$ rpki-client -vvf rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft File: S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft (raw, json) Hash identifier: 7tprchkcnCSHHmdZoUrAz5G05WtSs537xD0qZ5YsZTk= Subject key identifier: 97:35:68:71:C7:9A:5D:9C:2D:FB:82:FE:B8:82:6E:61:DD:80:74:47 Authority key identifier: 4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6 Certificate issuer: /CN=A912016A/serialNumber=4B58B0B06109946660C09FBC9699A643B7F42AE6 Certificate serial: 21B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft Manifest number: 2192 Signing time: Fri 20 Jun 2025 15:56:44 +0000 Manifest this update: Fri 20 Jun 2025 15:56:44 +0000 Manifest next update: Fri 27 Jun 2025 15:56:44 +0000 Files and hashes: 1: S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl (hash: 3JvyYxKmRMO1Lt4KMfJMVtsUnC6iFIZ8zDFs77pSYIo=) 2: 05106CB4AFB011EA8972F65BC4F9AE02.roa (hash: 92gAmRF+UjT7qi3HgspO5M3xKNUrfaTQm2Z8Zii+ZFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 15:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8625 (0x21b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912016A, serialNumber=4B58B0B06109946660C09FBC9699A643B7F42AE6 Validity Not Before: Jun 20 15:56:44 2025 GMT Not After : Jun 27 15:56:44 2025 GMT Subject: CN=685584bc-a4b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4b:01:ed:87:1a:7b:97:b4:9b:70:ef:80:8b: 35:06:b9:35:1e:b8:44:4b:0b:d3:8b:a2:1b:20:3a: db:ab:cf:2b:1b:7b:ec:0a:22:2a:e5:59:3f:bd:27: 9e:03:61:6b:90:88:5a:f4:12:d1:22:da:98:e4:25: 4f:4f:80:e4:51:5d:e7:bc:8a:2b:ab:26:d0:6c:e6: d6:51:0e:2d:75:34:83:4a:a4:03:7e:00:ec:e4:a5: 58:12:63:7e:d6:07:6b:6c:0d:76:35:1a:dd:f9:79: c7:3a:ca:ca:89:9e:a9:c8:98:fb:df:a0:f4:b6:07: f5:b0:6b:c6:37:65:3c:31:27:5c:fe:32:3a:84:c7: c5:47:9f:b9:9f:be:d5:40:1f:01:c2:8e:13:00:4f: ad:09:19:56:10:16:6a:69:2a:16:79:42:46:1b:c6: 1d:be:4a:29:e0:ce:57:28:32:42:46:35:22:44:d7: 65:b6:79:88:99:c4:7f:0e:4f:70:d8:2b:73:64:e4: 14:aa:e3:40:a6:7e:b1:a7:6f:cb:f6:de:d6:6b:fd: c7:6e:21:5e:41:28:1a:df:7e:5e:69:eb:b5:76:19: 96:f7:39:8e:32:e2:a6:e2:b5:a2:f0:88:72:10:bf: 5d:de:b6:c8:fa:30:d5:35:fc:b9:04:df:e1:fc:75: b1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:35:68:71:C7:9A:5D:9C:2D:FB:82:FE:B8:82:6E:61:DD:80:74:47 X509v3 Authority Key Identifier: keyid:4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:7d:79:a7:a6:a3:f1:1f:0a:17:96:b3:76:d4:f7:fb:84:93: 