$ rpki-client -vvf rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft File: IRcCLfYdpCG55OG7hIPYXkmCv5E.mft (raw, json) Hash identifier: SvcKrm/c/FEMexOxWrBETcNyfNIo3CZzw1wqr3LpP+Q= Subject key identifier: 3A:E6:5A:04:B8:61:CC:91:C6:E6:20:D7:DA:59:62:B4:65:79:DE:45 Authority key identifier: 21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 Certificate issuer: /CN=A9169382/serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Certificate serial: 04F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft Manifest number: 04EC Signing time: Sat 28 Jun 2025 23:18:08 +0000 Manifest this update: Sat 28 Jun 2025 23:18:07 +0000 Manifest next update: Sat 05 Jul 2025 23:18:07 +0000 Files and hashes: 1: IRcCLfYdpCG55OG7hIPYXkmCv5E.crl (hash: DrHyI6PaWE2wLCMklsZ//ImgeYVTMxAOmUa0N/rzd6g=) 2: E41BF8841CDC11ECBA794120C4F9AE02.roa (hash: U/+wPqrKrJC011IcABNzpIvFcS1/P1nom9ZdkuvcUss=) 3: B5D70D9ACE3311EFA7B9B640C4F9AE02.roa (hash: eFUfIoic8XWxnlHcYYzBMeRdJXcAiXS5ahGJK7+zPi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1266 (0x4f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169382, serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Validity Not Before: Jun 28 23:18:07 2025 GMT Not After : Jul 5 23:18:07 2025 GMT Subject: CN=6860782f-1ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:48:39:3d:b7:af:ed:de:c3:24:de:76:75:6c: 32:12:ed:44:83:75:18:d9:73:12:b9:06:99:28:34: 40:cc:38:51:4e:94:69:52:3d:d9:ab:47:b8:7e:62: 15:0c:58:52:3d:d5:d2:42:bd:78:47:ac:ac:20:fb: 1f:6b:2e:a0:73:b1:26:6f:d8:47:5b:6c:ce:87:0a: d6:b5:f9:f6:ab:7e:49:63:cf:75:95:fa:59:06:2a: 9b:9d:27:1a:a1:4a:e6:ae:56:6e:a1:d2:67:e3:1b: 5e:0a:fb:da:b6:b8:96:9c:93:98:c2:d0:5b:ef:fd: d6:32:02:82:49:60:8a:b8:fb:42:16:c5:14:ee:c4: 1a:2f:eb:17:06:e1:00:d2:7e:7d:81:db:d9:4c:e9: b4:59:eb:75:47:8b:7f:aa:c1:86:5d:58:44:f5:3e: 62:2d:60:de:5b:02:ac:e7:43:bd:89:35:fa:41:ad: 2e:ab:86:cf:66:be:6e:0d:d9:6c:a5:51:bd:a3:da: a0:0f:3c:89:48:67:fe:b9:a8:df:f6:29:82:3b:25: 79:4b:5b:e7:f7:97:ce:c1:28:e4:1f:25:bc:67:7b: a2:3d:a5:7e:01:5a:62:0c:24:d2:fa:f1:c6:51:a9: c2:a9:5d:dc:db:73:ed:17:1f:3d:3a:65:80:76:e3: 7b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E6:5A:04:B8:61:CC:91:C6:E6:20:D7:DA:59:62:B4:65:79:DE:45 X509v3 Authority Key Identifier: keyid:21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:62:dd:cc:d5:c1:46:cc:3f:ea:b3:a8:da:3e:3c:21:05:8c: 