$ rpki-client -vvf rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft File: IRxVC1PrIEdRhbq83n5w32dESLc.mft (raw, json) Hash identifier: RFTrcqZoCCayJWCqPaCiy0eEqh76wN50tIu3QxaRm8I= Subject key identifier: D6:CF:98:0D:D4:7F:61:2F:9E:E1:5D:1E:38:FD:3E:F5:A2:03:9C:38 Authority key identifier: 21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7 Certificate issuer: /CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7 Certificate serial: 0CB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft Manifest number: 0C90 Signing time: Fri 08 Aug 2025 18:33:08 +0000 Manifest this update: Fri 08 Aug 2025 18:33:07 +0000 Manifest next update: Fri 15 Aug 2025 18:33:07 +0000 Files and hashes: 1: IRxVC1PrIEdRhbq83n5w32dESLc.crl (hash: 0Yr6st3cl4DKh2W5R9q+2khJYBXch3910bOeS/bi8zc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3250 (0xcb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A608, serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7 Validity Not Before: Aug 8 18:33:07 2025 GMT Not After : Aug 15 18:33:07 2025 GMT Subject: CN=689642e4-0598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:de:0f:fa:4a:8a:4f:be:30:15:72:c8:da:86: 03:57:48:2d:2c:d2:1e:f7:51:8f:38:49:43:ca:f8: 05:ee:dd:80:b3:35:f5:2f:5b:c3:d7:26:c2:e2:78: 7e:84:23:69:b8:e6:c1:58:dc:d9:a4:18:b4:2f:a9: f4:81:e4:75:4d:9a:ea:27:c7:bf:bf:8a:5a:a7:76: 01:40:1f:47:b0:5f:3a:a6:d8:82:95:91:53:e9:0d: 39:ef:6d:20:ea:63:e6:37:53:4d:0b:9a:fe:80:e1: a3:43:56:13:f1:ce:a3:8f:11:76:42:f5:34:73:97: aa:d8:9c:4c:9e:85:bf:66:c8:de:fd:4c:13:3f:b3: cb:22:a8:33:04:f5:6e:ab:65:41:1a:3f:5c:22:27: df:ae:32:13:47:9b:8f:c3:66:53:e5:11:fc:a0:e4: 34:f5:ea:af:67:eb:6a:bd:32:9b:97:89:37:87:3e: 52:8a:da:34:f7:10:b8:a0:83:48:8d:84:f1:fa:ff: 57:c0:6e:91:ec:15:8d:f8:b9:d9:e3:c6:1e:d6:42: 0c:9b:1c:77:a6:2e:f2:30:70:bd:bd:e9:db:2c:60: 3d:fd:da:1a:6b:ca:c0:2e:3b:cf:98:2a:5a:80:96: 1e:1b:0f:eb:97:a2:cf:dc:53:40:74:5a:51:b5:eb: 91:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CF:98:0D:D4:7F:61:2F:9E:E1:5D:1E:38:FD:3E:F5:A2:03:9C:38 X509v3 Authority Key Identifier: keyid:21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:90:ae:99:8d:86:c1:d9:ab:e7:c0:dd:ab:34:04:03:c5:24: b3:be:85:44:64:62:c0:7b:52:4a:c5:08:ca:c1:a6:f5:96:d3: 27:c7:c3:80:20:73:f3:dc:66:0c:0f:64:7a:24:fe:07:89:c8: 5a:71:64:c5:8b:15:cd:8d:41:91:42:1f:1f:dc:38:14:e4:88: b9:df:73:7e:f6:5b:68:09:9a:ad:23:9b:03:2c:0a:6e:64:16: af:1a:16:62:74:b8:ac:a7:32:0c:dc:d7:cd:e3:84:fb:62:84: 1b:e8:b1:5c:0c:15:1b:04:b0:b8:ce:f5:96:38:00:fb:75:08: 99:e1:8c:39:96:01:2f:28:77:a0:f8:70:41:50:80:75:f6:2f: 0c:92:da:da:14:21:30:34:c5:d8:d3:28:87:25:ed:1a:87:5b: db:e8:6a:df:ec:97:83:89:44:6e:cb:10:63:15:91:ce:3b:5b: d2:b9:10:cb:e6:02:99:c6:b0:27:2a:18:bc:a2:72:a6:86:78: 02:9e:ae:25:bf:0f:02:52:2f:55:f9:5a:b1:cc:f2:1b:d3:fe: 2b:4a:4b:ef:5e:01:8a:9c:94:aa:5d:fc:d8:64:e9:17:ef:e0: 7b:26:e1:ec:ec:0e:c1:bc:f4:50:b1:1d:44:1e:eb:61:ca:f5: e0:61:fe:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2MDgxMTAvBgNVBAUTKDIxMUM1NTBCNTNFQjIwNDc1MTg1QkFCQ0RFN0U3MERG Njc0NDQ4QjcwHhcNMjUwODA4MTgzMzA3WhcNMjUwODE1MTgzMzA3WjAYMRYwFAYD VQQDEw02ODk2NDJlNC0wNTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5t4P+kqKT74wFXLI2oYDV0gtLNIe91GPOElDyvgF7t2AszX1L1vD1ybC4nh+ hCNpuObBWNzZpBi0L6n0geR1TZrqJ8e/v4pap3YBQB9HsF86ptiClZFT6Q05720g 6mPmN1NNC5r+gOGjQ1YT8c6jjxF2QvU0c5eq2JxMnoW/Zsje/UwTP7PLIqgzBPVu q2VBGj9cIiffrjITR5uPw2ZT5RH8oOQ09eqvZ+tqvTKbl4k3hz5Sito09xC4oINI jYTx+v9XwG6R7BWN+LnZ48Ye1kIMmxx3pi7yMHC9venbLGA9/doaa8rALjvPmCpa gJYeGw/rl6LP3FNAdFpRteuRKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbPmA3U f2EvnuFdHjj9PvWiA5w4MB8GA1UdIwQYMBaAFCEcVQtT6yBHUYW6vN5+cN9nREi3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTYwOC83NDgwRkM4ODAy RTcxMUVBQjA0NTA0MThDNEY5QUUwMi9JUnhWQzFQcklFZFJoYnE4M241dzMyZEVT TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lSeFZDMVBySUVkUmhicTgzbjV3MzJkRVNMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTYwOC83NDgwRkM4ODAyRTcxMUVBQjA0NTA0MThDNEY5QUUwMi9JUnhWQzFQcklF ZFJoYnE4M241dzMyZEVTTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEkK6ZjYbB2avnwN2rNAQDxSSzvoVEZGLAe1JKxQjKwab1ltMnx8OA IHPz3GYMD2R6JP4HichacWTFixXNjUGRQh8f3DgU5Ii533N+9ltoCZqtI5sDLApu ZBavGhZidLispzIM3NfN44T7YoQb6LFcDBUbBLC4zvWWOAD7dQiZ4Yw5lgEvKHeg +HBBUIB19i8MktraFCEwNMXY0yiHJe0ah1vb6Grf7JeDiURuyxBjFZHOO1vSuRDL 5gKZxrAnKhi8onKmhngCnq4lvw8CUi9V+VqxzPIb0/4rSkvvXgGKnJSqXfzYZOkX 7+B7JuHs7A7BvPRQsR1EHuthyvXgYf4N -----END CERTIFICATE-----Generated at Sat Aug 9 14:27:06 2025 by rpki-client