$ rpki-client -vvf rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft File: IRcCLfYdpCG55OG7hIPYXkmCv5E.mft (raw, json) Hash identifier: bmcCkegTMf4RZRmPSyV5hX8eHFhJymu58OuYnaz7QOc= Subject key identifier: B5:BD:20:CB:A5:6B:91:99:1C:C1:30:93:56:3B:D0:8A:B5:4B:AD:97 Authority key identifier: 21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 Certificate issuer: /CN=A9169382/serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Certificate serial: 0505 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft Manifest number: 04FF Signing time: Tue 05 Aug 2025 00:07:23 +0000 Manifest this update: Tue 05 Aug 2025 00:07:22 +0000 Manifest next update: Tue 12 Aug 2025 00:07:22 +0000 Files and hashes: 1: IRcCLfYdpCG55OG7hIPYXkmCv5E.crl (hash: KEPAVYR80YFLCkbmDh6YNODJ7oITaRGD1sqq9PZmKmo=) 2: E41BF8841CDC11ECBA794120C4F9AE02.roa (hash: U/+wPqrKrJC011IcABNzpIvFcS1/P1nom9ZdkuvcUss=) 3: B5D70D9ACE3311EFA7B9B640C4F9AE02.roa (hash: eFUfIoic8XWxnlHcYYzBMeRdJXcAiXS5ahGJK7+zPi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 00:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1285 (0x505) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169382, serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Validity Not Before: Aug 5 00:07:22 2025 GMT Not After : Aug 12 00:07:22 2025 GMT Subject: CN=68914b3b-f89e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8d:75:d7:a4:6d:b2:d1:73:98:2a:87:78:e9: 26:e7:21:b6:f7:07:d2:55:74:16:a5:03:d7:39:ca: 81:41:39:4a:9e:29:b5:34:05:b6:97:e6:31:dc:1b: 3b:b6:da:7b:8e:5a:e9:ac:9e:c7:9f:86:06:da:1b: 88:d7:c4:c4:cc:6d:69:ba:93:83:c2:be:aa:69:f3: 7b:7a:73:c3:8d:e1:c2:11:1d:a7:81:77:03:b5:9e: 19:13:c1:ba:b5:fc:5a:d8:90:46:a4:81:b2:a1:39: 7d:99:27:fa:f9:b0:0b:5d:1f:be:32:01:8b:39:f5: a0:c0:cd:8a:c0:c5:bb:c1:ee:f0:83:d5:28:4e:cd: 78:c8:20:0d:c8:97:da:b7:f5:0c:32:94:9c:a4:f8: 65:34:b6:4d:49:b4:8f:31:a3:a8:7c:98:e5:2b:88: ee:14:28:b7:b1:f6:62:69:6f:84:46:a2:7a:f3:d2: 67:d4:0c:69:c0:ef:63:2b:75:a1:f9:f2:84:6a:f8: 2b:ce:d4:60:0d:95:50:f9:09:1d:27:db:38:17:ae: cd:18:8c:74:19:c4:5b:d2:50:80:3e:7a:3b:fc:3d: a8:b8:bc:fb:f3:67:1c:2d:fd:1e:24:b7:df:2c:a5: 2a:3e:cb:4a:41:bf:e3:12:23:50:00:72:3e:f7:f1: 11:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BD:20:CB:A5:6B:91:99:1C:C1:30:93:56:3B:D0:8A:B5:4B:AD:97 X509v3 Authority Key Identifier: keyid:21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:68:f0:70:66:75:78:5d:e0:3a:1e:b5:76:76:5b:18:33:2a: 2f:51:99:58:1a:a4:96:46:87:7f:9a:81:b0:d1:4b:41:75:37: 13:de:3b:7f:80:fb:30:80:db:05:e9:ce:64:04:9d:bf:17:31: 84:6f:30:e0:0d:2d:d3:29:fd:0a:1f:e9:a6:b5:4a:65:19:c2: 6f:8c:9c:cc:36:57:d7:85:15:4c:75:7e:2e:0e:22:84:99:43: e7:c2:09:eb:65:4a:11:ff:01:2d:82:98:19:9c:dc:2f:62:3e: c2:e8:02:5a:8e:c6:77:da:5b:e8:51:11:3b:b8:50:9c:df:5e: e7:01:74:65:9e:c7:6d:0e:39:70:4c:f6:a6:00:82:00:85:e0: cb:e5:68:59:2c:fd:70:dd:a7:d2:ce:91:28:dd:14:ad:3b:5d: c8:d9:11:b9:28:dc:e7:a4:41:fc:7a:7d:e6:1e:b0:4a:a0:a4: ec:32:ea:8b:c5:cb:b6:fa:0e:c2:65:50:72:f8:6c:e2:cf:12: 58:8f:c9:fc:b6:f0:70:2e:3f:0e:cc:2f:a1:9a:3f:a0:48:ef: 53:0e:05:57:cf:d8:3e:9b:87:0a:89:08:47:bd:d0:81:59:7a: 39:58:5b:5b:13:26:16:2f:e7:77:b0:08:a0:7f:7f:40:77:34: 8f:7f:f8:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjkzODIxMTAvBgNVBAUTKDIxMTcwMjJERjYxREE0MjFCOUU0RTFCQjg0ODNEODVF NDk4MkJGOTEwHhcNMjUwODA1MDAwNzIyWhcNMjUwODEyMDAwNzIyWjAYMRYwFAYD VQQDEw02ODkxNGIzYi1mODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz41116RtstFzmCqHeOkm5yG29wfSVXQWpQPXOcqBQTlKnim1NAW2l+Yx3Bs7 ttp7jlrprJ7Hn4YG2huI18TEzG1pupODwr6qafN7enPDjeHCER2ngXcDtZ4ZE8G6 tfxa2JBGpIGyoTl9mSf6+bALXR++MgGLOfWgwM2KwMW7we7wg9UoTs14yCANyJfa t/UMMpScpPhlNLZNSbSPMaOofJjlK4juFCi3sfZiaW+ERqJ689Jn1AxpwO9jK3Wh +fKEavgrztRgDZVQ+QkdJ9s4F67NGIx0GcRb0lCAPno7/D2ouLz782ccLf0eJLff LKUqPstKQb/jEiNQAHI+9/ER+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLW9IMul a5GZHMEwk1Y70Iq1S62XMB8GA1UdIwQYMBaAFCEXAi32HaQhueThu4SD2F5Jgr+R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTM4Mi9BNUZCODE1ODFD RDkxMUVDOTJBRDU3MUNDNEY5QUUwMi9JUmNDTGZZZHBDRzU1T0c3aElQWVhrbUN2 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lSY0NMZllkcENHNTVPRzdoSVBZWGttQ3Y1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTM4Mi9BNUZCODE1ODFDRDkxMUVDOTJBRDU3MUNDNEY5QUUwMi9JUmNDTGZZZHBD RzU1T0c3aElQWVhrbUN2NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuaPBwZnV4XeA6HrV2dlsYMyovUZlYGqSWRod/moGw0UtBdTcT3jt/ gPswgNsF6c5kBJ2/FzGEbzDgDS3TKf0KH+mmtUplGcJvjJzMNlfXhRVMdX4uDiKE mUPnwgnrZUoR/wEtgpgZnNwvYj7C6AJajsZ32lvoURE7uFCc317nAXRlnsdtDjlw TPamAIIAheDL5WhZLP1w3afSzpEo3RStO13I2RG5KNznpEH8en3mHrBKoKTsMuqL xcu2+g7CZVBy+GzizxJYj8n8tvBwLj8OzC+hmj+gSO9TDgVXz9g+m4cKiQhHvdCB WXo5WFtbEyYWL+d3sAigf39AdzSPf/iq -----END CERTIFICATE-----Generated at Wed Aug 6 00:48:26 2025 by rpki-client