$ rpki-client -vvf rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft File: IRcCLfYdpCG55OG7hIPYXkmCv5E.mft (raw, json) Hash identifier: Ataq379TehWqcOWKtk514QHNkm/fbLQ4GhQV1YNuvKA= Subject key identifier: C2:EE:0E:E4:28:C3:24:5E:35:46:B1:D2:F7:45:51:88:D3:47:84:EE Authority key identifier: 21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 Certificate issuer: /CN=A9169382/serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Certificate serial: 04EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft Manifest number: 04E4 Signing time: Thu 12 Jun 2025 23:20:23 +0000 Manifest this update: Thu 12 Jun 2025 23:20:23 +0000 Manifest next update: Thu 19 Jun 2025 23:20:23 +0000 Files and hashes: 1: IRcCLfYdpCG55OG7hIPYXkmCv5E.crl (hash: r3yuIvymbP+7IPf4N9OqKUMcL/QWMocsfS+7ZCduBPQ=) 2: E41BF8841CDC11ECBA794120C4F9AE02.roa (hash: U/+wPqrKrJC011IcABNzpIvFcS1/P1nom9ZdkuvcUss=) 3: B5D70D9ACE3311EFA7B9B640C4F9AE02.roa (hash: eFUfIoic8XWxnlHcYYzBMeRdJXcAiXS5ahGJK7+zPi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1258 (0x4ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169382, serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Validity Not Before: Jun 12 23:20:23 2025 GMT Not After : Jun 19 23:20:23 2025 GMT Subject: CN=684b60b7-6284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:48:dd:25:c8:7d:8d:fd:f2:c0:a6:08:ad:73: 84:d8:2b:89:aa:0e:9e:22:45:11:74:bc:6a:7b:78: cb:d4:2b:92:56:4b:be:e0:ca:de:b8:5f:99:bc:d6: 9a:ce:e3:ab:cc:47:84:82:bc:fa:51:79:c8:97:d2: 00:14:8d:13:38:2a:0b:dd:3f:cc:70:91:bc:e0:78: a6:f7:4c:32:8f:44:2d:dd:c3:8a:7e:8e:a2:46:2a: cc:11:e7:51:6c:7f:f8:79:53:10:ff:97:e9:85:8c: ab:af:03:55:df:0d:d7:bc:59:05:1c:03:ac:84:ac: 52:23:bb:72:22:58:cf:3a:8a:0c:ab:89:c4:55:0f: 66:61:12:d5:99:52:72:f9:d6:76:37:61:3e:06:ec: 6a:86:6e:5c:46:73:2a:d8:8b:61:1e:9a:a9:31:fb: 39:09:5b:54:2c:e5:97:76:d3:89:b3:a3:e7:8b:51: cc:d1:66:09:40:31:ca:3f:b1:65:8b:5a:ca:f4:00: ab:a6:84:59:f8:f5:38:ad:f9:26:58:6e:21:cf:ab: 14:df:09:58:e6:6b:50:9d:16:db:ab:f6:1b:f0:15: 11:c3:f2:50:d2:2a:df:e7:59:61:09:df:50:85:e0: f4:0f:d6:3b:8c:46:53:dc:7f:98:8d:51:01:02:3f: e9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EE:0E:E4:28:C3:24:5E:35:46:B1:D2:F7:45:51:88:D3:47:84:EE X509v3 Authority Key Identifier: keyid:21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:d2:31:44:62:1b:e8:84:93:fe:a5:e2:39:8b:de:ff:0f:00: 