$ rpki-client -vvf rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft File: S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft (raw, json) Hash identifier: DWx/RxMWv/ieio9i+gpuJdRw32WILKzRIMmwRmFd4YM= Subject key identifier: 8A:36:12:1F:D3:BB:D8:CA:7A:B1:0D:81:BB:E7:4E:79:94:59:C0:90 Authority key identifier: 4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6 Certificate issuer: /CN=A912016A/serialNumber=4B58B0B06109946660C09FBC9699A643B7F42AE6 Certificate serial: 21D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft Manifest number: 21B3 Signing time: Sun 24 Aug 2025 15:52:41 +0000 Manifest this update: Sun 24 Aug 2025 15:52:40 +0000 Manifest next update: Sun 31 Aug 2025 15:52:40 +0000 Files and hashes: 1: S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl (hash: 5yBZbpALHz6v8QSaE5UaEUmb2cyZ1sDa9L9u2Ka4VvQ=) 2: 05106CB4AFB011EA8972F65BC4F9AE02.roa (hash: 92gAmRF+UjT7qi3HgspO5M3xKNUrfaTQm2Z8Zii+ZFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8658 (0x21d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912016A, serialNumber=4B58B0B06109946660C09FBC9699A643B7F42AE6 Validity Not Before: Aug 24 15:52:40 2025 GMT Not After : Aug 31 15:52:40 2025 GMT Subject: CN=68ab3548-dd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:05:2d:0b:d3:82:87:60:65:73:d0:7b:5c:82: 9d:b4:7f:3b:ee:4f:8e:62:a6:b8:4b:02:9c:9b:f8: 83:01:dd:f5:a6:fe:3d:3d:48:f2:60:39:87:70:e2: 96:59:ce:ef:91:5b:6a:9b:af:00:6a:15:53:4e:3e: b4:9f:37:cc:3a:f2:e0:a0:43:c8:2b:d9:48:04:10: b4:08:01:cf:df:cd:16:de:e1:18:81:b5:2e:85:f9: d3:55:a9:2f:9c:e5:54:fe:d2:f4:c1:c8:5c:37:24: 92:4b:6c:e2:cf:2d:49:9c:96:d3:30:b3:95:de:0c: 08:ce:59:5a:35:7f:54:84:aa:c0:4e:f7:25:a5:a3: d2:cb:59:74:b5:7f:54:32:d6:7f:a2:6e:97:8a:c6: d4:45:1b:a3:3a:34:46:58:2a:e2:0a:80:93:78:a4: f6:49:bf:e4:f3:6e:f2:64:be:02:ec:e7:23:b3:ea: 22:8e:a2:58:f5:8e:d9:09:26:0a:78:2c:9c:c6:bb: ac:2a:a1:e7:87:77:9a:5d:60:6e:e6:25:af:91:ea: 4b:cf:5f:63:02:f4:1e:3c:c2:e3:21:ee:06:80:20: dd:7b:e0:46:69:ab:56:33:d0:ab:ca:6a:1f:45:8a: c2:a0:5e:31:be:c1:8a:eb:83:3f:25:bb:03:53:4d: c1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:36:12:1F:D3:BB:D8:CA:7A:B1:0D:81:BB:E7:4E:79:94:59:C0:90 X509v3 Authority Key Identifier: keyid:4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:03:a1:33:b8:82:53:71:50:b8:fa:8c:37:6c:48:ac:41:68: ca:c5:fd:06:1c:ce:63:01:13:3b:8a:09:71:a0:bd:98:27:87: 56:76:f7:a8:38:76:7c:1a:fc:6d:fe:24:32:c3:21:7e:14:54: 0e:15:76:96:e3:9f:25:fa:b2:16:3b:95:f2:73:5a:04:34:13: 25:31:4c:bb:cb:90:ff:ce:90:36:43:75:44:e4:2b:31:70:78: 1c:56:9d:0a:46:65:0a:11:32:bd:4c:23:6f:07:69:54:39:c0: 84:9c:7d:d2:8e:3c:1f:3c:74:5b:f1:8e:7b:3a:4e:54:aa:5a: 22:4c:17:ba:66:26:4b:3e:0b:81:a1:ca:bb:a5:e8:de:d6:46: 09:1a:b4:ed:fe:44:6e:39:4c:d6:85:85:74:a1:b6:7e:89:cf: 3e:0c:25:6a:5f:f6:53:7c:63:d8:80:cc:98:04:e6:54:71:99: be:91:75:12:46:0a:99:c2:e6:6c:55:42:1b:5f:e7:5c:c3:06: 61:48:c4:ac:57:f1:97:cf:ea:fa:55:8b:5c:67:d8:e6:9a:e5: ac:27:95:be:64:03:74:b6:1b:9a:1a:71:b4:af:5f:4b:3b:7e: 69:6f:42:77:d0:23:c3:72:a8:a6:0d:60:f6:9b:1f:39:09:b9: 0c:c5:f3:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAxNkExMTAvBgNVBAUTKDRCNThCMEIwNjEwOTk0NjY2MEMwOUZCQzk2OTlBNjQz QjdGNDJBRTYwHhcNMjUwODI0MTU1MjQwWhcNMjUwODMxMTU1MjQwWjAYMRYwFAYD VQQDEw02OGFiMzU0OC1kZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwUtC9OCh2Blc9B7XIKdtH877k+OYqa4SwKcm/iDAd31pv49PUjyYDmHcOKW Wc7vkVtqm68AahVTTj60nzfMOvLgoEPIK9lIBBC0CAHP380W3uEYgbUuhfnTVakv nOVU/tL0wchcNySSS2zizy1JnJbTMLOV3gwIzllaNX9UhKrATvclpaPSy1l0tX9U MtZ/om6XisbURRujOjRGWCriCoCTeKT2Sb/k827yZL4C7Ocjs+oijqJY9Y7ZCSYK eCycxrusKqHnh3eaXWBu5iWvkepLz19jAvQePMLjIe4GgCDde+BGaatWM9Crymof RYrCoF4xvsGK64M/JbsDU03B1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIo2Eh/T u9jKerENgbvnTnmUWcCQMB8GA1UdIwQYMBaAFEtYsLBhCZRmYMCfvJaZpkO39Crm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDE2QS9CMDgzREQwOERF QjYxMUU1OUUxM0I4NzlDNEY5QUUwMi9TMWl3c0dFSmxHWmd3Si04bHBtbVE3ZjBL dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MxaXdzR0VKbEdaZ3dKLThscG1tUTdmMEt1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDE2QS9CMDgzREQwOERFQjYxMUU1OUUxM0I4NzlDNEY5QUUwMi9TMWl3c0dFSmxH Wmd3Si04bHBtbVE3ZjBLdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASA6EzuIJTcVC4+ow3bEisQWjKxf0GHM5jARM7iglxoL2YJ4dWdveo OHZ8Gvxt/iQywyF+FFQOFXaW458l+rIWO5Xyc1oENBMlMUy7y5D/zpA2Q3VE5Csx cHgcVp0KRmUKETK9TCNvB2lUOcCEnH3SjjwfPHRb8Y57Ok5UqloiTBe6ZiZLPguB ocq7peje1kYJGrTt/kRuOUzWhYV0obZ+ic8+DCVqX/ZTfGPYgMyYBOZUcZm+kXUS RgqZwuZsVUIbX+dcwwZhSMSsV/GXz+r6VYtcZ9jmmuWsJ5W+ZAN0thuaGnG0r19L O35pb0J30CPDcqimDWD2mx85CbkMxfNp -----END CERTIFICATE-----Generated at Sun Aug 24 22:20:53 2025 by rpki-client