$ rpki-client -vvf rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft File: 28EoRfH6o1sy_s32oO1NFEKSyMw.mft (raw, json) Hash identifier: ukZdcFWNiyI4s29GPJzqUmbCyIPhvzLnMJtuhzINecA= Subject key identifier: 76:C4:DC:B9:8E:13:4A:CC:8D:82:CE:6A:4D:26:FB:AA:65:E5:3C:02 Authority key identifier: DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC Certificate issuer: /CN=A9134790/serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft Manifest number: 28 Signing time: Sat 23 Aug 2025 07:59:51 +0000 Manifest this update: Sat 23 Aug 2025 07:59:51 +0000 Manifest next update: Sat 30 Aug 2025 07:59:51 +0000 Files and hashes: 1: 28EoRfH6o1sy_s32oO1NFEKSyMw.crl (hash: 26z8HF6CJrKyobd+xVdeLtuyJrG+WHiK9zZW18TCNfg=) 2: 078FA91C44EA11F09EB11858C4F9AE02.roa (hash: 0gESDeiknT1uDimkCFfPCuziTgWG/TNYoJv8MT/MXRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134790, serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC Validity Not Before: Aug 23 07:59:51 2025 GMT Not After : Aug 30 07:59:51 2025 GMT Subject: CN=68a974f7-c4d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:d7:74:e9:18:88:19:9e:96:54:60:98:14: 60:71:6f:26:7b:b0:a4:10:36:e9:16:63:37:87:b5: 36:04:51:48:96:f7:bf:8a:28:95:f3:85:50:bc:6c: b8:06:a4:9f:a3:5f:82:8d:37:e7:66:14:99:c0:a6: c9:94:b5:21:e4:06:fc:bd:30:bf:29:eb:ec:aa:fd: 54:fd:74:90:03:68:14:07:21:46:92:4d:37:a2:15: 28:7e:a2:6d:f8:36:7c:57:04:fc:7d:ce:84:91:86: e8:67:86:95:bc:70:9f:7d:8b:ac:04:2f:db:d3:45: e3:18:35:82:f6:e6:49:84:34:73:03:0e:18:2e:5a: 06:36:8f:26:f6:c3:e3:6a:7c:41:52:f5:15:9d:54: 44:f4:23:6a:6d:22:24:1e:38:59:a9:ba:46:96:f0: 6a:33:15:48:80:4b:3e:ac:6a:08:4e:ba:a3:c3:49: ab:1f:b4:ba:00:bb:91:4a:40:b6:d1:05:cc:40:02: e7:3f:3d:9b:84:04:f0:b3:5d:27:c0:34:cc:a5:4c: 26:34:67:7a:4b:31:19:ca:a9:42:76:57:9c:8b:5d: be:8d:2b:7d:3c:74:ff:88:78:47:ae:09:40:12:49: 7c:de:eb:1d:04:5a:09:e3:a2:f6:c4:c8:9c:00:33: 8b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C4:DC:B9:8E:13:4A:CC:8D:82:CE:6A:4D:26:FB:AA:65:E5:3C:02 X509v3 Authority Key Identifier: keyid:DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:a8:c7:8d:f0:ee:f4:8e:85:f6:1d:05:d1:d7:0b:c8:26:56: 06:66:dd:8d:4a:e7:6d:10:9d:f4:1b:b7:ba:f2:7d:6a:df:63: dd:1a:c0:23:dd:24:59:a8:81:fe:22:b8:74:f2:0f:24:3b:0c: f8:25:55:ee:eb:42:b2:0e:19:18:79:23:67:17:e0:eb:29:d8: c8:3d:3e:f8:0d:bc:34:5e:da:14:82:d4:f1:b3:ea:54:3e:4c: 8f:78:e2:26:32:b6:94:f6:f2:3e:8f:96:aa:03:df:26:4d:f5: 49:d0:71:57:82:1d:ea:65:8f:4c:ca:ff:05:96:88:ce:72:10: b6:bf:0d:a6:1e:5b:32:71:34:9c:ef:0b:55:a0:cd:39:f1:9f: 50:d6:3d:b0:5e:c1:42:53:c2:3e:6f:79:16:b3:d3:3d:b7:3a: 8c:34:c7:95:d9:f1:14:22:14:fc:0f:44:60:8b:f8:69:e8:4e: a3:f9:4f:6b:b3:5e:ea:f1:dc:65:a2:1b:62:d6:17:23:3a:09: 2b:32:de:17:fa:2d:a7:ef:95:65:f6:9b:75:d3:95:3c:4c:27: bf:37:e8:e5:9a:61:48:a5:f8:45:6b:32:7c:9a:23:fb:e4:e2: f4:0c:46:14:51:85:59:a9:e4:57:68:36:ce:bd:1b:a5:a6:97: e3:ea:2c:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NDc5MDExMC8GA1UEBRMoREJDMTI4NDVGMUZBQTM1QjMyRkVDREY2QTBFRDREMTQ0 MjkyQzhDQzAeFw0yNTA4MjMwNzU5NTFaFw0yNTA4MzAwNzU5NTFaMBgxFjAUBgNV BAMTDTY4YTk3NGY3LWM0ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBTNd06RiIGZ6WVGCYFGBxbyZ7sKQQNukWYzeHtTYEUUiW97+KKJXzhVC8bLgG pJ+jX4KNN+dmFJnApsmUtSHkBvy9ML8p6+yq/VT9dJADaBQHIUaSTTeiFSh+om34 NnxXBPx9zoSRhuhnhpW8cJ99i6wEL9vTReMYNYL25kmENHMDDhguWgY2jyb2w+Nq fEFS9RWdVET0I2ptIiQeOFmpukaW8GozFUiASz6saghOuqPDSasftLoAu5FKQLbR BcxAAuc/PZuEBPCzXSfANMylTCY0Z3pLMRnKqUJ2V5yLXb6NK308dP+IeEeuCUAS SXze6x0EWgnjovbEyJwAM4utAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdsTcuY4T SsyNgs5qTSb7qmXlPAIwHwYDVR0jBBgwFoAU28EoRfH6o1sy/s32oO1NFEKSyMww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0NzkwLzUxMzNGRUFDNDRF OTExRjA5MUE5NkU1M0M0RjlBRTAyLzI4RW9SZkg2bzFzeV9zMzJvTzFORkVLU3lN dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMjhFb1JmSDZvMXN5X3MzMm9PMU5GRUtTeU13LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 NzkwLzUxMzNGRUFDNDRFOTExRjA5MUE5NkU1M0M0RjlBRTAyLzI4RW9SZkg2bzFz eV9zMzJvTzFORkVLU3lNdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGSox43w7vSOhfYdBdHXC8gmVgZm3Y1K520QnfQbt7ryfWrfY90awCPd JFmogf4iuHTyDyQ7DPglVe7rQrIOGRh5I2cX4Osp2Mg9PvgNvDRe2hSC1PGz6lQ+ TI944iYytpT28j6PlqoD3yZN9UnQcVeCHeplj0zK/wWWiM5yELa/DaYeWzJxNJzv C1WgzTnxn1DWPbBewUJTwj5veRaz0z23Oow0x5XZ8RQiFPwPRGCL+GnoTqP5T2uz Xurx3GWiG2LWFyM6CSsy3hf6LafvlWX2m3XTlTxMJ7836OWaYUil+EVrMnyaI/vk 4vQMRhRRhVmp5FdoNs69G6Wml+PqLIY= -----END CERTIFICATE-----Generated at Sat Aug 23 19:13:19 2025 by rpki-client