$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft File: pibNzbdx6WVebpGhxy0S-1fRxOg.mft (raw, json) Hash identifier: WskHm47sCjUF/RZYafweSggexZKYJsCENHPFiBvL0Ew= Subject key identifier: AA:32:39:90:AD:48:72:6E:15:6D:4E:D3:A6:49:1D:7B:66:F3:A4:8A Authority key identifier: A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 Certificate issuer: /CN=A912C7B1/serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8 Certificate serial: 049B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft Manifest number: 0493 Signing time: Sat 31 May 2025 00:13:35 +0000 Manifest this update: Sat 31 May 2025 00:13:34 +0000 Manifest next update: Sat 07 Jun 2025 00:13:34 +0000 Files and hashes: 1: pibNzbdx6WVebpGhxy0S-1fRxOg.crl (hash: bF4eROA7Qtm/1Lk4MD13X8TkuG5Fzkv927N0k/iWaa8=) 2: CB56435E3C5311EC81D0DB48C4F9AE02.roa (hash: Ev++x624cT4RveaW6MjuuztzlLqpsfCU1GHY6FW0OBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1179 (0x49b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7B1, serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8 Validity Not Before: May 31 00:13:34 2025 GMT Not After : Jun 7 00:13:34 2025 GMT Subject: CN=683a49af-3315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:96:ca:63:92:b5:09:0d:f4:10:7e:4b:73:76: 51:34:6b:51:16:1a:16:e2:f6:4f:7b:98:5c:12:c6: 71:c7:0a:5d:0b:fc:22:02:ff:e9:95:de:13:bd:59: 07:32:06:dd:77:4e:90:3e:ab:9c:f5:bf:a1:bf:7a: 9c:98:6e:35:a1:99:97:2a:cd:f6:88:a6:4d:25:f6: 95:4a:cc:71:08:7d:26:ee:2b:53:55:bf:0c:e4:9b: 47:c7:d4:f0:09:8a:17:b9:65:7f:9d:01:2e:7e:cc: 46:b2:61:42:6d:93:12:f8:5e:8e:31:2c:49:d4:ac: 25:c5:84:f3:bd:a2:d0:0f:51:75:8e:bc:86:cf:fe: 15:72:de:09:90:d0:b2:00:7a:19:dc:db:8e:42:ae: c3:16:9b:dc:66:c9:48:d1:74:29:18:f4:72:64:eb: 87:17:ff:3e:f1:a4:fc:9d:10:22:5d:83:66:2b:13: 62:e4:e1:4d:13:74:9f:c4:4a:f3:97:7e:e4:2a:a9: 8c:b7:8d:e2:34:e5:50:5a:be:84:f5:64:05:10:33: 23:ca:02:39:52:aa:6f:0d:ba:38:2c:fb:0f:d3:2f: 9a:47:b8:d7:97:7a:8f:75:02:0c:19:6a:a4:54:42: 25:fa:41:d0:0e:39:e2:5a:67:75:10:75:28:ba:d8: 53:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:32:39:90:AD:48:72:6E:15:6D:4E:D3:A6:49:1D:7B:66:F3:A4:8A X509v3 Authority Key Identifier: keyid:A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:a9:11:7b:89:21:d8:c0:e4:b1:16:ec:e6:eb:53:f7:3c:65: 68:1a:57:d9:0f:fb:ed:c2:04:7c:53:db:c2:4f:d1:c1:8e:c2: 33:87:a9:58:cd:23:a1:45:5c:b5:a2:73:eb:0f:c5:a4:e8:a4: 81:24:84:15:c3:b9:82:17:fc:ce:22:ef:19:a0:eb:fb:f6:45: 8c:1b:ee:b7:65:f6:dc:e8:53:1e:1b:53:a2:66:a9:52:24:cf: e4:ef:0b:9a:45:a2:c0:9d:01:f3:f8:4f:cf:24:30:62:79:81: 35:ea:71:c5:fc:3e:78:c1:7b:b8:88:af:dc:28:6f:ca:ec:b2: 7e:78:7a:ab:dd:8a:ce:87:de:05:09:7a:1a:72:7c:4d:cc:c7: 1e:41:1c:89:91:5d:16:e3:5b:07:9b:df:93:dc:5a:66:ea:6c: 74:3f:08:a7:1b:02:d8:b8:6f:51:ba:c0:7c:51:9b:78:e9:69: ca:de:1f:ff:ca:cd:e1:dd:bf:e8:bb:f7:5d:80:50:d0:ce:09: 0a:57:07:70:bd:ee:1c:c5:40:4a:22:20:fb:6b:51:ec:e3:24: 57:a8:1f:d1:16:ad:7a:40:97:f8:79:97:21:8e:7b:77:cf:ec: 84:c2:2b:a9:94:a9:1a:7f:22:23:b4:ce:1b:ab:57:60:22:d8: 95:b4:03:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3QjExMTAvBgNVBAUTKEE2MjZDRENEQjc3MUU5NjU1RTZFOTFBMUM3MkQxMkZC NTdEMUM0RTgwHhcNMjUwNTMxMDAxMzM0WhcNMjUwNjA3MDAxMzM0WjAYMRYwFAYD VQQDEw02ODNhNDlhZi0zMzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5bKY5K1CQ30EH5Lc3ZRNGtRFhoW4vZPe5hcEsZxxwpdC/wiAv/pld4TvVkH Mgbdd06QPquc9b+hv3qcmG41oZmXKs32iKZNJfaVSsxxCH0m7itTVb8M5JtHx9Tw CYoXuWV/nQEufsxGsmFCbZMS+F6OMSxJ1KwlxYTzvaLQD1F1jryGz/4Vct4JkNCy AHoZ3NuOQq7DFpvcZslI0XQpGPRyZOuHF/8+8aT8nRAiXYNmKxNi5OFNE3SfxErz l37kKqmMt43iNOVQWr6E9WQFEDMjygI5UqpvDbo4LPsP0y+aR7jXl3qPdQIMGWqk VEIl+kHQDjniWmd1EHUouthTmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKoyOZCt SHJuFW1O06ZJHXtm86SKMB8GA1UdIwQYMBaAFKYmzc23cellXm6RocctEvtX0cTo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdCMS9BMEY0ODBCNjND NEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZXVmVicEdoeHkwUy0xZlJ4 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BpYk56YmR4NldWZWJwR2h4eTBTLTFmUnhPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzdCMS9BMEY0ODBCNjNDNEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZX VmVicEdoeHkwUy0xZlJ4T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEqRF7iSHYwOSxFuzm61P3PGVoGlfZD/vtwgR8U9vCT9HBjsIzh6lY zSOhRVy1onPrD8Wk6KSBJIQVw7mCF/zOIu8ZoOv79kWMG+63Zfbc6FMeG1OiZqlS JM/k7wuaRaLAnQHz+E/PJDBieYE16nHF/D54wXu4iK/cKG/K7LJ+eHqr3YrOh94F CXoacnxNzMceQRyJkV0W41sHm9+T3Fpm6mx0PwinGwLYuG9RusB8UZt46WnK3h// ys3h3b/ou/ddgFDQzgkKVwdwve4cxUBKIiD7a1Hs4yRXqB/RFq16QJf4eZchjnt3 z+yEwiuplKkafyIjtM4bq1dgItiVtAMG -----END CERTIFICATE-----Generated at Sat May 31 16:45:51 2025 by rpki-client