28:49:23:59:d2:88:51:55:9e:06:d8:5a:b4:61:73:e5:6d:d1: 25:ad:f8:54:5b:4a:55:6c:65:bf:9f:94:6d:13:c4:07:c1:b2: 4c:b4:09:3a:b0:c4:8f:12:a2:de:0b:69:27:55:a9:a9:9e:fd: c2:44:a8:e1:4f:93:33:49:c3:6f:2a:d3:b6:a9:97:ca:7b:ec: 70:d6:88:c8:30:85:e2:c5:df:27:54:73:b7:45:26:55:be:8d: 93:18:01:f8:2c:4c:8b:92:af:7e:f6:96:b1:66:1f:98:03:5c: fe:7e:76:a9:54:b2:84:25:c8:6d:e9:db:1a:72:b7:e8:a5:1d: 82:3d:f2:b3:35:4c:ee:10:5b:98:33:2d:80:94:5b:2e:ec:1a: 1a:77:97:8c:29:64:17:f0:c3:d2:8f:f5:38:57:4a:f6:c9:6e: 02:93:66:24:34:e4:da:fc:ef:f1:c9:bb:eb:22:15:d5:08:07: 58:04:6c:64:3d:8a:a4:52:3a:cc:44:ba:01:56:93:54:86:53: f6:f1:a1:a0:f6:37:b1:8c:c8:57:64:c9:5b:70:ac:3a:8e:87: 43:1e:b8:c5:58:64:31:a5:82:d5:57:ce:3a:f1:60:44:e5:8e: e2:22:b3:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjkzODIxMTAvBgNVBAUTKDIxMTcwMjJERjYxREE0MjFCOUU0RTFCQjg0ODNEODVF NDk4MkJGOTEwHhcNMjUwNjI4MjMxODA3WhcNMjUwNzA1MjMxODA3WjAYMRYwFAYD VQQDEw02ODYwNzgyZi0xY2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl0g5Pbev7d7DJN52dWwyEu1Eg3UY2XMSuQaZKDRAzDhRTpRpUj3Zq0e4fmIV DFhSPdXSQr14R6ysIPsfay6gc7Emb9hHW2zOhwrWtfn2q35JY891lfpZBiqbnSca oUrmrlZuodJn4xteCvvatriWnJOYwtBb7/3WMgKCSWCKuPtCFsUU7sQaL+sXBuEA 0n59gdvZTOm0Wet1R4t/qsGGXVhE9T5iLWDeWwKs50O9iTX6Qa0uq4bPZr5uDdls pVG9o9qgDzyJSGf+uajf9imCOyV5S1vn95fOwSjkHyW8Z3uiPaV+AVpiDCTS+vHG UanCqV3c23PtFx89OmWAduN7QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrmWgS4 YcyRxuYg19pZYrRled5FMB8GA1UdIwQYMBaAFCEXAi32HaQhueThu4SD2F5Jgr+R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTM4Mi9BNUZCODE1ODFD RDkxMUVDOTJBRDU3MUNDNEY5QUUwMi9JUmNDTGZZZHBDRzU1T0c3aElQWVhrbUN2 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lSY0NMZllkcENHNTVPRzdoSVBZWGttQ3Y1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTM4Mi9BNUZCODE1ODFDRDkxMUVDOTJBRDU3MUNDNEY5QUUwMi9JUmNDTGZZZHBD RzU1T0c3aElQWVhrbUN2NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGYt3M1cFGzD/qs6jaPjwhBYwoSSNZ0ohRVZ4G2Fq0YXPlbdElrfhU W0pVbGW/n5RtE8QHwbJMtAk6sMSPEqLeC2knVampnv3CRKjhT5MzScNvKtO2qZfK e+xw1ojIMIXixd8nVHO3RSZVvo2TGAH4LEyLkq9+9paxZh+YA1z+fnapVLKEJcht 6dsacrfopR2CPfKzNUzuEFuYMy2AlFsu7Boad5eMKWQX8MPSj/U4V0r2yW4Ck2Yk NOTa/O/xybvrIhXVCAdYBGxkPYqkUjrMRLoBVpNUhlP28aGg9jexjMhXZMlbcKw6 jodDHrjFWGQxpYLVV8468WBE5Y7iIrNs -----END CERTIFICATE-----Generated at Mon Jun 30 09:14:12 2025 by rpki-client