$ rpki-client -vvf rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft File: -vIwziL75k9oiZnvfNiU3b2biSU.mft (raw, json) Hash identifier: kqod2HoMgNbw7fVfcF3tF9Y72lteUIVdgPaOzqcqCsU= Subject key identifier: 83:F0:B6:20:56:52:A6:81:BD:13:E8:3D:E9:0E:A2:7B:16:8E:08:29 Authority key identifier: FA:F2:30:CE:22:FB:E6:4F:68:89:99:EF:7C:D8:94:DD:BD:9B:89:25 Certificate issuer: /CN=A913841B/serialNumber=FAF230CE22FBE64F688999EF7CD894DDBD9B8925 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-vIwziL75k9oiZnvfNiU3b2biSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft Manifest number: 16 Signing time: Sat 23 Aug 2025 08:13:32 +0000 Manifest this update: Sat 23 Aug 2025 08:13:31 +0000 Manifest next update: Sat 30 Aug 2025 08:13:31 +0000 Files and hashes: 1: -vIwziL75k9oiZnvfNiU3b2biSU.crl (hash: If1+s6lXjeCgy7LfYCEBk7tss9P3dap14GUD/p7ltGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.crl rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-vIwziL75k9oiZnvfNiU3b2biSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913841B, serialNumber=FAF230CE22FBE64F688999EF7CD894DDBD9B8925 Validity Not Before: Aug 23 08:13:31 2025 GMT Not After : Aug 30 08:13:31 2025 GMT Subject: CN=68a9782b-f3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e8:f7:03:e3:b4:36:c2:48:4f:a1:43:85:5c: a2:56:aa:cb:04:9d:1b:7f:a1:fb:40:83:e8:0c:0e: 8e:bc:7a:50:92:59:e6:e4:eb:cd:13:f3:11:84:b5: 07:9d:62:3f:e9:f3:ff:02:0c:56:67:b6:0e:6e:28: 17:4e:a4:1a:1a:e4:bf:54:c1:b2:18:b5:a5:d3:7a: ca:be:8c:e2:b7:42:f9:33:34:ad:bb:c3:11:2c:9a: 48:51:92:03:92:92:86:3f:b0:79:e2:c3:d5:e5:93: f0:15:e2:bd:1a:7a:8d:d9:fb:2d:32:a6:5b:67:28: 90:6c:67:40:31:96:09:cf:4b:cd:70:08:04:96:9b: 75:98:0b:bf:ce:7d:0b:37:39:3d:47:5e:7a:4e:01: f8:59:b8:f9:fa:d2:8b:29:53:61:de:62:a2:ad:ad: 69:58:f2:85:d9:63:7b:bb:5f:39:28:9a:e1:e5:1c: 9f:f6:b4:a2:a9:b5:14:a7:cb:4f:ca:f7:98:f4:cb: 76:81:18:2e:5d:ca:3d:9c:bb:8d:c7:8e:88:f4:ae: eb:e6:51:8a:97:94:cc:27:11:95:b8:9c:22:e4:d4: 56:21:de:d7:47:dd:d9:2b:a7:13:e1:c1:44:69:84: 86:8a:6c:22:9d:72:f1:b1:fd:fd:6e:c8:5e:34:9b: 1d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F0:B6:20:56:52:A6:81:BD:13:E8:3D:E9:0E:A2:7B:16:8E:08:29 X509v3 Authority Key Identifier: keyid:FA:F2:30:CE:22:FB:E6:4F:68:89:99:EF:7C:D8:94:DD:BD:9B:89:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-vIwziL75k9oiZnvfNiU3b2biSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:05:b8:80:9d:04:a5:a6:36:6f:f5:45:0d:08:8e:01:3b:99: