$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft File: 28byJW3eXCxGqA6yQy8lcu3FN9Y.mft (raw, json) Hash identifier: WYNxWIFii3oTUJwIxJgaPHAJkbQBaK603YT1y5mscwM= Subject key identifier: A6:3C:9E:99:FA:1D:49:66:C6:76:ED:0F:62:6E:41:8D:45:F7:D2:3D Authority key identifier: DB:C6:F2:25:6D:DE:5C:2C:46:A8:0E:B2:43:2F:25:72:ED:C5:37:D6 Certificate issuer: /CN=A914D0E3/serialNumber=DBC6F2256DDE5C2C46A80EB2432F2572EDC537D6 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft Manifest number: 63 Signing time: Fri 25 Apr 2025 06:01:09 +0000 Manifest this update: Fri 25 Apr 2025 06:01:08 +0000 Manifest next update: Fri 02 May 2025 06:01:08 +0000 Files and hashes: 1: 28byJW3eXCxGqA6yQy8lcu3FN9Y.crl (hash: J2D5oCHRrX9ensrCGkg+Qk/9mZsD+zPzqxiLd6jaQ90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.crl rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0E3, serialNumber=DBC6F2256DDE5C2C46A80EB2432F2572EDC537D6 Validity Not Before: Apr 25 06:01:08 2025 GMT Not After : May 2 06:01:08 2025 GMT Subject: CN=680b2524-f050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:58:c7:19:dc:75:25:98:4e:3c:39:37:f4:21: e9:f3:ae:77:0f:fd:4e:4d:46:3f:b3:3e:b9:66:dd: 3b:23:d7:f6:c0:e6:d5:82:58:94:e0:e1:76:27:73: d5:f7:e7:fd:fb:db:e3:11:55:62:30:5a:12:ab:9c: db:70:4e:9c:14:ff:0c:e2:b3:1d:97:9e:e8:be:f7: 0b:90:ab:0c:ad:c7:72:3b:39:14:7b:16:7a:b5:23: 1c:2d:c0:1e:9d:cb:6d:5a:8d:bb:fb:04:a6:ce:3f: b3:9a:bf:a9:0a:de:2b:f9:25:7a:a5:20:6d:35:c2: 43:4b:ad:ee:68:8f:87:4e:c1:01:e4:2a:1d:fa:b8: cc:7f:14:05:eb:05:cd:b7:0f:cc:78:34:e2:2a:c1: 47:63:7a:27:18:4f:6a:7d:bb:83:19:17:25:c1:4f: 96:97:52:a1:16:ed:67:c9:6f:71:c9:1b:11:8f:d0: ee:91:32:25:4e:80:1d:a8:7b:1b:6a:b6:8b:24:70: 14:36:5b:34:6b:ac:af:a6:ab:16:21:e7:02:c1:ec: d6:b2:00:4f:08:c9:78:19:0a:92:b5:6c:b9:d2:86: 9a:d6:63:33:7a:3a:9f:a5:31:3e:ca:d1:64:14:b8: 5d:2a:ca:3b:fa:dc:5e:84:75:5d:b1:57:d8:7f:65: 34:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3C:9E:99:FA:1D:49:66:C6:76:ED:0F:62:6E:41:8D:45:F7:D2:3D X509v3 Authority Key Identifier: keyid:DB:C6:F2:25:6D:DE:5C:2C:46:A8:0E:B2:43:2F:25:72:ED:C5:37:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:30:95:c1:b2:71:ed:b2:da:8d:5f:9e:0b:31:30:d8:00:0d: 9c:8e:05:e7:57:49:52:7c:b0:ff:78:2d:85:cf:dc:b6:d5:28: 