$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft File: IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft (raw, json) Hash identifier: jB7MSsDBAMsRyA/Ycrl+VaveTGq+2WYNriPCVfz8KiU= Subject key identifier: AD:0E:B8:73:B3:0C:6B:39:B2:81:34:A1:04:47:97:92:3B:48:84:C5 Authority key identifier: 22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 Certificate issuer: /CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft Manifest number: 08F5 Signing time: Wed 06 Aug 2025 21:20:29 +0000 Manifest this update: Wed 06 Aug 2025 21:20:29 +0000 Manifest next update: Wed 13 Aug 2025 21:20:29 +0000 Files and hashes: 1: IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl (hash: NlURqJXPQ9yFG906M08wnxTS2HxfOaIQNe7bMwc9Q5A=) 2: 79057E1CEB1011EEB9CE4F19C4F9AE02.roa (hash: 8/axDs5qsmDACTYAZ5Y63PJlpZ3Ia2a5BRXxYdLZ9QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 21:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4, serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Validity Not Before: Aug 6 21:20:29 2025 GMT Not After : Aug 13 21:20:29 2025 GMT Subject: CN=6893c71d-fee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b1:49:96:3f:c8:56:ad:14:9e:8a:c2:0c:20: ed:df:ee:99:b2:9e:d0:1f:0b:f9:9a:40:9e:17:c9: 8e:05:30:33:79:fc:c9:7d:56:79:6d:eb:84:cc:fd: 05:4e:4f:78:0e:70:76:e9:63:13:89:b9:af:2e:34: 3f:5d:9b:d0:b5:01:6c:96:a6:54:d4:4f:29:ae:c6: ac:fb:b3:3a:12:5a:09:3d:95:82:5b:43:64:2e:d5: be:8a:0d:5b:78:e2:23:0a:57:45:3c:4b:7e:f7:42: 5a:d8:2f:4e:4c:05:80:4c:d6:10:42:54:35:4c:8b: 14:69:56:7d:dd:4d:40:62:45:3a:92:58:cc:e0:01: 8b:e3:e1:86:93:05:9c:31:f3:32:2f:77:c8:d2:d2: 34:87:47:00:27:e3:65:d0:6e:09:f2:a1:c2:5b:ed: 5d:fe:42:16:79:ee:9a:06:bd:ce:23:11:31:53:50: e4:42:5d:fd:20:8f:f8:96:f5:5c:76:c9:4a:51:1c: 94:00:9f:54:e0:8c:42:7d:dd:8a:d8:5d:e1:01:4b: ac:25:0d:c3:b4:0b:03:f4:2a:a9:b0:1b:bc:d2:e8: 3f:eb:f6:32:6e:be:e1:22:a9:b4:f9:83:a4:2e:af: 3e:e3:95:80:7f:41:5a:06:4b:d3:a9:5f:1e:90:ad: 30:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0E:B8:73:B3:0C:6B:39:B2:81:34:A1:04:47:97:92:3B:48:84:C5 X509v3 Authority Key Identifier: keyid:22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:5a:e2:9f:56:ef:4b:79:f0:ce:54:f2:50:19:ee:92:a0:e0: 37:5a:f7:e6:d1:32:62:71:76:d5:68:fb:23:3e:17:63:ab:d4: d8:6c:e4:03:7b:53:35:fb:61:24:99:25:2a:c2:34:e9:fb:c0: f8:4d:a9:89:4c:12:85:24:56:8d:69:5e:01:51:a7:b7:e6:10: 02:30:7b:da:8e:11:df:f0:4b:8c:c5:d4:36:b3:bb:43:80:b4: f8:da:87:04:95:69:ac:80:07:ce:d4:ae:a2:9a:10:97:81:0c: 6e:a6:b4:63:46:1d:4e:3d:bd:8e:0f:73:85:e9:cb:97:01:03: 8a:75:4d:ea:73:79:b8:d5:50:c7:16:b7:30:26:0e:33:da:7d: e5:69:c1:c9:5a:78:56:8b:1c:e0:ec:50:de:77:35:ad:6c:9d: 09:b4:2a:11:0b:48:dd:01:08:d1:f9:ce:6d:be:10:ad:58:58: 4d:c5:b9:db:0d:f8:dc:75:45:6c:b3:2e:c9:a4:33:40:60:0e: bc:71:11:14:38:1c:47:5d:5a:51:36:3e:ba:70:c1:24:e8:11: 7c:e3:c2:73:94:ac:77:8d:c1:7e:31:32:d7:57:34:7c:4c:77: ff:14:05:b3:1d:c3:bc:d5:9c:5f:0b:13:23:d4:7b:1c:61:59: f8:85:67:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RjQxMTAvBgNVBAUTKDIyQjRBOUFBQTk4MkFCQ0IzOUY5Nzg5ODZCQ0I2Nzcw QjYwMkMxQTQwHhcNMjUwODA2MjEyMDI5WhcNMjUwODEzMjEyMDI5WjAYMRYwFAYD VQQDEw02ODkzYzcxZC1mZWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbFJlj/IVq0UnorCDCDt3+6Zsp7QHwv5mkCeF8mOBTAzefzJfVZ5beuEzP0F Tk94DnB26WMTibmvLjQ/XZvQtQFslqZU1E8prsas+7M6EloJPZWCW0NkLtW+ig1b eOIjCldFPEt+90Ja2C9OTAWATNYQQlQ1TIsUaVZ93U1AYkU6kljM4AGL4+GGkwWc MfMyL3fI0tI0h0cAJ+Nl0G4J8qHCW+1d/kIWee6aBr3OIxExU1DkQl39II/4lvVc dslKURyUAJ9U4IxCfd2K2F3hAUusJQ3DtAsD9CqpsBu80ug/6/Yybr7hIqm0+YOk Lq8+45WAf0FaBkvTqV8ekK0wzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0OuHOz DGs5soE0oQRHl5I7SITFMB8GA1UdIwQYMBaAFCK0qaqpgqvLOfl4mGvLZ3C2AsGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2 OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9JclNwcXFtQ3E4czUtWGlZYTh0bmNMWUN3 YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyU3BxcW1DcThzNS1YaVlhOHRuY0xZQ3dhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlGNC8zRDZCQTU3NEY2OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9JclNwcXFtQ3E4 czUtWGlZYTh0bmNMWUN3YVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWWuKfVu9LefDOVPJQGe6SoOA3Wvfm0TJicXbVaPsjPhdjq9TYbOQD e1M1+2EkmSUqwjTp+8D4TamJTBKFJFaNaV4BUae35hACMHvajhHf8EuMxdQ2s7tD gLT42ocElWmsgAfO1K6imhCXgQxuprRjRh1OPb2OD3OF6cuXAQOKdU3qc3m41VDH FrcwJg4z2n3lacHJWnhWixzg7FDedzWtbJ0JtCoRC0jdAQjR+c5tvhCtWFhNxbnb DfjcdUVssy7JpDNAYA68cREUOBxHXVpRNj66cMEk6BF848JzlKx3jcF+MTLXVzR8 THf/FAWzHcO81ZxfCxMj1HscYVn4hWdN -----END CERTIFICATE-----Generated at Fri Aug 8 20:46:24 2025 by rpki-client