b9:be:25:ce:1a:80:86:49:b1:e5:4a:12:87:25:8d:e2:ee:de: 65:bf:f9:72:a1:b7:75:99:5e:11:e5:75:00:81:a2:34:fb:5e: 47:63:67:f3:ec:b9:f0:e9:1e:d6:91:ec:a5:a9:6e:3e:4c:02: ea:f8:6f:1b:a6:ba:62:fc:d3:1a:5e:f6:63:88:a1:44:d9:55: 86:97:80:16:96:25:23:c0:28:91:56:53:36:a3:a9:fe:ee:a2: f9:13:0c:be:ea:57:00:c8:32:bd:9f:3f:b3:e5:83:fa:c3:79: 90:4a:49:5f:89:a6:23:d4:c6:1e:8e:0c:72:67:75:5b:47:0a: 82:3c:9b:e7:bb:10:88:18:c8:ce:c8:b7:35:82:0f:cf:4f:42: d2:4c:56:26:34:f3:72:30:9d:7e:ed:4e:3a:9b:d1:09:c0:ee: 6f:cd:96:04:0a:d0:5c:91:a0:ef:e4:ea:69:76:c2:3a:a5:ab: bd:92:60:74:5f:34:e5:89:f8:0f:a7:56:4d:7a:59:f7:56:13: 08:01:bd:16:1f:04:2e:2a:07:aa:35:7e:7d:4e:a4:30:81:4b: 0a:76:e7:b4:ae:cb:97:87:0f:33:fe:54:3a:e0:f3:2b:bb:57: fa:29:9d:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODQxQjExMC8GA1UEBRMoRkFGMjMwQ0UyMkZCRTY0RjY4ODk5OUVGN0NEODk0RERC RDlCODkyNTAeFw0yNTA4MjMwODEzMzFaFw0yNTA4MzAwODEzMzFaMBgxFjAUBgNV BAMTDTY4YTk3ODJiLWYzZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA6PcD47Q2wkhPoUOFXKJWqssEnRt/oftAg+gMDo68elCSWebk680T8xGEtQed Yj/p8/8CDFZntg5uKBdOpBoa5L9UwbIYtaXTesq+jOK3QvkzNK27wxEsmkhRkgOS koY/sHniw9Xlk/AV4r0aeo3Z+y0ypltnKJBsZ0AxlgnPS81wCASWm3WYC7/OfQs3 OT1HXnpOAfhZuPn60ospU2HeYqKtrWlY8oXZY3u7XzkomuHlHJ/2tKKptRSny0/K 95j0y3aBGC5dyj2cu43Hjoj0ruvmUYqXlMwnEZW4nCLk1FYh3tdH3dkrpxPhwURp hIaKbCKdcvGx/f1uyF40mx07AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUg/C2IFZS poG9E+g96Q6iexaOCCkwHwYDVR0jBBgwFoAU+vIwziL75k9oiZnvfNiU3b2biSUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4NDFCL0Q1RjExOEVFNjBD MDExRjBBMkYxRUEyQ0M0RjlBRTAyLy12SXd6aUw3NWs5b2labnZmTmlVM2IyYmlT VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLXZJd3ppTDc1azlvaVpudmZOaVUzYjJiaVNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 NDFCL0Q1RjExOEVFNjBDMDExRjBBMkYxRUEyQ0M0RjlBRTAyLy12SXd6aUw3NWs5 b2labnZmTmlVM2IyYmlTVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABAFuICdBKWmNm/1RQ0IjgE7mbm+Jc4agIZJseVKEocljeLu3mW/+XKh t3WZXhHldQCBojT7XkdjZ/PsufDpHtaR7KWpbj5MAur4bxumumL80xpe9mOIoUTZ VYaXgBaWJSPAKJFWUzajqf7uovkTDL7qVwDIMr2fP7Plg/rDeZBKSV+JpiPUxh6O DHJndVtHCoI8m+e7EIgYyM7ItzWCD89PQtJMViY083IwnX7tTjqb0QnA7m/NlgQK 0FyRoO/k6ml2wjqlq72SYHRfNOWJ+A+nVk16WfdWEwgBvRYfBC4qB6o1fn1OpDCB Swp257Suy5eHDzP+VDrg8yu7V/opnf0= -----END CERTIFICATE-----Generated at Sun Aug 24 01:01:22 2025 by rpki-client