$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft File: IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft (raw, json) Hash identifier: S5BCY9UbJLUo0j+Si2v0ZqR1SLuC+P86evSED1P2XEs= Subject key identifier: 16:A7:5A:24:A4:8C:DF:8C:4F:AB:4D:FB:F8:06:4F:E2:40:5C:97:48 Authority key identifier: 22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 Certificate issuer: /CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft Manifest number: 088D Signing time: Thu 24 Apr 2025 20:59:32 +0000 Manifest this update: Thu 24 Apr 2025 20:59:32 +0000 Manifest next update: Thu 01 May 2025 20:59:32 +0000 Files and hashes: 1: IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl (hash: 5FSzxr98nFQrPAU2yN9f6qJUsrz/FO2uMU5bTqSkG/c=) 2: 79057E1CEB1011EEB9CE4F19C4F9AE02.roa (hash: 8/axDs5qsmDACTYAZ5Y63PJlpZ3Ia2a5BRXxYdLZ9QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4, serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Validity Not Before: Apr 24 20:59:32 2025 GMT Not After : May 1 20:59:32 2025 GMT Subject: CN=680aa634-b98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:68:c2:07:b1:ea:d6:57:9f:41:44:87:c0:10: 91:a3:0b:d4:74:93:28:f5:fd:e5:b8:dd:7e:df:c9: e4:6d:1c:67:8a:1e:46:77:a7:2f:a0:bd:07:16:76: 46:cb:01:e4:42:a9:65:86:49:ff:27:39:8e:b5:29: b6:69:f5:91:02:27:b3:a7:9d:3a:9a:8c:12:44:ca: 92:de:8c:ce:c2:65:44:c7:a0:c1:1f:81:a8:e1:92: 66:0a:d3:58:b0:25:42:3b:4c:7f:72:66:5d:e8:49: af:d0:57:07:e1:f7:79:0d:90:f8:f1:f5:c9:2d:ac: 42:cc:15:ca:88:c9:5e:77:0b:73:0b:3a:04:b1:35: dc:33:e7:cd:1c:cc:e4:c1:14:f0:9f:3a:aa:9f:51: 2b:4b:ca:a3:65:12:fd:47:cf:a0:38:17:0f:28:48: ab:98:d0:e3:54:ff:06:c9:99:1f:57:59:42:55:2b: 9e:28:cc:c4:7f:2b:11:3a:89:b1:22:49:1c:4a:aa: 15:21:20:b4:52:a2:00:0e:cc:69:4f:b9:ff:9d:bd: 91:59:2e:4c:e1:af:73:e7:b4:4b:e9:a3:ee:a0:ba: e2:24:4b:65:78:d8:4c:58:9b:a7:66:46:b8:49:24: 58:d6:f7:47:99:51:f1:d3:47:23:4c:6a:b7:36:35: 62:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A7:5A:24:A4:8C:DF:8C:4F:AB:4D:FB:F8:06:4F:E2:40:5C:97:48 X509v3 Authority Key Identifier: keyid:22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:25:e8:ab:b1:88:6c:c5:e6:85:8e:ae:23:2f:6b:e0:c0:13: 28:5f:9f:1e:d4:0b:1c:13:c3:7b:5c:7e:56:95:58:7f:42:56: e0:7c:16:59:40:d2:af:1a:33:ef:d8:48:c8:cb:7c:f2:a3:83: d8:c5:10:88:e8:d6:c3:44:02:e3:78:3e:eb:47:8a:b2:8e:05: 3c:d1:77:a6:43:12:e0:47:99:a8:0e:20:a7:3b:4f:aa:e4:6d: 2e:d2:af:13:27:22:78:66:c4:e2:69:88:91:e0:2d:7b:c6:4d: ba:ac:30:e6:97:18:85:fe:65:2c:ae:e9:1d:6f:ef:73:0e:5b: c6:9c:2c:64:1e:d1:85:c2:7f:73:77:88:1f:d2:66:a0:20:bb: 45:23:c4:4a:d8:a5:6a:24:ae:a2:68:80:87:cc:ef:71:c0:dc: fb:a3:a1:77:a4:28:db:0c:88:4d:11:9f:fd:a1:ec:f9:be:4a: ca:38:fb:82:53:0a:60:8e:87:72:c2:be:9a:1a:5d:82:7d:cb: 6b:14:21:c0:ee:aa:bc:bb:96:e1:78:4d:9b:50:c0:58:08:c4: 3d:22:2f:15:f3:b9:e5:b2:8b:bd:7f:31:45:46:d3:8b:61:3a: 81:3b:01:91:05:c2:3f:b7:fc:ea:27:00:39:f8:ec:dc:60:cc: 2a:e9:11:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RjQxMTAvBgNVBAUTKDIyQjRBOUFBQTk4MkFCQ0IzOUY5Nzg5ODZCQ0I2Nzcw QjYwMkMxQTQwHhcNMjUwNDI0MjA1OTMyWhcNMjUwNTAxMjA1OTMyWjAYMRYwFAYD VQQDEw02ODBhYTYzNC1iOThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WjCB7Hq1lefQUSHwBCRowvUdJMo9f3luN1+38nkbRxnih5Gd6cvoL0HFnZG ywHkQqllhkn/JzmOtSm2afWRAiezp506mowSRMqS3ozOwmVEx6DBH4Go4ZJmCtNY sCVCO0x/cmZd6Emv0FcH4fd5DZD48fXJLaxCzBXKiMledwtzCzoEsTXcM+fNHMzk wRTwnzqqn1ErS8qjZRL9R8+gOBcPKEirmNDjVP8GyZkfV1lCVSueKMzEfysROomx IkkcSqoVISC0UqIADsxpT7n/nb2RWS5M4a9z57RL6aPuoLriJEtleNhMWJunZka4 SSRY1vdHmVHx00cjTGq3NjVi7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBanWiSk jN+MT6tN+/gGT+JAXJdIMB8GA1UdIwQYMBaAFCK0qaqpgqvLOfl4mGvLZ3C2AsGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2 OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9JclNwcXFtQ3E4czUtWGlZYTh0bmNMWUN3 YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyU3BxcW1DcThzNS1YaVlhOHRuY0xZQ3dhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlGNC8zRDZCQTU3NEY2OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9JclNwcXFtQ3E4 czUtWGlZYTh0bmNMWUN3YVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhJeirsYhsxeaFjq4jL2vgwBMoX58e1AscE8N7XH5WlVh/QlbgfBZZ QNKvGjPv2EjIy3zyo4PYxRCI6NbDRALjeD7rR4qyjgU80XemQxLgR5moDiCnO0+q 5G0u0q8TJyJ4ZsTiaYiR4C17xk26rDDmlxiF/mUsrukdb+9zDlvGnCxkHtGFwn9z d4gf0magILtFI8RK2KVqJK6iaICHzO9xwNz7o6F3pCjbDIhNEZ/9oez5vkrKOPuC Uwpgjodywr6aGl2CfctrFCHA7qq8u5bheE2bUMBYCMQ9Ii8V87nlsou9fzFFRtOL YTqBOwGRBcI/t/zqJwA5+OzcYMwq6RGw -----END CERTIFICATE-----Generated at Sat Apr 26 03:43:59 2025 by rpki-client