$ rpki-client -vvf rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft File: IRxVC1PrIEdRhbq83n5w32dESLc.mft (raw, json) Hash identifier: 9Al/iKoGSXnW6AgsqCMBo+wMVvvVnFkiLx84/I1nVec= Subject key identifier: E6:CC:46:E9:D2:C9:0D:73:C0:86:05:1D:45:95:68:F9:FB:83:49:B4 Authority key identifier: 21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7 Certificate issuer: /CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7 Certificate serial: 0CA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft Manifest number: 0C7E Signing time: Fri 04 Jul 2025 18:40:02 +0000 Manifest this update: Fri 04 Jul 2025 18:40:01 +0000 Manifest next update: Fri 11 Jul 2025 18:40:01 +0000 Files and hashes: 1: IRxVC1PrIEdRhbq83n5w32dESLc.crl (hash: tBJ/WuQdemJUUXdKQQVlaaZbsMU6LDV/CggqvYBfTwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3232 (0xca0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A608, serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7 Validity Not Before: Jul 4 18:40:01 2025 GMT Not After : Jul 11 18:40:01 2025 GMT Subject: CN=68682002-9337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ba:33:7a:b5:35:2a:0d:9b:b0:f9:bc:8e:29: 4d:db:a6:9a:a2:4c:c7:23:7a:44:92:42:e4:79:00: 4b:33:02:24:6c:9d:c4:77:36:9e:70:a8:15:2d:84: ff:ae:4c:f8:ae:61:6d:34:10:3a:85:b3:87:c7:52: a2:62:0e:50:df:ab:b6:21:4b:09:4c:20:75:0d:5f: 2c:22:cd:06:55:a3:63:94:c6:de:16:e2:92:7d:23: 46:b1:f7:3b:1b:0d:a1:8c:f4:b0:2c:07:9f:13:f0: 1d:05:a5:a2:47:2a:2b:83:13:7a:9a:2b:74:f0:15: 47:92:d5:a9:98:f7:0e:d7:aa:59:13:20:6a:aa:36: c7:35:c5:86:87:7e:7b:6f:28:9f:c9:06:62:6c:0f: 88:75:df:11:ee:1e:28:2d:6d:7c:94:96:9e:1c:2b: ac:7e:30:e2:70:43:dc:9c:4e:8b:30:e0:80:66:5f: 5a:ef:3b:ac:44:c6:1c:0b:e2:b8:0d:0d:1f:be:f1: 32:c1:64:f5:1a:78:73:45:ba:aa:0c:94:8d:4e:ba: dd:ec:71:0a:16:c6:cd:b9:8f:10:7c:03:7e:e2:8d: ea:7c:10:d6:08:1f:ef:63:bb:b1:dc:a0:ea:9a:03: fd:67:53:ab:52:47:79:95:79:63:cc:b7:8c:14:d9: 78:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CC:46:E9:D2:C9:0D:73:C0:86:05:1D:45:95:68:F9:FB:83:49:B4 X509v3 Authority Key Identifier: keyid:21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:91:e4:3a:88:89:2b:35:0a:61:bf:c5:ef:3e:b0:c5:3f:5d: a6:08:a0:9e:12:35:ac:1d:1d:8f:f1:97:ac:16:29:83:1d:20: d7:7e:66:81:9f:02:29:42:74:58:92:e4:84:c5:a9:26:be:95: 52:f9:4a:87:3a:f4:ba:a3:bc:e3:ed:e2:95:02:81:61:76:e5: 13:46:37:b5:a9:72:09:11:a0:29:17:13:23:4a:0e:bc:45:cf: f1:ed:de:8c:44:2c:42:d5:ed:b2:b9:48:0f:c6:8b:79:b3:af: 81:dd:2c:4d:58:15:aa:26:52:75:85:89:01:20:c9:ea:e3:5d: 56:93:55:3e:9f:48:30:e2:91:32:04:99:98:6c:62:2a:48:97: be:17:a7:ca:93:61:a7:17:cf:68:a1:4f:2a:a8:1f:d2:cb:ec: ec:f4:61:a3:9d:6e:97:05:7a:f3:dc:ae:25:2f:8e:06:76:f1: 3c:e2:21:2e:6a:a8:99:9e:f9:4d:32:f3:f8:82:4a:50:9f:20: 6a:45:7e:8c:f3:fe:06:bc:c6:27:49:76:a1:0c:7d:31:93:b7: a0:52:1f:d2:4b:3b:a2:58:74:73:de:e0:31:a4:d2:39:74:92: c6:2a:d4:03:a0:bd:aa:6a:30:90:26:74:1a:de:d5:86:75:4f: de:40:4a:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2MDgxMTAvBgNVBAUTKDIxMUM1NTBCNTNFQjIwNDc1MTg1QkFCQ0RFN0U3MERG Njc0NDQ4QjcwHhcNMjUwNzA0MTg0MDAxWhcNMjUwNzExMTg0MDAxWjAYMRYwFAYD VQQDEw02ODY4MjAwMi05MzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6rozerU1Kg2bsPm8jilN26aaokzHI3pEkkLkeQBLMwIkbJ3EdzaecKgVLYT/ rkz4rmFtNBA6hbOHx1KiYg5Q36u2IUsJTCB1DV8sIs0GVaNjlMbeFuKSfSNGsfc7 Gw2hjPSwLAefE/AdBaWiRyorgxN6mit08BVHktWpmPcO16pZEyBqqjbHNcWGh357 byifyQZibA+Idd8R7h4oLW18lJaeHCusfjDicEPcnE6LMOCAZl9a7zusRMYcC+K4 DQ0fvvEywWT1GnhzRbqqDJSNTrrd7HEKFsbNuY8QfAN+4o3qfBDWCB/vY7ux3KDq mgP9Z1OrUkd5lXljzLeMFNl4vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObMRunS yQ1zwIYFHUWVaPn7g0m0MB8GA1UdIwQYMBaAFCEcVQtT6yBHUYW6vN5+cN9nREi3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTYwOC83NDgwRkM4ODAy RTcxMUVBQjA0NTA0MThDNEY5QUUwMi9JUnhWQzFQcklFZFJoYnE4M241dzMyZEVT TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lSeFZDMVBySUVkUmhicTgzbjV3MzJkRVNMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTYwOC83NDgwRkM4ODAyRTcxMUVBQjA0NTA0MThDNEY5QUUwMi9JUnhWQzFQcklF ZFJoYnE4M241dzMyZEVTTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBokeQ6iIkrNQphv8XvPrDFP12mCKCeEjWsHR2P8ZesFimDHSDXfmaB nwIpQnRYkuSExakmvpVS+UqHOvS6o7zj7eKVAoFhduUTRje1qXIJEaApFxMjSg68 Rc/x7d6MRCxC1e2yuUgPxot5s6+B3SxNWBWqJlJ1hYkBIMnq411Wk1U+n0gw4pEy BJmYbGIqSJe+F6fKk2GnF89ooU8qqB/Sy+zs9GGjnW6XBXrz3K4lL44GdvE84iEu aqiZnvlNMvP4gkpQnyBqRX6M8/4GvMYnSXahDH0xk7egUh/SSzuiWHRz3uAxpNI5 dJLGKtQDoL2qajCQJnQa3tWGdU/eQErF -----END CERTIFICATE-----Generated at Sat Jul 5 05:13:12 2025 by rpki-client