$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft File: IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft (raw, json) Hash identifier: yj9URUB+cuI8fXE4xShl+O9ZiXZR2Aky1Xn6wMk8fYM= Subject key identifier: D3:3F:71:A9:89:8B:A4:9A:AE:48:33:D0:E5:3B:13:5C:80:F2:7D:6B Authority key identifier: 22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 Certificate issuer: /CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft Manifest number: 08CF Signing time: Mon 30 Jun 2025 21:16:39 +0000 Manifest this update: Mon 30 Jun 2025 21:16:38 +0000 Manifest next update: Mon 07 Jul 2025 21:16:38 +0000 Files and hashes: 1: IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl (hash: zq0Jl8/5ZlHeXQHKCWRNONLAddqF/1EHesHliKdxDeI=) 2: 79057E1CEB1011EEB9CE4F19C4F9AE02.roa (hash: 8/axDs5qsmDACTYAZ5Y63PJlpZ3Ia2a5BRXxYdLZ9QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4, serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Validity Not Before: Jun 30 21:16:38 2025 GMT Not After : Jul 7 21:16:38 2025 GMT Subject: CN=6862feb7-13a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:da:02:62:7f:e8:c0:62:44:f1:ae:02:4a: 39:60:46:89:fe:d4:4f:71:b0:00:d7:52:25:fe:03: 89:5d:0e:78:3e:08:37:17:c0:d0:39:b1:f2:8b:3f: 41:b0:5a:87:6c:c1:24:d0:d2:af:8c:e2:82:19:8b: aa:4b:55:97:2b:ff:8b:cc:fb:04:39:c9:55:39:fa: 1b:02:11:f5:4e:53:c1:89:ee:48:d8:f6:0e:c0:b6: fc:37:ca:9f:14:dc:7b:2b:12:d4:ae:49:f3:45:f1: c7:04:ca:d7:ee:31:54:e8:6f:09:08:0f:c6:5b:c5: 9a:a6:7d:20:5a:3b:ba:2c:1b:b9:5c:94:7f:59:e7: b9:fb:c8:eb:64:28:ce:ad:8c:68:3c:63:b6:ec:0e: f2:b6:86:02:45:6d:22:05:94:df:6e:8e:e5:cb:a6: 9c:66:9c:4f:18:ec:f2:03:62:08:6c:9f:a5:86:c3: 5e:06:a6:05:65:a7:b6:b4:ac:67:c6:ab:f7:b1:7a: 55:76:39:36:01:b0:f8:6b:10:4d:21:f6:8a:30:9e: 21:37:9e:0e:ae:37:ac:73:ea:48:b5:93:dc:7e:82: 30:d2:35:87:30:b1:f6:bf:be:8c:54:09:65:54:97: bf:5a:e9:f2:22:f0:9c:a6:d6:d3:cf:16:da:cb:a0: 59:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3F:71:A9:89:8B:A4:9A:AE:48:33:D0:E5:3B:13:5C:80:F2:7D:6B X509v3 Authority Key Identifier: keyid:22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:d3:6d:e0:74:13:82:2d:ef:fe:b1:52:38:00:d7:05:b3:46: bc:dd:48:2b:6d:a1:f3:33:db:ce:5b:b6:b5:80:22:1e:51:4b: 98:12:a7:dc:cb:9e:73:ca:05:a2:0c:1a:4b:bd:0a:b9:47:d7: e4:e4:68:93:eb:ab:fa:41:a8:c4:3b:6e:b5:eb:ea:1a:3e:82: 39:90:c2:e9:6b:c3:91:69:09:e8:31:a5:ac:f1:c4:3a:67:9c: d8:e4:2e:a4:9f:88:86:22:f0:c1:85:20:b3:0b:bf:9d:4a:a6: b5:12:80:95:32:5c:ec:cb:01:d0:e4:06:50:03:e7:5d:04:72: 72:d1:71:75:44:0a:65:df:23:b4:d3:37:e1:78:73:5b:73:c4: 62:d6:06:0a:f3:6e:b0:65:9a:aa:3e:39:f9:d1:ba:bb:b7:87: c1:af:db:73:f6:b3:f8:d4:32:53:d7:fd:fe:72:45:f0:a3:d8: b5:e3:aa:4f:6f:9d:1f:e2:86:5f:b2:e0:3e:1e:8b:d6:b9:6f: 53:e0:e7:31:63:b5:25:d5:3c:eb:d6:46:e7:8f:3b:6f:6e:48: 59:3b:6d:3f:d5:c1:2f:35:ba:29:79:76:69:7b:29:83:5b:dd: 88:11:58:2d:66:ad:db:c4:56:3d:57:93:60:c4:c3:5b:3c:68: 48:11:da:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RjQxMTAvBgNVBAUTKDIyQjRBOUFBQTk4MkFCQ0IzOUY5Nzg5ODZCQ0I2Nzcw QjYwMkMxQTQwHhcNMjUwNjMwMjExNjM4WhcNMjUwNzA3MjExNjM4WjAYMRYwFAYD VQQDEw02ODYyZmViNy0xM2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaLaAmJ/6MBiRPGuAko5YEaJ/tRPcbAA11Il/gOJXQ54Pgg3F8DQObHyiz9B sFqHbMEk0NKvjOKCGYuqS1WXK/+LzPsEOclVOfobAhH1TlPBie5I2PYOwLb8N8qf FNx7KxLUrknzRfHHBMrX7jFU6G8JCA/GW8Wapn0gWju6LBu5XJR/Wee5+8jrZCjO rYxoPGO27A7ytoYCRW0iBZTfbo7ly6acZpxPGOzyA2IIbJ+lhsNeBqYFZae2tKxn xqv3sXpVdjk2AbD4axBNIfaKMJ4hN54Orjesc+pItZPcfoIw0jWHMLH2v76MVAll VJe/WunyIvCcptbTzxbay6BZiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNM/camJ i6Sarkgz0OU7E1yA8n1rMB8GA1UdIwQYMBaAFCK0qaqpgqvLOfl4mGvLZ3C2AsGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2 OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9JclNwcXFtQ3E4czUtWGlZYTh0bmNMWUN3 YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyU3BxcW1DcThzNS1YaVlhOHRuY0xZQ3dhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlGNC8zRDZCQTU3NEY2OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9JclNwcXFtQ3E4 czUtWGlZYTh0bmNMWUN3YVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV023gdBOCLe/+sVI4ANcFs0a83UgrbaHzM9vOW7a1gCIeUUuYEqfc y55zygWiDBpLvQq5R9fk5GiT66v6QajEO2616+oaPoI5kMLpa8ORaQnoMaWs8cQ6 Z5zY5C6kn4iGIvDBhSCzC7+dSqa1EoCVMlzsywHQ5AZQA+ddBHJy0XF1RApl3yO0 0zfheHNbc8Ri1gYK826wZZqqPjn50bq7t4fBr9tz9rP41DJT1/3+ckXwo9i146pP b50f4oZfsuA+HovWuW9T4OcxY7Ul1Tzr1kbnjztvbkhZO20/1cEvNbopeXZpeymD W92IEVgtZq3bxFY9V5NgxMNbPGhIEdor -----END CERTIFICATE-----Generated at Wed Jul 2 07:11:58 2025 by rpki-client