$ rpki-client -vvf rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft File: S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft (raw, json) Hash identifier: irdhwBf6J9KeUTDk6tuUSiBPxvyi4GqHSFIua91MLn0= Subject key identifier: C8:77:AD:5E:8E:11:6D:4E:DD:DF:D0:5A:9F:B0:BD:57:57:53:12:8E Authority key identifier: 4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6 Certificate issuer: /CN=A912016A/serialNumber=4B58B0B06109946660C09FBC9699A643B7F42AE6 Certificate serial: 21EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft Manifest number: 21D0 Signing time: Mon 20 Oct 2025 16:07:31 +0000 Manifest this update: Mon 20 Oct 2025 16:07:30 +0000 Manifest next update: Mon 27 Oct 2025 16:07:30 +0000 Files and hashes: 1: S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl (hash: Xm9q8F3KTkc5WSUCl37CLb5M153rCE09wF9okWS/HRg=) 2: 05106CB4AFB011EA8972F65BC4F9AE02.roa (hash: 92gAmRF+UjT7qi3HgspO5M3xKNUrfaTQm2Z8Zii+ZFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8687 (0x21ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912016A, serialNumber=4B58B0B06109946660C09FBC9699A643B7F42AE6 Validity Not Before: Oct 20 16:07:30 2025 GMT Not After : Oct 27 16:07:30 2025 GMT Subject: CN=68f65e42-2765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:45:7a:2f:25:2f:09:af:fa:0f:7c:d0:59:f9: 15:15:a0:b5:95:d1:3c:d6:0b:50:4d:48:a7:5e:52: dc:33:97:ca:b9:d3:1e:51:22:17:36:7f:02:67:b9: f2:34:5e:62:9a:5d:c4:5c:d7:72:29:76:04:f7:25: 0f:ec:54:2d:3c:de:1a:47:6b:f6:ef:68:36:c7:38: 8a:66:83:89:98:3a:4c:01:de:e7:f7:c2:6a:0f:6a: da:82:1b:75:32:a6:c3:b2:03:c3:3c:7b:43:be:ed: a8:d5:f9:77:53:e9:c9:e5:27:4a:f4:71:ea:bd:20: c0:5c:3d:5a:3f:0d:00:30:34:d4:51:e9:cf:d3:1d: 1f:5a:af:fd:23:24:3d:88:2e:9c:b3:d0:d9:bd:f6: d3:9d:94:3c:18:d2:01:39:2d:13:0f:6e:84:3c:80: 2a:41:12:dd:5f:41:10:f8:2b:50:3a:bf:67:36:0a: 8a:2f:9c:fb:e0:d3:a6:d9:20:61:90:64:1b:6f:1e: 3a:7e:c6:91:e4:a0:34:14:6a:97:e9:ea:59:54:6a: 70:09:a9:5a:77:22:26:c9:2a:d0:5f:ca:d2:35:8b: 88:a9:cf:be:68:b2:42:3d:57:d2:5a:7f:5c:70:af: a2:ea:22:ea:a2:50:c8:b4:a1:7f:7a:f3:d5:36:09: 93:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:77:AD:5E:8E:11:6D:4E:DD:DF:D0:5A:9F:B0:BD:57:57:53:12:8E X509v3 Authority Key Identifier: keyid:4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:24:c8:ac:60:18:8d:04:1a:16:87:d3:e0:04:76:a4:6e:76: 