$ rpki-client -vvf rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft File: 28IYSbtMFwTSMZPEG3DGaxqWVi8.mft (raw, json) Hash identifier: AV4PkJ6XwIrthdCKQI3mg+LAQ1hA7KrX4tuoKQml9B0= Subject key identifier: C3:E8:6F:C6:D4:0A:11:14:54:CE:6B:2C:47:55:72:AA:B7:CD:99:A1 Authority key identifier: DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F Certificate issuer: /CN=A919C233/serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F Certificate serial: 1551 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft Manifest number: 1545 Signing time: Mon 30 Jun 2025 16:56:41 +0000 Manifest this update: Mon 30 Jun 2025 16:56:40 +0000 Manifest next update: Mon 07 Jul 2025 16:56:40 +0000 Files and hashes: 1: 28IYSbtMFwTSMZPEG3DGaxqWVi8.crl (hash: iwLG1Vnkn5ESmz3rmNp0n5SS4+FRd3DbVr+OTflgjm8=) 2: 13EB2806503611F0AE9ACE86C4F9AE02.roa (hash: 5U+qNAcyg11e1mcFFeSSmJQHAt3E5ngFjCNuSAbr96I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5457 (0x1551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C233, serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F Validity Not Before: Jun 30 16:56:40 2025 GMT Not After : Jul 7 16:56:40 2025 GMT Subject: CN=6862c1c9-0b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6c:17:48:09:77:75:b7:a0:ce:9e:b4:22:31: 96:83:cc:e9:0b:d6:fe:47:82:54:d7:ce:c4:09:14: 0b:b8:f3:00:e2:7d:39:30:a0:f7:9f:65:d5:44:56: a2:6f:78:c7:e2:c6:41:5a:25:e5:15:db:09:cf:2b: 0a:8b:dc:89:e8:7e:ce:8e:f2:35:bf:92:94:35:57: 4c:9c:9a:6f:99:23:b5:94:1a:f0:f3:20:e5:f2:f3: 7d:d4:b3:cc:f8:af:d4:58:bf:d6:fe:1d:81:4d:b2: 10:bf:9c:45:7f:9c:28:b6:48:6e:a4:e5:e4:63:83: 2d:9f:87:af:e3:7b:86:e2:0f:24:79:62:dc:27:d0: f3:39:c3:9e:c9:f0:d9:1f:29:ce:94:95:0d:9d:29: e9:78:ff:b1:05:cb:39:2e:2c:f3:81:6f:3d:fd:52: 79:bd:cf:c1:98:6e:62:f8:f5:32:8a:61:69:82:b2: eb:29:b7:e2:df:81:33:b5:a5:82:fc:67:57:91:f2: 06:f0:ba:4c:ed:0c:dc:ab:60:89:cf:32:7c:34:b6: 38:00:2c:c8:48:1d:ab:f9:92:06:e9:32:55:fd:83: 45:be:73:44:57:ac:5d:85:c7:c4:52:4f:2e:88:a0: e0:c5:8f:e0:6b:3a:96:4e:6e:fc:4c:a6:ab:ab:ab: 39:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E8:6F:C6:D4:0A:11:14:54:CE:6B:2C:47:55:72:AA:B7:CD:99:A1 X509v3 Authority Key Identifier: keyid:DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:68:c6:ca:9c:71:44:97:de:6d:23:16:51:5b:bc:c5:6f:15: 