0a:eb:66:22:fc:55:ee:7e:df:c8:ab:ad:66:a1:75:64:31:88: 3d:be:85:50:9d:d0:c7:79:c8:fb:b6:2d:82:ed:ce:20:ae:bb: 4a:ba:f7:ee:40:5e:48:3c:fb:00:87:f2:5e:8a:35:16:a0:92: 16:2b:7f:47:9d:53:53:36:c7:73:e1:af:57:37:1d:63:b0:4d: 5b:aa:46:75:66:30:58:e1:5e:9f:9f:da:1f:90:8d:5f:9b:5c: 17:9e:b5:6d:e0:53:50:e6:a3:93:6d:45:9f:ff:2e:67:b0:f8: 02:d8:7d:68:35:ab:31:06:06:ec:81:01:2a:19:8b:10:c4:dc: 2b:84:57:4c:3f:f1:c3:84:7e:4c:12:dd:53:68:ee:89:f9:54: 16:c7:84:57:7b:c2:a5:bd:2c:6a:c8:49:33:cc:8d:12:b5:66: 68:b2:22:79:b5:22:5c:9b:a2:40:ac:9d:81:a9:cc:70:5d:7b: 7d:06:27:89:af:56:ed:a3:fc:7f:44:c5:e4:75:84:12:69:b2: 03:da:1e:61:23:dc:22:a4:10:23:be:d6:f8:11:d6:00:49:d2: eb:76:20:92:c5:d5:ff:0a:57:4c:18:2b:91:3e:74:bd:bf:12: 34:24:94:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjkzODIxMTAvBgNVBAUTKDIxMTcwMjJERjYxREE0MjFCOUU0RTFCQjg0ODNEODVF NDk4MkJGOTEwHhcNMjUwNjEyMjMyMDIzWhcNMjUwNjE5MjMyMDIzWjAYMRYwFAYD VQQDEw02ODRiNjBiNy02Mjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3EjdJch9jf3ywKYIrXOE2CuJqg6eIkURdLxqe3jL1CuSVku+4MreuF+ZvNaa zuOrzEeEgrz6UXnIl9IAFI0TOCoL3T/McJG84Him90wyj0Qt3cOKfo6iRirMEedR bH/4eVMQ/5fphYyrrwNV3w3XvFkFHAOshKxSI7tyIljPOooMq4nEVQ9mYRLVmVJy +dZ2N2E+Buxqhm5cRnMq2IthHpqpMfs5CVtULOWXdtOJs6Pni1HM0WYJQDHKP7Fl i1rK9ACrpoRZ+PU4rfkmWG4hz6sU3wlY5mtQnRbbq/Yb8BURw/JQ0irf51lhCd9Q heD0D9Y7jEZT3H+YjVEBAj/pjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLuDuQo wyReNUax0vdFUYjTR4TuMB8GA1UdIwQYMBaAFCEXAi32HaQhueThu4SD2F5Jgr+R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTM4Mi9BNUZCODE1ODFD RDkxMUVDOTJBRDU3MUNDNEY5QUUwMi9JUmNDTGZZZHBDRzU1T0c3aElQWVhrbUN2 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lSY0NMZllkcENHNTVPRzdoSVBZWGttQ3Y1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTM4Mi9BNUZCODE1ODFDRDkxMUVDOTJBRDU3MUNDNEY5QUUwMi9JUmNDTGZZZHBD RzU1T0c3aElQWVhrbUN2NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg0jFEYhvohJP+peI5i97/DwAK62Yi/FXuft/Iq61moXVkMYg9voVQ ndDHecj7ti2C7c4grrtKuvfuQF5IPPsAh/JeijUWoJIWK39HnVNTNsdz4a9XNx1j sE1bqkZ1ZjBY4V6fn9ofkI1fm1wXnrVt4FNQ5qOTbUWf/y5nsPgC2H1oNasxBgbs gQEqGYsQxNwrhFdMP/HDhH5MEt1TaO6J+VQWx4RXe8KlvSxqyEkzzI0StWZosiJ5 tSJcm6JArJ2BqcxwXXt9BieJr1bto/x/RMXkdYQSabID2h5hI9wipBAjvtb4EdYA SdLrdiCSxdX/CldMGCuRPnS9vxI0JJQ1 -----END CERTIFICATE-----Generated at Sat Jun 14 18:45:45 2025 by rpki-client