$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft File: IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json) Hash identifier: 8KqJCsVhXoadGI6QBxmcrH4yKMvVsRqxOOnm82UUB38= Subject key identifier: FE:07:D8:DA:F0:D5:45:5F:B2:66:91:D3:33:98:69:08:8E:E1:A0:08 Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 1104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft Manifest number: 10DC Signing time: Thu 24 Apr 2025 17:19:36 +0000 Manifest this update: Thu 24 Apr 2025 17:19:35 +0000 Manifest next update: Thu 01 May 2025 17:19:35 +0000 Files and hashes: 1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: t1/XANMMl/A6QA83mzSk67z5nPc0i0tXGaz4TKyEtJI=) 2: 13D21C6EFEBA11ED9D83553FC4F9AE02.roa (hash: mPVwkbrmgIGFwgmxOu/KgFG11TMB51WhYaitUgpspRc=) 3: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: GKHRKfwk3bqrqOFGPvJ+kjY0NTnB33jXoiW8bXeNOjw=) 4: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: PDXFymAQeHbTCItIfy8LqqoHr3PVKA+eJZNU6voGL5A=) 5: 1856F8E8CCC411EFBDE7CF74C4F9AE02.roa (hash: 3ZvdvOYIsr/GLwsfHu77Tcpi6csxMwAyCAlksdMfA5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4356 (0x1104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Apr 24 17:19:35 2025 GMT Not After : May 1 17:19:35 2025 GMT Subject: CN=680a72a7-c46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7d:1b:a1:40:7d:b4:d7:f5:57:69:74:94:f4: 4a:32:b5:19:ea:f1:75:bc:35:8c:07:b1:30:55:4c: 64:b9:76:e8:49:f3:e7:d7:ed:63:c5:f4:23:03:23: b9:74:00:87:c4:c9:5f:f3:79:f7:a9:05:bc:86:26: e1:c1:fa:1c:a0:bc:da:dc:28:0e:10:6b:8b:ae:fc: 5c:aa:7e:63:9d:45:e0:c0:5f:ac:fb:97:47:9a:92: ac:ad:6b:04:96:9a:4c:0e:4b:e2:f3:60:10:cc:de: 62:29:c5:fe:26:fe:61:97:0a:fe:94:56:3f:cd:b5: 27:43:33:00:55:a8:cf:5c:d8:f9:41:32:3e:f3:e0: ee:94:3f:85:29:76:d0:f4:d2:4d:59:9a:a7:81:84: e5:6b:68:9d:20:04:60:83:ec:df:e5:01:b0:ed:b6: 51:f5:08:d8:66:1c:93:a9:79:ec:94:46:18:4e:21: 71:4f:df:78:45:4c:a3:35:20:de:94:11:93:1d:6b: 81:49:28:04:4b:bc:c0:8f:0f:50:23:1b:ee:32:0c: d7:25:f2:c0:0e:fc:f8:ab:bd:02:65:47:ce:2a:e6: 45:be:05:d6:63:5f:a0:68:6a:35:24:06:f5:2a:4b: 71:6e:9e:8a:92:0a:6b:37:33:f3:82:b0:1c:1b:7a: 36:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:07:D8:DA:F0:D5:45:5F:B2:66:91:D3:33:98:69:08:8E:E1:A0:08 X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:1f:e2:12:bf:bb:94:2d:42:db:3d:8c:97:a3:18:97:ef:ef: c7:f7:35:e0:b5:7e:b8:3f:4f:13:85:cc:07:f4:fa:80:09:8e: 18:40:74:d5:9f:53:68:82:06:d0:4c:31:ff:e8:9d:32:7a:4e: 6b:39:cc:cc:87:ac:2f:37:03:66:c0:6d:7a:4d:5a:67:63:4a: 1e:df:6e:22:90:3a:c6:69:34:74:51:f1:6c:33:37:ec:90:29: 00:c8:ff:d2:6f:b4:47:fb:bf:51:fb:50:10:47:d9:e9:d8:c5: 9b:d0:b9:92:75:9a:7c:76:8e:54:6d:16:0c:28:66:48:95:6f: 47:de:90:9f:d1:dc:b4:a5:ff:82:3a:8a:87:e2:a1:9d:9a:ae: c9:6b:fc:de:9b:14:b4:38:42:0c:a0:ea:6b:68:62:e6:bf:4a: 7a:53:5b:af:c1:e5:7d:d1:9a:bf:de:8b:83:8c:ac:ac:9e:99: f5:eb:49:bd:66:11:f4:38:f9:89:c6:8e:57:33:48:fc:a4:41: f6:0a:66:72:fe:ba:af:ad:ff:5a:5a:bc:fe:b9:33:bb:1c:c2: 82:e0:8d:5c:93:63:fd:92:31:35:c0:2b:b6:14:94:e2:bf:08: 45:6d:76:85:f1:93:f0:d7:62:39:06:80:01:85:6f:38:09:5a: fe:1e:34:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjUwNDI0MTcxOTM1WhcNMjUwNTAxMTcxOTM1WjAYMRYwFAYD VQQDEw02ODBhNzJhNy1jNDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqH0boUB9tNf1V2l0lPRKMrUZ6vF1vDWMB7EwVUxkuXboSfPn1+1jxfQjAyO5 dACHxMlf83n3qQW8hibhwfocoLza3CgOEGuLrvxcqn5jnUXgwF+s+5dHmpKsrWsE lppMDkvi82AQzN5iKcX+Jv5hlwr+lFY/zbUnQzMAVajPXNj5QTI+8+DulD+FKXbQ 9NJNWZqngYTla2idIARgg+zf5QGw7bZR9QjYZhyTqXnslEYYTiFxT994RUyjNSDe lBGTHWuBSSgES7zAjw9QIxvuMgzXJfLADvz4q70CZUfOKuZFvgXWY1+gaGo1JAb1 Kktxbp6KkgprNzPzgrAcG3o27wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4H2Nrw 1UVfsmaR0zOYaQiO4aAIMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdEQy8zNUY3OTg2NjFGMDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85 aEhPUjhzTHBabDVPN2h0MEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABH+ISv7uULULbPYyXoxiX7+/H9zXgtX64P08ThcwH9PqACY4YQHTV n1NoggbQTDH/6J0yek5rOczMh6wvNwNmwG16TVpnY0oe324ikDrGaTR0UfFsMzfs kCkAyP/Sb7RH+79R+1AQR9np2MWb0LmSdZp8do5UbRYMKGZIlW9H3pCf0dy0pf+C OoqH4qGdmq7Ja/zemxS0OEIMoOpraGLmv0p6U1uvweV90Zq/3ouDjKysnpn160m9 ZhH0OPmJxo5XM0j8pEH2CmZy/rqvrf9aWrz+uTO7HMKC4I1ck2P9kjE1wCu2FJTi vwhFbXaF8ZPw12I5BoABhW84CVr+HjT+ -----END CERTIFICATE-----Generated at Sat Apr 26 04:25:42 2025 by rpki-client