$ rpki-client -vvf rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft File: irlFgrAuqoOihfHJH8hZoOLBE1M.mft (raw, json) Hash identifier: 9swOG+X9aR6QWlCbBOjJk2/dyzKSKG8pjZXi2RlbkAY= Subject key identifier: F0:C7:50:BE:77:20:77:B1:17:D8:33:48:F0:C2:F7:75:6C:60:1D:23 Authority key identifier: 8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53 Certificate issuer: /CN=A911049F/serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft Manifest number: 2A Signing time: Sun 11 May 2025 06:31:23 +0000 Manifest this update: Sun 11 May 2025 06:31:22 +0000 Manifest next update: Sun 18 May 2025 06:31:22 +0000 Files and hashes: 1: irlFgrAuqoOihfHJH8hZoOLBE1M.crl (hash: GLz6j6a8eVA2OWiecs/OeXRncEX8/2h1svVhz8dyZW8=) 2: 347B37060B7011F0BED04B49C4F9AE02.roa (hash: pQpuCZn5VYJdmwXjLqjs5m3xSfcDbn3JK2oThkiWP20=) 3: 0431DDEEF8E611EFB9269C71C4F9AE02.roa (hash: onFwvD3ByPLzXVJ67F8/gNczv45XsvNKrHEcWpbgNvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911049F, serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353 Validity Not Before: May 11 06:31:22 2025 GMT Not After : May 18 06:31:22 2025 GMT Subject: CN=6820443b-c43e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:41:ca:86:78:3d:05:7b:63:5e:7d:1b:66:b7: 71:89:54:30:33:8b:c0:41:54:49:f9:01:60:12:bf: d1:6d:52:04:7d:94:25:9b:de:3f:ac:49:8d:23:cf: bf:ed:07:30:51:fa:cc:1d:a2:92:bb:f9:92:32:23: a2:4e:9f:29:66:d1:64:93:f3:60:46:0f:68:14:62: 8d:06:8e:9e:c5:22:6c:c4:cd:91:94:3c:f7:a7:cd: 60:21:88:92:a3:a0:98:a4:81:75:aa:ac:a4:38:d8: be:f1:58:b9:dc:28:06:59:6c:02:c8:9f:b8:73:72: c0:5b:06:f7:47:a4:75:c8:00:ad:c7:b8:9a:94:76: 0a:75:1f:47:a8:4c:c3:b8:16:cb:07:55:42:13:d0: 0e:f9:60:fb:8c:25:11:15:8f:12:eb:50:ed:90:ba: 6e:d0:0a:20:2d:59:46:cc:39:b5:3e:5c:15:01:db: 0c:b4:f8:a8:b2:01:99:f9:9f:e6:ad:6d:f0:87:67: 25:b0:67:7a:8a:c5:1e:5c:c1:09:d7:2e:fb:d1:e9: 57:8d:4d:14:44:dd:39:43:07:9d:4e:63:43:3f:cb: e2:69:bb:9d:80:9d:3f:c9:75:da:24:10:4f:55:d9: 13:45:15:c3:a6:c6:d8:40:f1:0c:67:3f:c3:b8:32: 55:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C7:50:BE:77:20:77:B1:17:D8:33:48:F0:C2:F7:75:6C:60:1D:23 X509v3 Authority Key Identifier: keyid:8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f3:e6:92:e3:e5:5e:79:c5:f4:98:02:c6:57:73:ed:f9:a3: e2:c6:f6:48:fe:2f:e5:2e:29:d6:2b:fd:83:be:f1:e4:ea:75: