$ rpki-client -vvf rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft File: IRcCLfYdpCG55OG7hIPYXkmCv5E.mft (raw, json) Hash identifier: Zvhf5X4s2BID5jizGzINGaAKHbm2IBGs9BfpEYME3LM= Subject key identifier: 7B:3F:AC:FF:77:18:18:2B:A4:F2:E3:24:4B:FC:DF:A4:DF:42:32:97 Authority key identifier: 21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 Certificate issuer: /CN=A9169382/serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Certificate serial: 050E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft Manifest number: 0508 Signing time: Fri 22 Aug 2025 23:50:11 +0000 Manifest this update: Fri 22 Aug 2025 23:50:11 +0000 Manifest next update: Fri 29 Aug 2025 23:50:11 +0000 Files and hashes: 1: IRcCLfYdpCG55OG7hIPYXkmCv5E.crl (hash: RKEHJoFfd0a5NWrJ/Mpjybv+CHms+3aBYE0NjN77OG8=) 2: E41BF8841CDC11ECBA794120C4F9AE02.roa (hash: U/+wPqrKrJC011IcABNzpIvFcS1/P1nom9ZdkuvcUss=) 3: B5D70D9ACE3311EFA7B9B640C4F9AE02.roa (hash: eFUfIoic8XWxnlHcYYzBMeRdJXcAiXS5ahGJK7+zPi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1294 (0x50e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169382, serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Validity Not Before: Aug 22 23:50:11 2025 GMT Not After : Aug 29 23:50:11 2025 GMT Subject: CN=68a90233-c9bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:50:e3:33:27:ce:73:cc:67:0d:7a:46:73:eb: 45:55:fc:33:6d:55:cb:6e:77:35:bb:87:de:bc:2d: 8b:2e:f0:27:ae:4f:0d:9e:dc:6c:a3:51:5c:ef:42: 2c:69:2b:b1:cd:2b:6b:a1:b7:3b:09:9a:04:78:ce: 33:ee:c9:53:43:44:56:73:04:d9:87:61:78:9b:5d: 5c:94:bd:15:93:90:ab:0c:f7:72:ff:91:17:e7:ca: 14:63:c9:7f:64:a5:a1:49:8c:b9:b8:ba:1d:bc:df: ae:6d:8e:85:1b:fb:57:02:47:8b:67:d5:c7:67:ac: 88:ac:bb:33:0b:41:e8:47:fc:a5:dd:ff:81:f5:72: 8d:a3:cc:8f:fc:35:b8:70:f8:ba:20:61:4b:81:d0: 9a:1a:27:8c:4b:cb:d1:d1:e1:a0:dc:13:1a:5c:49: 77:c7:4e:88:c2:9a:9c:b3:45:b4:ef:10:30:5b:0d: 3b:64:5e:1c:e9:0f:1d:3c:e0:4d:05:61:3e:34:4d: 68:6a:36:5d:5f:d1:03:83:c7:83:2e:38:ff:4e:d5: 45:38:6b:e7:09:f9:c5:a7:4c:cd:37:ab:49:4f:9d: 74:4d:06:de:39:8b:f5:4c:91:90:d1:63:c0:1a:1c: d2:ea:c7:e9:ab:4a:5b:97:82:35:8d:ab:b1:b2:86: ce:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3F:AC:FF:77:18:18:2B:A4:F2:E3:24:4B:FC:DF:A4:DF:42:32:97 X509v3 Authority Key Identifier: keyid:21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:72:88:23:51:59:db:92:b5:f7:4b:00:4a:a0:c3:64:bd:30: