$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft File: pibNzbdx6WVebpGhxy0S-1fRxOg.mft (raw, json) Hash identifier: S1FeSOubFy07fzImJbZqx4WLHezO5WFH+hP3vQtrwtY= Subject key identifier: C2:4F:76:33:79:DC:49:8A:77:A4:2B:E1:D3:B0:24:35:61:FB:2F:C9 Authority key identifier: A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 Certificate issuer: /CN=A912C7B1/serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8 Certificate serial: 04BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft Manifest number: 04B6 Signing time: Thu 07 Aug 2025 00:25:45 +0000 Manifest this update: Thu 07 Aug 2025 00:25:44 +0000 Manifest next update: Thu 14 Aug 2025 00:25:44 +0000 Files and hashes: 1: pibNzbdx6WVebpGhxy0S-1fRxOg.crl (hash: MD0f7a1mxiWdrg2r36ht7d3wDYyww/1gxrjr8u8RC2s=) 2: CB56435E3C5311EC81D0DB48C4F9AE02.roa (hash: Ev++x624cT4RveaW6MjuuztzlLqpsfCU1GHY6FW0OBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 00:25:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1214 (0x4be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7B1, serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8 Validity Not Before: Aug 7 00:25:44 2025 GMT Not After : Aug 14 00:25:44 2025 GMT Subject: CN=6893f289-62ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1a:0a:77:f3:d7:dc:03:7f:8a:6e:d6:f7:93: ae:96:db:58:32:9f:3f:9e:b8:f8:af:b2:b6:1b:ae: bc:f1:cd:f0:19:10:c8:f4:68:14:96:28:23:c2:55: 39:ec:9c:f8:8f:4a:ca:f4:84:f2:35:a0:47:95:63: 24:1c:21:d4:70:88:59:5a:06:b0:92:98:08:3d:54: d1:1f:0f:33:f0:f8:bf:03:9f:71:1f:fd:e3:b3:a4: 6d:3e:7b:7d:bf:b3:82:49:ca:9b:d2:f4:21:f3:b4: b3:ab:a5:4f:5d:d2:ae:53:36:51:67:45:f4:a0:49: 70:11:7c:a4:0e:51:08:af:9d:5f:53:e6:8b:a8:eb: ab:b2:93:49:fb:86:03:90:66:ea:0e:2a:c6:15:15: 29:49:a2:0a:e9:34:f5:8f:e9:fb:b5:a9:08:2c:85: 84:f6:3d:e0:cd:7b:63:80:ed:4f:37:f9:3f:4a:ce: 9c:77:c6:5e:1e:be:6f:f0:c6:53:af:f2:a4:f0:3f: d8:23:4d:58:d9:22:2f:1a:59:f6:84:6f:3f:f0:1b: a6:95:89:a8:8c:f6:54:8a:21:be:22:ad:a4:ff:53: f0:83:9c:a0:e0:a1:45:66:b5:f5:12:3c:36:83:2f: f7:59:55:30:1c:6a:00:74:a5:23:b1:af:75:d2:cb: b5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4F:76:33:79:DC:49:8A:77:A4:2B:E1:D3:B0:24:35:61:FB:2F:C9 X509v3 Authority Key Identifier: keyid:A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:96:94:11:ea:a5:3c:6d:45:12:8b:20:01:be:be:f3:c6:c7: 4e:b1:86:3b:47:68:9e:d1:55:f3:59:44:b4:cf:90:7f:3c:ae: f2:1f:49:26:a5:d9:c7:36:73:15:31:4f:0a:91:c0:02:0d:2b: 15:b3:cd:13:e8:72:8d:4d:99:f3:2a:c6:10:9f:b7:31:54:90: 4a:bb:64:b8:c5:09:ac:58:7a:24:97:b1:7b:9c:6a:05:f4:e1: 6e:21:c8:84:6e:60:d6:1d:6a:21:5e:94:25:b2:c6:f1:ed:5a: b2:f9:e1:5d:1e:28:aa:19:b3:d1:16:de:50:37:a2:16:31:6e: 46:b3:0c:8b:cb:3d:80:12:62:22:06:bb:02:e6:b5:67:72:a5: e2:4c:fa:7a:6e:3f:88:ad:4d:2a:46:25:88:56:93:5d:15:fd: 15:c7:f6:58:55:ff:dd:00:a8:72:24:1c:cb:06:ca:27:09:20: 88:04:85:8b:cb:29:81:06:a7:50:74:16:38:e4:73:63:e4:b6: 05:77:8b:ff:16:f9:11:15:b8:13:03:1b:19:67:d9:be:4f:fe: b7:0d:3f:ee:77:6a:c2:28:87:62:6d:c9:0f:57:25:28:4c:61: 96:05:99:01:73:39:42:ee:09:ab:83:19:91:4f:cc:b5:cf:59: fd:34:41:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3QjExMTAvBgNVBAUTKEE2MjZDRENEQjc3MUU5NjU1RTZFOTFBMUM3MkQxMkZC NTdEMUM0RTgwHhcNMjUwODA3MDAyNTQ0WhcNMjUwODE0MDAyNTQ0WjAYMRYwFAYD VQQDEw02ODkzZjI4OS02MmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5hoKd/PX3AN/im7W95OulttYMp8/nrj4r7K2G6688c3wGRDI9GgUligjwlU5 7Jz4j0rK9ITyNaBHlWMkHCHUcIhZWgawkpgIPVTRHw8z8Pi/A59xH/3js6RtPnt9 v7OCScqb0vQh87Szq6VPXdKuUzZRZ0X0oElwEXykDlEIr51fU+aLqOurspNJ+4YD kGbqDirGFRUpSaIK6TT1j+n7takILIWE9j3gzXtjgO1PN/k/Ss6cd8ZeHr5v8MZT r/Kk8D/YI01Y2SIvGln2hG8/8BumlYmojPZUiiG+Iq2k/1Pwg5yg4KFFZrX1Ejw2 gy/3WVUwHGoAdKUjsa910su1KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJPdjN5 3EmKd6Qr4dOwJDVh+y/JMB8GA1UdIwQYMBaAFKYmzc23cellXm6RocctEvtX0cTo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdCMS9BMEY0ODBCNjND NEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZXVmVicEdoeHkwUy0xZlJ4 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BpYk56YmR4NldWZWJwR2h4eTBTLTFmUnhPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzdCMS9BMEY0ODBCNjNDNEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZX VmVicEdoeHkwUy0xZlJ4T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9lpQR6qU8bUUSiyABvr7zxsdOsYY7R2ie0VXzWUS0z5B/PK7yH0km pdnHNnMVMU8KkcACDSsVs80T6HKNTZnzKsYQn7cxVJBKu2S4xQmsWHokl7F7nGoF 9OFuIciEbmDWHWohXpQlssbx7Vqy+eFdHiiqGbPRFt5QN6IWMW5GswyLyz2AEmIi BrsC5rVncqXiTPp6bj+IrU0qRiWIVpNdFf0Vx/ZYVf/dAKhyJBzLBsonCSCIBIWL yymBBqdQdBY45HNj5LYFd4v/FvkRFbgTAxsZZ9m+T/63DT/ud2rCKIdibckPVyUo TGGWBZkBczlC7gmrgxmRT8y1z1n9NEGJ -----END CERTIFICATE-----Generated at Fri Aug 8 20:58:17 2025 by rpki-client