$ rpki-client -vvf rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft File: 28ptKqUoxLJFVtsH_LVpw2rC_rE.mft (raw, json) Hash identifier: GTgR5QZv33JNNdT9mgY4eeYGly9TISM5ZGltRFal0j4= Subject key identifier: 19:AC:43:D1:8B:5D:E9:E2:4A:5B:94:11:E0:67:5A:02:F5:A0:06:77 Authority key identifier: DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1 Certificate issuer: /CN=A918C477/serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1 Certificate serial: 02C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft Manifest number: 02C3 Signing time: Sun 19 Oct 2025 03:32:49 +0000 Manifest this update: Sun 19 Oct 2025 03:32:49 +0000 Manifest next update: Sun 26 Oct 2025 03:32:49 +0000 Files and hashes: 1: 28ptKqUoxLJFVtsH_LVpw2rC_rE.crl (hash: 0xhhDVgJlW/2zKav325QeAoloxsghHZaKJgyziCtR+0=) 2: FB2262620C3111EDBD0F7137C4F9AE02.roa (hash: gKrsb4dZgy0MTcPqjVyZ2IoWxdZknG0vr+R6U+hRwFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 711 (0x2c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C477, serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1 Validity Not Before: Oct 19 03:32:49 2025 GMT Not After : Oct 26 03:32:49 2025 GMT Subject: CN=68f45be1-9849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:eb:99:8d:5c:c8:ef:83:79:7c:99:9d:be:af: 7f:0c:89:34:6c:66:40:13:38:aa:c9:01:8e:f0:9b: be:58:80:1f:84:b8:e7:c5:f0:7b:3c:72:78:25:13: 60:72:b6:54:93:cb:c4:4e:48:ce:a7:98:38:c1:c9: 4b:3e:29:19:78:f9:05:3b:2f:34:be:55:dc:fd:83: 53:e2:72:97:59:c6:ab:03:7f:70:bb:90:ac:77:74: a9:8a:3d:b1:60:39:6f:53:a1:ea:78:3e:22:8e:af: c4:b0:4c:a3:9c:3e:c7:5c:bf:a5:30:26:1c:fb:5b: 19:d6:97:16:28:f2:d4:f0:b5:db:92:8e:ff:22:59: 19:a5:e9:1f:cf:b4:be:f7:e2:6c:e2:3e:cc:3e:76: 49:3c:70:df:00:98:a1:e8:fe:3d:2d:6f:2d:2b:f9: 9d:08:a0:3f:91:fd:aa:12:02:f6:0e:cc:5e:86:e5: 04:9a:1e:87:75:35:b6:8e:ae:fe:f7:55:b7:e8:a7: 8e:75:7c:0f:2d:95:b8:eb:46:1d:4b:01:9c:6b:e4: 90:d1:41:f7:ab:69:40:cc:3b:03:f7:77:3a:1a:49: e5:01:9a:af:d7:35:07:82:a1:77:7e:d8:4d:75:00: d5:00:62:05:9a:72:7a:54:3c:04:c3:c3:70:45:3a: 4e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AC:43:D1:8B:5D:E9:E2:4A:5B:94:11:E0:67:5A:02:F5:A0:06:77 X509v3 Authority Key Identifier: keyid:DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:f6:e2:ce:b8:62:12:bd:0a:f2:2c:36:6e:62:21:c0:56:9b: 6e:f2:37:60:52:18:11:80:9c:da:9b:f4:76:65:76:36:1e:61: 84:36:78:e5:8b:94:56:45:7f:c0:11:06:ff:96:07:4d:96:ea: 93:42:a7:5f:25:9c:65:d9:0c:2f:4b:52:82:40:9c:97:22:e3: c1:18:56:6e:42:55:a1:d6:8d:2e:8a:05:00:58:1f:76:ed:22: ea:73:02:57:cf:10:17:e2:77:18:3f:b4:d8:47:64:06:5b:94: d1:9f:87:0b:9e:40:61:ce:db:eb:b6:76:bc:71:52:ab:c5:55: 53:0c:c1:29:70:5a:7e:8a:b5:c1:09:4f:62:9a:13:1f:57:d3: e4:4a:f5:8a:ab:d9:19:d2:0f:33:81:ab:25:7f:27:17:dc:23: 09:5e:45:1b:15:57:ec:b6:80:06:82:b8:8b:55:10:44:06:df: 69:42:43:c3:62:74:d1:59:4a:10:36:77:13:e8:3f:83:42:aa: 22:3e:50:9d:3f:4a:97:d4:04:d0:0e:2d:80:d3:91:12:d3:b8: c2:55:ea:76:fd:eb:8c:01:fb:96:7e:42:28:9f:58:27:89:d3: ef:05:00:78:4e:5d:c4:a4:e3:62:fd:7c:d9:da:47:12:f6:db: f6:a8:9b:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM0NzcxMTAvBgNVBAUTKERCQ0E2RDJBQTUyOEM0QjI0NTU2REIwN0ZDQjU2OUMz NkFDMkZFQjEwHhcNMjUxMDE5MDMzMjQ5WhcNMjUxMDI2MDMzMjQ5WjAYMRYwFAYD VQQDEw02OGY0NWJlMS05ODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6uuZjVzI74N5fJmdvq9/DIk0bGZAEziqyQGO8Ju+WIAfhLjnxfB7PHJ4JRNg crZUk8vETkjOp5g4wclLPikZePkFOy80vlXc/YNT4nKXWcarA39wu5Csd3Spij2x YDlvU6HqeD4ijq/EsEyjnD7HXL+lMCYc+1sZ1pcWKPLU8LXbko7/IlkZpekfz7S+ 9+Js4j7MPnZJPHDfAJih6P49LW8tK/mdCKA/kf2qEgL2DsxehuUEmh6HdTW2jq7+ 91W36KeOdXwPLZW460YdSwGca+SQ0UH3q2lAzDsD93c6GknlAZqv1zUHgqF3fthN dQDVAGIFmnJ6VDwEw8NwRTpOlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmsQ9GL XeniSluUEeBnWgL1oAZ3MB8GA1UdIwQYMBaAFNvKbSqlKMSyRVbbB/y1acNqwv6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzQ3Ny9ENTVGMjlGNDBD MkYxMUVEQkMyM0JCMzZDNEY5QUUwMi8yOHB0S3FVb3hMSkZWdHNIX0xWcHcyckNf ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI4cHRLcVVveExKRlZ0c0hfTFZwdzJyQ19yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzQ3Ny9ENTVGMjlGNDBDMkYxMUVEQkMyM0JCMzZDNEY5QUUwMi8yOHB0S3FVb3hM SkZWdHNIX0xWcHcyckNfckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk9uLOuGISvQryLDZuYiHAVptu8jdgUhgRgJzam/R2ZXY2HmGENnjl i5RWRX/AEQb/lgdNluqTQqdfJZxl2QwvS1KCQJyXIuPBGFZuQlWh1o0uigUAWB92 7SLqcwJXzxAX4ncYP7TYR2QGW5TRn4cLnkBhztvrtna8cVKrxVVTDMEpcFp+irXB CU9imhMfV9PkSvWKq9kZ0g8zgaslfycX3CMJXkUbFVfstoAGgriLVRBEBt9pQkPD YnTRWUoQNncT6D+DQqoiPlCdP0qX1ATQDi2A05ES07jCVep2/euMAfuWfkIon1gn idPvBQB4Tl3EpONi/XzZ2kcS9tv2qJtU -----END CERTIFICATE-----Generated at Mon Oct 20 04:45:48 2025 by rpki-client