$ rpki-client -vvf rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft File: S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft (raw, json) Hash identifier: pXt71oz2riIP65hNA777CQVkdX6F7bE5jv6TRgS2pu4= Subject key identifier: 33:8C:CE:FA:C6:00:01:F3:EE:B1:32:27:60:E0:D4:F4:59:83:F8:83 Authority key identifier: 4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6 Certificate issuer: /CN=A912016A/serialNumber=4B58B0B06109946660C09FBC9699A643B7F42AE6 Certificate serial: 218A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft Manifest number: 216B Signing time: Fri 04 Apr 2025 15:58:14 +0000 Manifest this update: Fri 04 Apr 2025 15:58:13 +0000 Manifest next update: Fri 11 Apr 2025 15:58:13 +0000 Files and hashes: 1: S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl (hash: ACOCLwhZT+NaVKCmF1OJ63PbBDjw8ZATQ4mCf9nMgCo=) 2: 05106CB4AFB011EA8972F65BC4F9AE02.roa (hash: 92gAmRF+UjT7qi3HgspO5M3xKNUrfaTQm2Z8Zii+ZFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8586 (0x218a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912016A Validity Not Before: Apr 4 15:58:13 2025 GMT Not After : Apr 11 15:58:13 2025 GMT Subject: CN=67f00196-f15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:62:f3:8a:12:d2:23:01:2d:c0:59:0c:e9:e2: ab:5c:17:f2:1f:59:b1:e2:f5:d6:8c:4e:4b:68:d5: 44:3b:cc:d8:10:fd:cf:83:ff:38:33:90:a1:38:85: af:ff:af:a2:75:d9:72:6e:11:f3:95:be:fe:73:2d: 23:67:40:a9:ac:88:ba:49:84:2b:64:95:13:48:a0: 42:8e:c2:b8:c0:6b:80:b5:d2:f4:fe:a6:06:02:ea: e5:76:1a:98:15:ad:67:3d:c3:4c:19:89:25:88:6e: 24:8d:a9:74:38:00:d9:12:00:a3:f3:49:95:b7:31: d1:5a:3d:95:46:3b:63:c4:cc:86:b6:cc:1a:dd:3f: be:66:ff:44:9a:16:f9:e3:08:bc:61:1a:fa:83:35: 72:3a:fd:45:87:d6:26:30:52:28:b9:3a:87:76:0f: 00:94:7f:f7:40:9c:f4:38:fc:b1:de:a4:87:ad:3e: b9:a8:3e:16:17:2a:d4:d1:98:80:58:21:e7:a3:50: 8f:db:b8:59:4f:9c:39:14:e3:ce:48:62:7c:38:9a: 3e:4d:76:88:97:a3:66:51:fc:44:17:a8:da:f1:96: 72:a3:5a:dc:19:44:e6:89:6f:de:40:82:f8:6b:1c: 82:4c:5e:42:92:14:e9:da:4b:6d:6d:37:92:89:96: c8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8C:CE:FA:C6:00:01:F3:EE:B1:32:27:60:E0:D4:F4:59:83:F8:83 X509v3 Authority Key Identifier: keyid:4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:ad:57:03:6d:46:cb:0a:d2:c1:b7:69:46:41:89:31:a8:a0: 58:f5:d6:06:6e:6e:f0:78:ad:10:25:c8:7b:25:be:f3:f9:72: d4:10:38:3f:33:a3:c2:da:03:eb:44:22:8f:c0:6b:d5:da:05: b1:4d:66:f1:dd:e9:65:93:5a:75:86:61:ab:4e:38:be:54:69: 94:0b:c2:ad:64:21:ec:cf:72:29:68:ad:8d:dd:fd:8d:63:13: a3:73:57:e4:35:33:49:3b:f8:db:0a:02:e7:fb:f2:93:a4:18: 29:00:cb:14:59:99:4a:ba:ea:81:87:c3:b8:93:e9:a7:9c:f5: 0b:92:34:43:35:ba:a6:84:38:16:dd:a1:8a:54:a1:94:95:ec: 5c:3f:66:55:98:d8:35:1c:c0:c8:0a:7d:e8:62:35:a3:ea:49: 45:83:77:6c:12:2e:b5:ab:d0:83:60:1a:b3:28:e6:d4:41:45: 7a:b4:c8:1c:dd:b7:d2:31:ba:7a:4c:12:f5:d6:e0:a3:7c:23: d8:10:e0:fb:ec:8c:0f:19:94:5f:16:02:08:0c:a6:a6:46:cb: c1:1b:1b:0e:f0:34:cf:79:78:bd:f7:bc:3c:dc:b6:1b:ae:3d: a0:6a:30:9d:6c:91:a8:56:01:5e:1c:41:e3:eb:4e:14:11:30: 81:0b:0f:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAxNkExMTAvBgNVBAUTKDRCNThCMEIwNjEwOTk0NjY2MEMwOUZCQzk2OTlBNjQz QjdGNDJBRTYwHhcNMjUwNDA0MTU1ODEzWhcNMjUwNDExMTU1ODEzWjAYMRYwFAYD VQQDEw02N2YwMDE5Ni1mMTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGLzihLSIwEtwFkM6eKrXBfyH1mx4vXWjE5LaNVEO8zYEP3Pg/84M5ChOIWv /6+iddlybhHzlb7+cy0jZ0CprIi6SYQrZJUTSKBCjsK4wGuAtdL0/qYGAurldhqY Fa1nPcNMGYkliG4kjal0OADZEgCj80mVtzHRWj2VRjtjxMyGtswa3T++Zv9Emhb5 4wi8YRr6gzVyOv1Fh9YmMFIouTqHdg8AlH/3QJz0OPyx3qSHrT65qD4WFyrU0ZiA WCHno1CP27hZT5w5FOPOSGJ8OJo+TXaIl6NmUfxEF6ja8ZZyo1rcGUTmiW/eQIL4 axyCTF5CkhTp2kttbTeSiZbIKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOMzvrG AAHz7rEyJ2Dg1PRZg/iDMB8GA1UdIwQYMBaAFEtYsLBhCZRmYMCfvJaZpkO39Crm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDE2QS9CMDgzREQwOERF QjYxMUU1OUUxM0I4NzlDNEY5QUUwMi9TMWl3c0dFSmxHWmd3Si04bHBtbVE3ZjBL dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MxaXdzR0VKbEdaZ3dKLThscG1tUTdmMEt1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDE2QS9CMDgzREQwOERFQjYxMUU1OUUxM0I4NzlDNEY5QUUwMi9TMWl3c0dFSmxH Wmd3Si04bHBtbVE3ZjBLdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnrVcDbUbLCtLBt2lGQYkxqKBY9dYGbm7weK0QJch7Jb7z+XLUEDg/ M6PC2gPrRCKPwGvV2gWxTWbx3ellk1p1hmGrTji+VGmUC8KtZCHsz3IpaK2N3f2N YxOjc1fkNTNJO/jbCgLn+/KTpBgpAMsUWZlKuuqBh8O4k+mnnPULkjRDNbqmhDgW 3aGKVKGUlexcP2ZVmNg1HMDICn3oYjWj6klFg3dsEi61q9CDYBqzKObUQUV6tMgc 3bfSMbp6TBL11uCjfCPYEOD77IwPGZRfFgIIDKamRsvBGxsO8DTPeXi997w83LYb rj2gajCdbJGoVgFeHEHj604UETCBCw+R -----END CERTIFICATE-----Generated at Fri Apr 4 18:32:19 2025 by rpki-client