$ rpki-client -vvf rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft File: 28EoRfH6o1sy_s32oO1NFEKSyMw.mft (raw, json) Hash identifier: OHVuSjI3oaeTCzbJaaRfaxYx627m87OxHDQ8FSvAHXs= Subject key identifier: C7:11:9F:8D:9D:01:4F:35:7F:DE:6B:14:45:38:81:5E:19:E4:6F:6D Authority key identifier: DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC Certificate issuer: /CN=A9134790/serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft Manifest number: 07 Signing time: Thu 19 Jun 2025 07:31:43 +0000 Manifest this update: Thu 19 Jun 2025 07:31:43 +0000 Manifest next update: Thu 26 Jun 2025 07:31:43 +0000 Files and hashes: 1: 28EoRfH6o1sy_s32oO1NFEKSyMw.crl (hash: TW33XcgM8XN/3DB39wFlaHVx3ExPxXTvuCUDIQ+rVEs=) 2: 078FA91C44EA11F09EB11858C4F9AE02.roa (hash: 0gESDeiknT1uDimkCFfPCuziTgWG/TNYoJv8MT/MXRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 07:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134790, serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC Validity Not Before: Jun 19 07:31:43 2025 GMT Not After : Jun 26 07:31:43 2025 GMT Subject: CN=6853bcdf-1c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ab:17:8c:02:ec:71:f6:0d:62:25:4b:20:cc: 08:d6:1b:a9:72:0a:60:b8:6f:85:a8:db:c6:12:9e: 41:b3:05:1a:04:5e:43:d0:cc:d6:df:7e:92:e0:5f: 85:84:00:9d:b7:b6:53:68:2d:48:8b:83:2d:16:9a: 6c:5d:dd:7b:73:af:46:d5:cf:7f:56:b4:88:37:92: fa:c1:32:a0:83:ff:07:5f:10:03:10:3a:b7:3d:ec: 68:d0:e9:86:9c:f4:df:0a:03:7e:41:ef:d4:6a:8c: 62:da:c0:93:0e:55:ab:80:6d:d7:bd:36:02:c8:23: 81:68:fc:7b:1d:94:f0:c8:d5:7d:ca:43:d6:84:93: 8d:7f:c5:42:83:a5:b5:f6:ff:d1:4a:6f:97:93:75: 65:b6:ac:23:79:e4:13:33:e7:2e:a6:75:67:8b:67: e9:21:34:75:25:94:6a:d7:44:2f:58:d0:e7:3e:ca: 43:98:73:b7:ef:72:b4:c9:cc:64:5b:f1:c3:0e:f5: 14:73:96:fd:6e:dc:0c:d5:fc:0c:c3:71:03:ef:8a: f8:61:46:eb:ec:e3:e1:be:b0:58:9f:a7:76:f1:6c: 75:db:b8:32:87:3d:a8:88:c1:0a:dc:4e:4e:8a:96: b7:3d:e4:e2:05:1f:f0:58:63:87:f2:77:7e:e6:c3: 9b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:11:9F:8D:9D:01:4F:35:7F:DE:6B:14:45:38:81:5E:19:E4:6F:6D X509v3 Authority Key Identifier: keyid:DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:be:e3:ac:65:d8:94:bd:49:ff:93:45:f5:a0:09:34:bd:5a: a1:bc:83:90:7b:25:6c:81:6a:e4:7f:74:fa:74:5e:2d:eb:32: 31:4d:a7:42:18:3a:12:22:cd:10:57:a1:51:d6:3f:ab:e0:a6: 7d:9e:5a:92:8d:11:e3:66:2e:3f:c2:49:03:d7:f2:7d:d5:e5: fd:5a:1e:94:af:97:df:10:e9:76:81:4d:79:af:b6:c2:b4:55: 32:a0:60:53:7d:dc:93:3e:37:4e:78:6f:78:bf:34:99:f7:91: 5f:d9:9d:b9:77:b7:97:4b:11:71:37:9a:1f:dc:93:96:f2:13: 07:5d:e5:52:9f:ed:7f:31:3a:38:46:c9:5c:10:e0:82:12:76: f2:e4:f0:ec:fe:91:77:d1:24:04:f0:e8:d7:aa:0c:46:f2:1d: 72:58:4f:f9:4f:5d:66:7d:30:b6:04:fc:9c:a6:75:79:c5:5e: 9e:40:29:01:3c:ad:cd:2d:26:57:41:28:2a:2e:d6:fd:55:d3: e2:9f:e7:f0:6d:00:48:98:32:9f:a3:21:d0:89:73:82:af:9a: 97:73:2e:bb:18:32:9b:54:f4:46:57:5b:30:00:51:ac:0b:73: 5a:c6:85:b1:30:b3:13:79:b5:17:32:b2:e4:d5:09:e1:c7:29: 07:37:7f:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NDc5MDExMC8GA1UEBRMoREJDMTI4NDVGMUZBQTM1QjMyRkVDREY2QTBFRDREMTQ0 MjkyQzhDQzAeFw0yNTA2MTkwNzMxNDNaFw0yNTA2MjYwNzMxNDNaMBgxFjAUBgNV BAMTDTY4NTNiY2RmLTFjNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBqxeMAuxx9g1iJUsgzAjWG6lyCmC4b4Wo28YSnkGzBRoEXkPQzNbffpLgX4WE AJ23tlNoLUiLgy0Wmmxd3Xtzr0bVz39WtIg3kvrBMqCD/wdfEAMQOrc97GjQ6Yac 9N8KA35B79RqjGLawJMOVauAbde9NgLII4Fo/HsdlPDI1X3KQ9aEk41/xUKDpbX2 /9FKb5eTdWW2rCN55BMz5y6mdWeLZ+khNHUllGrXRC9Y0Oc+ykOYc7fvcrTJzGRb 8cMO9RRzlv1u3AzV/AzDcQPvivhhRuvs4+G+sFifp3bxbHXbuDKHPaiIwQrcTk6K lrc95OIFH/BYY4fyd37mw5vtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxxGfjZ0B TzV/3msURTiBXhnkb20wHwYDVR0jBBgwFoAU28EoRfH6o1sy/s32oO1NFEKSyMww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0NzkwLzUxMzNGRUFDNDRF OTExRjA5MUE5NkU1M0M0RjlBRTAyLzI4RW9SZkg2bzFzeV9zMzJvTzFORkVLU3lN dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMjhFb1JmSDZvMXN5X3MzMm9PMU5GRUtTeU13LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 NzkwLzUxMzNGRUFDNDRFOTExRjA5MUE5NkU1M0M0RjlBRTAyLzI4RW9SZkg2bzFz eV9zMzJvTzFORkVLU3lNdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACW+46xl2JS9Sf+TRfWgCTS9WqG8g5B7JWyBauR/dPp0Xi3rMjFNp0IY OhIizRBXoVHWP6vgpn2eWpKNEeNmLj/CSQPX8n3V5f1aHpSvl98Q6XaBTXmvtsK0 VTKgYFN93JM+N054b3i/NJn3kV/Znbl3t5dLEXE3mh/ck5byEwdd5VKf7X8xOjhG yVwQ4IISdvLk8Oz+kXfRJATw6NeqDEbyHXJYT/lPXWZ9MLYE/JymdXnFXp5AKQE8 rc0tJldBKCou1v1V0+Kf5/BtAEiYMp+jIdCJc4KvmpdzLrsYMptU9EZXWzAAUawL c1rGhbEwsxN5tRcysuTVCeHHKQc3f70= -----END CERTIFICATE-----Generated at Thu Jun 19 12:31:30 2025 by rpki-client