$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft File: pibNzbdx6WVebpGhxy0S-1fRxOg.mft (raw, json) Hash identifier: R8ghmWcV1KVKHyTQYyQWuR7nLdteC/JXAVsmfUHfHm4= Subject key identifier: 23:28:C3:0C:70:81:EE:52:EF:F4:36:51:A6:DF:EB:77:45:AB:A1:F4 Authority key identifier: A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 Certificate issuer: /CN=A912C7B1/serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8 Certificate serial: 04C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft Manifest number: 04BE Signing time: Sat 23 Aug 2025 00:06:21 +0000 Manifest this update: Sat 23 Aug 2025 00:06:21 +0000 Manifest next update: Sat 30 Aug 2025 00:06:21 +0000 Files and hashes: 1: pibNzbdx6WVebpGhxy0S-1fRxOg.crl (hash: MflKInIiNPMziolEv5wCWdFDjziecz1heFe1zOk5C+Q=) 2: CB56435E3C5311EC81D0DB48C4F9AE02.roa (hash: Ev++x624cT4RveaW6MjuuztzlLqpsfCU1GHY6FW0OBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1222 (0x4c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7B1, serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8 Validity Not Before: Aug 23 00:06:21 2025 GMT Not After : Aug 30 00:06:21 2025 GMT Subject: CN=68a905fd-52ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:22:17:e9:a8:f6:3f:6a:54:01:d7:02:d9:ad: 05:31:5b:d8:2a:48:ea:36:2f:aa:27:cb:46:cb:d1: ed:ce:58:19:c8:68:34:ea:d2:de:49:84:f6:8b:94: c3:bf:c4:b0:54:93:d4:82:ab:8e:3b:ef:07:07:30: f5:6e:1f:db:fd:b5:be:f4:23:f8:ea:7c:cf:66:09: 61:24:2e:82:8e:b8:ca:2b:c1:a9:ab:83:4f:b8:d5: ca:5b:d7:51:63:25:fc:89:12:21:99:ff:fe:3c:f0: 48:73:5c:00:f3:e4:2b:ba:26:17:13:60:d3:3d:e2: 10:e1:e9:99:2d:6c:ed:c3:5e:2e:01:6d:70:02:ba: a7:92:98:7a:dc:41:11:c0:c6:8e:37:08:4b:51:15: 32:9d:81:d2:f4:6f:06:ac:0d:21:6c:1a:93:2b:a9: 2c:3f:ce:b4:bf:0d:3a:8a:96:ff:0e:d9:f5:e4:8e: 09:91:e1:5f:9e:1e:a4:ef:af:3f:f3:98:7d:b4:26: 6c:6c:d1:6a:60:5f:b5:be:f3:02:80:a3:3e:88:b3: fa:39:01:fc:8e:8b:41:a9:f8:52:cc:da:02:34:8e: db:f3:d9:f5:d4:b4:bc:78:56:d0:7a:fb:da:b5:70: 12:91:e3:9d:6a:a5:27:8c:bf:cf:41:62:b4:88:51: 0e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:28:C3:0C:70:81:EE:52:EF:F4:36:51:A6:DF:EB:77:45:AB:A1:F4 X509v3 Authority Key Identifier: keyid:A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:26:d8:55:b7:62:bb:2e:5a:09:63:cb:55:37:03:9e:bc:7e: 3d:83:e8:d1:24:78:f0:ea:7c:9d:cd:b4:9b:e2:63:22:35:57: 05:62:dc:ea:cb:b8:ab:12:37:4c:bb:5a:c8:3a:a2:59:f2:32: fa:2b:2b:5b:68:33:f5:36:14:e1:b6:08:4e:6c:e2:e9:b4:83: 6a:c3:11:75:2f:8f:8a:23:5f:3b:2b:57:36:bf:0f:28:54:ec: d9:a0:48:aa:e7:3a:d3:7d:75:12:f4:5c:a3:fc:e4:95:f6:c4: 8c:73:e8:78:2e:c8:af:c0:b0:fe:3f:ce:7e:29:77:31:2f:4c: 13:2d:a5:00:8f:55:54:9a:62:ab:b4:91:7a:a6:03:84:54:cb: b1:01:21:65:76:8f:a4:c6:a9:2d:60:65:fa:0b:d8:92:e8:cb: 01:82:53:84:8c:a9:3f:56:03:95:db:69:f4:44:6c:04:ee:0f: 89:06:44:09:27:b1:29:73:a1:90:f2:f4:e3:ef:f8:77:58:fe: d9:27:69:32:4c:f7:98:66:f2:b9:31:9d:ab:20:bb:6c:8b:d4: a1:0a:04:8a:8f:b3:de:2c:09:85:26:b3:bf:eb:85:9c:38:2a: 6e:5b:e0:91:fd:3b:cf:07:cd:88:92:4f:46:81:1b:04:a5:4f: 99:18:63:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3QjExMTAvBgNVBAUTKEE2MjZDRENEQjc3MUU5NjU1RTZFOTFBMUM3MkQxMkZC NTdEMUM0RTgwHhcNMjUwODIzMDAwNjIxWhcNMjUwODMwMDAwNjIxWjAYMRYwFAYD VQQDEw02OGE5MDVmZC01MmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyIX6aj2P2pUAdcC2a0FMVvYKkjqNi+qJ8tGy9HtzlgZyGg06tLeSYT2i5TD v8SwVJPUgquOO+8HBzD1bh/b/bW+9CP46nzPZglhJC6CjrjKK8Gpq4NPuNXKW9dR YyX8iRIhmf/+PPBIc1wA8+QruiYXE2DTPeIQ4emZLWztw14uAW1wArqnkph63EER wMaONwhLURUynYHS9G8GrA0hbBqTK6ksP860vw06ipb/Dtn15I4JkeFfnh6k768/ 85h9tCZsbNFqYF+1vvMCgKM+iLP6OQH8jotBqfhSzNoCNI7b89n11LS8eFbQevva tXASkeOdaqUnjL/PQWK0iFEOhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMowwxw ge5S7/Q2Uabf63dFq6H0MB8GA1UdIwQYMBaAFKYmzc23cellXm6RocctEvtX0cTo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdCMS9BMEY0ODBCNjND NEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZXVmVicEdoeHkwUy0xZlJ4 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BpYk56YmR4NldWZWJwR2h4eTBTLTFmUnhPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzdCMS9BMEY0ODBCNjNDNEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZX VmVicEdoeHkwUy0xZlJ4T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMJthVt2K7LloJY8tVNwOevH49g+jRJHjw6nydzbSb4mMiNVcFYtzq y7irEjdMu1rIOqJZ8jL6KytbaDP1NhThtghObOLptINqwxF1L4+KI187K1c2vw8o VOzZoEiq5zrTfXUS9Fyj/OSV9sSMc+h4LsivwLD+P85+KXcxL0wTLaUAj1VUmmKr tJF6pgOEVMuxASFldo+kxqktYGX6C9iS6MsBglOEjKk/VgOV22n0RGwE7g+JBkQJ J7Epc6GQ8vTj7/h3WP7ZJ2kyTPeYZvK5MZ2rILtsi9ShCgSKj7PeLAmFJrO/64Wc OCpuW+CR/TvPB82Ikk9GgRsEpU+ZGGN4 -----END CERTIFICATE-----Generated at Sat Aug 23 18:26:39 2025 by rpki-client