$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft File: pibNzbdx6WVebpGhxy0S-1fRxOg.mft (raw, json) Hash identifier: qwqpdh8CcwOYIE5nRTNAu/2lRKcH9vxMSUhuIkPG6p0= Subject key identifier: 1A:46:80:01:0F:F8:F2:78:49:64:6C:B6:95:A1:33:10:E3:BF:E3:FE Authority key identifier: A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 Certificate issuer: /CN=A912C7B1/serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8 Certificate serial: 048A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft Manifest number: 0482 Signing time: Thu 24 Apr 2025 23:51:08 +0000 Manifest this update: Thu 24 Apr 2025 23:51:07 +0000 Manifest next update: Thu 01 May 2025 23:51:07 +0000 Files and hashes: 1: pibNzbdx6WVebpGhxy0S-1fRxOg.crl (hash: xGM23cKxi3PWYObQoSwYkqR+CY+QmWs5lnVFa2D/X8g=) 2: CB56435E3C5311EC81D0DB48C4F9AE02.roa (hash: Ev++x624cT4RveaW6MjuuztzlLqpsfCU1GHY6FW0OBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1162 (0x48a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7B1, serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8 Validity Not Before: Apr 24 23:51:07 2025 GMT Not After : May 1 23:51:07 2025 GMT Subject: CN=680ace6b-e55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:46:bb:83:49:8c:9a:4c:df:4d:06:97:46: 40:70:38:84:75:6e:01:d1:68:b5:27:80:1d:e6:2a: 06:f4:7e:c1:3b:1a:49:75:c7:4d:10:4d:da:78:d8: 87:35:83:5d:c2:52:13:65:37:86:e7:07:84:e0:7f: f0:00:b3:fc:86:c1:7e:12:12:97:85:3f:58:2a:46: 25:e1:c0:b9:d3:bf:e2:0f:0a:1d:be:e5:44:17:56: 1d:a0:c2:61:f7:27:ae:ef:aa:c4:95:3f:5d:3d:10: c9:02:d0:4e:37:f2:1d:2b:a2:f6:63:dc:f4:1a:c9: a3:f2:55:ac:05:d1:9f:21:7d:4b:cc:05:16:cb:6e: 7a:de:b2:fd:5a:a2:7d:4a:67:07:a9:a4:57:d8:20: 51:fd:5e:d7:6a:87:77:44:08:29:40:54:55:06:38: eb:a0:33:2e:01:33:66:a7:2e:7d:0e:38:c3:fd:2f: f7:4b:f2:f9:b3:84:fc:77:45:6e:ca:29:96:af:0d: 49:52:9d:ff:2d:15:51:98:13:f2:56:c5:da:93:90: cf:5c:fc:f9:eb:56:8d:b7:5f:ee:56:6b:e2:34:59: 25:40:8c:ce:e2:c7:77:46:16:20:ca:0d:0f:6c:37: b6:34:8d:1a:0a:da:26:e2:6a:4e:b9:31:04:b1:86: 5b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:46:80:01:0F:F8:F2:78:49:64:6C:B6:95:A1:33:10:E3:BF:E3:FE X509v3 Authority Key Identifier: keyid:A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:58:78:38:72:53:83:18:fc:e0:8e:cb:08:08:fd:ae:0e:f3: f6:74:60:0a:98:5e:b1:89:80:6a:10:0b:be:e9:e3:f3:a2:b3: c5:ae:86:e7:06:c1:4b:27:27:42:48:cc:91:a6:ff:68:d0:17: 7d:ef:60:13:e1:76:90:fe:0e:db:dd:af:6e:47:42:6e:58:c4: ef:48:e4:6c:69:49:65:c9:b7:d7:5d:69:9e:6d:c7:6c:dd:b6: 48:0d:75:66:16:6e:5b:20:58:be:7f:47:04:5a:ab:f0:91:a6: 3e:34:70:35:57:4e:96:3a:a5:10:6e:5f:0e:c5:04:b8:33:87: ff:fb:49:2a:28:73:56:c9:10:c8:a9:ae:e3:15:98:8c:1d:b8: 09:90:99:42:e9:de:7d:a9:04:90:d8:ee:99:61:84:bc:5f:58: 32:f8:04:9d:53:6b:9c:c2:28:ed:59:a2:4f:7f:97:5f:65:e4: 02:8d:3e:8a:ba:8c:1f:2c:8b:ca:c2:77:0d:92:67:9b:09:15: cd:87:e9:b9:4c:dc:b3:65:e2:1b:a7:0d:a1:75:7a:3c:fe:fd: ac:e3:39:25:0b:7f:fc:4e:d5:fb:90:d3:28:7f:3b:cc:e9:9b: 95:91:be:fb:63:d1:23:de:fe:0c:f5:4d:d1:c6:92:c4:18:e9: 3c:0c:f7:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3QjExMTAvBgNVBAUTKEE2MjZDRENEQjc3MUU5NjU1RTZFOTFBMUM3MkQxMkZC NTdEMUM0RTgwHhcNMjUwNDI0MjM1MTA3WhcNMjUwNTAxMjM1MTA3WjAYMRYwFAYD VQQDEw02ODBhY2U2Yi1lNTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueRGu4NJjJpM300Gl0ZAcDiEdW4B0Wi1J4Ad5ioG9H7BOxpJdcdNEE3aeNiH NYNdwlITZTeG5weE4H/wALP8hsF+EhKXhT9YKkYl4cC507/iDwodvuVEF1YdoMJh 9yeu76rElT9dPRDJAtBON/IdK6L2Y9z0Gsmj8lWsBdGfIX1LzAUWy2563rL9WqJ9 SmcHqaRX2CBR/V7Xaod3RAgpQFRVBjjroDMuATNmpy59DjjD/S/3S/L5s4T8d0Vu yimWrw1JUp3/LRVRmBPyVsXak5DPXPz561aNt1/uVmviNFklQIzO4sd3RhYgyg0P bDe2NI0aCtom4mpOuTEEsYZbdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpGgAEP +PJ4SWRstpWhMxDjv+P+MB8GA1UdIwQYMBaAFKYmzc23cellXm6RocctEvtX0cTo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdCMS9BMEY0ODBCNjND NEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZXVmVicEdoeHkwUy0xZlJ4 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BpYk56YmR4NldWZWJwR2h4eTBTLTFmUnhPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzdCMS9BMEY0ODBCNjNDNEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZX VmVicEdoeHkwUy0xZlJ4T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuWHg4clODGPzgjssICP2uDvP2dGAKmF6xiYBqEAu+6ePzorPFrobn BsFLJydCSMyRpv9o0Bd972AT4XaQ/g7b3a9uR0JuWMTvSORsaUllybfXXWmebcds 3bZIDXVmFm5bIFi+f0cEWqvwkaY+NHA1V06WOqUQbl8OxQS4M4f/+0kqKHNWyRDI qa7jFZiMHbgJkJlC6d59qQSQ2O6ZYYS8X1gy+ASdU2ucwijtWaJPf5dfZeQCjT6K uowfLIvKwncNkmebCRXNh+m5TNyzZeIbpw2hdXo8/v2s4zklC3/8TtX7kNMofzvM 6ZuVkb77Y9Ej3v4M9U3RxpLEGOk8DPc2 -----END CERTIFICATE-----Generated at Sat Apr 26 13:01:29 2025 by rpki-client