:cc:b8:19:27:1c:1c:99:be:a3:ae:29:8a:eb:74:f6: f6:71:09:86:07:76:84:da:36:8b:16:01:14:34:1c:92:40:4a: 20:74:81:31:22:75:f7:4a:75:ec:3c:5e:69:84:51:82:24:19: f6:6d:9a:56:c8:e8:6d:39:25:8a:94:a6:75:24:7b:d5:cd:54: 9c:7c:78:3e:01:60:97:ca:4f:ed:f4:8c:63:d5:5f:5d:5c:70: 88:33:dc:09:80:71:37:6b:e7:68:ce:e7:0d:19:c4:4e:17:a0: c6:d0:c5:72:bd:5c:11:74:39:29:15:4d:9a:05:d5:ee:5d:6e: 87:69:14:75:5a:4a:81:0b:97:7e:67:2e:c6:68:65:8a:6b:e0: 7c:2a:99:a2:3c:27:a3:55:5d:ab:cd:ac:94:db:8f:d5:b6:e2: 63:ac:73:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MDQ5RjExMC8GA1UEBRMoOEFCOTQ1ODJCMDJFQUE4M0EyODVGMUM5MUZDODU5QTBF MkMxMTM1MzAeFw0yNTA2MTcwNjI3MTJaFw0yNTA2MjQwNjI3MTJaMBgxFjAUBgNV BAMTDTY4NTEwYWMwLTE2ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD17Srx8Wtfz9bDUQfkn+g5eNL1dzY/LL7qa2F+OYpXOtN5VNAPi3t2DEv2mkKe DJbVhEV08qLnH71w7cZFp3aTvSBrlRsCOlwFYuAV92AMP3lgd/1da7Czk1CbIEZz iZCrbkfI+V87OdbRQT5CxSd3WM9IqZmgWhJlZyMEJ2Gz/ASEmET12B6Pv41hcY59 SjraiJT7ufGnYiu7Ch+5xAkPIEbpalUubtC13rNaMuCwOf5w3EmMXkYltR9dpAYD ap0Ocacl/ZkDjq+giZBZT8PIRExZYXtM+YA8iBR0Sp0z7tpRFzU8y6IbgR9uUp2X TYU4gWJIErD+CvUWjxEE/J9dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0xuJ/4jH PfPOGsFBBaI9q3DljMEwHwYDVR0jBBgwFoAUirlFgrAuqoOihfHJH8hZoOLBE1Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwNDlGL0MwNzRDNTFDRjhF NTExRUZCRUE1MjI3MUM0RjlBRTAyL2lybEZnckF1cW9PaWhmSEpIOGhab09MQkUx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaXJsRmdyQXVxb09paGZISkg4aFpvT0xCRTFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw NDlGL0MwNzRDNTFDRjhFNTExRUZCRUE1MjI3MUM0RjlBRTAyL2lybEZnckF1cW9P aWhmSEpIOGhab09MQkUxTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHeLmhzTlT9gtaRlNN6NFgZb71sfeYowy1xXmbgtcU9NlhcbCplk4TQ5 5bd2q12ckYRcK/lZHFFxATTKSNEWajK62pWOE+mHMb9lAIc9iaNiKDaesgDgtlh6 PZDhZcy4GSccHJm+o64piut09vZxCYYHdoTaNosWARQ0HJJASiB0gTEidfdKdew8 XmmEUYIkGfZtmlbI6G05JYqUpnUke9XNVJx8eD4BYJfKT+30jGPVX11ccIgz3AmA cTdr52jO5w0ZxE4XoMbQxXK9XBF0OSkVTZoF1e5dbodpFHVaSoELl35nLsZoZYpr 4HwqmaI8J6NVXavNrJTbj9W24mOsc4w= -----END CERTIFICATE-----Generated at Tue Jun 17 12:19:59 2025 by rpki-client