$ rpki-client -vvf rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft File: z28S295L6RNFgVj1x3hccSkIVVw.mft (raw, json) Hash identifier: 8nFY3ZfZ5sB4DOtzJy52R9pesVkVOzirqXWJeMz/AI4= Subject key identifier: F8:EE:A4:34:88:56:73:8A:49:1A:04:F3:CC:06:C5:93:55:4E:5C:16 Authority key identifier: CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C Certificate issuer: /CN=A91725C8/serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft Manifest number: 1E Signing time: Sat 23 Aug 2025 08:06:33 +0000 Manifest this update: Sat 23 Aug 2025 08:06:32 +0000 Manifest next update: Sat 30 Aug 2025 08:06:32 +0000 Files and hashes: 1: z28S295L6RNFgVj1x3hccSkIVVw.crl (hash: qYcXTb0lGiFeeWYJCp8dWFPtzkhnjcMhYjeqRuljX4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91725C8, serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C Validity Not Before: Aug 23 08:06:32 2025 GMT Not After : Aug 30 08:06:32 2025 GMT Subject: CN=68a97689-3234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ea:fb:85:3c:a5:6b:fe:7c:b4:01:a4:18:c5: 93:20:f9:7d:8c:45:a4:27:e1:b8:eb:64:17:73:a1: 73:6b:6d:f1:d4:46:df:e2:45:1b:0a:e2:1e:ca:94: 87:52:62:03:00:f0:ae:fe:45:97:8a:26:bc:83:be: 05:d9:bb:59:fe:6f:59:25:6b:ea:5b:db:94:e7:e1: 0e:d2:a0:3d:48:33:90:bb:c4:ff:83:ed:00:f9:4b: 2f:85:89:29:05:6f:c3:79:12:bb:ed:03:b4:4a:2b: 12:5d:cb:e6:ad:f5:05:df:8a:b6:20:ce:18:6d:38: 59:71:83:9d:4f:76:e1:65:cb:3a:d3:2e:d0:4f:fc: d3:45:ba:8e:c5:56:5f:ae:e0:27:e9:b1:e1:0d:6d: 05:a8:bd:75:83:b6:ec:62:6b:b2:5d:20:52:3b:c3: 52:b7:8a:17:e8:59:cd:c4:7d:2c:33:cd:0c:e3:d2: 25:bf:3c:df:e8:49:6a:ec:3b:5b:46:4f:d2:c9:ec: f9:27:8d:4f:54:e6:d2:38:62:e0:ac:2d:e3:f9:f2: 2c:b2:38:7d:79:00:d3:65:04:f8:07:a2:96:44:4b: 65:29:9e:9e:4f:7d:b8:c2:7b:b4:6b:25:ed:58:e0: 06:c0:e7:0b:df:8b:8a:3f:9b:8a:f2:34:db:89:f5: 21:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EE:A4:34:88:56:73:8A:49:1A:04:F3:CC:06:C5:93:55:4E:5C:16 X509v3 Authority Key Identifier: keyid:CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:28:17:21:03:76:2b:04:f6:53:8d:44:02:73:53:9a:71:ad: f2:25:35:bc:13:66:cd:a8:4c:dd:53:de:a8:f9:73:88:f6:20: 25:17:18:8a:e2:01:8b:c6:50:05:91:0e:c9:c9:6c:1f:e4:29: d5:2f:0a:63:c1:65:50:ad:99:de:6d:88:26:e4:dc:08:6e:ae: 50:3d:1b:ca:23:05:7e:53:2d:ad:5f:c8:e1:af:ff:b0:6d:b4: 0f:05:44:d0:ba:6e:70:c2:c2:8e:30:fe:e2:5e:56:e4:e1:61: 01:a0:90:4a:56:c0:7f:c4:ab:1d:49:d8:08:7d:f9:b3:6b:31: fc:80:4d:95:1a:f2:2d:8f:b0:5d:c5:d4:75:7a:39:41:a2:39: c8:42:cd:66:96:25:f5:d2:61:fb:52:ab:2b:b8:7e:e7:35:5a: 8c:f3:f8:dc:35:a1:0c:26:7d:1c:a6:34:28:6a:6f:30:4e:1a: 33:d7:ca:2f:c8:af:83:49:7d:b9:1a:1e:af:c7:17:6d:d1:c0: 0e:45:47:05:02:35:18:ca:b2:14:c1:e3:27:c8:e6:21:a3:59: 68:60:0e:88:55:07:9f:0b:c0:27:70:c6:0c:36:f1:a5:41:1b: 68:38:ba:17:97:a2:39:b4:b8:01:b9:43:3e:7e:78:56:6a:d5: 2b:d2:fd:bc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MjVDODExMC8GA1UEBRMoQ0Y2RjEyREJERTRCRTkxMzQ1ODE1OEY1Qzc3ODVDNzEy OTA4NTU1QzAeFw0yNTA4MjMwODA2MzJaFw0yNTA4MzAwODA2MzJaMBgxFjAUBgNV BAMTDTY4YTk3Njg5LTMyMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI6vuFPKVr/ny0AaQYxZMg+X2MRaQn4bjrZBdzoXNrbfHURt/iRRsK4h7KlIdS YgMA8K7+RZeKJryDvgXZu1n+b1kla+pb25Tn4Q7SoD1IM5C7xP+D7QD5Sy+FiSkF b8N5ErvtA7RKKxJdy+at9QXfirYgzhhtOFlxg51PduFlyzrTLtBP/NNFuo7FVl+u 4CfpseENbQWovXWDtuxia7JdIFI7w1K3ihfoWc3EfSwzzQzj0iW/PN/oSWrsO1tG T9LJ7PknjU9U5tI4YuCsLeP58iyyOH15ANNlBPgHopZES2Upnp5PfbjCe7RrJe1Y 4AbA5wvfi4o/m4ryNNuJ9SGPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+O6kNIhW c4pJGgTzzAbFk1VOXBYwHwYDVR0jBBgwFoAUz28S295L6RNFgVj1x3hccSkIVVww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyNUM4LzNCQ0QxQkVBNTU5 NTExRjBBOTM1RDIyRkM0RjlBRTAyL3oyOFMyOTVMNlJORmdWajF4M2hjY1NrSVZW dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvejI4UzI5NUw2Uk5GZ1ZqMXgzaGNjU2tJVlZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy NUM4LzNCQ0QxQkVBNTU5NTExRjBBOTM1RDIyRkM0RjlBRTAyL3oyOFMyOTVMNlJO RmdWajF4M2hjY1NrSVZWdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEsoFyEDdisE9lONRAJzU5pxrfIlNbwTZs2oTN1T3qj5c4j2ICUXGIri AYvGUAWRDsnJbB/kKdUvCmPBZVCtmd5tiCbk3AhurlA9G8ojBX5TLa1fyOGv/7Bt tA8FRNC6bnDCwo4w/uJeVuThYQGgkEpWwH/Eqx1J2Ah9+bNrMfyATZUa8i2PsF3F 1HV6OUGiOchCzWaWJfXSYftSqyu4fuc1Wozz+Nw1oQwmfRymNChqbzBOGjPXyi/I r4NJfbkaHq/HF23RwA5FRwUCNRjKshTB4yfI5iGjWWhgDohVB58LwCdwxgw28aVB G2g4uheXojm0uAG5Qz5+eFZq1SvS/bw= -----END CERTIFICATE-----Generated at Sat Aug 23 19:12:43 2025 by rpki-client