$ rpki-client -vvf rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft File: 28IYSbtMFwTSMZPEG3DGaxqWVi8.mft (raw, json) Hash identifier: WaXJt43fYDALW3v6altkOHtP7oOD9th8AjHoBQigWqc= Subject key identifier: 09:8B:04:30:A6:8C:D5:8A:CA:F1:B5:98:44:27:3B:D7:C2:E9:8B:4B Authority key identifier: DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F Certificate issuer: /CN=A919C233/serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F Certificate serial: 158B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft Manifest number: 157F Signing time: Sat 18 Oct 2025 17:12:51 +0000 Manifest this update: Sat 18 Oct 2025 17:12:50 +0000 Manifest next update: Sat 25 Oct 2025 17:12:50 +0000 Files and hashes: 1: 28IYSbtMFwTSMZPEG3DGaxqWVi8.crl (hash: BElkXh5aogkS+RF2slep6SybjQK5T5yABhy7d3TRYoU=) 2: 13EB2806503611F0AE9ACE86C4F9AE02.roa (hash: 5U+qNAcyg11e1mcFFeSSmJQHAt3E5ngFjCNuSAbr96I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5515 (0x158b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C233, serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F Validity Not Before: Oct 18 17:12:50 2025 GMT Not After : Oct 25 17:12:50 2025 GMT Subject: CN=68f3ca93-58d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:66:ed:18:48:da:e1:76:91:47:c3:65:b2:71: 55:4c:63:16:13:61:a0:e0:6f:08:ed:8e:2e:79:66: a5:96:15:0b:c7:45:d3:64:de:41:6a:00:fe:14:35: d2:eb:6a:c0:eb:56:34:b6:c8:bb:52:d6:40:05:7c: 21:2a:2a:ee:b1:02:b0:ba:bc:24:d3:71:89:88:49: fc:3c:c8:34:bb:b9:a0:aa:17:36:61:04:4a:fc:09: 6a:1e:cd:c3:1b:b6:ae:fa:9b:a6:bd:c0:00:4d:08: c8:09:93:bc:4d:1b:5f:1b:3f:6c:cf:06:5a:11:1d: 6e:0d:4e:0d:00:5a:1f:38:b4:d6:25:68:91:56:d8: f0:ec:b4:1f:fc:52:6a:6a:28:05:1e:d2:1b:e6:7e: 6b:ad:13:30:58:7d:27:f1:85:01:94:e8:af:60:1b: 4a:14:ae:c9:a7:50:21:d8:81:30:74:51:5e:6c:e4: 93:cf:42:49:ca:d3:f9:1f:c5:f9:9f:a9:55:40:ce: ea:d6:0c:2d:fd:d5:25:de:3d:97:12:f8:8a:e4:fe: d3:c7:d4:c7:84:6d:2e:92:5c:85:9d:11:3c:d2:c2: eb:f7:35:0f:2d:dd:12:41:53:af:7f:70:99:10:35: 16:0c:4d:5d:69:e3:54:b1:d4:53:6c:8e:9d:1b:e3: 97:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8B:04:30:A6:8C:D5:8A:CA:F1:B5:98:44:27:3B:D7:C2:E9:8B:4B X509v3 Authority Key Identifier: keyid:DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:86:f9:df:cc:f6:14:4e:56:ef:c9:99:b7:3f:26:b9:56:0c: 57:50:61:9c:27:ef:5e:f7:57:d9:25:03:dc:60:b7:6c:92:bd: 45:3d:bd:a2:8d:e3:da:12:3a:6f:3c:ed:3a:93:14:99:a1:b3: 8b:06:f2:57:0f:ce:d9:3d:9b:e3:05:1e:f3:2f:77:28:6b:53: b8:37:9c:31:95:19:e2:90:a5:0f:15:c1:8d:17:69:bc:ac:43: 30:b3:d2:5e:93:14:26:4c:73:5c:31:49:e7:02:0c:fb:ee:5a: b8:4e:77:6e:d9:a0:24:a9:e4:62:0b:90:42:b1:b5:54:65:23: 30:7d:a1:08:73:fa:4a:51:45:ba:12:0a:d6:f6:0e:e0:b1:27: b9:bf:ac:91:23:ae:73:23:e9:83:30:ea:7e:0f:7d:00:69:0b: 26:80:e8:1b:97:7f:07:66:3c:bc:58:f8:10:b3:b3:1b:4a:41: 44:b8:4e:37:83:f8:ea:f0:4d:90:4e:b0:49:9f:52:10:1f:c0: c0:6e:11:6d:47:d1:f8:47:76:33:e2:78:fe:0e:fc:50:20:0c: 16:df:3c:f5:ce:37:eb:ff:42:ba:72:c5:6e:84:ab:9c:4c:7b: 20:0f:8b:4d:80:a9:91:76:5f:f5:65:f7:0d:46:ef:ae:51:7b: 07:96:e4:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMzMxMTAvBgNVBAUTKERCQzIxODQ5QkI0QzE3MDREMjMxOTNDNDFCNzBDNjZC MUE5NjU2MkYwHhcNMjUxMDE4MTcxMjUwWhcNMjUxMDI1MTcxMjUwWjAYMRYwFAYD VQQDEw02OGYzY2E5My01OGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWbtGEja4XaRR8NlsnFVTGMWE2Gg4G8I7Y4ueWallhULx0XTZN5BagD+FDXS 62rA61Y0tsi7UtZABXwhKirusQKwurwk03GJiEn8PMg0u7mgqhc2YQRK/AlqHs3D G7au+pumvcAATQjICZO8TRtfGz9szwZaER1uDU4NAFofOLTWJWiRVtjw7LQf/FJq aigFHtIb5n5rrRMwWH0n8YUBlOivYBtKFK7Jp1Ah2IEwdFFebOSTz0JJytP5H8X5 n6lVQM7q1gwt/dUl3j2XEviK5P7Tx9THhG0uklyFnRE80sLr9zUPLd0SQVOvf3CZ EDUWDE1daeNUsdRTbI6dG+OXzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmLBDCm jNWKyvG1mEQnO9fC6YtLMB8GA1UdIwQYMBaAFNvCGEm7TBcE0jGTxBtwxmsallYv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIzMy8xRkRBRkQ2MjQz RTYxMUU4QkM0MTVGNjVDNEY5QUUwMi8yOElZU2J0TUZ3VFNNWlBFRzNER2F4cVdW aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI4SVlTYnRNRndUU01aUEVHM0RHYXhxV1ZpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIzMy8xRkRBRkQ2MjQzRTYxMUU4QkM0MTVGNjVDNEY5QUUwMi8yOElZU2J0TUZ3 VFNNWlBFRzNER2F4cVdWaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEhvnfzPYUTlbvyZm3Pya5VgxXUGGcJ+9e91fZJQPcYLdskr1FPb2i jePaEjpvPO06kxSZobOLBvJXD87ZPZvjBR7zL3coa1O4N5wxlRnikKUPFcGNF2m8 rEMws9JekxQmTHNcMUnnAgz77lq4Tndu2aAkqeRiC5BCsbVUZSMwfaEIc/pKUUW6 EgrW9g7gsSe5v6yRI65zI+mDMOp+D30AaQsmgOgbl38HZjy8WPgQs7MbSkFEuE43 g/jq8E2QTrBJn1IQH8DAbhFtR9H4R3Yz4nj+DvxQIAwW3zz1zjfr/0K6csVuhKuc THsgD4tNgKmRdl/1ZfcNRu+uUXsHluQ7 -----END CERTIFICATE-----Generated at Sun Oct 19 23:30:43 2025 by rpki-client