$ rpki-client -vvf rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft File: 28ptKqUoxLJFVtsH_LVpw2rC_rE.mft (raw, json) Hash identifier: JF19EyF4pn9fLr0vt28knebftJU9gVuU84Lk+wcwITU= Subject key identifier: 96:05:46:43:98:0A:00:31:99:30:1A:78:C8:C3:3B:93:3A:7E:76:A2 Authority key identifier: DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1 Certificate issuer: /CN=A918C477/serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1 Certificate serial: 02AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft Manifest number: 02A6 Signing time: Sat 23 Aug 2025 01:46:27 +0000 Manifest this update: Sat 23 Aug 2025 01:46:26 +0000 Manifest next update: Sat 30 Aug 2025 01:46:26 +0000 Files and hashes: 1: 28ptKqUoxLJFVtsH_LVpw2rC_rE.crl (hash: IKu2GMuFTNIcUaxq5rEVLNlYQKdkzu+ic8IRcy4/sjw=) 2: FB2262620C3111EDBD0F7137C4F9AE02.roa (hash: gKrsb4dZgy0MTcPqjVyZ2IoWxdZknG0vr+R6U+hRwFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C477, serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1 Validity Not Before: Aug 23 01:46:26 2025 GMT Not After : Aug 30 01:46:26 2025 GMT Subject: CN=68a91d72-6a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:89:70:d5:8f:62:c3:e8:ff:3b:83:1a:6a:fe: 5a:da:a7:49:6b:68:63:08:e5:8a:54:8e:9b:71:f4: 77:e7:2a:ce:81:04:03:57:eb:af:36:5b:6e:0c:f2: 09:54:95:e9:10:5b:b5:16:24:82:6d:7b:64:a7:1a: 48:9b:e6:37:75:5d:e8:cd:ae:e6:62:c9:2a:25:ce: ee:33:71:bc:0b:da:28:eb:a4:3f:6a:4e:49:9c:99: 99:6e:24:95:63:ff:de:eb:38:a1:46:da:08:1f:d4: 43:eb:6a:80:28:90:9b:af:e0:bb:09:54:eb:14:53: 15:6d:ed:98:2b:d2:00:d5:99:4f:0a:8d:85:5b:95: f0:6f:d7:fa:c5:00:86:ec:f8:1d:fd:a9:c7:48:00: 01:c5:25:8c:ef:0d:dc:90:78:65:2f:3a:6e:71:d6: aa:d0:f2:82:db:ab:76:a0:24:e5:94:8e:bf:de:ba: 84:49:57:e0:a0:87:09:48:48:0e:98:34:d6:b8:0d: 38:6f:c3:a6:f9:af:f1:f6:9c:05:bc:5e:4b:2e:ce: 7e:e1:d1:94:94:0f:df:9b:2e:8b:e6:3e:2d:8b:49: 0d:8b:ee:07:70:dc:56:a1:23:95:d4:68:5f:df:b6: 63:9f:b4:0f:7e:0a:98:68:43:2e:23:52:f3:bd:b4: 4e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:05:46:43:98:0A:00:31:99:30:1A:78:C8:C3:3B:93:3A:7E:76:A2 X509v3 Authority Key Identifier: keyid:DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:8a:61:a5:5a:b6:8f:bc:01:dc:b9:19:c4:9a:7e:f6:32:20: c1:e7:88:b5:ac:ef:ff:06:02:c5:46:c3:2d:e4:ef:19:92:43: