$ rpki-client -vvf rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft File: pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft (raw, json) Hash identifier: oCkcrV5o20KwqvkGlfbiygy/mkJCy72HMCW8SDDxcGo= Subject key identifier: 82:64:46:95:B5:6E:5C:6F:28:14:56:42:AD:83:AC:40:70:7A:B4:13 Authority key identifier: A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B Certificate issuer: /CN=A915C365/serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft Manifest number: 0212 Signing time: Tue 09 Sep 2025 02:10:12 +0000 Manifest this update: Tue 09 Sep 2025 02:10:12 +0000 Manifest next update: Tue 16 Sep 2025 02:10:12 +0000 Files and hashes: 1: pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl (hash: JXOH+1rHHh7PJ6LlMvlsQq+kQLjQY+id0N3a+VKP3mk=) 2: 83B6F66C5E4711EDA05F092CC4F9AE02.roa (hash: ToaemIh9fPDcUkU4p3/lQzqtbYeK8WosReKWFwgAYY8=) 3: 843712B65E4711EDA05F092CC4F9AE02.roa (hash: fEBKFBy173sPjDX2RWBsnGsgGGHYxBJfdinF6AmOKOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C365, serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B Validity Not Before: Sep 9 02:10:12 2025 GMT Not After : Sep 16 02:10:12 2025 GMT Subject: CN=68bf8c84-4174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:37:23:dd:b3:49:42:e1:36:9f:1c:a7:4a:60: 80:ef:56:7f:d8:1b:0d:48:7a:74:dd:7a:54:16:a7: d8:90:cd:be:00:32:63:9a:9f:cb:9d:43:3e:d3:c1: f3:1a:e6:62:bf:76:21:24:36:1a:20:b8:f4:18:4e: cc:2f:ac:a9:5c:e7:74:4b:0c:40:f3:b8:dc:47:21: 08:cd:f6:6e:76:5d:8b:fd:79:04:73:62:4b:1b:8d: eb:19:62:d5:8e:a4:cb:2e:fd:8c:c5:d6:ab:5b:11: 7b:b5:9b:91:36:18:bb:f4:4f:47:96:02:84:95:1e: 91:25:01:c1:d9:41:da:7e:60:f0:38:4c:3b:0b:26: 45:10:6d:b3:51:6c:aa:a2:18:a3:66:cb:26:da:c7: 47:da:b7:48:c7:8d:09:29:ff:4f:ec:64:79:01:ad: 35:a9:73:d9:39:14:83:4b:8d:ba:11:aa:e6:9e:fe: b0:e8:09:d6:e5:fb:8e:b6:2c:dc:d0:fa:5b:e4:f3: e6:99:01:eb:43:b1:e8:14:c2:e2:98:ac:dc:4c:9b: a1:a3:36:ce:bf:70:92:e3:51:a4:21:52:df:0f:50: f8:c3:af:a5:b8:16:75:4d:85:f2:23:73:2f:c3:fd: 20:9e:69:1d:cb:e3:40:1e:05:2f:27:5a:df:4d:39: e5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:64:46:95:B5:6E:5C:6F:28:14:56:42:AD:83:AC:40:70:7A:B4:13 X509v3 Authority Key Identifier: keyid:A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:ba:6a:73:51:7b:ff:5a:9c:5a:52:1b:4a:53:6e:72:38:02: e0:3f:a3:05:f4:8c:3c:9e:7a:fd:d4:f7:20:e4:11:b0:e4:70: c0:74:a2:af:52:e8:56:d4:df:f6:c9:8a:77:42:59:2e:de:0d: 17:10:27:4b:0b:d1:9c:52:98:c5:dc:fd:b7:f1:64:e4:50:bb: 5c:fb:9a:d7:2b:59:4d:51:e0:0d:93:9a:07:23:0b:11:29:ac: e9:ec:76:52:12:1c:70:60:bc:e7:ba:44:52:c3:ac:91:98:68: d1:54:cd:1d:04:bd:30:75:c7:b4:cf:bc:4a:5b:ae:3b:a0:5c: 4c:d8:67:a0:45:b6:77:6e:00:6b:ac:2a:a2:68:12:c1:9a:d7: a8:10:f8:c3:c3:35:36:e9:51:e0:80:4b:ba:d6:a5:65:8b:1a: 6f:32:23:3f:2d:7d:77:77:d2:44:71:ab:1e:d1:78:1a:a0:2d: 85:7d:73:cb:94:e2:e5:8f:a7:c9:f8:ed:e9:db:66:6c:7c:b4: 80:22:00:ee:2a:df:e3:25:f3:cc:9e:0d:6f:84:41:cd:e0:5c: d5:cb:1d:e5:6f:b9:bd:fe:b3:50:d6:ab:df:12:87:69:43:f7: fb:ba:3a:50:5a:4f:26:09:2b:a6:65:73:af:15:b0:30:7d:bc: 8e:3d:f8:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMzNjUxMTAvBgNVBAUTKEE2MjgwMzQ0MDFDNjVDRjQ2OTc1REU4QzlCNDY3MkY4 NUUwMEZFOUIwHhcNMjUwOTA5MDIxMDEyWhcNMjUwOTE2MDIxMDEyWjAYMRYwFAYD VQQDEw02OGJmOGM4NC00MTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzcj3bNJQuE2nxynSmCA71Z/2BsNSHp03XpUFqfYkM2+ADJjmp/LnUM+08Hz GuZiv3YhJDYaILj0GE7ML6ypXOd0SwxA87jcRyEIzfZudl2L/XkEc2JLG43rGWLV jqTLLv2MxdarWxF7tZuRNhi79E9HlgKElR6RJQHB2UHafmDwOEw7CyZFEG2zUWyq ohijZssm2sdH2rdIx40JKf9P7GR5Aa01qXPZORSDS426Earmnv6w6AnW5fuOtizc 0Ppb5PPmmQHrQ7HoFMLimKzcTJuhozbOv3CS41GkIVLfD1D4w6+luBZ1TYXyI3Mv w/0gnmkdy+NAHgUvJ1rfTTnlTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJkRpW1 blxvKBRWQq2DrEBwerQTMB8GA1UdIwQYMBaAFKYoA0QBxlz0aXXejJtGcvheAP6b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzM2NS8wOUZCNTE4QTVF NDUxMUVEQjUxN0QyMkFDNEY5QUUwMi9waWdEUkFIR1hQUnBkZDZNbTBaeS1GNEFf cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BpZ0RSQUhHWFBScGRkNk1tMFp5LUY0QV9wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzM2NS8wOUZCNTE4QTVFNDUxMUVEQjUxN0QyMkFDNEY5QUUwMi9waWdEUkFIR1hQ UnBkZDZNbTBaeS1GNEFfcHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChumpzUXv/WpxaUhtKU25yOALgP6MF9Iw8nnr91Pcg5BGw5HDAdKKv UuhW1N/2yYp3Qlku3g0XECdLC9GcUpjF3P238WTkULtc+5rXK1lNUeANk5oHIwsR Kazp7HZSEhxwYLznukRSw6yRmGjRVM0dBL0wdce0z7xKW647oFxM2GegRbZ3bgBr rCqiaBLBmteoEPjDwzU26VHggEu61qVlixpvMiM/LX13d9JEcase0XgaoC2FfXPL lOLlj6fJ+O3p22ZsfLSAIgDuKt/jJfPMng1vhEHN4FzVyx3lb7m9/rNQ1qvfEodp Q/f7ujpQWk8mCSumZXOvFbAwfbyOPfiS -----END CERTIFICATE-----Generated at Tue Sep 9 19:05:28 2025 by rpki-client