$ rpki-client -vvf rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft File: pi3nVqmxabvP97VW1DMAlV1A4yA.mft (raw, json) Hash identifier: Oufcec0AeDjqekI9NQxdiUa/ukJO+zoBnCB10CtBAgA= Subject key identifier: F8:6E:B4:01:64:80:A9:4D:59:FF:6D:30:8C:6F:8E:58:01:03:FC:92 Authority key identifier: A6:2D:E7:56:A9:B1:69:BB:CF:F7:B5:56:D4:33:00:95:5D:40:E3:20 Certificate issuer: /CN=A91104BD/serialNumber=A62DE756A9B169BBCFF7B556D43300955D40E320 Certificate serial: 0B5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft Manifest number: 0B53 Signing time: Fri 18 Jul 2025 19:18:01 +0000 Manifest this update: Fri 18 Jul 2025 19:18:00 +0000 Manifest next update: Fri 25 Jul 2025 19:18:00 +0000 Files and hashes: 1: pi3nVqmxabvP97VW1DMAlV1A4yA.crl (hash: m6c5sfSId5g9N9O8ozk5O/v8qFnEqEBGbcL9YCh/w94=) 2: D326CC30384411EA9D540B58C4F9AE02.roa (hash: y7gm3Ye3cCKsMlMiwHP3v0HJTLEmZvMTdt93lWQK5j4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.crl rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2906 (0xb5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91104BD, serialNumber=A62DE756A9B169BBCFF7B556D43300955D40E320 Validity Not Before: Jul 18 19:18:00 2025 GMT Not After : Jul 25 19:18:00 2025 GMT Subject: CN=687a9de9-a2ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3f:76:d8:5a:22:ce:f8:80:84:e5:72:80:05: b8:a8:0c:4c:76:60:42:f0:a2:53:49:8e:53:b7:3c: 27:bd:61:6d:7b:f0:1c:3b:44:4e:d7:95:b2:47:87: 99:ed:25:26:7e:35:53:a4:17:60:cd:11:91:fb:ea: 10:53:fa:43:b4:14:77:66:0a:da:7f:5b:55:d0:72: 73:a6:99:66:75:85:58:83:87:d3:d2:ab:c7:12:9c: 92:55:dd:48:0e:02:e1:ce:bb:d7:ee:ce:60:b1:00: 9c:53:f8:da:82:c1:15:7d:f5:6e:9f:36:3b:95:fe: 4d:f9:76:42:fc:56:a8:8e:74:a2:6b:20:db:1c:86: c4:de:9c:c1:94:a1:be:d7:cf:6a:cb:d4:96:1f:0a: c9:4d:66:40:b0:40:ad:49:ab:da:a4:7a:d6:81:e5: 33:c0:33:ea:ee:4e:f4:d5:3a:76:97:90:be:6e:69: 6f:e1:8d:da:d2:72:5a:ce:8f:db:85:65:9f:72:a0: f6:8c:f4:29:e5:d4:31:5d:0c:0f:26:ad:2b:45:f6: 39:43:bb:9c:f5:32:81:f1:9a:e3:cc:ea:34:a5:dc: d3:6d:2d:c1:7d:01:dd:1e:a5:18:9a:13:0f:12:90: f0:30:85:f6:ae:d2:b0:7c:10:0a:74:53:47:c7:51: 47:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6E:B4:01:64:80:A9:4D:59:FF:6D:30:8C:6F:8E:58:01:03:FC:92 X509v3 Authority Key Identifier: keyid:A6:2D:E7:56:A9:B1:69:BB:CF:F7:B5:56:D4:33:00:95:5D:40:E3:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:38:51:e8:8c:73:bb:ec:65:15:7b:e2:f6:6b:f2:e9:48:86: