$ rpki-client -vvf rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft File: piPcBe58I3DKREMQhN5RMh83pwQ.mft (raw, json) Hash identifier: B5W/2aeUY4/niKrG4i+RqU+6gJ/DCKCs6BzgOgizaDs= Subject key identifier: CB:50:C4:2B:0A:04:BB:DB:5A:70:69:DC:00:14:1A:D1:C8:32:34:6C Authority key identifier: A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04 Certificate issuer: /CN=A9146179/serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft Manifest number: B0 Signing time: Wed 05 Nov 2025 06:18:10 +0000 Manifest this update: Wed 05 Nov 2025 06:18:09 +0000 Manifest next update: Wed 12 Nov 2025 06:18:09 +0000 Files and hashes: 1: piPcBe58I3DKREMQhN5RMh83pwQ.crl (hash: ZzmsC4wryD68yj05hLzZ0JLSPNnkzcb9dmB0dS6WX/g=) 2: B93E11C0AA7C11EFA2125D79C4F9AE02.roa (hash: L6gwOkLW0S9oSXFYmJ2NgzIUWM0zCt+FTxcWMzfbAlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.crl rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146179, serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704 Validity Not Before: Nov 5 06:18:09 2025 GMT Not After : Nov 12 06:18:09 2025 GMT Subject: CN=690aec21-d75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:29:d6:f0:a1:02:b2:b9:62:28:49:de:e2:7f: b8:31:db:b2:94:6a:1b:19:cc:a0:7e:a7:4c:7f:4b: d8:2d:d6:51:63:7e:61:52:44:da:39:b8:2c:1a:17: 95:a8:9f:a7:5f:63:a8:5a:e2:c1:7c:ea:85:c3:cd: ec:6d:68:01:db:83:8a:03:c5:eb:28:88:d4:d4:b5: 10:09:dd:5e:a8:c6:6a:9f:8a:da:e9:df:12:a4:91: c2:0c:4b:29:34:1d:ad:69:ee:4f:14:58:77:15:a0: 50:87:67:72:c0:fa:49:6f:5d:f1:8c:89:53:73:ad: 58:3e:e3:4f:a4:be:12:2b:5a:9d:c7:de:48:1f:c9: fd:07:23:ce:fb:d0:2c:cf:5c:9b:74:00:bb:57:88: 60:29:1f:7a:81:6d:3b:37:b8:38:8f:d7:86:e8:f0: 56:f5:70:e4:66:8d:fa:43:23:10:99:78:33:b6:54: 65:00:aa:06:ea:d3:99:24:77:75:4a:64:e4:51:04: 0b:06:96:ea:2a:4e:2a:a7:8c:e4:e3:20:0f:f2:0e: c2:46:55:3b:24:82:6e:96:97:84:da:f6:a0:a6:66: 5d:62:cb:e9:75:c9:15:2e:c6:ad:09:09:4c:8b:92: 7d:1f:b6:b9:ec:07:39:90:bd:f8:c6:72:ad:6c:00: 6b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:50:C4:2B:0A:04:BB:DB:5A:70:69:DC:00:14:1A:D1:C8:32:34:6C X509v3 Authority Key Identifier: keyid:A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:48:00:b7:82:94:91:86:87:2f:fb:a3:ab:fb:51:c8:11:7d: 77:e0:64:26:e6:e3:0b:6b:49:8f:a5:8c:57:a6:f4:1a:71:80: a2:7e:5b:d2:da:db:63:e7:61:6c:65:7f:00:60:2a:89:ad:76: a1:5b:93:ad:ad:b2:9c:63:17:5e:3c:0f:73:5c:97:16:ec:b5: 58:d2:82:e9:c5:10:13:b0:6b:19:1e:59:61:1d:2f:4f:cb:af: 31:94:8e:44:b4:c0:5a:64:06:ca:2c:04:31:83:c6:33:6e:ac: 11:58:fd:42:f0:b1:ca:81:31:0e:3f:1e:b5:fb:0e:4f:71:db: 35:46:cd:8f:a3:61:5b:06:61:13:87:e1:73:24:1f:f2:d2:f2: 77:6c:6a:aa:51:11:96:a1:a2:59:00:01:86:30:40:fc:bb:a4: a2:b8:e0:bb:68:c8:fa:9e:a0:b6:f7:c3:5e:16:31:28:36:76: 0d:b3:c2:75:22:22:63:3e:cc:72:f4:bf:0c:a6:a0:b3:10:28: 3c:1e:59:af:cf:6c:72:88:6c:51:3c:a2:c7:4a:5f:19:db:d9: 4e:57:d7:3e:7e:8f:f9:e4:5f:fe:09:e7:79:6e:9f:48:c4:1c: 7b:10:c8:d3:cb:53:75:bd:e8:a7:be:83:4b:f4:4e:33:99:d5: 8e:e0:7b:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYxNzkxMTAvBgNVBAUTKEE2MjNEQzA1RUU3QzIzNzBDQTQ0NDMxMDg0REU1MTMy MUYzN0E3MDQwHhcNMjUxMTA1MDYxODA5WhcNMjUxMTEyMDYxODA5WjAYMRYwFAYD VQQDEw02OTBhZWMyMS1kNzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySnW8KECsrliKEne4n+4MduylGobGcygfqdMf0vYLdZRY35hUkTaObgsGheV qJ+nX2OoWuLBfOqFw83sbWgB24OKA8XrKIjU1LUQCd1eqMZqn4ra6d8SpJHCDEsp NB2tae5PFFh3FaBQh2dywPpJb13xjIlTc61YPuNPpL4SK1qdx95IH8n9ByPO+9As z1ybdAC7V4hgKR96gW07N7g4j9eG6PBW9XDkZo36QyMQmXgztlRlAKoG6tOZJHd1 SmTkUQQLBpbqKk4qp4zk4yAP8g7CRlU7JIJulpeE2vagpmZdYsvpdckVLsatCQlM i5J9H7a57Ac5kL34xnKtbABrDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtQxCsK BLvbWnBp3AAUGtHIMjRsMB8GA1UdIwQYMBaAFKYj3AXufCNwykRDEITeUTIfN6cE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjE3OS80QkZEOUJCQ0FB N0MxMUVGQTMzQkZENzdDNEY5QUUwMi9waVBjQmU1OEkzREtSRU1RaE41Uk1oODNw d1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BpUGNCZTU4STNES1JFTVFoTjVSTWg4M3B3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjE3OS80QkZEOUJCQ0FBN0MxMUVGQTMzQkZENzdDNEY5QUUwMi9waVBjQmU1OEkz REtSRU1RaE41Uk1oODNwd1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkSAC3gpSRhocv+6Or+1HIEX134GQm5uMLa0mPpYxXpvQacYCiflvS 2ttj52FsZX8AYCqJrXahW5OtrbKcYxdePA9zXJcW7LVY0oLpxRATsGsZHllhHS9P y68xlI5EtMBaZAbKLAQxg8YzbqwRWP1C8LHKgTEOPx61+w5Pcds1Rs2Po2FbBmET h+FzJB/y0vJ3bGqqURGWoaJZAAGGMED8u6SiuOC7aMj6nqC298NeFjEoNnYNs8J1 IiJjPsxy9L8MpqCzECg8Hlmvz2xyiGxRPKLHSl8Z29lOV9c+fo/55F/+Ced5bp9I xBx7EMjTy1N1veinvoNL9E4zmdWO4Htw -----END CERTIFICATE-----Generated at Wed Nov 5 13:31:45 2025 by rpki-client