$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft File: pibNzbdx6WVebpGhxy0S-1fRxOg.mft (raw, json) Hash identifier: IDTxTqHfEEYYIKMIrw6Ojj0Hu55DuffzAifi0/jh/6Y= Subject key identifier: A2:1C:83:D7:F6:1A:B6:DF:23:C9:C4:BE:A4:D8:E5:71:35:A2:B9:2D Authority key identifier: A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 Certificate issuer: /CN=A912C7B1/serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8 Certificate serial: 04E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft Manifest number: 04DB Signing time: Sun 19 Oct 2025 01:36:23 +0000 Manifest this update: Sun 19 Oct 2025 01:36:23 +0000 Manifest next update: Sun 26 Oct 2025 01:36:22 +0000 Files and hashes: 1: pibNzbdx6WVebpGhxy0S-1fRxOg.crl (hash: 8L04OYnPXshymQSDQkY8CONGFcGxmXxhEbDaXZkKcJw=) 2: CB56435E3C5311EC81D0DB48C4F9AE02.roa (hash: Ev++x624cT4RveaW6MjuuztzlLqpsfCU1GHY6FW0OBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1251 (0x4e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7B1, serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8 Validity Not Before: Oct 19 01:36:23 2025 GMT Not After : Oct 26 01:36:22 2025 GMT Subject: CN=68f44097-6efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f0:c7:5e:20:a3:e6:c1:33:25:87:be:2c:0b: 24:1f:ba:11:30:c6:6e:79:f4:f1:2e:e5:c0:66:0b: 0d:48:2d:be:db:33:38:56:75:4b:a6:85:61:cb:f9: 12:a3:f4:13:ff:3e:0c:3c:e4:f7:e0:fe:d4:b5:5f: b2:4f:f7:e7:a1:e0:58:8b:9e:82:cf:e5:ab:27:ab: db:2e:f2:e0:f4:a8:c5:93:c7:3e:4e:31:6d:3b:a5: d3:90:d1:eb:97:f9:5d:d9:0f:67:c0:b6:39:36:71: 5a:16:ef:ca:01:f1:3f:38:0e:93:42:54:26:24:68: 0b:c6:ea:ce:8c:84:94:e9:d3:cc:df:84:4c:f1:bf: a8:e0:a7:59:84:b1:c4:53:cd:30:4b:34:a4:ee:ac: 73:6e:a6:55:d0:23:9c:87:b7:5e:94:ed:b7:d0:76: 82:58:ac:d9:89:e0:10:d7:2a:d0:3b:21:48:2a:3b: 65:66:0b:5f:c2:2e:62:2c:10:72:ce:9f:4a:fa:a0: 9d:de:29:8c:02:f4:6b:e6:53:4d:92:36:be:ae:8c: 11:bc:fd:2d:87:aa:96:1d:bb:fa:de:16:26:bb:65: 34:ce:11:8c:70:d8:0c:af:9c:b3:90:d8:be:de:89: 7d:bb:23:29:5b:fc:f0:38:53:eb:4d:9f:41:54:7f: 12:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1C:83:D7:F6:1A:B6:DF:23:C9:C4:BE:A4:D8:E5:71:35:A2:B9:2D X509v3 Authority Key Identifier: keyid:A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:1f:c0:6d:c0:81:3e:2f:58:53:de:04:d9:17:33:69:2a:b9: 1a:ad:7b:1f:a6:62:22:1c:fe:1f:f1:7d:d0:b2:02:fb:34:03: 05:d7:fc:4f:2f:8a:22:b1:f5:0e:86:b4:1c:a6:ad:e2:fc:b5: ba:21:f3:e9:94:b6:9f:59:92:c9:aa:00:8d:a1:a2:37:96:a1: 39:f6:5b:da:36:47:44:ee:e3:43:3a:29:05:f5:25:3a:17:ef: 87:fb:7a:65:e7:cb:65:4e:8d:39:7b:72:43:3c:9f:4d:c1:63: ac:3f:18:dd:81:1c:37:d3:98:c5:6d:ad:ec:61:51:17:8b:d5: b1:89:5f:3b:b3:0f:67:3c:5b:d0:1d:6f:7b:41:13:f2:49:f4: 58:52:8d:0c:44:a7:5b:35:a6:5a:56:3d:c9:9c:6f:3b:c3:ac: e8:1d:c0:e8:90:3e:2d:26:b2:06:92:fb:be:15:04:79:1d:8d: b6:76:c2:53:73:c2:45:45:86:ea:4a:5e:f9:02:7e:5b:e2:0a: c6:ba:bf:53:bc:80:27:61:b7:4c:77:6a:ee:a3:4f:99:e6:b9: 82:6d:e0:a4:80:53:cf:a1:87:9d:af:fa:c1:9e:51:62:a4:0d: ae:c8:b4:09:2d:99:e9:e0:73:4e:41:b2:b4:5d:31:b2:8a:32: 3a:f4:cd:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3QjExMTAvBgNVBAUTKEE2MjZDRENEQjc3MUU5NjU1RTZFOTFBMUM3MkQxMkZC NTdEMUM0RTgwHhcNMjUxMDE5MDEzNjIzWhcNMjUxMDI2MDEzNjIyWjAYMRYwFAYD VQQDEw02OGY0NDA5Ny02ZWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3fDHXiCj5sEzJYe+LAskH7oRMMZuefTxLuXAZgsNSC2+2zM4VnVLpoVhy/kS o/QT/z4MPOT34P7UtV+yT/fnoeBYi56Cz+WrJ6vbLvLg9KjFk8c+TjFtO6XTkNHr l/ld2Q9nwLY5NnFaFu/KAfE/OA6TQlQmJGgLxurOjISU6dPM34RM8b+o4KdZhLHE U80wSzSk7qxzbqZV0COch7delO230HaCWKzZieAQ1yrQOyFIKjtlZgtfwi5iLBBy zp9K+qCd3imMAvRr5lNNkja+rowRvP0th6qWHbv63hYmu2U0zhGMcNgMr5yzkNi+ 3ol9uyMpW/zwOFPrTZ9BVH8SQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIcg9f2 GrbfI8nEvqTY5XE1orktMB8GA1UdIwQYMBaAFKYmzc23cellXm6RocctEvtX0cTo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdCMS9BMEY0ODBCNjND NEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZXVmVicEdoeHkwUy0xZlJ4 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BpYk56YmR4NldWZWJwR2h4eTBTLTFmUnhPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzdCMS9BMEY0ODBCNjNDNEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZX VmVicEdoeHkwUy0xZlJ4T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQH8BtwIE+L1hT3gTZFzNpKrkarXsfpmIiHP4f8X3QsgL7NAMF1/xP L4oisfUOhrQcpq3i/LW6IfPplLafWZLJqgCNoaI3lqE59lvaNkdE7uNDOikF9SU6 F++H+3pl58tlTo05e3JDPJ9NwWOsPxjdgRw305jFba3sYVEXi9WxiV87sw9nPFvQ HW97QRPySfRYUo0MRKdbNaZaVj3JnG87w6zoHcDokD4tJrIGkvu+FQR5HY22dsJT c8JFRYbqSl75An5b4grGur9TvIAnYbdMd2ruo0+Z5rmCbeCkgFPPoYedr/rBnlFi pA2uyLQJLZnp4HNOQbK0XTGyijI69M1Q -----END CERTIFICATE-----Generated at Sun Oct 19 23:30:57 2025 by rpki-client