$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft File: pibNzbdx6WVebpGhxy0S-1fRxOg.mft (raw, json) Hash identifier: U8zrGqz9K0daNF7qI7iamCuxCA9LUzIzIt5x7xpIhic= Subject key identifier: 4D:56:B3:30:30:1F:90:14:45:9C:A4:11:C7:EA:36:47:39:61:DC:96 Authority key identifier: A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 Certificate issuer: /CN=A912C7B1/serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8 Certificate serial: 04AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft Manifest number: 04A3 Signing time: Tue 01 Jul 2025 00:29:22 +0000 Manifest this update: Tue 01 Jul 2025 00:29:22 +0000 Manifest next update: Tue 08 Jul 2025 00:29:22 +0000 Files and hashes: 1: pibNzbdx6WVebpGhxy0S-1fRxOg.crl (hash: u3tYe7U5GblePOfD/fV+bAZ1UEOwMwJfSWOtHoTDxWs=) 2: CB56435E3C5311EC81D0DB48C4F9AE02.roa (hash: Ev++x624cT4RveaW6MjuuztzlLqpsfCU1GHY6FW0OBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1195 (0x4ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7B1, serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8 Validity Not Before: Jul 1 00:29:22 2025 GMT Not After : Jul 8 00:29:22 2025 GMT Subject: CN=68632be2-b05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:87:42:8d:d8:2c:86:50:b9:36:59:d4:d6:2d: 5a:0c:14:7a:78:78:c8:96:7c:6e:b1:cb:ec:01:49: b8:c6:fc:a6:5f:f5:64:27:52:6e:97:8e:ee:fb:38: 91:52:63:cd:f2:e7:c1:03:7c:ea:df:fa:96:79:9a: fe:fa:82:e7:0f:5f:e3:fc:0c:0d:e3:ac:a2:be:79: 4e:1f:12:56:d2:37:6c:76:62:2c:d7:69:44:80:ba: 1e:73:bd:45:72:6a:fc:6d:31:9a:83:aa:4c:3e:3a: 3f:75:b0:15:3d:cc:4f:d9:0d:e5:24:30:f6:59:0b: d0:0d:ee:36:36:e3:3a:8b:55:6a:e9:81:25:e6:20: 00:c9:71:6b:27:2f:be:5d:f9:b9:2c:7e:e0:37:90: b1:ce:cb:c4:04:c1:a6:bd:ea:b4:b4:b5:16:23:93: 61:d0:5a:58:ff:cd:03:00:73:81:02:33:73:b5:22: bd:a4:47:e1:9a:24:ea:31:b0:05:f3:64:45:f7:1d: 39:27:f1:00:bc:45:00:95:97:80:91:60:ad:c7:ff: b7:e7:7f:09:c2:8f:1a:75:2c:f9:a7:51:6c:45:48: cf:e0:53:2e:cf:71:42:d1:ff:cc:77:9e:af:bd:b7: 56:09:d9:92:6a:95:12:81:f5:3c:58:25:98:69:84: 44:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:56:B3:30:30:1F:90:14:45:9C:A4:11:C7:EA:36:47:39:61:DC:96 X509v3 Authority Key Identifier: keyid:A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:eb:d3:66:8e:c2:1d:00:fe:3d:f3:5c:2e:5f:06:95:83:c6: 83:b9:0c:a8:99:68:3b:62:22:9c:8e:6e:d2:ab:f3:1f:ad:cf: 40:94:a8:91:81:2e:23:f9:ba:0b:af:22:66:0c:da:ab:ae:c1: df:68:66:e2:5e:23:bb:a8:d7:fb:9d:58:d9:88:3e:3c:21:8d: 8e:a7:ec:a0:80:f0:6a:72:4f:80:c0:ef:08:1e:76:5f:83:4f: d5:9b:09:ef:d2:44:fb:43:16:37:4a:46:9b:57:a5:52:5e:f8: 28:bf:27:f6:84:ad:64:d4:36:fb:f4:59:b2:d6:7e:7b:ba:ce: c9:d3:a3:7f:2a:b4:de:37:b1:8a:b7:47:8d:8e:70:36:ae:58: 8a:9e:57:dc:26:b4:03:f0:c1:be:91:46:a6:08:4b:1f:62:8a: 18:a2:23:b2:35:d1:38:6a:58:ac:2d:da:22:7b:07:62:ce:32: cd:f5:94:39:98:73:eb:87:78:97:f3:ee:8d:4e:fe:bb:9a:0d: 57:24:84:bf:9a:5f:8b:1c:44:81:8a:60:fc:2a:b9:a4:32:18: 99:2e:12:02:08:3e:2f:73:a4:33:1e:2d:da:70:a5:d4:77:3e: 3e:b8:45:61:a6:f9:e4:25:a1:44:f4:02:cb:f7:e9:c5:72:eb: 0b:32:0b:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3QjExMTAvBgNVBAUTKEE2MjZDRENEQjc3MUU5NjU1RTZFOTFBMUM3MkQxMkZC NTdEMUM0RTgwHhcNMjUwNzAxMDAyOTIyWhcNMjUwNzA4MDAyOTIyWjAYMRYwFAYD VQQDEw02ODYzMmJlMi1iMDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IdCjdgshlC5NlnU1i1aDBR6eHjIlnxuscvsAUm4xvymX/VkJ1Jul47u+ziR UmPN8ufBA3zq3/qWeZr++oLnD1/j/AwN46yivnlOHxJW0jdsdmIs12lEgLoec71F cmr8bTGag6pMPjo/dbAVPcxP2Q3lJDD2WQvQDe42NuM6i1Vq6YEl5iAAyXFrJy++ Xfm5LH7gN5CxzsvEBMGmveq0tLUWI5Nh0FpY/80DAHOBAjNztSK9pEfhmiTqMbAF 82RF9x05J/EAvEUAlZeAkWCtx/+3538Jwo8adSz5p1FsRUjP4FMuz3FC0f/Md56v vbdWCdmSapUSgfU8WCWYaYRE5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1WszAw H5AURZykEcfqNkc5YdyWMB8GA1UdIwQYMBaAFKYmzc23cellXm6RocctEvtX0cTo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdCMS9BMEY0ODBCNjND NEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZXVmVicEdoeHkwUy0xZlJ4 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BpYk56YmR4NldWZWJwR2h4eTBTLTFmUnhPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzdCMS9BMEY0ODBCNjNDNEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZX VmVicEdoeHkwUy0xZlJ4T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz69NmjsIdAP4981wuXwaVg8aDuQyomWg7YiKcjm7Sq/Mfrc9AlKiR gS4j+boLryJmDNqrrsHfaGbiXiO7qNf7nVjZiD48IY2Op+yggPBqck+AwO8IHnZf g0/Vmwnv0kT7QxY3SkabV6VSXvgovyf2hK1k1Db79Fmy1n57us7J06N/KrTeN7GK t0eNjnA2rliKnlfcJrQD8MG+kUamCEsfYooYoiOyNdE4alisLdoiewdizjLN9ZQ5 mHPrh3iX8+6NTv67mg1XJIS/ml+LHESBimD8KrmkMhiZLhICCD4vc6QzHi3acKXU dz4+uEVhpvnkJaFE9ALL9+nFcusLMgsh -----END CERTIFICATE-----Generated at Wed Jul 2 06:47:49 2025 by rpki-client