$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft File: pibNzbdx6WVebpGhxy0S-1fRxOg.mft (raw, json) Hash identifier: LEVfrmKnEC2pc26l56cFJ/amC0VpUCoxX2yhIL4weJU= Subject key identifier: A3:46:67:5C:CD:B7:1C:64:A8:36:DC:70:13:6E:00:59:D4:C9:30:D2 Authority key identifier: A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 Certificate issuer: /CN=A912C7B1/serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8 Certificate serial: 04EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft Manifest number: 04E2 Signing time: Sun 02 Nov 2025 23:45:00 +0000 Manifest this update: Sun 02 Nov 2025 23:44:59 +0000 Manifest next update: Sun 09 Nov 2025 23:44:59 +0000 Files and hashes: 1: pibNzbdx6WVebpGhxy0S-1fRxOg.crl (hash: DFQDCDkLBKIkz9pgJv9q0ct7obbUOTIb46vqZpXQwoY=) 2: CB56435E3C5311EC81D0DB48C4F9AE02.roa (hash: Ev++x624cT4RveaW6MjuuztzlLqpsfCU1GHY6FW0OBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1258 (0x4ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7B1, serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8 Validity Not Before: Nov 2 23:44:59 2025 GMT Not After : Nov 9 23:44:59 2025 GMT Subject: CN=6907ecfb-3eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:46:ca:14:7c:ed:a2:35:e4:7d:79:6c:c9:59: d7:93:94:6d:50:5d:65:d0:d7:e7:55:53:73:62:a9: 86:c7:a3:64:6c:86:5f:87:d8:e0:d0:38:16:8d:09: 03:aa:bc:be:b3:77:64:16:f4:dc:ee:60:54:82:09: a9:63:cc:65:b3:c3:3f:a7:54:1b:8f:f8:63:4b:dc: 6f:0c:b4:a0:dd:48:6e:99:9d:f6:e7:4d:30:d3:08: 67:6b:04:ac:a0:b4:4a:dd:91:81:62:52:1b:a7:0d: 69:6f:83:dc:4f:69:8a:82:75:a1:35:18:12:c5:48: fe:ea:85:0e:93:60:d8:04:64:d9:70:79:58:8e:59: fd:7f:f9:54:08:19:9c:c5:a9:36:1d:12:0c:ce:a9: 70:d5:f1:4e:bc:02:4c:58:34:a9:d8:e7:fe:a7:d8: 10:ab:e0:12:92:36:18:17:94:0f:1d:2b:85:6c:b2: 87:30:ba:60:df:82:84:3f:1d:17:0e:ef:a1:5f:2b: e1:b4:53:ff:77:9e:27:de:40:7b:cc:ca:94:0a:24: b6:a6:90:28:1a:74:c0:9f:c5:7f:33:d4:72:1b:6d: 1c:f3:b2:4f:4e:c0:ef:01:0f:b0:55:54:25:04:1e: d6:68:60:e9:08:da:3d:a9:a6:3f:1e:5c:93:cb:3c: fa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:46:67:5C:CD:B7:1C:64:A8:36:DC:70:13:6E:00:59:D4:C9:30:D2 X509v3 Authority Key Identifier: keyid:A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:e5:ce:f6:54:a2:cb:b4:b4:9f:80:48:d2:8e:d0:96:1a:37: 33:b2:ad:f1:af:c5:0d:a5:b8:16:11:a8:d2:15:68:ba:b1:2f: 12:06:ad:54:20:a8:35:1c:c0:20:e5:4b:0f:4a:fe:e7:39:b8: 6f:1d:7d:c4:c1:25:d1:62:51:20:bc:db:33:fd:05:68:a8:cb: 78:0d:b1:e4:fb:a2:b3:c4:be:79:f4:c1:71:20:a1:aa:04:37: b2:6b:f8:ca:35:2a:a8:c4:83:53:0a:9b:c1:49:2e:25:73:b6: 30:ae:62:48:26:2d:bf:77:11:0d:58:6e:c2:66:3f:19:30:8a: 5e:fa:de:05:73:d3:94:d7:b8:dd:ea:d8:6f:50:4d:cc:24:35: 44:9d:a8:7f:7d:38:d1:74:bd:9f:b1:ef:92:76:9f:e3:4e:a3: 7a:fe:9a:d8:61:f1:05:b5:2d:29:45:93:22:ed:4b:d2:45:79: 8e:ca:d0:c4:07:d7:bb:c5:0f:de:fc:c7:42:bf:d6:99:95:f7: 60:9a:b0:b6:dc:16:17:cc:00:b1:06:6d:87:f8:1e:d1:28:1d: 86:97:15:19:b2:77:75:c4:08:85:36:d8:2e:df:39:96:cb:d5: 44:2c:56:6e:f3:df:df:46:cd:e8:d3:89:f3:50:6f:14:09:27: d0:e7:5c:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3QjExMTAvBgNVBAUTKEE2MjZDRENEQjc3MUU5NjU1RTZFOTFBMUM3MkQxMkZC NTdEMUM0RTgwHhcNMjUxMTAyMjM0NDU5WhcNMjUxMTA5MjM0NDU5WjAYMRYwFAYD VQQDEw02OTA3ZWNmYi0zZWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUbKFHztojXkfXlsyVnXk5RtUF1l0NfnVVNzYqmGx6NkbIZfh9jg0DgWjQkD qry+s3dkFvTc7mBUggmpY8xls8M/p1Qbj/hjS9xvDLSg3UhumZ32500w0whnawSs oLRK3ZGBYlIbpw1pb4PcT2mKgnWhNRgSxUj+6oUOk2DYBGTZcHlYjln9f/lUCBmc xak2HRIMzqlw1fFOvAJMWDSp2Of+p9gQq+ASkjYYF5QPHSuFbLKHMLpg34KEPx0X Du+hXyvhtFP/d54n3kB7zMqUCiS2ppAoGnTAn8V/M9RyG20c87JPTsDvAQ+wVVQl BB7WaGDpCNo9qaY/HlyTyzz6RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNGZ1zN txxkqDbccBNuAFnUyTDSMB8GA1UdIwQYMBaAFKYmzc23cellXm6RocctEvtX0cTo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdCMS9BMEY0ODBCNjND NEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZXVmVicEdoeHkwUy0xZlJ4 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BpYk56YmR4NldWZWJwR2h4eTBTLTFmUnhPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzdCMS9BMEY0ODBCNjNDNEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZX VmVicEdoeHkwUy0xZlJ4T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA15c72VKLLtLSfgEjSjtCWGjczsq3xr8UNpbgWEajSFWi6sS8SBq1U IKg1HMAg5UsPSv7nObhvHX3EwSXRYlEgvNsz/QVoqMt4DbHk+6KzxL559MFxIKGq BDeya/jKNSqoxINTCpvBSS4lc7YwrmJIJi2/dxENWG7CZj8ZMIpe+t4Fc9OU17jd 6thvUE3MJDVEnah/fTjRdL2fse+Sdp/jTqN6/prYYfEFtS0pRZMi7UvSRXmOytDE B9e7xQ/e/MdCv9aZlfdgmrC23BYXzACxBm2H+B7RKB2GlxUZsnd1xAiFNtgu3zmW y9VELFZu89/fRs3o04nzUG8UCSfQ51w5 -----END CERTIFICATE-----Generated at Tue Nov 4 01:07:17 2025 by rpki-client