9d:97:30:fd:b3:c1:2e:95:b3:40:e7:d5:69:d6:70:bf:71:c9: 3c:ad:ce:77:ee:33:b7:61:11:78:ae:04:fa:38:6c:88:5a:6c: a4:a3:98:d0:6c:e6:22:51:1e:ea:22:5d:bf:c8:6d:7d:3d:09: b4:20:0d:3a:40:7c:73:af:4b:c6:a2:d7:62:a6:d4:44:86:d4: 29:14:d9:6d:84:b7:c7:a6:95:7c:99:dc:f2:3e:a4:3a:da:72: a0:92:8a:67:f4:7a:39:d7:5d:52:e4:bf:48:c0:2b:ac:38:c4: 64:9e:b3:bf:ac:e6:e8:3b:5c:e9:9a:5d:5d:51:14:c7:0b:73: b2:e4:72:1f:92:be:ff:bc:2c:c7:3c:bc:ed:63:cd:25:6e:c3: 21:40:40:2e:e2:98:95:fd:ea:7c:e1:6c:72:e1:f1:82:12:75: 42:2a:68:cb:7d:f5:ae:86:4d:8e:16:b3:bc:62:8f:4b:31:a1: c3:43:35:2a:a8:71:a8:72:d0:31:e1:5e:25:34:c2:2f:08:8b: f9:51:d6:96:68:23:be:69:a3:64:71:b0:4c:a4:69:97:56:0b: 61:0f:c8:5c:6a:c2:92:cb:c3:ac:a9:ff:d0:a4:f0:34:08:4a: 33:ff:96:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMzMxMTAvBgNVBAUTKERCQzIxODQ5QkI0QzE3MDREMjMxOTNDNDFCNzBDNjZC MUE5NjU2MkYwHhcNMjUwNjMwMTY1NjQwWhcNMjUwNzA3MTY1NjQwWjAYMRYwFAYD VQQDEw02ODYyYzFjOS0wYjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGwXSAl3dbegzp60IjGWg8zpC9b+R4JU187ECRQLuPMA4n05MKD3n2XVRFai b3jH4sZBWiXlFdsJzysKi9yJ6H7OjvI1v5KUNVdMnJpvmSO1lBrw8yDl8vN91LPM +K/UWL/W/h2BTbIQv5xFf5wotkhupOXkY4Mtn4ev43uG4g8keWLcJ9DzOcOeyfDZ HynOlJUNnSnpeP+xBcs5LizzgW89/VJ5vc/BmG5i+PUyimFpgrLrKbfi34EztaWC /GdXkfIG8LpM7Qzcq2CJzzJ8NLY4ACzISB2r+ZIG6TJV/YNFvnNEV6xdhcfEUk8u iKDgxY/gazqWTm78TKarq6s5+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPob8bU ChEUVM5rLEdVcqq3zZmhMB8GA1UdIwQYMBaAFNvCGEm7TBcE0jGTxBtwxmsallYv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIzMy8xRkRBRkQ2MjQz RTYxMUU4QkM0MTVGNjVDNEY5QUUwMi8yOElZU2J0TUZ3VFNNWlBFRzNER2F4cVdW aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI4SVlTYnRNRndUU01aUEVHM0RHYXhxV1ZpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIzMy8xRkRBRkQ2MjQzRTYxMUU4QkM0MTVGNjVDNEY5QUUwMi8yOElZU2J0TUZ3 VFNNWlBFRzNER2F4cVdWaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPaMbKnHFEl95tIxZRW7zFbxWdlzD9s8EulbNA59Vp1nC/cck8rc53 7jO3YRF4rgT6OGyIWmyko5jQbOYiUR7qIl2/yG19PQm0IA06QHxzr0vGotdiptRE htQpFNlthLfHppV8mdzyPqQ62nKgkopn9Ho5111S5L9IwCusOMRknrO/rOboO1zp ml1dURTHC3Oy5HIfkr7/vCzHPLztY80lbsMhQEAu4piV/ep84Wxy4fGCEnVCKmjL ffWuhk2OFrO8Yo9LMaHDQzUqqHGoctAx4V4lNMIvCIv5UdaWaCO+aaNkcbBMpGmX VgthD8hcasKSy8Osqf/QpPA0CEoz/5aY -----END CERTIFICATE-----Generated at Wed Jul 2 06:50:24 2025 by rpki-client