$ rpki-client -vvf rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft File: piPcBe58I3DKREMQhN5RMh83pwQ.mft (raw, json) Hash identifier: B9ZexKspOzLWImdvwkylJTjWBNIS4rajdISKnrR7qr4= Subject key identifier: 20:F8:1B:19:F5:87:D8:86:95:61:B9:94:1C:B1:41:CC:F6:17:1A:EA Authority key identifier: A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04 Certificate issuer: /CN=A9146179/serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft Manifest number: 84 Signing time: Sat 09 Aug 2025 07:05:26 +0000 Manifest this update: Sat 09 Aug 2025 07:05:26 +0000 Manifest next update: Sat 16 Aug 2025 07:05:26 +0000 Files and hashes: 1: piPcBe58I3DKREMQhN5RMh83pwQ.crl (hash: agnK7TrKWP/DqU9v7O8LEVuB6KM+G7BizgAjORSZces=) 2: B93E11C0AA7C11EFA2125D79C4F9AE02.roa (hash: L6gwOkLW0S9oSXFYmJ2NgzIUWM0zCt+FTxcWMzfbAlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.crl rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146179, serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704 Validity Not Before: Aug 9 07:05:26 2025 GMT Not After : Aug 16 07:05:26 2025 GMT Subject: CN=6896f336-f21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:03:ca:c3:03:29:a3:36:6f:c4:eb:f8:6f:07: 63:8a:7f:da:51:a9:02:83:6f:8d:7d:88:1b:66:ca: 34:18:4c:0a:4b:ef:77:89:b1:f3:95:ed:8b:d2:6a: 63:1d:d2:ae:a9:4b:53:99:e3:e7:0a:b1:e4:7f:f0: 93:b2:3d:da:cb:16:b9:9a:9d:ce:68:40:b3:a9:0b: f8:b6:0d:69:7e:18:f8:7e:54:fe:37:34:71:f4:f9: a1:8f:ff:dc:97:06:d4:c1:ee:7e:17:94:fe:b6:67: 90:49:fb:e0:61:09:dd:6d:e1:3b:b0:9a:46:38:66: 69:93:a3:9c:e5:19:8b:6c:50:f3:ec:00:24:ac:7c: 57:0a:81:07:72:14:14:9c:83:ab:7b:a5:70:75:81: 33:14:19:78:8b:eb:d0:9c:34:19:63:b7:c7:04:2a: 36:9f:a7:b6:46:53:f6:8f:b3:10:d7:63:4b:72:ea: f7:74:a1:f0:4a:aa:d2:7c:31:c7:74:bf:ec:47:9d: 50:80:23:3a:ce:03:12:0d:2e:0e:7e:3c:72:9f:a0: 28:ee:b4:d2:ee:3a:38:d4:92:3b:28:83:4d:a9:09: 07:63:30:d6:2e:c7:f1:ec:ce:c6:b8:6d:0f:11:d2: 8e:86:6a:f0:a1:80:68:68:eb:03:fc:03:b9:ae:fe: 26:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F8:1B:19:F5:87:D8:86:95:61:B9:94:1C:B1:41:CC:F6:17:1A:EA X509v3 Authority Key Identifier: keyid:A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:54:99:7c:bf:72:82:3c:b3:0a:0b:08:64:d9:75:c9:e8:b2: 8b:1b:09:4f:fc:c0:5b:9a:97:06:23:98:0b:de:c9:2a:09:48: 20:92:2b:a6:76:72:ce:8a:09:da:df:f8:a7:fe:27:d8:24:8e: fe:71:e5:b4:6a:04:3a:9e:e4:1d:bc:d2:80:8a:a5:ba:6b:ac: d6:ef:25:29:ec:ec:f8:7b:c6:ec:9c:68:45:af:fe:0b:46:3b: 46:64:ba:49:19:2a:a9:ad:78:21:f4:e8:69:4f:6f:bd:36:d3: 6f:5b:62:a8:e2:cd:32:bf:3b:b6:4a:3d:01:e9:88:69:24:1f: 9b:b2:fb:26:5b:45:ca:84:43:20:fc:29:2c:c6:1e:d3:cb:32: ec:71:1c:43:32:01:58:ac:7e:bf:4d:99:cf:7d:68:10:9b:b4: ca:bc:d8:8d:38:5e:38:85:00:2f:f9:3c:3d:2a:6c:41:d9:99: cc:cd:a9:de:ec:fd:31:80:ea:de:98:dd:7c:27:d9:68:c8:4d: b7:dc:14:95:c1:b9:7b:da:97:20:43:23:f8:37:27:2d:67:e4: 6a:52:d4:91:66:fc:d9:5b:53:1d:dc:45:2e:56:37:db:4d:23: 53:70:7f:51:10:76:b3:28:47:eb:26:5f:44:b9:0b:47:55:82: e3:6c:e5:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYxNzkxMTAvBgNVBAUTKEE2MjNEQzA1RUU3QzIzNzBDQTQ0NDMxMDg0REU1MTMy MUYzN0E3MDQwHhcNMjUwODA5MDcwNTI2WhcNMjUwODE2MDcwNTI2WjAYMRYwFAYD VQQDEw02ODk2ZjMzNi1mMjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgPKwwMpozZvxOv4bwdjin/aUakCg2+NfYgbZso0GEwKS+93ibHzle2L0mpj HdKuqUtTmePnCrHkf/CTsj3ayxa5mp3OaECzqQv4tg1pfhj4flT+NzRx9Pmhj//c lwbUwe5+F5T+tmeQSfvgYQndbeE7sJpGOGZpk6Oc5RmLbFDz7AAkrHxXCoEHchQU nIOre6VwdYEzFBl4i+vQnDQZY7fHBCo2n6e2RlP2j7MQ12NLcur3dKHwSqrSfDHH dL/sR51QgCM6zgMSDS4Ofjxyn6Ao7rTS7jo41JI7KINNqQkHYzDWLsfx7M7GuG0P EdKOhmrwoYBoaOsD/AO5rv4mwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCD4Gxn1 h9iGlWG5lByxQcz2FxrqMB8GA1UdIwQYMBaAFKYj3AXufCNwykRDEITeUTIfN6cE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjE3OS80QkZEOUJCQ0FB N0MxMUVGQTMzQkZENzdDNEY5QUUwMi9waVBjQmU1OEkzREtSRU1RaE41Uk1oODNw d1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BpUGNCZTU4STNES1JFTVFoTjVSTWg4M3B3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjE3OS80QkZEOUJCQ0FBN0MxMUVGQTMzQkZENzdDNEY5QUUwMi9waVBjQmU1OEkz REtSRU1RaE41Uk1oODNwd1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsVJl8v3KCPLMKCwhk2XXJ6LKLGwlP/MBbmpcGI5gL3skqCUggkium dnLOigna3/in/ifYJI7+ceW0agQ6nuQdvNKAiqW6a6zW7yUp7Oz4e8bsnGhFr/4L RjtGZLpJGSqprXgh9OhpT2+9NtNvW2Ko4s0yvzu2Sj0B6YhpJB+bsvsmW0XKhEMg /Cksxh7TyzLscRxDMgFYrH6/TZnPfWgQm7TKvNiNOF44hQAv+Tw9KmxB2ZnMzane 7P0xgOremN18J9loyE233BSVwbl72pcgQyP4NyctZ+RqUtSRZvzZW1Md3EUuVjfb TSNTcH9REHazKEfrJl9EuQtHVYLjbOXU -----END CERTIFICATE-----Generated at Sun Aug 10 03:56:58 2025 by rpki-client