3e:6a:28:11:5f:6f:7f:5b:35:a4:87:0d:28:ed:ff:a5:d1:e4: 71:3f:78:47:8e:72:ff:e5:99:c2:8d:9c:86:10:be:4f:0c:e4: f8:67:9b:44:f2:82:6d:e5:5a:3e:f2:35:ab:e5:45:34:8d:e0: 3d:a7:14:61:f8:61:a7:a5:0e:b4:60:f5:23:f8:0c:4a:94:41: b2:a2:f5:4e:2d:83:68:36:26:9c:c2:27:56:c9:59:8f:9d:eb: 03:1d:c1:11:89:91:3f:cc:12:da:d0:fb:bb:5a:68:77:ab:6d: f5:9e:a2:9a:a5:40:33:fe:9d:b3:42:45:1d:03:30:c9:2e:50: 69:6b:6a:04:35:11:de:25:06:21:c5:8f:10:7b:35:97:a9:ec: 6e:6d:73:83:a4:a9:a5:2a:6e:f3:02:bd:af:ce:e4:16:98:4b: 42:d6:e9:16:d0:8f:5b:69:99:33:90:d7:41:85:64:15:10:3f: e6:d3:59:8a:c4:e8:37:67:fb:95:a7:a9:25:e6:1d:df:54:89: 99:fc:04:5c:26:23:72:00:15:4c:af:67:27:05:68:9a:c4:25: 87:b0:9a:8e:1f:81:2e:cf:98:6c:59:5e:e5:a9:61:8c:9d:2f: 10:8b:d5:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAxNkExMTAvBgNVBAUTKDRCNThCMEIwNjEwOTk0NjY2MEMwOUZCQzk2OTlBNjQz QjdGNDJBRTYwHhcNMjUxMDIwMTYwNzMwWhcNMjUxMDI3MTYwNzMwWjAYMRYwFAYD VQQDEw02OGY2NWU0Mi0yNzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlUV6LyUvCa/6D3zQWfkVFaC1ldE81gtQTUinXlLcM5fKudMeUSIXNn8CZ7ny NF5iml3EXNdyKXYE9yUP7FQtPN4aR2v272g2xziKZoOJmDpMAd7n98JqD2raght1 MqbDsgPDPHtDvu2o1fl3U+nJ5SdK9HHqvSDAXD1aPw0AMDTUUenP0x0fWq/9IyQ9 iC6cs9DZvfbTnZQ8GNIBOS0TD26EPIAqQRLdX0EQ+CtQOr9nNgqKL5z74NOm2SBh kGQbbx46fsaR5KA0FGqX6epZVGpwCaladyImySrQX8rSNYuIqc++aLJCPVfSWn9c cK+i6iLqolDItKF/evPVNgmT3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMh3rV6O EW1O3d/QWp+wvVdXUxKOMB8GA1UdIwQYMBaAFEtYsLBhCZRmYMCfvJaZpkO39Crm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDE2QS9CMDgzREQwOERF QjYxMUU1OUUxM0I4NzlDNEY5QUUwMi9TMWl3c0dFSmxHWmd3Si04bHBtbVE3ZjBL dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MxaXdzR0VKbEdaZ3dKLThscG1tUTdmMEt1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDE2QS9CMDgzREQwOERFQjYxMUU1OUUxM0I4NzlDNEY5QUUwMi9TMWl3c0dFSmxH Wmd3Si04bHBtbVE3ZjBLdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHJMisYBiNBBoWh9PgBHakbnY+aigRX29/WzWkhw0o7f+l0eRxP3hH jnL/5ZnCjZyGEL5PDOT4Z5tE8oJt5Vo+8jWr5UU0jeA9pxRh+GGnpQ60YPUj+AxK lEGyovVOLYNoNiacwidWyVmPnesDHcERiZE/zBLa0Pu7Wmh3q231nqKapUAz/p2z QkUdAzDJLlBpa2oENRHeJQYhxY8QezWXqexubXODpKmlKm7zAr2vzuQWmEtC1ukW 0I9baZkzkNdBhWQVED/m01mKxOg3Z/uVp6kl5h3fVImZ/ARcJiNyABVMr2cnBWia xCWHsJqOH4Euz5hsWV7lqWGMnS8Qi9VN -----END CERTIFICATE-----Generated at Tue Oct 21 02:24:44 2025 by rpki-client