$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft File: IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json) Hash identifier: N9yM7+Wma8yx6tWqfQJSBobbbohpxrd82VMYZsqmOks= Subject key identifier: 31:9E:1A:3C:2E:C8:35:F1:CF:C3:62:F1:AE:36:C5:32:7D:F7:CF:1D Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 113B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft Manifest number: 1104 Signing time: Thu 12 Jun 2025 17:13:47 +0000 Manifest this update: Thu 12 Jun 2025 17:13:46 +0000 Manifest next update: Thu 19 Jun 2025 17:13:46 +0000 Files and hashes: 1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: UOPLWCAhF7qNxXNOeC3IukbBLjTwUlcmlhtPEQxrbBc=) 2: 13D21C6EFEBA11ED9D83553FC4F9AE02.roa (hash: mPVwkbrmgIGFwgmxOu/KgFG11TMB51WhYaitUgpspRc=) 3: 98A0F61840AD11F0BB332714C4F9AE02.roa (hash: JmqRq4ApEA8z7/2JyGOcdKG4rCkB8yM3OLiftmQmRmg=) 4: 97F6216640AD11F0BB332714C4F9AE02.roa (hash: D/cwdq2qeau3nAVw8Sz3zqNDQKjgr7DJFvLl2UTQid4=) 5: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: GKHRKfwk3bqrqOFGPvJ+kjY0NTnB33jXoiW8bXeNOjw=) 6: 6521A70C395411F0AF136459C4F9AE02.roa (hash: 4Idad4dFmk8KzOmK1O+klRuBqcKZ7Fg2fSUd52ueJnE=) 7: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: PDXFymAQeHbTCItIfy8LqqoHr3PVKA+eJZNU6voGL5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4411 (0x113b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Jun 12 17:13:46 2025 GMT Not After : Jun 19 17:13:46 2025 GMT Subject: CN=684b0acb-edbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:16:63:01:02:28:1f:9c:6d:0d:8e:80:04:de: 60:dc:b4:3e:3b:b7:e0:fb:ad:28:3e:5f:eb:f5:20: 1d:d8:e7:7f:1a:74:b8:8f:02:6e:29:62:78:91:2f: 93:2c:fa:38:a2:98:f5:53:88:c3:2c:65:3a:98:dd: 77:e8:73:81:30:87:9c:76:8f:2c:11:9e:b6:44:16: 55:e0:df:8c:a0:bf:38:aa:06:b8:17:9d:d9:46:a9: aa:21:7f:e1:24:d1:22:70:8b:64:1b:87:9e:97:b2: d8:8d:2b:74:b9:48:e8:96:eb:de:bb:00:60:35:1f: 30:1d:d6:8a:f3:54:8d:bb:a8:18:31:cc:dd:51:3a: 6f:c9:53:7b:cc:59:72:59:f8:a0:49:bf:5e:11:80: 94:e5:25:86:75:9d:97:9e:37:d3:6f:b4:5f:13:c6: cc:bc:02:ff:d9:e8:69:e6:fe:8d:4b:5a:ab:c1:e2: 33:44:ec:81:92:fc:ac:a4:5c:26:bc:3c:b1:e9:f0: 9a:60:e8:ad:e2:a5:62:6d:5c:89:fb:bf:a7:78:d8: 4d:1b:40:0a:66:2c:73:15:8b:88:b4:92:8d:0e:7d: 10:c7:f0:b6:35:ca:cf:90:0a:52:92:a2:35:16:e3: f7:9b:b6:ab:dd:33:ce:41:22:62:58:70:30:89:0d: 4f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9E:1A:3C:2E:C8:35:F1:CF:C3:62:F1:AE:36:C5:32:7D:F7:CF:1D X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:7a:02:4d:f9:c3:ce:ae:0a:58:f7:12:c9:a6:fb:92:da:28: 50:ad:81:9c:66:c7:34:36:1c:91:f2:d3:53:86:b4:a8:0b:15: ba:d9:bd:38:83:70:f1:63:1a:df:64:17:9b:ab:99:1f:5d:b9: 55:97:87:1f:9b:c7:e2:54:40:3e:19:5b:b8:fe:3e:cf:51:8b: f9:c8:e2:14:6c:a2:63:74:0a:cb:36:cd:9c:71:1d:3c:4d:40: ac:83:64:3c:49:ad:2d:20:31:73:76:3a:1d:89:0f:b0:a0:5e: 25:0d:71:f2:bb:b4:0f:a4:24:8b:37:ac:9c:29:bd:6c:1e:1c: e2:be:d3:cb:55:2f:3e:99:ff:1a:41:d7:bf:e1:85:40:52:ae: 4a:a4:6f:3c:11:41:e6:9e:8f:3f:b4:8a:db:d4:30:02:fe:84: 68:a4:be:f3:be:f9:7c:12:78:a9:2a:16:79:6d:7d:59:67:1a: a0:93:32:a1:92:9d:29:bf:4c:22:8d:06:21:6c:bc:e3:fa:3d: 52:38:9b:06:5f:ab:b3:2e:63:bf:4c:cf:52:9c:4d:9a:a4:d4: dc:ef:c5:a2:0c:40:df:ee:ae:68:16:82:a4:7d:c6:1e:c9:40: 82:41:6a:4e:d7:8e:d6:59:ce:52:c7:3f:84:4b:d7:82:ce:42: 04:c2:99:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICETswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjUwNjEyMTcxMzQ2WhcNMjUwNjE5MTcxMzQ2WjAYMRYwFAYD VQQDEw02ODRiMGFjYi1lZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhZjAQIoH5xtDY6ABN5g3LQ+O7fg+60oPl/r9SAd2Od/GnS4jwJuKWJ4kS+T LPo4opj1U4jDLGU6mN136HOBMIecdo8sEZ62RBZV4N+MoL84qga4F53ZRqmqIX/h JNEicItkG4eel7LYjSt0uUjoluveuwBgNR8wHdaK81SNu6gYMczdUTpvyVN7zFly WfigSb9eEYCU5SWGdZ2XnjfTb7RfE8bMvAL/2ehp5v6NS1qrweIzROyBkvyspFwm vDyx6fCaYOit4qVibVyJ+7+neNhNG0AKZixzFYuItJKNDn0Qx/C2NcrPkApSkqI1 FuP3m7ar3TPOQSJiWHAwiQ1PKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGeGjwu yDXxz8Ni8a42xTJ9988dMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdEQy8zNUY3OTg2NjFGMDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85 aEhPUjhzTHBabDVPN2h0MEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbegJN+cPOrgpY9xLJpvuS2ihQrYGcZsc0NhyR8tNThrSoCxW62b04 g3DxYxrfZBebq5kfXblVl4cfm8fiVEA+GVu4/j7PUYv5yOIUbKJjdArLNs2ccR08 TUCsg2Q8Sa0tIDFzdjodiQ+woF4lDXHyu7QPpCSLN6ycKb1sHhzivtPLVS8+mf8a Qde/4YVAUq5KpG88EUHmno8/tIrb1DAC/oRopL7zvvl8EnipKhZ5bX1ZZxqgkzKh kp0pv0wijQYhbLzj+j1SOJsGX6uzLmO/TM9SnE2apNTc78WiDEDf7q5oFoKkfcYe yUCCQWpO147WWc5Sxz+ES9eCzkIEwplT -----END CERTIFICATE-----Generated at Sat Jun 14 18:03:13 2025 by rpki-client