$ rpki-client -vvf rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft File: S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft (raw, json) Hash identifier: xgKjz/kmGe4NbwxkvoptPg2g91oWNqq7BUROnoqm5G8= Subject key identifier: 82:0F:58:2F:BE:BB:A2:81:99:C6:11:2E:C7:19:48:73:B2:8D:71:36 Authority key identifier: 4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6 Certificate issuer: /CN=A912016A/serialNumber=4B58B0B06109946660C09FBC9699A643B7F42AE6 Certificate serial: 21F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft Manifest number: 21D7 Signing time: Sun 02 Nov 2025 15:54:43 +0000 Manifest this update: Sun 02 Nov 2025 15:54:42 +0000 Manifest next update: Sun 09 Nov 2025 15:54:42 +0000 Files and hashes: 1: S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl (hash: /9emUtV+K3roZjUVLh4/2oY98rlMxGfPBohMX9/YU9o=) 2: 05106CB4AFB011EA8972F65BC4F9AE02.roa (hash: 92gAmRF+UjT7qi3HgspO5M3xKNUrfaTQm2Z8Zii+ZFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8694 (0x21f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912016A, serialNumber=4B58B0B06109946660C09FBC9699A643B7F42AE6 Validity Not Before: Nov 2 15:54:42 2025 GMT Not After : Nov 9 15:54:42 2025 GMT Subject: CN=69077ec3-5275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:dd:c9:d5:40:a2:d2:23:f4:19:e8:87:2b: 8a:40:be:2c:fc:e5:d9:c5:f9:b4:df:bf:43:83:86: 72:86:df:9d:c2:60:14:f3:49:84:5f:51:cc:ef:8d: cd:98:2d:0e:64:db:60:b6:8f:7b:7d:cf:32:81:e5: a7:17:68:53:0d:75:22:6a:29:81:83:cc:55:b2:21: 9a:40:fc:fd:68:83:57:c5:2f:c1:0a:71:a7:43:5e: bd:2b:0f:42:50:ff:4b:46:27:60:51:33:67:08:b0: 8f:3d:f9:fd:e2:8a:9e:9f:84:1b:31:b0:63:62:0c: 17:28:2e:be:a4:97:68:6a:28:af:79:fe:a3:ec:0e: 39:9c:65:de:b3:37:73:c8:34:94:88:95:ad:49:b0: 98:62:b7:15:ad:02:df:e8:69:04:85:75:63:74:4b: ad:8d:eb:4a:21:35:d9:cd:69:86:42:8f:d2:a7:66: f1:30:ef:57:6c:9d:4e:de:ce:25:d1:8f:0a:c1:4f: cc:58:e8:3b:31:2c:e3:88:58:cf:20:e7:37:83:4b: 62:68:95:a9:44:dc:bf:e1:c7:dd:ab:46:70:a7:b7: 92:5f:11:0d:b7:45:9f:18:62:fd:f7:6e:a2:d2:71: b6:16:84:8c:66:e4:4a:2b:4d:ed:de:1c:49:69:72: ca:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0F:58:2F:BE:BB:A2:81:99:C6:11:2E:C7:19:48:73:B2:8D:71:36 X509v3 Authority Key Identifier: keyid:4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:54:05:c9:8d:e0:5a:79:4f:4c:ee:39:a4:d4:33:e7:18:8a: 7e:2c:a9:7f:00:a1:55:89:8c:b4:4e:08:19:18:26:cf:4c:17: af:81:49:09:24:90:b6:77:80:91:a8:1f:1f:15:9c:f5:2e:d2: ae:5a:2c:d2:09:00:a4:7e:a1:63:ae:8f:a0:9c:77:c7:7d:55: 21:0b:5f:a3:1f:aa:ec:bc:df:40:8c:dd:71:91:84:31:46:f1: f3:d4:54:07:17:fa:60:4d:4b:1c:a8:92:d0:01:7a:58:13:c7: ef:42:5d:73:8f:13:7d:5c:f8:b5:14:d2:71:fe:a8:e5:8e:b6: f8:77:c0:73:de:a7:a9:be:8f:da:e9:8f:ae:1f:4b:cf:54:bd: b6:ff:90:1b:d2:ef:6d:c4:79:df:63:c3:e3:2d:35:42:f5:14: da:7a:45:1f:bc:ce:af:e2:29:e5:4c:17:0a:8e:b6:d4:7b:46: 3d:b4:78:87:46:fa:aa:77:eb:e6:59:7b:2a:10:94:a7:b1:f3: 7e:5a:7f:36:3a:b4:30:0f:e2:5a:36:c7:d1:78:b5:70:c6:4e: 3d:af:2e:77:11:99:d6:37:76:bf:e2:11:88:e4:d7:25:ee:81: f1:cb:5d:39:44:29:b0:15:6c:17:9a:d6:d5:4c:a0:33:38:80: 39:f6:92:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAxNkExMTAvBgNVBAUTKDRCNThCMEIwNjEwOTk0NjY2MEMwOUZCQzk2OTlBNjQz QjdGNDJBRTYwHhcNMjUxMTAyMTU1NDQyWhcNMjUxMTA5MTU1NDQyWjAYMRYwFAYD VQQDEw02OTA3N2VjMy01Mjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugLdydVAotIj9BnohyuKQL4s/OXZxfm0379Dg4Zyht+dwmAU80mEX1HM743N mC0OZNtgto97fc8ygeWnF2hTDXUiaimBg8xVsiGaQPz9aINXxS/BCnGnQ169Kw9C UP9LRidgUTNnCLCPPfn94oqen4QbMbBjYgwXKC6+pJdoaiivef6j7A45nGXeszdz yDSUiJWtSbCYYrcVrQLf6GkEhXVjdEutjetKITXZzWmGQo/Sp2bxMO9XbJ1O3s4l 0Y8KwU/MWOg7MSzjiFjPIOc3g0tiaJWpRNy/4cfdq0Zwp7eSXxENt0WfGGL9926i 0nG2FoSMZuRKK03t3hxJaXLKdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIIPWC++ u6KBmcYRLscZSHOyjXE2MB8GA1UdIwQYMBaAFEtYsLBhCZRmYMCfvJaZpkO39Crm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDE2QS9CMDgzREQwOERF QjYxMUU1OUUxM0I4NzlDNEY5QUUwMi9TMWl3c0dFSmxHWmd3Si04bHBtbVE3ZjBL dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MxaXdzR0VKbEdaZ3dKLThscG1tUTdmMEt1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDE2QS9CMDgzREQwOERFQjYxMUU1OUUxM0I4NzlDNEY5QUUwMi9TMWl3c0dFSmxH Wmd3Si04bHBtbVE3ZjBLdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4VAXJjeBaeU9M7jmk1DPnGIp+LKl/AKFViYy0TggZGCbPTBevgUkJ JJC2d4CRqB8fFZz1LtKuWizSCQCkfqFjro+gnHfHfVUhC1+jH6rsvN9AjN1xkYQx RvHz1FQHF/pgTUscqJLQAXpYE8fvQl1zjxN9XPi1FNJx/qjljrb4d8Bz3qepvo/a 6Y+uH0vPVL22/5Ab0u9txHnfY8PjLTVC9RTaekUfvM6v4inlTBcKjrbUe0Y9tHiH Rvqqd+vmWXsqEJSnsfN+Wn82OrQwD+JaNsfReLVwxk49ry53EZnWN3a/4hGI5Ncl 7oHxy105RCmwFWwXmtbVTKAzOIA59pLK -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:11 2025 by rpki-client