$ rpki-client -vvf rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft File: S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft (raw, json) Hash identifier: t548oFrpiYUjKlf2pi2yUzQxACVQevdmdm25swdyDxo= Subject key identifier: 85:21:2E:C7:18:9F:E3:C2:7C:E7:13:CE:A0:12:E3:C7:AC:69:72:98 Authority key identifier: 4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6 Certificate issuer: /CN=A912016A/serialNumber=4B58B0B06109946660C09FBC9699A643B7F42AE6 Certificate serial: 21B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft Manifest number: 2198 Signing time: Wed 02 Jul 2025 16:01:22 +0000 Manifest this update: Wed 02 Jul 2025 16:01:22 +0000 Manifest next update: Wed 09 Jul 2025 16:01:22 +0000 Files and hashes: 1: S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl (hash: fLb0c5ZX4otWQrKt5WITL0oF47SqDtMzBXZ+LWgbADU=) 2: 05106CB4AFB011EA8972F65BC4F9AE02.roa (hash: 92gAmRF+UjT7qi3HgspO5M3xKNUrfaTQm2Z8Zii+ZFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8631 (0x21b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912016A, serialNumber=4B58B0B06109946660C09FBC9699A643B7F42AE6 Validity Not Before: Jul 2 16:01:22 2025 GMT Not After : Jul 9 16:01:22 2025 GMT Subject: CN=686557d2-9515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:4a:65:df:a6:80:a9:65:55:74:91:91:a4: 83:b3:25:48:dc:94:79:28:8d:d5:10:73:1c:22:2d: b8:9a:ab:b5:30:60:e2:06:52:64:ea:80:86:20:56: bb:16:e5:ac:46:4e:c7:2a:8b:1b:53:03:15:81:61: ad:b1:ce:00:c8:97:72:e4:e0:49:01:68:17:76:68: 25:2d:d6:1c:6d:50:0f:0b:9d:22:65:ad:58:5b:b1: c2:79:1e:30:d9:b0:39:20:fe:c1:b0:f8:ae:98:e1: 70:7b:75:e6:39:f0:bb:da:8b:5f:f4:3c:2d:3b:1a: ba:cc:00:6d:9f:72:c8:5e:1b:c3:88:f6:e0:44:17: 20:33:d9:24:ed:31:62:be:13:c8:1d:22:ee:2e:db: 30:64:10:2b:cf:a1:94:35:27:74:d7:3b:22:f7:ec: 8b:e4:d7:a8:09:1f:8f:41:d4:0a:40:34:05:59:cd: 07:33:34:aa:5f:96:d5:5a:ac:95:61:64:44:87:f2: fa:36:e0:fe:98:c7:c1:c1:d1:3f:b2:ec:86:f6:cb: 21:70:b2:c3:9c:76:d8:21:f5:08:0a:9f:8c:46:2d: d7:1e:82:45:87:3d:34:e4:5c:c7:0b:a8:85:9a:9b: ff:63:e4:81:9b:ec:ed:26:8a:19:4b:a9:74:1b:77: 9b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:21:2E:C7:18:9F:E3:C2:7C:E7:13:CE:A0:12:E3:C7:AC:69:72:98 X509v3 Authority Key Identifier: keyid:4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:e0:f1:d0:f6:44:f7:28:10:eb:e3:63:cf:b3:47:c5:ae:ab: b9:27:41:10:2a:52:9b:4b:bf:60:af:79:2a:11:36:76:66:f2: b6:f0:12:c6:b9:ea:ac:8e:95:d2:11:8c:1a:3c:8e:bd:17:b8: e7:08:d9:8d:68:5e:13:d4:13:97:99:48:99:6e:41:aa:30:58: b2:dd:e1:13:d8:a0:2f:a4:3a:96:1e:4a:84:55:74:65:fe:05: 9e:ad:4e:b0:af:bc:d5:fb:a9:c8:87:24:d6:6d:e7:23:c8:e7: 7a:17:72:f2:a9:4e:15:c0:56:53:e7:a6:6a:6a:ab:9b:62:5f: d2:04:49:cd:73:c5:1b:d5:dd:11:9a:2d:12:3d:6d:4f:39:2f: ca:6a:80:c9:3e:73:9e:d0:b0:f9:4b:a2:c6:2a:bd:bb:a0:1a: 3f:b3:62:a7:d3:31:1d:46:ae:0d:67:85:b1:2a:6b:a6:da:36: 77:21:71:15:ab:85:15:d2:ab:56:b9:87:e5:70:e6:4e:2e:8b: 5f:a4:9f:4b:ae:20:a9:6b:f8:6d:64:d2:a1:72:f0:f2:52:7d: 8a:b5:92:78:2f:d7:6c:a7:b0:0f:62:ad:fc:db:32:2d:1a:75: d7:a9:09:0c:d2:f0:d4:e7:4a:96:8f:ab:1f:29:27:90:d0:7b: 3d:9d:fd:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAxNkExMTAvBgNVBAUTKDRCNThCMEIwNjEwOTk0NjY2MEMwOUZCQzk2OTlBNjQz QjdGNDJBRTYwHhcNMjUwNzAyMTYwMTIyWhcNMjUwNzA5MTYwMTIyWjAYMRYwFAYD VQQDEw02ODY1NTdkMi05NTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusJKZd+mgKllVXSRkaSDsyVI3JR5KI3VEHMcIi24mqu1MGDiBlJk6oCGIFa7 FuWsRk7HKosbUwMVgWGtsc4AyJdy5OBJAWgXdmglLdYcbVAPC50iZa1YW7HCeR4w 2bA5IP7BsPiumOFwe3XmOfC72otf9DwtOxq6zABtn3LIXhvDiPbgRBcgM9kk7TFi vhPIHSLuLtswZBArz6GUNSd01zsi9+yL5NeoCR+PQdQKQDQFWc0HMzSqX5bVWqyV YWREh/L6NuD+mMfBwdE/suyG9sshcLLDnHbYIfUICp+MRi3XHoJFhz005FzHC6iF mpv/Y+SBm+ztJooZS6l0G3ebjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUhLscY n+PCfOcTzqAS48esaXKYMB8GA1UdIwQYMBaAFEtYsLBhCZRmYMCfvJaZpkO39Crm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDE2QS9CMDgzREQwOERF QjYxMUU1OUUxM0I4NzlDNEY5QUUwMi9TMWl3c0dFSmxHWmd3Si04bHBtbVE3ZjBL dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MxaXdzR0VKbEdaZ3dKLThscG1tUTdmMEt1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDE2QS9CMDgzREQwOERFQjYxMUU1OUUxM0I4NzlDNEY5QUUwMi9TMWl3c0dFSmxH Wmd3Si04bHBtbVE3ZjBLdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI4PHQ9kT3KBDr42PPs0fFrqu5J0EQKlKbS79gr3kqETZ2ZvK28BLG ueqsjpXSEYwaPI69F7jnCNmNaF4T1BOXmUiZbkGqMFiy3eET2KAvpDqWHkqEVXRl /gWerU6wr7zV+6nIhyTWbecjyOd6F3LyqU4VwFZT56ZqaqubYl/SBEnNc8Ub1d0R mi0SPW1POS/KaoDJPnOe0LD5S6LGKr27oBo/s2Kn0zEdRq4NZ4WxKmum2jZ3IXEV q4UV0qtWuYflcOZOLotfpJ9LriCpa/htZNKhcvDyUn2KtZJ4L9dsp7APYq382zIt GnXXqQkM0vDU50qWj6sfKSeQ0Hs9nf0x -----END CERTIFICATE-----Generated at Thu Jul 3 09:34:18 2025 by rpki-client