e1:cb:4e:4b:24:1f:fa:ae:5c:97:5c:70:75:4c:b4:ec:26:51: b7:e9:68:40:32:01:2c:41:7b:44:df:58:62:7a:6b:22:0a:4d: 9f:9b:86:cb:a7:27:b6:7e:22:e1:e1:16:c2:87:e8:55:52:d2: c6:38:fd:f0:0c:a8:16:45:55:0b:af:1b:cf:1c:34:fd:aa:9d: 60:a9:ce:a4:63:9f:7c:21:4e:cf:46:2c:44:d2:40:94:ab:19: 92:74:04:61:a3:2f:98:ea:01:ab:b0:d9:1c:c9:ca:50:c9:d4: 1e:12:9e:a6:aa:d4:a7:b4:c5:d4:1d:30:6e:83:c2:01:c3:31: 8e:99:37:ce:b3:f5:05:64:4c:55:fa:4e:51:0a:00:ba:cd:b6: 1d:82:bb:f7:31:77:74:9c:70:41:22:a6:fb:71:f4:88:be:e2: 7a:39:15:5a:f6:e0:fc:1c:2b:ca:4b:3b:73:dd:63:39:f7:f0: 73:45:ca:9f:16:1b:b3:20:15:81:bf:83:d9:8d:9b:b7:62:d7: 37:68:fd:c5:82:3b:3b:50:d8:b7:12:45:b9:a3:1f:51:a2:da: 02:15:f0:01:59:ff:47:81:c9:ec:ed:67:f1:55:51:8f:d0:f6: 5f:55:21:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA0QkQxMTAvBgNVBAUTKEE2MkRFNzU2QTlCMTY5QkJDRkY3QjU1NkQ0MzMwMDk1 NUQ0MEUzMjAwHhcNMjUwNzE4MTkxODAwWhcNMjUwNzI1MTkxODAwWjAYMRYwFAYD VQQDEw02ODdhOWRlOS1hMmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxj922FoizviAhOVygAW4qAxMdmBC8KJTSY5TtzwnvWFte/AcO0RO15WyR4eZ 7SUmfjVTpBdgzRGR++oQU/pDtBR3Zgraf1tV0HJzpplmdYVYg4fT0qvHEpySVd1I DgLhzrvX7s5gsQCcU/jagsEVffVunzY7lf5N+XZC/FaojnSiayDbHIbE3pzBlKG+ 189qy9SWHwrJTWZAsECtSavapHrWgeUzwDPq7k701Tp2l5C+bmlv4Y3a0nJazo/b hWWfcqD2jPQp5dQxXQwPJq0rRfY5Q7uc9TKB8ZrjzOo0pdzTbS3BfQHdHqUYmhMP EpDwMIX2rtKwfBAKdFNHx1FHvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhutAFk gKlNWf9tMIxvjlgBA/ySMB8GA1UdIwQYMBaAFKYt51apsWm7z/e1VtQzAJVdQOMg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDRCRC80MzczRDUwQzM4 NDMxMUVBQTYxOTJFNTNDNEY5QUUwMi9waTNuVnFteGFidlA5N1ZXMURNQWxWMUE0 eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BpM25WcW14YWJ2UDk3VlcxRE1BbFYxQTR5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDRCRC80MzczRDUwQzM4NDMxMUVBQTYxOTJFNTNDNEY5QUUwMi9waTNuVnFteGFi dlA5N1ZXMURNQWxWMUE0eUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8OFHojHO77GUVe+L2a/LpSIbhy05LJB/6rlyXXHB1TLTsJlG36WhA MgEsQXtE31hiemsiCk2fm4bLpye2fiLh4RbCh+hVUtLGOP3wDKgWRVULrxvPHDT9 qp1gqc6kY598IU7PRixE0kCUqxmSdARhoy+Y6gGrsNkcycpQydQeEp6mqtSntMXU HTBug8IBwzGOmTfOs/UFZExV+k5RCgC6zbYdgrv3MXd0nHBBIqb7cfSIvuJ6ORVa 9uD8HCvKSztz3WM59/BzRcqfFhuzIBWBv4PZjZu3Ytc3aP3Fgjs7UNi3EkW5ox9R otoCFfABWf9Hgcns7WfxVVGP0PZfVSFC -----END CERTIFICATE-----Generated at Sun Jul 20 08:04:24 2025 by rpki-client