$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft File: 28byJW3eXCxGqA6yQy8lcu3FN9Y.mft (raw, json) Hash identifier: ryOpAFsiupSSl1idGDuzNTcPFbfbvcOT3XMHfs6Btgg= Subject key identifier: 37:0F:B6:BA:5B:D0:EF:BF:BB:E0:EF:0D:5A:D8:56:B5:87:3A:2E:CD Authority key identifier: DB:C6:F2:25:6D:DE:5C:2C:46:A8:0E:B2:43:2F:25:72:ED:C5:37:D6 Certificate issuer: /CN=A914D0E3/serialNumber=DBC6F2256DDE5C2C46A80EB2432F2572EDC537D6 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft Manifest number: 7B Signing time: Fri 13 Jun 2025 05:38:36 +0000 Manifest this update: Fri 13 Jun 2025 05:38:35 +0000 Manifest next update: Fri 20 Jun 2025 05:38:35 +0000 Files and hashes: 1: 28byJW3eXCxGqA6yQy8lcu3FN9Y.crl (hash: nygofhOi8+KGWo/ANICSlIzB9lyG7hUVo5ip3XFBsig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.crl rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0E3, serialNumber=DBC6F2256DDE5C2C46A80EB2432F2572EDC537D6 Validity Not Before: Jun 13 05:38:35 2025 GMT Not After : Jun 20 05:38:35 2025 GMT Subject: CN=684bb95b-10f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2a:75:f7:43:af:83:50:37:d1:25:79:ad:cf: e6:f8:26:df:07:20:3f:a0:d9:93:3d:fe:d8:4a:b7: bb:d1:b5:e3:e5:43:68:e7:ae:27:c8:4b:f8:d0:e7: 21:3e:f7:ee:c6:e3:16:d9:84:ec:a4:bb:6c:86:0b: 5c:5f:3c:0b:85:df:f7:b6:45:50:8c:1e:64:7a:c2: ea:6a:27:af:7e:ba:ae:a7:4c:b1:bf:c8:cf:6d:15: 1f:c9:fc:82:b4:a6:68:93:b6:83:9d:0c:24:66:6f: 84:a8:0d:24:0c:4f:6c:5d:18:e4:c5:97:eb:9f:ea: 77:eb:60:1b:76:16:9d:3c:93:25:e5:ab:e9:ca:1d: 34:f6:d5:8d:95:3b:c3:cf:03:49:17:c8:00:98:73: b3:17:c1:f3:63:ff:35:08:f5:0b:36:cf:fb:b9:4a: 5f:97:79:2e:b4:ef:ba:5c:1c:a9:a9:b0:9e:e9:a4: 48:de:7f:6a:3a:b1:e7:d2:2e:97:a5:40:a9:ef:5c: a1:1a:81:f5:fc:b9:12:9e:a1:27:a2:44:35:d5:94: 92:de:48:f4:ca:21:f9:70:a0:7a:e4:48:b3:eb:a2: 51:7f:f9:b3:15:f7:68:77:64:fe:c5:a5:fb:f0:78: b5:69:24:25:80:c9:47:04:0e:40:33:d8:ef:d4:ea: de:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0F:B6:BA:5B:D0:EF:BF:BB:E0:EF:0D:5A:D8:56:B5:87:3A:2E:CD X509v3 Authority Key Identifier: keyid:DB:C6:F2:25:6D:DE:5C:2C:46:A8:0E:B2:43:2F:25:72:ED:C5:37:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:48:8d:af:ee:df:6e:dd:fe:f2:ca:07:f5:04:f7:10:b1:90: d6:24:6e:0a:a8:49:fc:1b:6d:0f:c0:c9:7c:e4:16:75:df:b4: 