$ rpki-client -vvf rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft File: 28ptKqUoxLJFVtsH_LVpw2rC_rE.mft (raw, json) Hash identifier: p8XhXo/yjhSYK0Sb9SGRUfTEnoww1XPjKoZ3qQv2C7M= Subject key identifier: EF:40:EB:4F:60:D4:79:DC:50:56:5A:F5:03:C6:50:68:FD:BD:35:FC Authority key identifier: DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1 Certificate issuer: /CN=A918C477/serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1 Certificate serial: 0273 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft Manifest number: 0270 Signing time: Sun 11 May 2025 01:13:40 +0000 Manifest this update: Sun 11 May 2025 01:13:40 +0000 Manifest next update: Sun 18 May 2025 01:13:40 +0000 Files and hashes: 1: 28ptKqUoxLJFVtsH_LVpw2rC_rE.crl (hash: YW5PTZAqYeR+JuLukc87lOmyS8xdmC6nZpE+w4ERd00=) 2: FB2262620C3111EDBD0F7137C4F9AE02.roa (hash: p+7htth4BYnY9ZHE2+xDn3g7oJbyqr4j+0PWu6MDReI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 627 (0x273) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C477, serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1 Validity Not Before: May 11 01:13:40 2025 GMT Not After : May 18 01:13:40 2025 GMT Subject: CN=681ff9c4-05cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c8:86:58:c9:6a:40:44:03:ed:57:a2:72:21: c8:61:9e:8b:56:8e:27:a7:87:97:72:a3:ed:1d:e5: 76:29:29:6e:6f:17:65:9f:40:b8:c7:13:a6:31:76: e5:a2:89:45:e0:b8:68:07:bf:74:c7:cc:1d:d0:71: 84:09:d7:cb:b9:32:2e:74:b7:07:60:82:0c:03:fc: 82:2f:7e:5d:e2:f9:ee:cf:32:a7:28:ce:6d:7c:13: ff:e8:5c:95:33:5a:db:f1:3b:26:91:93:30:cd:98: 5a:c6:92:29:03:1f:04:07:db:40:44:6b:da:0e:aa: 49:ac:e3:ce:76:45:0a:0a:f3:2a:68:8d:1c:d1:6f: 98:14:6e:0f:39:49:7f:49:65:5f:82:ca:52:1d:12: 4e:db:3d:36:46:bf:11:45:7d:84:e6:b8:b4:a2:73: 84:d8:6b:96:43:db:20:0d:ec:93:67:e8:69:98:bb: 39:2b:f1:a7:88:39:aa:de:74:59:1a:8a:cd:d4:60: da:d7:4e:af:ad:6a:6d:e9:f0:34:8e:d8:40:96:6b: 43:4c:f1:0c:90:4b:af:c6:ca:5c:a3:01:3f:09:7f: ca:0c:d7:f4:86:02:f3:9f:fa:6d:ec:2d:c8:b9:a4: 02:03:b6:b7:db:95:64:61:9c:86:8c:39:5f:8e:e4: 90:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:40:EB:4F:60:D4:79:DC:50:56:5A:F5:03:C6:50:68:FD:BD:35:FC X509v3 Authority Key Identifier: keyid:DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4a:48:ec:10:0e:ca:55:29:ae:9a:0a:9c:7f:be:d9:2c:ab: 3e:2e:4e:d3:4b:99:4d:86:29:83:2b:eb:78:00:2a:a0:79:e4: 4f:9c:cf:ac:68:dd:5b:17:27:6e:49:88:0b:7d:5b:e3:aa:80: f0:0d:08:5b:52:6c:3d:6b:bc:7a:23:21:01:7b:45:64:48:9e: 85:1c:90:81:c7:2b:54:13:c9:70:df:93:11:08:8d:88:2a:c5: f7:50:11:5d:c0:4b:b3:87:fb:1c:92:0b:d0:ba:69:36:eb:20: e8:8e:75:29:e9:05:06:c8:c8:e2:16:59:08:cb:54:b1:cb:b9: 1a:c3:32:1a:26:59:63:20:3c:57:51:90:6a:44:5f:49:e9:be: e9:2d:4d:70:26:c0:23:f5:ef:27:2e:f5:5e:7f:26:50:48:bf: 2e:c6:2b:9f:24:44:b3:3e:50:d2:65:49:ed:7a:5f:3c:80:01: 81:fa:b0:3a:d8:e5:d8:d2:fc:76:e9:af:b5:4f:1f:76:c4:de: 8f:ed:a4:f1:ab:44:2d:80:a0:f0:9f:c9:36:90:3a:1b:9c:61: 75:54:de:75:e1:f5:3a:2d:9f:8c:f9:03:e5:52:0a:15:92:cb: 8f:ae:3b:46:ba:cb:35:9c:62:f1:e2:c3:f4:ff:74:1a:9a:ac: 22:4f:1b:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM0NzcxMTAvBgNVBAUTKERCQ0E2RDJBQTUyOEM0QjI0NTU2REIwN0ZDQjU2OUMz NkFDMkZFQjEwHhcNMjUwNTExMDExMzQwWhcNMjUwNTE4MDExMzQwWjAYMRYwFAYD VQQDEw02ODFmZjljNC0wNWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4siGWMlqQEQD7VeiciHIYZ6LVo4np4eXcqPtHeV2KSlubxdln0C4xxOmMXbl oolF4LhoB790x8wd0HGECdfLuTIudLcHYIIMA/yCL35d4vnuzzKnKM5tfBP/6FyV M1rb8TsmkZMwzZhaxpIpAx8EB9tARGvaDqpJrOPOdkUKCvMqaI0c0W+YFG4POUl/ SWVfgspSHRJO2z02Rr8RRX2E5ri0onOE2GuWQ9sgDeyTZ+hpmLs5K/GniDmq3nRZ GorN1GDa106vrWpt6fA0jthAlmtDTPEMkEuvxspcowE/CX/KDNf0hgLzn/pt7C3I uaQCA7a325VkYZyGjDlfjuSQ0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9A609g 1HncUFZa9QPGUGj9vTX8MB8GA1UdIwQYMBaAFNvKbSqlKMSyRVbbB/y1acNqwv6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzQ3Ny9ENTVGMjlGNDBD MkYxMUVEQkMyM0JCMzZDNEY5QUUwMi8yOHB0S3FVb3hMSkZWdHNIX0xWcHcyckNf ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI4cHRLcVVveExKRlZ0c0hfTFZwdzJyQ19yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzQ3Ny9ENTVGMjlGNDBDMkYxMUVEQkMyM0JCMzZDNEY5QUUwMi8yOHB0S3FVb3hM SkZWdHNIX0xWcHcyckNfckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9SkjsEA7KVSmumgqcf77ZLKs+Lk7TS5lNhimDK+t4ACqgeeRPnM+s aN1bFyduSYgLfVvjqoDwDQhbUmw9a7x6IyEBe0VkSJ6FHJCBxytUE8lw35MRCI2I KsX3UBFdwEuzh/sckgvQumk26yDojnUp6QUGyMjiFlkIy1Sxy7kawzIaJlljIDxX UZBqRF9J6b7pLU1wJsAj9e8nLvVefyZQSL8uxiufJESzPlDSZUntel88gAGB+rA6 2OXY0vx26a+1Tx92xN6P7aTxq0QtgKDwn8k2kDobnGF1VN514fU6LZ+M+QPlUgoV ksuPrjtGuss1nGLx4sP0/3QamqwiTxvV -----END CERTIFICATE-----Generated at Mon May 12 19:59:27 2025 by rpki-client