$ rpki-client -vvf rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft File: 28EoRfH6o1sy_s32oO1NFEKSyMw.mft (raw, json) Hash identifier: VWuiPmp/EcFa+Am8IEt3cnxUge9eS4uSqTNkasdoybs= Subject key identifier: D9:CA:25:34:55:F0:3D:47:83:94:5F:A3:B1:56:B0:96:A4:49:DF:ED Authority key identifier: DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC Certificate issuer: /CN=A9134790/serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft Manifest number: 45 Signing time: Sun 19 Oct 2025 10:49:50 +0000 Manifest this update: Sun 19 Oct 2025 10:49:49 +0000 Manifest next update: Sun 26 Oct 2025 10:49:49 +0000 Files and hashes: 1: 28EoRfH6o1sy_s32oO1NFEKSyMw.crl (hash: XSM/IX7oXk9NsC1qeptzpBzVR8hyADyhtXELo8jGw0k=) 2: 078FA91C44EA11F09EB11858C4F9AE02.roa (hash: 0gESDeiknT1uDimkCFfPCuziTgWG/TNYoJv8MT/MXRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134790, serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC Validity Not Before: Oct 19 10:49:49 2025 GMT Not After : Oct 26 10:49:49 2025 GMT Subject: CN=68f4c24e-3c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:79:91:fd:7c:48:b6:12:98:25:8e:b5:9b:6f: 7f:02:52:d5:f6:b3:6b:c0:e5:6d:26:21:cc:ba:55: d0:0f:48:50:8c:e4:66:7f:47:2c:e0:2e:f3:24:1c: c1:7e:23:29:a5:7e:dd:09:3b:3f:02:90:88:e5:cd: 5f:1b:98:5d:a3:0c:64:f6:07:d3:ce:05:24:c0:1b: 54:b5:7b:e1:37:92:bf:4c:01:5f:74:1a:b9:66:17: 40:57:84:d5:4e:4d:70:e5:27:d4:3f:49:84:e0:35: f4:86:b1:fd:8d:13:48:c6:d3:34:76:4e:5d:e3:77: dd:c8:98:2c:3b:65:3d:ba:a9:d4:d1:11:ec:d3:83: 43:5e:b0:b4:6c:d3:b1:a5:eb:4f:dd:1d:50:10:b8: e8:6e:2c:0c:a4:28:5b:14:e9:05:4f:17:8f:15:57: c9:9d:8c:47:6f:95:36:dc:cb:49:10:55:de:dd:9f: 26:76:88:c5:78:f0:77:34:76:e7:4c:85:0c:55:77: 11:41:31:2d:d3:cd:d4:26:e0:d5:20:eb:3a:70:83: 84:d0:dc:19:99:5c:cc:42:a6:0e:32:56:0c:1b:cc: 7d:ba:51:d2:77:d3:f1:23:64:92:d9:a1:16:f5:64: 82:96:1d:ea:43:1f:b3:e3:d5:69:9e:56:ba:58:39: 87:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CA:25:34:55:F0:3D:47:83:94:5F:A3:B1:56:B0:96:A4:49:DF:ED X509v3 Authority Key Identifier: keyid:DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:01:c1:13:56:20:63:cf:2e:4b:63:ba:bb:0b:de:43:67:8f: 74:78:8f:e5:f8:c7:e4:12:56:22:b6:6e:73:b4:6e:8f:e9:c9: 92:ce:86:bd:12:54:61:ec:88:1d:22:78:e8:3c:dc:e1:84:e3: eb:92:ff:dd:ea:73:27:a9:6e:e5:a0:ab:d6:96:07:d9:e4:b8: db:44:2c:70:73:34:be:f2:ba:b8:87:0b:83:65:74:95:03:e7: 45:86:9d:67:21:0f:9c:1e:2b:75:02:a4:ff:f9:61:bd:62:fa: 91:09:2d:40:4e:6c:c1:d3:1c:e7:cc:05:e4:20:64:f9:cc:08: 64:e0:b4:cc:1a:f4:33:ee:54:b8:36:0a:5e:5b:e9:98:1b:fb: 89:7d:32:e9:13:16:97:be:c0:ce:97:c0:c4:61:23:76:be:24: 50:f9:a9:05:d2:5a:f2:07:1d:2a:ae:f3:16:6f:e1:84:55:4c: a9:ee:69:60:ba:db:b8:b2:26:77:d5:92:08:41:29:12:96:21: 10:03:02:73:e9:5a:bf:7a:7c:31:d8:12:bb:55:06:02:83:3a: d8:a5:9f:67:85:e2:a1:47:58:fe:93:c6:0c:78:1c:9f:20:d9: 5d:68:ee:55:f5:20:87:3f:6b:5f:98:a6:49:d1:c1:d4:ca:26: e1:df:43:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NDc5MDExMC8GA1UEBRMoREJDMTI4NDVGMUZBQTM1QjMyRkVDREY2QTBFRDREMTQ0 MjkyQzhDQzAeFw0yNTEwMTkxMDQ5NDlaFw0yNTEwMjYxMDQ5NDlaMBgxFjAUBgNV BAMTDTY4ZjRjMjRlLTNjMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIeZH9fEi2EpgljrWbb38CUtX2s2vA5W0mIcy6VdAPSFCM5GZ/RyzgLvMkHMF+ Iymlft0JOz8CkIjlzV8bmF2jDGT2B9POBSTAG1S1e+E3kr9MAV90GrlmF0BXhNVO TXDlJ9Q/SYTgNfSGsf2NE0jG0zR2Tl3jd93ImCw7ZT26qdTREezTg0NesLRs07Gl 60/dHVAQuOhuLAykKFsU6QVPF48VV8mdjEdvlTbcy0kQVd7dnyZ2iMV48Hc0dudM hQxVdxFBMS3TzdQm4NUg6zpwg4TQ3BmZXMxCpg4yVgwbzH26UdJ30/EjZJLZoRb1 ZIKWHepDH7Pj1WmeVrpYOYf3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2colNFXw PUeDlF+jsVawlqRJ3+0wHwYDVR0jBBgwFoAU28EoRfH6o1sy/s32oO1NFEKSyMww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0NzkwLzUxMzNGRUFDNDRF OTExRjA5MUE5NkU1M0M0RjlBRTAyLzI4RW9SZkg2bzFzeV9zMzJvTzFORkVLU3lN dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMjhFb1JmSDZvMXN5X3MzMm9PMU5GRUtTeU13LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 NzkwLzUxMzNGRUFDNDRFOTExRjA5MUE5NkU1M0M0RjlBRTAyLzI4RW9SZkg2bzFz eV9zMzJvTzFORkVLU3lNdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJABwRNWIGPPLktjursL3kNnj3R4j+X4x+QSViK2bnO0bo/pyZLOhr0S VGHsiB0ieOg83OGE4+uS/93qcyepbuWgq9aWB9nkuNtELHBzNL7yuriHC4NldJUD 50WGnWchD5weK3UCpP/5Yb1i+pEJLUBObMHTHOfMBeQgZPnMCGTgtMwa9DPuVLg2 Cl5b6Zgb+4l9MukTFpe+wM6XwMRhI3a+JFD5qQXSWvIHHSqu8xZv4YRVTKnuaWC6 27iyJnfVkghBKRKWIRADAnPpWr96fDHYErtVBgKDOtiln2eF4qFHWP6Txgx4HJ8g 2V1o7lX1IIc/a1+YpknRwdTKJuHfQ5Q= -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:01 2025 by rpki-client