d2:0b:5c:6e:2f:a3:2f:d5:61:b7:fc:d5:df:96:4d:71:5d:66: 00:ac:aa:3d:87:b7:23:0c:73:aa:86:37:c7:3a:01:bd:d9:c0: d7:ab:2c:12:23:97:79:52:9e:74:47:0f:fd:d1:88:e3:ca:9a: 18:67:94:0f:55:db:23:86:f9:6f:b6:c3:e0:50:2f:b3:9b:d5: 81:97:20:63:cd:22:5b:ba:1d:42:57:f9:0e:e6:ee:d7:61:c6: 6c:35:a5:ad:df:76:41:55:5a:65:a8:e7:4f:ca:17:6a:b7:d6: 2a:30:2a:f7:c4:c5:d8:ce:79:b5:be:f5:09:18:5d:d5:28:ee: 1d:18:61:7f:48:1b:2a:29:99:0e:bf:20:f0:1f:6c:65:c8:e0: 4c:57:55:58:14:a7:03:5f:83:43:a8:2d:d7:58:df:32:3d:52: 05:a3:1b:2e:5a:d1:9f:63:f3:ea:a5:0a:3e:db:49:f1:b2:20: c2:7f:85:9c:2e:d6:92:34:d7:24:68:bc:75:29:56:db:06:1a: 0e:1d:7d:6d:cb:97:c3:dd:d9:2a:42:93:07:f5:14:71:e0:ea: 37:16:88:8b:2f:dd:98:aa:3f:77:79:4e:f7:1d:8c:9c:09:0e: bd:45:5a:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjkzODIxMTAvBgNVBAUTKDIxMTcwMjJERjYxREE0MjFCOUU0RTFCQjg0ODNEODVF NDk4MkJGOTEwHhcNMjUwODIyMjM1MDExWhcNMjUwODI5MjM1MDExWjAYMRYwFAYD VQQDEw02OGE5MDIzMy1jOWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3VDjMyfOc8xnDXpGc+tFVfwzbVXLbnc1u4fevC2LLvAnrk8Nntxso1Fc70Is aSuxzStrobc7CZoEeM4z7slTQ0RWcwTZh2F4m11clL0Vk5CrDPdy/5EX58oUY8l/ ZKWhSYy5uLodvN+ubY6FG/tXAkeLZ9XHZ6yIrLszC0HoR/yl3f+B9XKNo8yP/DW4 cPi6IGFLgdCaGieMS8vR0eGg3BMaXEl3x06Iwpqcs0W07xAwWw07ZF4c6Q8dPOBN BWE+NE1oajZdX9EDg8eDLjj/TtVFOGvnCfnFp0zNN6tJT510TQbeOYv1TJGQ0WPA GhzS6sfpq0pbl4I1jauxsobOiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHs/rP93 GBgrpPLjJEv836TfQjKXMB8GA1UdIwQYMBaAFCEXAi32HaQhueThu4SD2F5Jgr+R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTM4Mi9BNUZCODE1ODFD RDkxMUVDOTJBRDU3MUNDNEY5QUUwMi9JUmNDTGZZZHBDRzU1T0c3aElQWVhrbUN2 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lSY0NMZllkcENHNTVPRzdoSVBZWGttQ3Y1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTM4Mi9BNUZCODE1ODFDRDkxMUVDOTJBRDU3MUNDNEY5QUUwMi9JUmNDTGZZZHBD RzU1T0c3aElQWVhrbUN2NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWcogjUVnbkrX3SwBKoMNkvTDSC1xuL6Mv1WG3/NXflk1xXWYArKo9 h7cjDHOqhjfHOgG92cDXqywSI5d5Up50Rw/90YjjypoYZ5QPVdsjhvlvtsPgUC+z m9WBlyBjzSJbuh1CV/kO5u7XYcZsNaWt33ZBVVplqOdPyhdqt9YqMCr3xMXYznm1 vvUJGF3VKO4dGGF/SBsqKZkOvyDwH2xlyOBMV1VYFKcDX4NDqC3XWN8yPVIFoxsu WtGfY/PqpQo+20nxsiDCf4WcLtaSNNckaLx1KVbbBhoOHX1ty5fD3dkqQpMH9RRx 4Oo3FoiLL92Yqj93eU73HYycCQ69RVq7 -----END CERTIFICATE-----Generated at Sun Aug 24 03:58:03 2025 by rpki-client