$ rpki-client -vvf rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft File: S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft (raw, json) Hash identifier: vDFTWTjfriG0cPJSEM3YXPXTRRhnCTFdPEzhEl7Mz1E= Subject key identifier: 21:39:ED:22:21:73:A6:31:85:08:61:73:4E:85:DE:75:E0:D5:29:E3 Authority key identifier: 4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6 Certificate issuer: /CN=A912016A/serialNumber=4B58B0B06109946660C09FBC9699A643B7F42AE6 Certificate serial: 219E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft Manifest number: 217F Signing time: Wed 14 May 2025 15:59:41 +0000 Manifest this update: Wed 14 May 2025 15:59:41 +0000 Manifest next update: Wed 21 May 2025 15:59:41 +0000 Files and hashes: 1: S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl (hash: wYoVBZNcWm72GaQdJrIy/7zrnKu/YUYAUqgMyVXPxBQ=) 2: 05106CB4AFB011EA8972F65BC4F9AE02.roa (hash: 92gAmRF+UjT7qi3HgspO5M3xKNUrfaTQm2Z8Zii+ZFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8606 (0x219e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912016A, serialNumber=4B58B0B06109946660C09FBC9699A643B7F42AE6 Validity Not Before: May 14 15:59:41 2025 GMT Not After : May 21 15:59:41 2025 GMT Subject: CN=6824bded-5d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:74:ba:54:71:48:6f:4d:97:92:74:da:bc:40: e6:4f:22:66:2e:d1:2c:9c:9d:55:fb:ee:bc:f9:b8: dd:9e:af:6f:d3:e7:4e:5c:4d:16:15:4c:4b:23:93: 46:f1:62:5d:1e:c7:3d:77:f9:03:5f:53:86:6a:28: 44:ac:2d:51:5d:f2:95:e6:ac:e2:13:49:03:08:41: 20:36:42:7b:4e:f4:76:8c:10:00:de:56:6d:47:66: 79:a7:fd:21:cc:b5:d3:e9:c0:80:9b:b5:fd:63:3f: 9c:70:dd:58:bf:59:4f:72:29:92:72:3a:8d:bb:37: 80:12:d9:81:7a:4e:d3:b4:27:f8:8d:15:d4:45:57: b5:04:a8:93:82:a5:17:d4:07:64:d9:b5:3a:f1:32: cb:bc:51:c4:7b:fc:2d:5b:42:ca:fb:91:d4:62:27: ee:cd:67:9e:e5:34:3c:e0:02:4d:48:0a:bf:d2:a1: 36:ba:82:2e:43:19:46:9d:fa:42:cb:7a:a6:d4:d9: 06:cf:47:61:b2:b5:b5:51:f5:8f:b7:cb:cc:ad:1a: 79:8d:0c:9f:52:1e:d2:86:b9:31:31:90:5b:a7:c3: f6:03:fb:29:e6:71:0f:f5:b2:20:7a:fd:b9:95:20: b1:21:18:d7:e5:c3:ed:23:b3:f7:9a:2a:4d:27:5e: 8d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:39:ED:22:21:73:A6:31:85:08:61:73:4E:85:DE:75:E0:D5:29:E3 X509v3 Authority Key Identifier: keyid:4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:96:5f:dc:e4:65:a8:e2:1d:79:95:f8:98:b1:82:07:1b:8b: 76:de:8f:51:08:3c:78:e5:06:68:7d:95:84:f1:1a:b1:6f:36: 81:9d:b1:59:32:20:40:e9:a6:de:ac:d3:5a:af:a4:b0:aa:04: ba:2f:ef:75:77:7e:f1:55:ef:32:38:d5:4e:17:5b:13:4c:06: 29:df:10:b7:2e:81:c5:a1:a7:d6:c1:e2:59:34:3e:bc:97:5b: 5b:eb:45:d7:1b:f2:fd:3b:41:a5:8c:50:bb:eb:55:11:3e:89: 04:8a:3e:d1:10:3d:ce:38:fe:9b:da:c2:60:6f:4c:4e:c7:13: 16:60:d6:a4:48:d9:5b:99:7f:3d:d8:3b:2c:0b:2f:34:3c:2f: 31:7d:5d:dd:a1:18:a6:40:b1:dd:87:a5:9e:36:6f:a1:e7:5d: 2a:a3:de:61:ed:0c:b9:75:e5:31:20:ba:84:d4:39:0f:ed:43: 73:2d:bd:b0:a7:c2:f8:61:4a:d6:e6:fb:a7:68:12:01:09:5a: 17:65:4f:96:88:53:63:58:99:c3:3a:3a:d9:91:ca:b8:23:cf: 8c:8c:f4:bd:8f:17:99:87:b1:ef:a8:5f:8a:a7:6f:b0:a2:df: 72:15:59:ab:3b:4d:53:7e:c8:e3:28:37:ae:09:71:a9:1e:47: 35:38:c7:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAxNkExMTAvBgNVBAUTKDRCNThCMEIwNjEwOTk0NjY2MEMwOUZCQzk2OTlBNjQz QjdGNDJBRTYwHhcNMjUwNTE0MTU1OTQxWhcNMjUwNTIxMTU1OTQxWjAYMRYwFAYD VQQDEw02ODI0YmRlZC01ZDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHS6VHFIb02XknTavEDmTyJmLtEsnJ1V++68+bjdnq9v0+dOXE0WFUxLI5NG 8WJdHsc9d/kDX1OGaihErC1RXfKV5qziE0kDCEEgNkJ7TvR2jBAA3lZtR2Z5p/0h zLXT6cCAm7X9Yz+ccN1Yv1lPcimScjqNuzeAEtmBek7TtCf4jRXURVe1BKiTgqUX 1Adk2bU68TLLvFHEe/wtW0LK+5HUYifuzWee5TQ84AJNSAq/0qE2uoIuQxlGnfpC y3qm1NkGz0dhsrW1UfWPt8vMrRp5jQyfUh7ShrkxMZBbp8P2A/sp5nEP9bIgev25 lSCxIRjX5cPtI7P3mipNJ16NgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCE57SIh c6YxhQhhc06F3nXg1SnjMB8GA1UdIwQYMBaAFEtYsLBhCZRmYMCfvJaZpkO39Crm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDE2QS9CMDgzREQwOERF QjYxMUU1OUUxM0I4NzlDNEY5QUUwMi9TMWl3c0dFSmxHWmd3Si04bHBtbVE3ZjBL dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MxaXdzR0VKbEdaZ3dKLThscG1tUTdmMEt1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDE2QS9CMDgzREQwOERFQjYxMUU1OUUxM0I4NzlDNEY5QUUwMi9TMWl3c0dFSmxH Wmd3Si04bHBtbVE3ZjBLdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxll/c5GWo4h15lfiYsYIHG4t23o9RCDx45QZofZWE8RqxbzaBnbFZ MiBA6aberNNar6SwqgS6L+91d37xVe8yONVOF1sTTAYp3xC3LoHFoafWweJZND68 l1tb60XXG/L9O0GljFC761URPokEij7RED3OOP6b2sJgb0xOxxMWYNakSNlbmX89 2DssCy80PC8xfV3doRimQLHdh6WeNm+h510qo95h7Qy5deUxILqE1DkP7UNzLb2w p8L4YUrW5vunaBIBCVoXZU+WiFNjWJnDOjrZkcq4I8+MjPS9jxeZh7HvqF+Kp2+w ot9yFVmrO01TfsjjKDeuCXGpHkc1OMeu -----END CERTIFICATE-----Generated at Fri May 16 13:55:53 2025 by rpki-client