$ rpki-client -vvf rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft File: pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft (raw, json) Hash identifier: ZTKno0ZN2fWKtifxwa7RDFAruUVD3hrIQMBA7HaNbIA= Subject key identifier: 07:43:03:55:84:37:A8:BA:5D:98:17:43:40:00:5F:DE:1E:64:D3:4E Authority key identifier: A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B Certificate issuer: /CN=A915C365/serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft Manifest number: 01C3 Signing time: Sat 05 Apr 2025 02:25:23 +0000 Manifest this update: Sat 05 Apr 2025 02:25:22 +0000 Manifest next update: Sat 12 Apr 2025 02:25:22 +0000 Files and hashes: 1: pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl (hash: QdaJXKk8lFh9PG+nTUdxMCmuCkv1ZzK95JHuw3gVoSI=) 2: 83B6F66C5E4711EDA05F092CC4F9AE02.roa (hash: ToaemIh9fPDcUkU4p3/lQzqtbYeK8WosReKWFwgAYY8=) 3: 843712B65E4711EDA05F092CC4F9AE02.roa (hash: fEBKFBy173sPjDX2RWBsnGsgGGHYxBJfdinF6AmOKOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C365 Validity Not Before: Apr 5 02:25:22 2025 GMT Not After : Apr 12 02:25:22 2025 GMT Subject: CN=67f09492-9018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fd:6c:af:b7:ed:95:93:66:36:c3:f2:c7:de: a7:d1:d3:70:e1:fd:ed:77:f8:31:68:97:ec:64:69: 86:0c:38:ce:dc:c7:41:5b:2c:f0:b9:15:d0:6b:d7: 16:07:79:52:da:8d:2b:89:a4:19:ad:e0:b9:0b:45: 01:3d:0f:59:a2:eb:42:89:91:15:ff:22:cc:82:58: 47:2c:84:fc:ff:f0:99:d8:85:52:b6:10:61:b9:1e: ee:30:27:ce:4a:99:ec:36:39:6f:07:d0:8b:18:12: c7:dc:c3:48:cd:01:94:8a:41:70:8e:2e:c0:f0:24: 62:e7:fe:c8:8e:9a:93:da:1f:44:e6:70:35:9c:19: b4:a4:d4:e9:9c:29:c0:33:d3:49:d5:06:70:98:66: 92:f2:4d:f4:42:88:10:13:53:5e:af:bc:2a:a2:7e: 83:f4:61:05:7e:2a:a7:4f:9e:7b:50:5c:35:fd:7b: 19:0c:6a:27:48:80:d6:4b:72:37:a2:76:fc:50:70: 37:f6:97:60:36:ce:9a:26:4c:de:30:c4:52:89:3b: e0:37:e0:67:0b:20:30:42:0b:bc:4b:7e:c3:e2:6c: 39:d6:70:c6:56:7a:f4:57:4c:5f:2a:90:3f:0a:93: a2:4b:c7:37:ca:95:26:9a:32:ac:75:b3:41:e1:e6: eb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:43:03:55:84:37:A8:BA:5D:98:17:43:40:00:5F:DE:1E:64:D3:4E X509v3 Authority Key Identifier: keyid:A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e4:1d:84:45:73:de:44:df:92:1a:ac:5c:c0:2f:04:df:a7:a0: 2a:89:c1:e3:c6:fd:2e:b2:35:9d:27:2b:03:c7:54:e1:4f:ce: 2f:9a:03:1c:5e:13:cc:2b:8f:4f:28:5d:f3:1b:47:79:75:8f: a7:b5:7f:f9:ee:28:75:e1:7d:e5:7e:15:e0:97:99:9a:1f:78: de:a7:1c:1b:ac:68:f1:12:78:10:0c:76:cc:cc:e2:8c:7e:81: 9c:96:3c:b3:45:24:7b:23:7b:8b:9f:1f:cf:09:59:6f:2b:f2: 18:bb:4a:41:54:cb:8a:45:6b:ab:9d:55:80:de:87:8a:55:48: ee:34:c8:7b:b8:c1:fb:c4:e3:9c:f8:26:66:26:d8:d6:4b:59: 4f:6d:85:a3:e1:c4:9e:c8:47:83:a6:86:99:7a:b5:e7:a0:f1: 3d:fe:43:e3:69:8a:13:b8:0c:bb:19:c7:b6:66:ec:53:18:0c: d9:eb:db:42:8c:fa:c6:14:7b:e3:90:f0:12:ad:43:37:d8:5c: eb:24:c9:b8:60:6f:99:3f:7d:e1:33:88:23:39:2f:50:89:71: 7a:43:5e:56:8a:a5:32:77:85:52:bf:b9:69:f2:48:a8:ab:17: 0d:d1:51:bd:ae:dc:2d:57:cb:bc:0f:3e:b5:96:d6:72:ae:95: 7e:e4:f2:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMzNjUxMTAvBgNVBAUTKEE2MjgwMzQ0MDFDNjVDRjQ2OTc1REU4QzlCNDY3MkY4 NUUwMEZFOUIwHhcNMjUwNDA1MDIyNTIyWhcNMjUwNDEyMDIyNTIyWjAYMRYwFAYD VQQDEw02N2YwOTQ5Mi05MDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzf1sr7ftlZNmNsPyx96n0dNw4f3td/gxaJfsZGmGDDjO3MdBWyzwuRXQa9cW B3lS2o0riaQZreC5C0UBPQ9ZoutCiZEV/yLMglhHLIT8//CZ2IVSthBhuR7uMCfO SpnsNjlvB9CLGBLH3MNIzQGUikFwji7A8CRi5/7IjpqT2h9E5nA1nBm0pNTpnCnA M9NJ1QZwmGaS8k30QogQE1Ner7wqon6D9GEFfiqnT557UFw1/XsZDGonSIDWS3I3 onb8UHA39pdgNs6aJkzeMMRSiTvgN+BnCyAwQgu8S37D4mw51nDGVnr0V0xfKpA/ CpOiS8c3ypUmmjKsdbNB4ebrfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdDA1WE N6i6XZgXQ0AAX94eZNNOMB8GA1UdIwQYMBaAFKYoA0QBxlz0aXXejJtGcvheAP6b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzM2NS8wOUZCNTE4QTVF NDUxMUVEQjUxN0QyMkFDNEY5QUUwMi9waWdEUkFIR1hQUnBkZDZNbTBaeS1GNEFf cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BpZ0RSQUhHWFBScGRkNk1tMFp5LUY0QV9wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzM2NS8wOUZCNTE4QTVFNDUxMUVEQjUxN0QyMkFDNEY5QUUwMi9waWdEUkFIR1hQ UnBkZDZNbTBaeS1GNEFfcHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDkHYRFc95E35IarFzALwTfp6AqicHjxv0usjWdJysDx1ThT84vmgMc XhPMK49PKF3zG0d5dY+ntX/57ih14X3lfhXgl5maH3jepxwbrGjxEngQDHbMzOKM foGcljyzRSR7I3uLnx/PCVlvK/IYu0pBVMuKRWurnVWA3oeKVUjuNMh7uMH7xOOc +CZmJtjWS1lPbYWj4cSeyEeDpoaZerXnoPE9/kPjaYoTuAy7Gce2ZuxTGAzZ69tC jPrGFHvjkPASrUM32FzrJMm4YG+ZP33hM4gjOS9QiXF6Q15WiqUyd4VSv7lp8kio qxcN0VG9rtwtV8u8Dz61ltZyrpV+5PJk -----END CERTIFICATE-----Generated at Sun Apr 6 13:51:32 2025 by rpki-client