$ rpki-client -vvf rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft File: piPcBe58I3DKREMQhN5RMh83pwQ.mft (raw, json) Hash identifier: cZQ11ztWghLGXK9vVJlGTId/a5Hx0O3CtaocK2P32q4= Subject key identifier: 4D:BF:64:D8:6A:B9:F9:ED:BA:81:DA:46:E7:36:2E:8D:39:D6:F2:2B Authority key identifier: A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04 Certificate issuer: /CN=A9146179/serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft Manifest number: 6A Signing time: Thu 19 Jun 2025 06:18:43 +0000 Manifest this update: Thu 19 Jun 2025 06:18:42 +0000 Manifest next update: Thu 26 Jun 2025 06:18:42 +0000 Files and hashes: 1: piPcBe58I3DKREMQhN5RMh83pwQ.crl (hash: Ggdepv3g1OMb9cZ0sHxJBkRDAmzNlXF1j3lcrdA9iZs=) 2: B93E11C0AA7C11EFA2125D79C4F9AE02.roa (hash: L6gwOkLW0S9oSXFYmJ2NgzIUWM0zCt+FTxcWMzfbAlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.crl rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146179, serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704 Validity Not Before: Jun 19 06:18:42 2025 GMT Not After : Jun 26 06:18:42 2025 GMT Subject: CN=6853abc2-7c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f8:54:1b:6b:69:ef:3b:f1:61:f9:cd:d1:8d: 27:54:9a:1f:ca:43:50:56:9f:7c:84:25:29:dc:c1: 5e:fc:92:bb:b3:01:df:6e:c9:a8:84:f3:e6:86:d2: 27:93:35:97:90:68:bd:20:f6:e9:ab:61:49:31:4a: 75:4a:1d:dd:d1:ca:01:1b:6e:33:e4:9b:21:58:48: 6d:b4:5b:99:2a:f4:1a:a3:43:52:25:de:33:be:05: 22:c5:b4:eb:5b:02:21:e1:ac:54:7e:30:bb:b3:33: 33:41:e2:07:ff:8c:c8:6a:4b:55:fc:10:b3:9f:9f: 2c:f9:35:29:bf:6d:9e:bf:eb:9f:6b:9b:61:a8:81: d1:79:27:25:83:27:86:06:a3:c5:b3:7a:54:2d:de: 08:79:9f:49:6a:69:78:a2:c3:97:ea:9d:36:fe:bf: c1:2e:51:9c:a2:00:f0:fe:2b:c3:19:ff:4f:a9:ca: 06:f7:41:c6:fd:2d:18:35:8d:6d:9a:ca:23:9b:a5: b7:dd:1c:c1:07:51:cd:1f:b9:8f:7b:e7:10:0c:71: a5:b8:7d:32:bd:e7:89:d8:06:26:d0:cd:c2:2c:92: 1a:3b:79:07:3f:de:74:8c:d1:0c:80:89:c8:eb:f6: 58:dc:f1:33:c3:91:0e:44:7c:79:d3:0d:c2:a6:81: 47:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BF:64:D8:6A:B9:F9:ED:BA:81:DA:46:E7:36:2E:8D:39:D6:F2:2B X509v3 Authority Key Identifier: keyid:A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:e0:4b:8a:34:99:5d:b4:08:1b:e7:33:32:3e:40:d2:93:ce: a4:7f:d8:b6:ca:ec:b8:45:22:dd:29:4a:bb:6f:af:95:e5:2a: 