08:93:f5:2a:ac:24:29:8e:64:f4:41:08:a9:59:bb:19:52:48: 61:bb:73:e0:02:c0:39:30:f8:00:57:59:b9:27:19:7e:ae:e0: 96:d8:c1:99:ac:1f:41:04:12:87:a4:2b:1c:3d:cd:da:a6:b6: 29:70:78:a3:42:3a:68:e4:b7:81:2c:8b:4e:3b:7d:43:56:90: 72:8d:0a:8b:41:5e:04:23:8d:4c:d3:ae:c9:06:60:d8:ea:cc: 1e:9c:0a:a2:75:8f:f5:ab:5c:10:9d:a2:a6:39:f8:38:04:0b: dd:e8:00:71:e6:bd:f5:23:32:d0:aa:d3:d0:e7:b4:87:02:2c: f5:61:36:3a:30:1c:8d:91:c1:11:25:c4:dd:2c:9b:b6:26:ae: 30:32:25:4a:b5:b3:17:42:4a:e6:f5:20:33:91:d7:96:fa:b4: 5a:c6:cf:9e:a5:24:36:01:e8:a8:e9:14:bc:fd:e3:6c:5a:fc: bc:1b:02:da:a6:a2:44:05:99:6c:60:bc:90:e3:23:61:ae:2a: b7:c9:04:23:5d:50:80:b3:07:22:c8:23:dc:98:16:a6:89:e5: 79:71:1d:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RDBFMzExMC8GA1UEBRMoREJDNkYyMjU2RERFNUMyQzQ2QTgwRUIyNDMyRjI1NzJF REM1MzdENjAeFw0yNTA0MjUwNjAxMDhaFw0yNTA1MDIwNjAxMDhaMBgxFjAUBgNV BAMTDTY4MGIyNTI0LWYwNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqWMcZ3HUlmE48OTf0IenzrncP/U5NRj+zPrlm3Tsj1/bA5tWCWJTg4XYnc9X3 5/372+MRVWIwWhKrnNtwTpwU/wzisx2Xnui+9wuQqwytx3I7ORR7Fnq1IxwtwB6d y21ajbv7BKbOP7Oav6kK3iv5JXqlIG01wkNLre5oj4dOwQHkKh36uMx/FAXrBc23 D8x4NOIqwUdjeicYT2p9u4MZFyXBT5aXUqEW7WfJb3HJGxGP0O6RMiVOgB2oextq toskcBQ2WzRrrK+mqxYh5wLB7NayAE8IyXgZCpK1bLnShprWYzN6Op+lMT7K0WQU uF0qyjv63F6EdV2xV9h/ZTShAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpjyemfod SWbGdu0PYm5BjUX30j0wHwYDVR0jBBgwFoAU28byJW3eXCxGqA6yQy8lcu3FN9Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREMEUzL0IzNUFCOUZBOEM3 RTExRUY4RTkyRTcxQkM0RjlBRTAyLzI4YnlKVzNlWEN4R3FBNnlReThsY3UzRk45 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMjhieUpXM2VYQ3hHcUE2eVF5OGxjdTNGTjlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE MEUzL0IzNUFCOUZBOEM3RTExRUY4RTkyRTcxQkM0RjlBRTAyLzI4YnlKVzNlWEN4 R3FBNnlReThsY3UzRk45WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABQwlcGyce2y2o1fngsxMNgADZyOBedXSVJ8sP94LYXP3LbVKAiT9Sqs JCmOZPRBCKlZuxlSSGG7c+ACwDkw+ABXWbknGX6u4JbYwZmsH0EEEoekKxw9zdqm tilweKNCOmjkt4Esi047fUNWkHKNCotBXgQjjUzTrskGYNjqzB6cCqJ1j/WrXBCd oqY5+DgEC93oAHHmvfUjMtCq09DntIcCLPVhNjowHI2RwRElxN0sm7YmrjAyJUq1 sxdCSub1IDOR15b6tFrGz56lJDYB6KjpFLz942xa/LwbAtqmokQFmWxgvJDjI2Gu KrfJBCNdUICzByLII9yYFqaJ5XlxHVs= -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:51 2025 by rpki-client