$ rpki-client -vvf rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft File: piPcBe58I3DKREMQhN5RMh83pwQ.mft (raw, json) Hash identifier: aVWLoHC4/t0E+Cq/Z7mq3NYZPX1bo4jdLcl/T4d8E1c= Subject key identifier: E2:F1:7B:95:40:85:6D:C9:7E:56:A9:C4:70:0E:D9:25:53:92:95:CC Authority key identifier: A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04 Certificate issuer: /CN=A9146179/serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft Manifest number: 4F Signing time: Fri 25 Apr 2025 06:16:13 +0000 Manifest this update: Fri 25 Apr 2025 06:16:12 +0000 Manifest next update: Fri 02 May 2025 06:16:12 +0000 Files and hashes: 1: piPcBe58I3DKREMQhN5RMh83pwQ.crl (hash: IU521ihpWLxLE4he96hduovLQ1ejij/sj/uD1t15JjQ=) 2: B93E11C0AA7C11EFA2125D79C4F9AE02.roa (hash: L6gwOkLW0S9oSXFYmJ2NgzIUWM0zCt+FTxcWMzfbAlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.crl rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:16:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146179, serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704 Validity Not Before: Apr 25 06:16:12 2025 GMT Not After : May 2 06:16:12 2025 GMT Subject: CN=680b28ad-8ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:36:ad:d5:67:29:fa:15:51:eb:55:a6:59:3a: ab:ed:17:77:b6:61:69:72:62:83:5b:5e:9a:d7:df: 3a:60:dc:d3:ee:9a:59:80:4d:79:18:e9:61:c1:95: 1f:c1:d1:83:f8:5a:de:7a:be:c5:cf:d0:6f:29:f8: 44:49:24:44:8f:fd:88:42:16:83:0b:fb:db:3a:21: 53:2d:85:3c:41:e9:00:9a:35:4a:71:b5:19:5a:9f: d1:c1:40:81:fb:2e:46:f7:8d:f2:cb:98:dc:61:48: 9b:e2:67:87:47:05:50:0d:e2:75:cf:93:c6:6c:c9: 76:f4:e4:bc:f0:7a:b8:32:3a:ef:ba:5d:5f:0c:b9: 8c:fb:02:3f:3c:a8:a4:1f:27:82:4c:12:54:64:22: 5a:70:b1:e9:45:5b:58:41:06:1c:e0:66:b6:8e:8d: bc:0f:62:75:91:25:fb:f0:61:26:f1:10:11:70:d9: 4b:32:29:f8:82:b6:a5:c3:22:e3:90:4d:8b:4b:5d: ef:fd:31:1a:f4:fd:f4:ed:54:5a:98:29:2f:2b:a3: dc:e0:69:6a:94:e1:a5:83:99:7b:6a:37:0f:f3:b0: 80:ba:c9:ec:47:cd:eb:57:39:4f:0a:27:c3:5b:b3: af:eb:2a:10:30:af:db:26:d0:30:74:6b:47:09:7f: ca:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F1:7B:95:40:85:6D:C9:7E:56:A9:C4:70:0E:D9:25:53:92:95:CC X509v3 Authority Key Identifier: keyid:A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:61:dc:e0:2b:72:9e:3b:67:cf:32:ee:7f:a0:1b:13:4b:ea: f0:ff:7c:93:58:95:16:79:16:59:05:b2:b2:34:a5:66:65:6e: 56:04:26:ef:c4:66:be:ec:a0:13:ed:4c:d4:4c:a6:58:f5:cb: 9a:50:48:ed:20:b1:54:1d:80:c6:78:15:71:e5:94:ea:a2:c9: be:09:da:cb:fa:c0:8f:f2:1a:74:c3:03:2c:a0:d6:3b:db:f4: f2:0f:d6:7d:09:50:a4:61:38:1f:c2:ce:ba:36:61:bd:d9:86: ec:a7:7e:99:c0:5b:11:18:0b:9d:38:f9:0c:a4:67:60:3e:f5: b1:90:b4:9a:15:e3:7e:d6:74:00:79:f6:a0:8a:a9:3c:2d:a6: 5f:fc:18:65:62:0a:8e:ff:88:a1:f4:99:d5:93:52:2a:23:f5: d0:ea:f0:0d:8f:04:b3:6f:51:39:94:54:f3:6c:b3:15:10:6a: 41:36:57:0a:38:cc:21:3e:b7:25:6f:d0:6a:77:cc:66:e5:ae: 58:1e:ba:db:dc:28:2f:ad:bf:4f:d1:2d:45:a7:10:ec:0d:1f: 45:76:8b:b5:c0:30:ef:74:34:66:0c:6e:99:86:be:bc:3b:d1: 4a:e2:00:c0:0b:3a:55:18:85:0d:d8:de:c7:3c:85:62:cf:a5: 2e:16:5a:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NjE3OTExMC8GA1UEBRMoQTYyM0RDMDVFRTdDMjM3MENBNDQ0MzEwODRERTUxMzIx RjM3QTcwNDAeFw0yNTA0MjUwNjE2MTJaFw0yNTA1MDIwNjE2MTJaMBgxFjAUBgNV BAMTDTY4MGIyOGFkLThhYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHNq3VZyn6FVHrVaZZOqvtF3e2YWlyYoNbXprX3zpg3NPumlmATXkY6WHBlR/B 0YP4Wt56vsXP0G8p+ERJJESP/YhCFoML+9s6IVMthTxB6QCaNUpxtRlan9HBQIH7 Lkb3jfLLmNxhSJviZ4dHBVAN4nXPk8ZsyXb05LzwergyOu+6XV8MuYz7Aj88qKQf J4JMElRkIlpwselFW1hBBhzgZraOjbwPYnWRJfvwYSbxEBFw2UsyKfiCtqXDIuOQ TYtLXe/9MRr0/fTtVFqYKS8ro9zgaWqU4aWDmXtqNw/zsIC6yexHzetXOU8KJ8Nb s6/rKhAwr9sm0DB0a0cJf8qXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4vF7lUCF bcl+VqnEcA7ZJVOSlcwwHwYDVR0jBBgwFoAUpiPcBe58I3DKREMQhN5RMh83pwQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2MTc5LzRCRkQ5QkJDQUE3 QzExRUZBMzNCRkQ3N0M0RjlBRTAyL3BpUGNCZTU4STNES1JFTVFoTjVSTWg4M3B3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGlQY0JlNThJM0RLUkVNUWhONVJNaDgzcHdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 MTc5LzRCRkQ5QkJDQUE3QzExRUZBMzNCRkQ3N0M0RjlBRTAyL3BpUGNCZTU4STNE S1JFTVFoTjVSTWg4M3B3US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE1h3OArcp47Z88y7n+gGxNL6vD/fJNYlRZ5FlkFsrI0pWZlblYEJu/E Zr7soBPtTNRMplj1y5pQSO0gsVQdgMZ4FXHllOqiyb4J2sv6wI/yGnTDAyyg1jvb 9PIP1n0JUKRhOB/Czro2Yb3ZhuynfpnAWxEYC504+QykZ2A+9bGQtJoV437WdAB5 9qCKqTwtpl/8GGViCo7/iKH0mdWTUioj9dDq8A2PBLNvUTmUVPNssxUQakE2Vwo4 zCE+tyVv0Gp3zGblrlgeutvcKC+tv0/RLUWnEOwNH0V2i7XAMO90NGYMbpmGvrw7 0UriAMALOlUYhQ3Y3sc8hWLPpS4WWrg= -----END CERTIFICATE-----Generated at Sat Apr 26 15:22:12 2025 by rpki-client