53:11:60:ef:6f:9b:40:8a:89:eb:eb:0a:1b:2e:c5:fb:c3:bc: 6d:fa:f1:56:8d:35:11:45:ee:aa:4d:a8:40:e7:71:ff:dd:ee: 82:44:21:0d:aa:d8:64:3d:05:76:c9:e7:98:0b:5e:61:85:8b: dd:a1:aa:a2:2e:89:ed:b8:cc:4a:7d:02:d0:ab:3f:99:c2:08: 06:1d:0e:2a:7b:53:56:fc:8d:4f:55:f9:60:4a:3c:3a:2f:ca: 00:33:8c:f9:3c:5b:b9:41:b5:39:f4:f8:85:cc:b8:a3:ab:fd: 09:1e:ab:43:d6:b5:a8:85:6b:64:54:2f:f1:73:a8:94:6a:eb: 3d:51:bb:6d:2a:72:d2:f0:ac:07:5a:47:6d:5d:da:65:61:1f: 39:87:11:19:cc:4f:43:fc:61:6e:58:d9:50:36:b8:be:6e:62: 36:1d:47:68:42:a1:90:7e:57:3c:1d:18:1e:65:9b:fe:2e:22: 86:76:50:73:d6:98:43:ef:68:77:34:21:3c:af:1f:25:01:2a: a3:45:38:ac:cb:20:a9:58:5b:17:86:0e:4d:a7:98:1d:2a:83: bd:71:3f:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NjE3OTExMC8GA1UEBRMoQTYyM0RDMDVFRTdDMjM3MENBNDQ0MzEwODRERTUxMzIx RjM3QTcwNDAeFw0yNTA2MTkwNjE4NDJaFw0yNTA2MjYwNjE4NDJaMBgxFjAUBgNV BAMTDTY4NTNhYmMyLTdjMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5+FQba2nvO/Fh+c3RjSdUmh/KQ1BWn3yEJSncwV78kruzAd9uyaiE8+aG0ieT NZeQaL0g9umrYUkxSnVKHd3RygEbbjPkmyFYSG20W5kq9BqjQ1Il3jO+BSLFtOtb AiHhrFR+MLuzMzNB4gf/jMhqS1X8ELOfnyz5NSm/bZ6/659rm2GogdF5JyWDJ4YG o8WzelQt3gh5n0lqaXiiw5fqnTb+v8EuUZyiAPD+K8MZ/0+pygb3Qcb9LRg1jW2a yiObpbfdHMEHUc0fuY975xAMcaW4fTK954nYBibQzcIskho7eQc/3nSM0QyAicjr 9ljc8TPDkQ5EfHnTDcKmgUetAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTb9k2Gq5 +e26gdpG5zYujTnW8iswHwYDVR0jBBgwFoAUpiPcBe58I3DKREMQhN5RMh83pwQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2MTc5LzRCRkQ5QkJDQUE3 QzExRUZBMzNCRkQ3N0M0RjlBRTAyL3BpUGNCZTU4STNES1JFTVFoTjVSTWg4M3B3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGlQY0JlNThJM0RLUkVNUWhONVJNaDgzcHdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 MTc5LzRCRkQ5QkJDQUE3QzExRUZBMzNCRkQ3N0M0RjlBRTAyL3BpUGNCZTU4STNE S1JFTVFoTjVSTWg4M3B3US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKbgS4o0mV20CBvnMzI+QNKTzqR/2LbK7LhFIt0pSrtvr5XlKlMRYO9v m0CKievrChsuxfvDvG368VaNNRFF7qpNqEDncf/d7oJEIQ2q2GQ9BXbJ55gLXmGF i92hqqIuie24zEp9AtCrP5nCCAYdDip7U1b8jU9V+WBKPDovygAzjPk8W7lBtTn0 +IXMuKOr/Qkeq0PWtaiFa2RUL/FzqJRq6z1Ru20qctLwrAdaR21d2mVhHzmHERnM T0P8YW5Y2VA2uL5uYjYdR2hCoZB+VzwdGB5lm/4uIoZ2UHPWmEPvaHc0ITyvHyUB KqNFOKzLIKlYWxeGDk2nmB0qg71xPxs= -----END CERTIFICATE-----Generated at Thu Jun 19 21:30:35 2025 by rpki-client