43:48:ca:32:01:3b:78:60:9e:58:33:2b:86:73:b0:17:d1:f1: 3c:f3:cc:01:cb:b6:ff:c2:1c:99:97:73:bf:c5:1a:ff:45:3b: 7f:09:4e:6e:78:99:8d:1a:a4:86:73:4b:1d:d3:c1:91:11:72: 09:c7:f9:e9:04:75:01:9b:e6:33:53:1a:63:ee:32:10:b2:99: a5:8e:7f:25:8f:8a:d5:63:e8:f6:5a:b2:5c:f6:5f:e4:53:d4: cf:f3:e5:86:71:f3:1e:54:38:07:75:5e:e8:fb:a8:a9:66:8f: f2:c9:8c:93:31:dd:90:c0:9b:44:03:cf:09:a2:bf:03:3c:97: d7:5b:a2:42:1d:2e:33:43:b1:3c:bf:2e:ab:5f:1f:cb:45:78: 3b:ef:7f:e0:60:13:d8:98:30:e0:7f:72:a7:f9:ff:f3:6b:63: e0:33:89:07:a8:50:1f:42:eb:03:71:a0:5f:7f:b9:03:32:22: 7a:3f:e4:07:0b:28:b7:c5:96:d3:64:77:d2:dc:c9:75:cb:87: 2d:ac:59:79:4c:7f:7c:e8:ad:59:a9:98:27:91:8e:5f:a9:38: 86:e5:4f:f8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RDBFMzExMC8GA1UEBRMoREJDNkYyMjU2RERFNUMyQzQ2QTgwRUIyNDMyRjI1NzJF REM1MzdENjAeFw0yNTA2MTMwNTM4MzVaFw0yNTA2MjAwNTM4MzVaMBgxFjAUBgNV BAMTDTY4NGJiOTViLTEwZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEKnX3Q6+DUDfRJXmtz+b4Jt8HID+g2ZM9/thKt7vRtePlQ2jnrifIS/jQ5yE+ 9+7G4xbZhOyku2yGC1xfPAuF3/e2RVCMHmR6wupqJ69+uq6nTLG/yM9tFR/J/IK0 pmiTtoOdDCRmb4SoDSQMT2xdGOTFl+uf6nfrYBt2Fp08kyXlq+nKHTT21Y2VO8PP A0kXyACYc7MXwfNj/zUI9Qs2z/u5Sl+XeS6077pcHKmpsJ7ppEjef2o6sefSLpel QKnvXKEagfX8uRKeoSeiRDXVlJLeSPTKIflwoHrkSLProlF/+bMV92h3ZP7Fpfvw eLVpJCWAyUcEDkAz2O/U6t4HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNw+2ulvQ 77+74O8NWthWtYc6Ls0wHwYDVR0jBBgwFoAU28byJW3eXCxGqA6yQy8lcu3FN9Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREMEUzL0IzNUFCOUZBOEM3 RTExRUY4RTkyRTcxQkM0RjlBRTAyLzI4YnlKVzNlWEN4R3FBNnlReThsY3UzRk45 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMjhieUpXM2VYQ3hHcUE2eVF5OGxjdTNGTjlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE MEUzL0IzNUFCOUZBOEM3RTExRUY4RTkyRTcxQkM0RjlBRTAyLzI4YnlKVzNlWEN4 R3FBNnlReThsY3UzRk45WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKBIja/u327d/vLKB/UE9xCxkNYkbgqoSfwbbQ/AyXzkFnXftENIyjIB O3hgnlgzK4ZzsBfR8TzzzAHLtv/CHJmXc7/FGv9FO38JTm54mY0apIZzSx3TwZER cgnH+ekEdQGb5jNTGmPuMhCymaWOfyWPitVj6PZaslz2X+RT1M/z5YZx8x5UOAd1 Xuj7qKlmj/LJjJMx3ZDAm0QDzwmivwM8l9dbokIdLjNDsTy/LqtfH8tFeDvvf+Bg E9iYMOB/cqf5//NrY+AziQeoUB9C6wNxoF9/uQMyIno/5AcLKLfFltNkd9LcyXXL hy2sWXlMf3zorVmpmCeRjl+pOIblT/g= -----END CERTIFICATE-----Generated at Sat Jun 14 19:11:39 2025 by rpki-client