$ rpki-client -vvf rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft File: IRxVC1PrIEdRhbq83n5w32dESLc.mft (raw, json) Hash identifier: k2OT9eh6tD3kkC5xu90JYVYUw9o7apIqo0pkZpYsfxQ= Subject key identifier: 2C:A0:47:BB:22:A3:CC:0F:62:D2:BA:99:84:F7:02:90:99:48:01:9D Authority key identifier: 21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7 Certificate issuer: /CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7 Certificate serial: 0CB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft Manifest number: 0C97 Signing time: Fri 22 Aug 2025 18:25:51 +0000 Manifest this update: Fri 22 Aug 2025 18:25:51 +0000 Manifest next update: Fri 29 Aug 2025 18:25:51 +0000 Files and hashes: 1: IRxVC1PrIEdRhbq83n5w32dESLc.crl (hash: eGg0o6QMy8LBFwIEHm5bx+Bkvu4AZgnWVKWxEJLfq/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3257 (0xcb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A608, serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7 Validity Not Before: Aug 22 18:25:51 2025 GMT Not After : Aug 29 18:25:51 2025 GMT Subject: CN=68a8b62f-aee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c6:b1:62:98:f7:e0:68:31:0b:6c:93:c2:03: d4:02:b5:13:3c:45:f6:14:b7:20:76:db:5e:d7:73: 96:6d:d1:b0:9e:65:6f:83:c5:35:ad:d3:2a:00:b1: 1f:19:33:0b:37:03:e3:aa:2c:4e:79:a5:75:2a:35: 40:d3:dd:d4:b6:aa:a6:63:b5:03:ba:7a:18:e8:40: ac:78:a9:0c:3f:66:dc:ee:78:24:6e:f7:58:ec:de: fd:71:19:c8:c0:88:ea:70:91:ef:c4:0d:c2:bf:eb: 13:4c:29:cf:ef:cc:7c:12:6e:d0:fb:0b:20:f7:de: 88:af:b2:64:45:2c:ac:ea:ab:8e:fc:fb:fa:dd:3a: da:67:b0:ac:59:61:42:d7:25:7d:ff:f1:7b:5e:52: 69:4f:a7:97:c6:e1:40:a8:53:30:1f:00:25:d2:49: 03:c4:32:93:3d:9d:09:1f:19:c1:59:6a:9b:9e:44: 33:21:bf:64:b5:82:5b:52:3e:e2:f8:6f:3d:88:7e: 64:4a:6c:21:a4:21:5b:06:d8:65:66:e3:d8:c0:68: c3:4a:80:fa:3c:8e:36:97:aa:1b:fb:99:14:c9:f0: 33:99:93:12:94:02:46:92:1b:b1:b4:4a:8b:e8:d0: cf:90:fe:0d:19:5e:80:89:eb:cc:0f:db:06:7e:b2: 36:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A0:47:BB:22:A3:CC:0F:62:D2:BA:99:84:F7:02:90:99:48:01:9D X509v3 Authority Key Identifier: keyid:21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:7f:6d:36:f4:96:d2:e0:68:97:52:4f:ba:10:db:6b:8a:de: f1:16:bb:7f:59:f9:6a:19:54:65:b5:c9:00:3b:7e:bd:74:ae: 33:9e:e5:46:2b:a4:4f:81:23:46:89:dc:cc:66:3b:2b:17:9e: 8f:a0:1d:6a:c4:51:d9:42:03:b8:4e:e8:33:6a:ef:11:90:ed: 6d:8c:de:ba:f7:91:d9:39:30:3d:70:cc:16:c4:c5:22:9e:6f: 02:45:9a:39:3f:21:38:71:40:e6:fe:e5:b6:64:38:be:89:03: c6:fc:03:5c:08:c7:35:7b:52:1a:a8:01:65:e4:24:b7:a1:e7: 6a:3f:5c:18:17:0c:ce:87:55:22:27:1f:d6:05:32:95:a5:39: ac:4f:b3:bb:b7:97:a8:02:a1:f9:57:5b:24:67:47:02:0a:ac: b3:e4:8f:5c:39:60:88:3b:75:4f:fb:90:fe:1e:42:69:bf:66: ac:c6:95:05:97:1a:cd:56:66:23:fe:bd:95:b8:ce:7d:6f:f4: 59:ce:a6:3c:48:63:69:07:a1:d2:4d:df:61:f8:13:6e:42:de: 4e:94:20:2b:82:6f:13:8a:cc:09:9c:29:4f:dc:e1:4c:dc:c0: 0a:2b:bd:ab:10:0d:95:e8:2f:ee:f6:d0:47:b8:3c:fb:7d:82: aa:f5:d8:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2MDgxMTAvBgNVBAUTKDIxMUM1NTBCNTNFQjIwNDc1MTg1QkFCQ0RFN0U3MERG Njc0NDQ4QjcwHhcNMjUwODIyMTgyNTUxWhcNMjUwODI5MTgyNTUxWjAYMRYwFAYD VQQDEw02OGE4YjYyZi1hZWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysaxYpj34GgxC2yTwgPUArUTPEX2FLcgdtte13OWbdGwnmVvg8U1rdMqALEf GTMLNwPjqixOeaV1KjVA093UtqqmY7UDunoY6ECseKkMP2bc7ngkbvdY7N79cRnI wIjqcJHvxA3Cv+sTTCnP78x8Em7Q+wsg996Ir7JkRSys6quO/Pv63TraZ7CsWWFC 1yV9//F7XlJpT6eXxuFAqFMwHwAl0kkDxDKTPZ0JHxnBWWqbnkQzIb9ktYJbUj7i +G89iH5kSmwhpCFbBthlZuPYwGjDSoD6PI42l6ob+5kUyfAzmZMSlAJGkhuxtEqL 6NDPkP4NGV6AievMD9sGfrI2RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCygR7si o8wPYtK6mYT3ApCZSAGdMB8GA1UdIwQYMBaAFCEcVQtT6yBHUYW6vN5+cN9nREi3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTYwOC83NDgwRkM4ODAy RTcxMUVBQjA0NTA0MThDNEY5QUUwMi9JUnhWQzFQcklFZFJoYnE4M241dzMyZEVT TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lSeFZDMVBySUVkUmhicTgzbjV3MzJkRVNMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTYwOC83NDgwRkM4ODAyRTcxMUVBQjA0NTA0MThDNEY5QUUwMi9JUnhWQzFQcklF ZFJoYnE4M241dzMyZEVTTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWf2029JbS4GiXUk+6ENtrit7xFrt/WflqGVRltckAO369dK4znuVG K6RPgSNGidzMZjsrF56PoB1qxFHZQgO4Tugzau8RkO1tjN6695HZOTA9cMwWxMUi nm8CRZo5PyE4cUDm/uW2ZDi+iQPG/ANcCMc1e1IaqAFl5CS3oedqP1wYFwzOh1Ui Jx/WBTKVpTmsT7O7t5eoAqH5V1skZ0cCCqyz5I9cOWCIO3VP+5D+HkJpv2asxpUF lxrNVmYj/r2VuM59b/RZzqY8SGNpB6HSTd9h+BNuQt5OlCArgm8TiswJnClP3OFM 3MAKK72rEA2V6C/u9tBHuDz7fYKq9diS -----END CERTIFICATE-----Generated at Sat Aug 23 17:23:54 2025 by rpki-client