ce:05:e3:b3:2e:39:70:06:3f:74:b7:eb:fc:2e:5c:1c:4a:1d: 17:70:0d:0c:65:9a:b3:67:26:3f:d6:00:53:de:fa:79:1c:b6: 51:f7:21:0f:9f:7d:7a:d5:cd:ec:6d:e0:25:dd:91:5e:f0:0f: 3a:0a:6b:1f:a6:c5:ed:b8:67:05:08:83:06:31:5f:83:bf:75: b6:ca:a0:93:73:20:c2:72:50:a2:b5:c0:16:10:d8:f1:28:a0: 53:ab:87:b4:d1:f9:31:f6:f2:75:6a:b5:0b:c2:5a:a3:95:b3: e8:b1:17:2d:51:e7:48:fb:36:aa:a4:8c:29:cc:72:4a:d9:90: 95:1d:18:d0:38:1b:c3:e3:1b:dd:25:20:cd:f7:2c:bd:70:91: dc:42:5a:42:a9:df:76:43:e3:f7:62:5c:8e:f5:2a:84:23:02: f2:30:4d:c6:f8:0e:a8:0f:04:bd:62:73:8c:b6:fc:4a:71:d5: 1d:d9:39:a8:d2:62:fb:91:b2:6c:e0:a1:91:87:b7:cb:67:e4: ba:7d:0d:25:e0:50:3f:ea:8f:e0:e9:01:2a:8f:ba:0b:0e:8b: f7:32:e7:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM0NzcxMTAvBgNVBAUTKERCQ0E2RDJBQTUyOEM0QjI0NTU2REIwN0ZDQjU2OUMz NkFDMkZFQjEwHhcNMjUwODIzMDE0NjI2WhcNMjUwODMwMDE0NjI2WjAYMRYwFAYD VQQDEw02OGE5MWQ3Mi02YTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Ylw1Y9iw+j/O4Maav5a2qdJa2hjCOWKVI6bcfR35yrOgQQDV+uvNltuDPIJ VJXpEFu1FiSCbXtkpxpIm+Y3dV3oza7mYskqJc7uM3G8C9oo66Q/ak5JnJmZbiSV Y//e6zihRtoIH9RD62qAKJCbr+C7CVTrFFMVbe2YK9IA1ZlPCo2FW5Xwb9f6xQCG 7Pgd/anHSAABxSWM7w3ckHhlLzpucdaq0PKC26t2oCTllI6/3rqESVfgoIcJSEgO mDTWuA04b8Om+a/x9pwFvF5LLs5+4dGUlA/fmy6L5j4ti0kNi+4HcNxWoSOV1Ghf 37Zjn7QPfgqYaEMuI1LzvbRO7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYFRkOY CgAxmTAaeMjDO5M6fnaiMB8GA1UdIwQYMBaAFNvKbSqlKMSyRVbbB/y1acNqwv6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzQ3Ny9ENTVGMjlGNDBD MkYxMUVEQkMyM0JCMzZDNEY5QUUwMi8yOHB0S3FVb3hMSkZWdHNIX0xWcHcyckNf ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI4cHRLcVVveExKRlZ0c0hfTFZwdzJyQ19yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzQ3Ny9ENTVGMjlGNDBDMkYxMUVEQkMyM0JCMzZDNEY5QUUwMi8yOHB0S3FVb3hM SkZWdHNIX0xWcHcyckNfckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuimGlWraPvAHcuRnEmn72MiDB54i1rO//BgLFRsMt5O8ZkkPOBeOz LjlwBj90t+v8LlwcSh0XcA0MZZqzZyY/1gBT3vp5HLZR9yEPn3161c3sbeAl3ZFe 8A86CmsfpsXtuGcFCIMGMV+Dv3W2yqCTcyDCclCitcAWENjxKKBTq4e00fkx9vJ1 arULwlqjlbPosRctUedI+zaqpIwpzHJK2ZCVHRjQOBvD4xvdJSDN9yy9cJHcQlpC qd92Q+P3YlyO9SqEIwLyME3G+A6oDwS9YnOMtvxKcdUd2Tmo0mL7kbJs4KGRh7fL Z+S6fQ0l4FA/6o/g6QEqj7oLDov3Mufd -----END CERTIFICATE-----Generated at Sat Aug 23 17:19:14 2025 by rpki-client