1e:4c:13:65:80:2c:38:e3:3f:11:ef:21:4d:1b:76:40:ea:c0: 26:82:74:80:c0:0c:a7:bf:d9:11:f0:8d:48:cc:1d:5d:f8:da: be:15:53:12:98:8a:de:76:62:28:05:d8:75:1a:f2:80:e2:8b: 90:06:74:3a:ea:48:b7:9f:d0:fc:8c:51:c7:c5:64:c8:78:f7: 7e:b8:a2:5a:3c:46:65:3e:26:1a:66:e7:16:9a:a7:01:31:7f: 21:ae:91:ee:87:86:d8:cc:78:6c:71:4b:65:0f:1c:8c:d7:ca: 30:a6:22:97:cf:c1:f1:80:5e:9e:be:a0:84:84:d0:7a:6e:da: 2f:6e:37:0e:32:87:17:dd:df:dd:c7:e7:cb:94:64:c9:c6:82: 88:24:a9:76:08:0e:5b:df:e8:01:ca:a6:80:b6:c9:02:ca:c2: 10:b4:4c:00:fb:39:aa:c2:de:1b:d7:ca:9d:fe:ec:db:20:b4: 08:36:60:8e:d8:62:99:db:3c:30:09:b2:32:8a:4e:49:58:fd: f9:cc:ca:6a:8e:83:7e:e7:92:dd:66:1f:7f:59:67:5a:01:ea: e9:e8:a2:72:f2:d4:5c:74:ec:c5:3f:39:f4:45:c8:12:00:9b: fa:63:50:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAxNkExMTAvBgNVBAUTKDRCNThCMEIwNjEwOTk0NjY2MEMwOUZCQzk2OTlBNjQz QjdGNDJBRTYwHhcNMjUwNjIwMTU1NjQ0WhcNMjUwNjI3MTU1NjQ0WjAYMRYwFAYD VQQDEw02ODU1ODRiYy1hNGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUsB7Ycae5e0m3DvgIs1Brk1HrhESwvTi6IbIDrbq88rG3vsCiIq5Vk/vSee A2FrkIha9BLRItqY5CVPT4DkUV3nvIorqybQbObWUQ4tdTSDSqQDfgDs5KVYEmN+ 1gdrbA12NRrd+XnHOsrKiZ6pyJj736D0tgf1sGvGN2U8MSdc/jI6hMfFR5+5n77V QB8Bwo4TAE+tCRlWEBZqaSoWeUJGG8Ydvkop4M5XKDJCRjUiRNdltnmImcR/Dk9w 2CtzZOQUquNApn6xp2/L9t7Wa/3HbiFeQSga335eaeu1dhmW9zmOMuKm4rWi8Ihy EL9d3rbI+jDVNfy5BN/h/HWxewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJc1aHHH ml2cLfuC/riCbmHdgHRHMB8GA1UdIwQYMBaAFEtYsLBhCZRmYMCfvJaZpkO39Crm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDE2QS9CMDgzREQwOERF QjYxMUU1OUUxM0I4NzlDNEY5QUUwMi9TMWl3c0dFSmxHWmd3Si04bHBtbVE3ZjBL dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MxaXdzR0VKbEdaZ3dKLThscG1tUTdmMEt1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDE2QS9CMDgzREQwOERFQjYxMUU1OUUxM0I4NzlDNEY5QUUwMi9TMWl3c0dFSmxH Wmd3Si04bHBtbVE3ZjBLdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYfXmnpqPxHwoXlrN21Pf7hJMeTBNlgCw44z8R7yFNG3ZA6sAmgnSA wAynv9kR8I1IzB1d+Nq+FVMSmIredmIoBdh1GvKA4ouQBnQ66ki3n9D8jFHHxWTI ePd+uKJaPEZlPiYaZucWmqcBMX8hrpHuh4bYzHhscUtlDxyM18owpiKXz8HxgF6e vqCEhNB6btovbjcOMocX3d/dx+fLlGTJxoKIJKl2CA5b3+gByqaAtskCysIQtEwA +zmqwt4b18qd/uzbILQINmCO2GKZ2zwwCbIyik5JWP35zMpqjoN+55LdZh9/WWda Aerp6KJy8tRcdOzFPzn0RcgSAJv6Y1Ap -----END CERTIFICATE-----Generated at Fri Jun 20 19:10:11 2025 by rpki-client