$ rpki-client -vvf rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft File: irlFgrAuqoOihfHJH8hZoOLBE1M.mft (raw, json) Hash identifier: UGXk5XfR5KczBSBHOTNgBIgGmuelnL5yp0Ncvom46nE= Subject key identifier: A1:D5:12:38:9D:49:3D:02:B2:4D:F9:3E:B5:15:9E:E3:EF:03:5A:2A Authority key identifier: 8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53 Certificate issuer: /CN=A911049F/serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft Manifest number: 22 Signing time: Fri 25 Apr 2025 06:52:32 +0000 Manifest this update: Fri 25 Apr 2025 06:52:32 +0000 Manifest next update: Fri 02 May 2025 06:52:32 +0000 Files and hashes: 1: irlFgrAuqoOihfHJH8hZoOLBE1M.crl (hash: P2IaltXwYqPf80Uhv4FOBR4LGDf0tdNd7waUJ/TBY8E=) 2: 347B37060B7011F0BED04B49C4F9AE02.roa (hash: pQpuCZn5VYJdmwXjLqjs5m3xSfcDbn3JK2oThkiWP20=) 3: 0431DDEEF8E611EFB9269C71C4F9AE02.roa (hash: onFwvD3ByPLzXVJ67F8/gNczv45XsvNKrHEcWpbgNvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911049F, serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353 Validity Not Before: Apr 25 06:52:32 2025 GMT Not After : May 2 06:52:32 2025 GMT Subject: CN=680b3130-e0cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5b:18:7d:fa:6e:fb:c7:fe:a9:cc:6e:eb:12: 6d:7a:13:ff:af:74:ea:9e:a7:32:80:c3:2f:d6:05: c2:0a:c4:12:a7:20:02:6c:e9:7e:f4:54:7a:5a:e4: 08:98:34:1f:36:cc:72:fb:3a:e5:47:07:17:8c:41: 17:44:40:46:fc:92:41:97:79:b3:67:86:bc:e0:69: 08:1c:88:65:37:43:8c:f5:2d:21:fa:3a:23:b3:c8: 9b:74:da:84:94:df:e6:e1:b0:c5:cc:06:d4:fc:5a: 78:c3:4c:3c:02:36:75:65:18:d0:58:87:ba:0b:a3: a7:10:32:09:a6:01:de:d8:a0:ee:c4:c3:32:16:8f: bf:8b:f6:74:8a:f3:e6:d3:4b:52:4e:b8:03:f9:d7: 7b:67:b8:59:6d:db:f7:ec:e7:80:e5:97:ac:e1:3c: c6:62:91:18:7c:7f:c2:88:b6:23:ef:80:48:54:67: 5e:e4:b9:e3:a3:23:27:9e:14:65:bf:ec:f9:c4:da: 10:68:a6:66:63:23:97:ce:f9:c2:d4:96:35:47:4c: ae:1b:9b:d8:29:78:7d:69:05:50:9c:14:aa:f2:05: aa:b1:a9:9f:42:bc:d1:13:be:b9:77:bd:fe:75:82: af:41:1d:a0:7f:c6:eb:e9:79:12:40:aa:3c:30:ec: fe:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D5:12:38:9D:49:3D:02:B2:4D:F9:3E:B5:15:9E:E3:EF:03:5A:2A X509v3 Authority Key Identifier: keyid:8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:df:b9:69:84:2e:28:6c:f2:d2:9e:44:13:e6:c1:29:ef:da: 32:89:80:0f:16:c4:7c:58:97:6b:f4:ba:fc:3c:90:b5:eb:87: d6:bf:6e:19:93:3a:f4:f6:69:6b:d3:2c:9d:57:1b:b3:0f:da: 38:23:cb:69:5e:97:30:c1:c2:0c:7b:8d:70:3a:68:fd:6d:fb: 5a:8d:40:eb:3e:55:f7:70:76:ab:8a:66:f5:b3:72:a5:f2:9f: 8c:e0:e5:5d:94:59:98:43:cb:8c:97:d5:08:e1:10:53:88:12: d0:68:ce:e7:de:5d:b1:b7:bf:dc:c1:d2:36:e2:ca:ef:ea:93: 14:22:a6:d6:aa:00:c3:ef:1a:85:98:13:51:50:ab:59:ba:36: f3:a8:3c:55:c9:0c:8c:36:91:bc:3e:bb:b0:e1:43:1c:5f:cb: e0:db:f4:57:fa:90:5b:95:3c:61:00:5c:c9:72:8a:cb:0c:62: ad:56:02:1d:69:cd:23:55:5e:22:18:96:01:aa:86:80:83:09: 9b:6f:79:53:e3:32:b0:55:bf:8a:a5:77:f9:ca:ae:e4:12:58: a7:c7:3d:27:1c:3f:f8:f7:1c:33:52:ee:4a:02:63:1c:2a:9e: 0e:47:d2:f1:f9:f7:c1:88:bf:0d:ad:66:5e:20:47:80:d4:b5: 16:9a:01:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MDQ5RjExMC8GA1UEBRMoOEFCOTQ1ODJCMDJFQUE4M0EyODVGMUM5MUZDODU5QTBF MkMxMTM1MzAeFw0yNTA0MjUwNjUyMzJaFw0yNTA1MDIwNjUyMzJaMBgxFjAUBgNV BAMTDTY4MGIzMTMwLWUwY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDWxh9+m77x/6pzG7rEm16E/+vdOqepzKAwy/WBcIKxBKnIAJs6X70VHpa5AiY NB82zHL7OuVHBxeMQRdEQEb8kkGXebNnhrzgaQgciGU3Q4z1LSH6OiOzyJt02oSU 3+bhsMXMBtT8WnjDTDwCNnVlGNBYh7oLo6cQMgmmAd7YoO7EwzIWj7+L9nSK8+bT S1JOuAP513tnuFlt2/fs54Dll6zhPMZikRh8f8KItiPvgEhUZ17kueOjIyeeFGW/ 7PnE2hBopmZjI5fO+cLUljVHTK4bm9gpeH1pBVCcFKryBaqxqZ9CvNETvrl3vf51 gq9BHaB/xuvpeRJAqjww7P5rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUodUSOJ1J PQKyTfk+tRWe4+8DWiowHwYDVR0jBBgwFoAUirlFgrAuqoOihfHJH8hZoOLBE1Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwNDlGL0MwNzRDNTFDRjhF NTExRUZCRUE1MjI3MUM0RjlBRTAyL2lybEZnckF1cW9PaWhmSEpIOGhab09MQkUx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaXJsRmdyQXVxb09paGZISkg4aFpvT0xCRTFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw NDlGL0MwNzRDNTFDRjhFNTExRUZCRUE1MjI3MUM0RjlBRTAyL2lybEZnckF1cW9P aWhmSEpIOGhab09MQkUxTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFLfuWmELihs8tKeRBPmwSnv2jKJgA8WxHxYl2v0uvw8kLXrh9a/bhmT OvT2aWvTLJ1XG7MP2jgjy2lelzDBwgx7jXA6aP1t+1qNQOs+VfdwdquKZvWzcqXy n4zg5V2UWZhDy4yX1QjhEFOIEtBozufeXbG3v9zB0jbiyu/qkxQiptaqAMPvGoWY E1FQq1m6NvOoPFXJDIw2kbw+u7DhQxxfy+Db9Ff6kFuVPGEAXMlyissMYq1WAh1p zSNVXiIYlgGqhoCDCZtveVPjMrBVv4qld/nKruQSWKfHPSccP/j3HDNS7koCYxwq ng5H0vH598GIvw2tZl4gR4DUtRaaAR0= -----END CERTIFICATE-----Generated at Sat Apr 26 12:25:52 2025 by rpki-client