df:e6:b5:65:a4:45:8d:53:4a:bc:c9:f0:34:3f:1b:fa:2a:a4: f5:e9:7e:42:ea:16:24:d7:4a:35:4b:c7:97:f3:6f:a4:4b:6d: 63:c0:49:8f:17:ed:11:21:6e:57:48:5b:7a:41:30:5c:a2:3a: 63:51:5f:1a:dc:f5:5a:d0:47:78:b1:6a:85:67:e2:09:da:c0: 10:2c:d0:97:b8:9a:52:47:4d:04:93:d6:55:01:22:99:cf:28: 3a:36:4e:cd:be:f8:53:5a:8a:7c:67:9f:ef:be:63:d3:7f:76: 90:8a:45:61:45:d5:8d:8a:ed:91:2b:66:38:e4:af:82:f3:91: 48:12:0c:aa:1d:78:2f:33:93:60:53:1f:5c:55:df:e7:70:ad: 35:5b:00:08:8c:f8:28:a6:e9:6f:18:5d:13:74:11:95:8c:c0: 94:c3:64:51:7f:65:b9:a0:ab:13:59:6c:c9:c3:6c:fe:4f:68: 9a:15:48:d1:54:ea:b4:af:5e:65:c3:12:0b:92:bf:4f:8c:38: f7:4b:33:31:5b:8f:df:ad:59:c7:23:75:99:c7:ba:b1:39:b4: 08:f7:e9:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MDQ5RjExMC8GA1UEBRMoOEFCOTQ1ODJCMDJFQUE4M0EyODVGMUM5MUZDODU5QTBF MkMxMTM1MzAeFw0yNTA1MTEwNjMxMjJaFw0yNTA1MTgwNjMxMjJaMBgxFjAUBgNV BAMTDTY4MjA0NDNiLWM0M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIQcqGeD0Fe2NefRtmt3GJVDAzi8BBVEn5AWASv9FtUgR9lCWb3j+sSY0jz7/t BzBR+swdopK7+ZIyI6JOnylm0WST82BGD2gUYo0Gjp7FImzEzZGUPPenzWAhiJKj oJikgXWqrKQ42L7xWLncKAZZbALIn7hzcsBbBvdHpHXIAK3HuJqUdgp1H0eoTMO4 FssHVUIT0A75YPuMJREVjxLrUO2Qum7QCiAtWUbMObU+XBUB2wy0+KiyAZn5n+at bfCHZyWwZ3qKxR5cwQnXLvvR6VeNTRRE3TlDB51OY0M/y+Jpu52AnT/JddokEE9V 2RNFFcOmxthA8QxnP8O4MlWJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8MdQvncg d7EX2DNI8ML3dWxgHSMwHwYDVR0jBBgwFoAUirlFgrAuqoOihfHJH8hZoOLBE1Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwNDlGL0MwNzRDNTFDRjhF NTExRUZCRUE1MjI3MUM0RjlBRTAyL2lybEZnckF1cW9PaWhmSEpIOGhab09MQkUx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaXJsRmdyQXVxb09paGZISkg4aFpvT0xCRTFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw NDlGL0MwNzRDNTFDRjhFNTExRUZCRUE1MjI3MUM0RjlBRTAyL2lybEZnckF1cW9P aWhmSEpIOGhab09MQkUxTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH/z5pLj5V55xfSYAsZXc+35o+LG9kj+L+UuKdYr/YO+8eTqdd/mtWWk RY1TSrzJ8DQ/G/oqpPXpfkLqFiTXSjVLx5fzb6RLbWPASY8X7REhbldIW3pBMFyi OmNRXxrc9VrQR3ixaoVn4gnawBAs0Je4mlJHTQST1lUBIpnPKDo2Ts2++FNainxn n+++Y9N/dpCKRWFF1Y2K7ZErZjjkr4LzkUgSDKodeC8zk2BTH1xV3+dwrTVbAAiM +Cim6W8YXRN0EZWMwJTDZFF/ZbmgqxNZbMnDbP5PaJoVSNFU6rSvXmXDEguSv0+M OPdLMzFbj9+tWccjdZnHurE5tAj36Us= -----END CERTIFICATE-----Generated at Sun May 11 23:00:24 2025 by rpki-client