$ rpki-client -vvf rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft File: z28S295L6RNFgVj1x3hccSkIVVw.mft (raw, json) Hash identifier: 1hNBP357OwwZMvm6iC1ddTkkMOegPS6yrpv5VWVF6d0= Subject key identifier: 61:ED:B4:FE:2C:00:1F:CC:47:19:AA:40:DA:6B:23:8B:20:A3:3B:0C Authority key identifier: CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C Certificate issuer: /CN=A91725C8/serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft Manifest number: 17 Signing time: Sat 09 Aug 2025 08:28:47 +0000 Manifest this update: Sat 09 Aug 2025 08:28:47 +0000 Manifest next update: Sat 16 Aug 2025 08:28:47 +0000 Files and hashes: 1: z28S295L6RNFgVj1x3hccSkIVVw.crl (hash: UuoWXRmzZIiOUe/fmF+G0soiq4yrm0DvWEweHXtN8GU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91725C8, serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C Validity Not Before: Aug 9 08:28:47 2025 GMT Not After : Aug 16 08:28:47 2025 GMT Subject: CN=689706bf-8209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:25:33:b6:24:92:dd:7d:07:64:48:15:61:62: 99:4a:aa:92:2b:7b:66:99:d4:55:a0:16:2b:2e:97: ba:95:cc:fb:bc:fa:16:93:f6:18:90:5f:84:62:e6: 51:ed:5e:e3:8e:e2:01:20:f4:17:28:81:a9:eb:f6: 60:bf:1d:7f:6e:ab:3f:04:8c:3b:db:c2:c6:f1:51: a6:df:2a:21:98:8e:56:0e:42:cd:77:65:50:55:36: f1:05:66:5b:2b:b6:2c:45:b1:86:97:e9:88:a7:f8: 0c:18:0a:b3:df:43:2e:1c:c2:cc:56:42:19:97:bc: cd:f2:72:48:ca:49:ea:1b:a6:67:66:5d:83:66:d5: 57:2d:1c:d1:f4:0a:cd:bc:cf:65:43:18:71:6b:ce: 8a:30:44:c0:ab:f2:9d:1d:55:01:ca:ae:96:38:3e: af:0a:c4:8c:92:21:01:dc:d2:d3:14:8b:ca:ba:44: 61:8c:4e:ed:6d:6a:a9:b7:02:44:22:21:cb:64:cb: f9:c1:fc:c8:10:82:c6:27:fd:a0:13:0f:f4:58:ff: b9:94:be:9b:75:38:0d:b4:41:ce:38:9b:6b:ec:d5: 3e:51:d6:ee:ce:05:3a:75:bc:63:45:7a:b2:be:a6: d7:b9:b7:d5:ce:4e:49:05:54:f1:39:9c:c2:7e:ab: 1f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:ED:B4:FE:2C:00:1F:CC:47:19:AA:40:DA:6B:23:8B:20:A3:3B:0C X509v3 Authority Key Identifier: keyid:CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:45:61:cd:44:15:a0:3c:9e:86:de:c1:80:58:83:7e:f7:5b: f3:36:68:18:ac:c7:e5:c0:b5:f9:86:59:96:31:5f:4f:33:77: 5f:af:e5:50:0e:59:8d:4b:89:c3:76:85:bb:8b:38:e1:4c:6d: e3:62:f1:0c:f7:7d:f9:c0:94:6c:a2:a1:c3:b1:23:fa:2e:5d: 6a:7e:4f:0b:a3:1f:87:27:ab:58:57:d2:8a:2d:7c:19:e9:85: 1d:36:46:1e:09:bd:c6:f6:0f:14:74:44:3b:86:6f:3b:55:6d: de:43:e6:0f:44:be:d3:33:9b:e3:e6:40:46:fb:1c:5e:03:1e: 7c:4e:43:ea:c8:fd:3f:a5:ac:05:46:d2:ee:8f:e6:7d:69:66: 05:09:01:81:e7:e9:7c:c3:64:91:66:ca:ea:ad:6f:2d:c9:98: 0f:49:9e:73:a6:44:37:04:25:23:54:61:eb:be:d2:60:45:51: e8:fd:fb:47:51:0f:f4:89:da:a8:fc:56:53:aa:82:a9:fe:57: f6:87:4b:42:ac:16:74:dd:02:46:11:00:ee:09:a6:ae:94:fc: d0:20:1f:3e:ba:23:d5:18:b4:fa:17:55:33:57:b1:de:50:88: 96:95:28:75:b6:a1:46:be:15:af:e7:bd:d1:9b:22:5d:7a:14: 5c:84:1d:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MjVDODExMC8GA1UEBRMoQ0Y2RjEyREJERTRCRTkxMzQ1ODE1OEY1Qzc3ODVDNzEy OTA4NTU1QzAeFw0yNTA4MDkwODI4NDdaFw0yNTA4MTYwODI4NDdaMBgxFjAUBgNV BAMTDTY4OTcwNmJmLTgyMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClJTO2JJLdfQdkSBVhYplKqpIre2aZ1FWgFisul7qVzPu8+haT9hiQX4Ri5lHt XuOO4gEg9Bcoganr9mC/HX9uqz8EjDvbwsbxUabfKiGYjlYOQs13ZVBVNvEFZlsr tixFsYaX6Yin+AwYCrPfQy4cwsxWQhmXvM3yckjKSeobpmdmXYNm1VctHNH0Cs28 z2VDGHFrzoowRMCr8p0dVQHKrpY4Pq8KxIySIQHc0tMUi8q6RGGMTu1taqm3AkQi Ictky/nB/MgQgsYn/aATD/RY/7mUvpt1OA20Qc44m2vs1T5R1u7OBTp1vGNFerK+ pte5t9XOTkkFVPE5nMJ+qx9tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYe20/iwA H8xHGapA2msjiyCjOwwwHwYDVR0jBBgwFoAUz28S295L6RNFgVj1x3hccSkIVVww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyNUM4LzNCQ0QxQkVBNTU5 NTExRjBBOTM1RDIyRkM0RjlBRTAyL3oyOFMyOTVMNlJORmdWajF4M2hjY1NrSVZW dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvejI4UzI5NUw2Uk5GZ1ZqMXgzaGNjU2tJVlZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy NUM4LzNCQ0QxQkVBNTU5NTExRjBBOTM1RDIyRkM0RjlBRTAyL3oyOFMyOTVMNlJO RmdWajF4M2hjY1NrSVZWdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKxFYc1EFaA8nobewYBYg373W/M2aBisx+XAtfmGWZYxX08zd1+v5VAO WY1LicN2hbuLOOFMbeNi8Qz3ffnAlGyiocOxI/ouXWp+TwujH4cnq1hX0ootfBnp hR02Rh4Jvcb2DxR0RDuGbztVbd5D5g9EvtMzm+PmQEb7HF4DHnxOQ+rI/T+lrAVG 0u6P5n1pZgUJAYHn6XzDZJFmyuqtby3JmA9JnnOmRDcEJSNUYeu+0mBFUej9+0dR D/SJ2qj8VlOqgqn+V/aHS0KsFnTdAkYRAO4Jpq6U/NAgHz66I9UYtPoXVTNXsd5Q iJaVKHW2oUa+Fa/nvdGbIl16FFyEHeY= -----END CERTIFICATE-----Generated at Sat Aug 9 23:16:32 2025 by rpki-client