$ rpki-client -vvf rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft File: 28IYSbtMFwTSMZPEG3DGaxqWVi8.mft (raw, json) Hash identifier: EmBGraa7UaDPaAnDB2I0HTkKhiofzskywZs4RoXx5xM= Subject key identifier: DB:A1:40:29:57:FF:CB:E8:FD:DC:40:29:46:ED:1F:FC:3F:21:B5:F1 Authority key identifier: DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F Certificate issuer: /CN=A919C233/serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F Certificate serial: 156E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft Manifest number: 1562 Signing time: Fri 22 Aug 2025 16:53:44 +0000 Manifest this update: Fri 22 Aug 2025 16:53:44 +0000 Manifest next update: Fri 29 Aug 2025 16:53:44 +0000 Files and hashes: 1: 28IYSbtMFwTSMZPEG3DGaxqWVi8.crl (hash: t/FNmXgeu8bhQ7cH9pD+32WnJ/rK9QmhanRFq/CHFQE=) 2: 13EB2806503611F0AE9ACE86C4F9AE02.roa (hash: 5U+qNAcyg11e1mcFFeSSmJQHAt3E5ngFjCNuSAbr96I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5486 (0x156e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C233, serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F Validity Not Before: Aug 22 16:53:44 2025 GMT Not After : Aug 29 16:53:44 2025 GMT Subject: CN=68a8a098-8669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:24:b0:60:e7:71:bc:19:92:07:a0:6e:c0:3f: 69:21:3e:56:40:3b:16:8e:17:39:a3:12:84:9f:28: a5:6f:9a:6c:ba:7e:e2:24:1a:28:b5:cb:22:17:98: b9:9a:81:47:a9:04:39:fb:61:a2:f6:cf:39:ba:3a: 3c:1c:1c:96:51:d2:0f:92:aa:72:c7:5e:d5:6f:73: 0e:d4:2c:07:30:1d:57:da:e7:ec:df:d6:be:19:31: 45:1a:23:1f:86:b9:66:93:a6:0c:c4:90:2d:e1:76: 3b:04:34:7b:81:1a:83:67:1a:68:9f:83:50:c7:d5: a1:00:d8:79:d5:d8:07:c9:dc:99:bf:28:46:c0:c1: a1:47:76:cc:34:93:d4:25:f4:87:8a:ff:7c:3a:64: 12:d3:0e:5d:d8:c8:4c:9f:40:15:06:28:25:d3:ea: c4:e1:c3:28:62:cb:62:a2:33:a2:5d:2a:05:cf:e5: 75:68:a7:e1:af:97:3f:38:a5:83:db:79:3a:dd:73: a8:21:8a:39:91:91:50:8d:11:f8:77:8c:c9:bd:d4: 7c:2c:1b:b2:79:b2:e6:ca:fd:2c:18:f8:58:1c:65: 57:45:ff:cc:6a:cc:03:8c:24:7a:35:00:07:be:bd: b9:57:e3:2e:be:52:c5:8c:d3:8b:e1:ff:72:54:1d: d2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A1:40:29:57:FF:CB:E8:FD:DC:40:29:46:ED:1F:FC:3F:21:B5:F1 X509v3 Authority Key Identifier: keyid:DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:61:7f:54:34:c4:2a:27:bb:b0:b5:82:63:4c:85:48:9c:26: 20:44:96:b9:6a:fb:2e:8c:0b:ad:0f:ad:a8:4f:68:f9:6a:15: dd:78:46:66:6b:36:dc:dc:12:35:8e:83:b2:a2:89:de:55:80: 9f:32:23:68:a3:60:55:7d:04:9b:c4:e8:60:2a:6f:06:af:19: e4:f7:1d:41:c7:ff:96:68:c0:b3:70:e0:0d:e1:c0:bf:40:29: b3:11:5b:56:d3:13:18:82:03:7d:f6:f8:54:99:29:6f:ab:9e: 84:55:14:84:d6:cd:63:b7:90:a5:89:49:b3:16:aa:5b:6e:c7: d5:09:4a:7e:6f:93:f9:de:05:e8:9e:5e:7f:1a:0e:57:be:6b: 3e:a0:57:d8:51:91:aa:ce:6d:0f:32:10:3f:12:88:2d:21:86: 92:2d:05:a1:f0:57:a9:d7:0b:3b:9b:b5:8d:dc:a3:b4:63:3f: f5:a9:65:be:af:1e:7c:18:f0:fc:a3:d8:ec:f1:ef:ec:6c:8b: 43:e5:90:b5:e3:f9:b2:d0:d3:cf:35:61:03:66:3e:76:31:66: 7f:35:e8:c0:fd:22:f9:e6:90:60:04:59:5c:68:aa:d6:c5:0c: 11:80:cb:f6:e7:9c:07:51:db:c8:ac:af:7d:5d:10:4d:6e:3a: 81:50:94:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMzMxMTAvBgNVBAUTKERCQzIxODQ5QkI0QzE3MDREMjMxOTNDNDFCNzBDNjZC MUE5NjU2MkYwHhcNMjUwODIyMTY1MzQ0WhcNMjUwODI5MTY1MzQ0WjAYMRYwFAYD VQQDEw02OGE4YTA5OC04NjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1iSwYOdxvBmSB6BuwD9pIT5WQDsWjhc5oxKEnyilb5psun7iJBootcsiF5i5 moFHqQQ5+2Gi9s85ujo8HByWUdIPkqpyx17Vb3MO1CwHMB1X2ufs39a+GTFFGiMf hrlmk6YMxJAt4XY7BDR7gRqDZxpon4NQx9WhANh51dgHydyZvyhGwMGhR3bMNJPU JfSHiv98OmQS0w5d2MhMn0AVBigl0+rE4cMoYstiojOiXSoFz+V1aKfhr5c/OKWD 23k63XOoIYo5kZFQjRH4d4zJvdR8LBuyebLmyv0sGPhYHGVXRf/MaswDjCR6NQAH vr25V+MuvlLFjNOL4f9yVB3S2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNuhQClX /8vo/dxAKUbtH/w/IbXxMB8GA1UdIwQYMBaAFNvCGEm7TBcE0jGTxBtwxmsallYv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIzMy8xRkRBRkQ2MjQz RTYxMUU4QkM0MTVGNjVDNEY5QUUwMi8yOElZU2J0TUZ3VFNNWlBFRzNER2F4cVdW aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI4SVlTYnRNRndUU01aUEVHM0RHYXhxV1ZpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIzMy8xRkRBRkQ2MjQzRTYxMUU4QkM0MTVGNjVDNEY5QUUwMi8yOElZU2J0TUZ3 VFNNWlBFRzNER2F4cVdWaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfYX9UNMQqJ7uwtYJjTIVInCYgRJa5avsujAutD62oT2j5ahXdeEZm azbc3BI1joOyooneVYCfMiNoo2BVfQSbxOhgKm8Grxnk9x1Bx/+WaMCzcOAN4cC/ QCmzEVtW0xMYggN99vhUmSlvq56EVRSE1s1jt5CliUmzFqpbbsfVCUp+b5P53gXo nl5/Gg5Xvms+oFfYUZGqzm0PMhA/EogtIYaSLQWh8Fep1ws7m7WN3KO0Yz/1qWW+ rx58GPD8o9js8e/sbItD5ZC14/my0NPPNWEDZj52MWZ/NejA/SL55pBgBFlcaKrW xQwRgMv255wHUdvIrK99XRBNbjqBUJT4 -----END CERTIFICATE-----Generated at Sun Aug 24 00:37:01 2025 by rpki-client