$ rpki-client -vvf rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft File: 28ptKqUoxLJFVtsH_LVpw2rC_rE.mft (raw, json) Hash identifier: y1AfZKlZRsj7hYCZmKMqJoTZZ6ppgalK+lcchvq/ki4= Subject key identifier: 90:56:9C:95:7C:2F:CB:C3:76:3E:EF:FC:2A:24:0D:A9:85:92:FF:8A Authority key identifier: DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1 Certificate issuer: /CN=A918C477/serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1 Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft Manifest number: 0283 Signing time: Sun 15 Jun 2025 01:20:23 +0000 Manifest this update: Sun 15 Jun 2025 01:20:23 +0000 Manifest next update: Sun 22 Jun 2025 01:20:23 +0000 Files and hashes: 1: 28ptKqUoxLJFVtsH_LVpw2rC_rE.crl (hash: 2QPA7y8UpWVtz6RpOdSW8qF3ZpVHOd7t2JVnaczDeOY=) 2: FB2262620C3111EDBD0F7137C4F9AE02.roa (hash: gKrsb4dZgy0MTcPqjVyZ2IoWxdZknG0vr+R6U+hRwFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C477, serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1 Validity Not Before: Jun 15 01:20:23 2025 GMT Not After : Jun 22 01:20:23 2025 GMT Subject: CN=684e1fd7-4fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cd:97:94:09:01:db:ba:af:ab:27:09:81:1a: 6b:3f:6d:f0:40:f7:45:12:c2:dd:84:70:d9:29:22: fa:c8:3d:d0:82:cf:ac:c9:be:70:84:3c:9b:89:f1: 49:f2:9c:6a:27:08:61:e8:66:fb:9f:3a:4e:28:5d: 76:37:f5:fc:b9:c1:24:a1:08:56:b1:9b:af:31:79: c8:ac:c2:67:5a:b8:4e:d3:46:c7:76:11:f9:6e:cd: 73:63:64:83:3e:d9:d9:67:8d:55:10:c7:7a:84:06: 06:9e:41:fe:a6:c9:ea:fb:63:c8:18:21:45:07:1f: 00:cf:cf:3a:54:fd:d1:5c:b1:de:52:b2:fc:41:78: 5d:51:9f:1e:c7:7c:b5:63:6d:72:8d:46:be:43:28: 9e:ef:9b:b3:79:f4:5a:f7:22:98:cb:26:c9:e1:29: 94:03:7d:a0:f2:75:27:3c:bb:ea:59:91:a7:59:25: 21:2f:58:57:6d:f9:1a:28:5a:17:78:5f:12:53:7b: 87:c4:2d:55:bd:2e:8f:da:e6:ac:93:46:42:ef:1f: d2:3b:0d:88:53:f9:fe:a8:fc:dd:2e:9b:bb:8a:49: 76:09:db:ef:1b:8b:71:e4:73:18:b1:5f:e2:b3:ac: e0:7e:8a:7a:f7:d0:33:53:da:81:9f:94:08:c4:98: 91:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:56:9C:95:7C:2F:CB:C3:76:3E:EF:FC:2A:24:0D:A9:85:92:FF:8A X509v3 Authority Key Identifier: keyid:DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d3:50:60:97:34:3e:56:c2:9f:d1:30:7f:fe:47:7f:3b:22: 6b:0c:2d:a5:28:c7:0e:3c:0a:4d:72:46:9d:c6:12:a4:65:51: 70:03:b8:e4:db:1a:a3:4e:ed:f3:01:b1:0b:28:8f:b2:57:09: 75:01:9e:dd:ab:78:bc:0a:85:1a:40:ee:66:98:42:6d:60:11: 74:54:e1:e3:b0:c0:05:76:29:bc:ad:02:7f:9d:1d:89:83:1e: ad:74:66:0e:a1:f6:b4:10:04:e8:1d:f2:6e:f1:88:1d:73:90: aa:1e:05:ed:d1:e8:9b:e0:0b:37:02:f4:98:d5:f0:ce:f2:98: 6b:81:05:98:95:de:33:42:2b:77:7e:71:2c:92:fa:cf:9a:d3: 87:5d:57:98:a9:d1:ad:f6:da:82:16:b6:8a:a5:66:12:4d:25: 37:68:75:ee:e9:41:22:e4:77:5a:80:37:9b:54:19:b2:91:d2: c5:ae:5c:4a:68:bd:08:1e:9e:d1:0d:f1:bd:69:46:f4:ce:ae: 56:9f:6b:12:29:0d:2a:b5:ff:49:c2:3b:f5:dd:f3:8e:48:b8: 4e:19:4c:8a:33:15:13:af:93:81:28:d1:2a:5c:af:e5:26:4e: a1:a2:64:be:cf:e3:40:2b:99:ee:7e:21:23:ad:db:c9:9c:1b: c1:45:e3:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM0NzcxMTAvBgNVBAUTKERCQ0E2RDJBQTUyOEM0QjI0NTU2REIwN0ZDQjU2OUMz NkFDMkZFQjEwHhcNMjUwNjE1MDEyMDIzWhcNMjUwNjIyMDEyMDIzWjAYMRYwFAYD VQQDEw02ODRlMWZkNy00ZmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0s2XlAkB27qvqycJgRprP23wQPdFEsLdhHDZKSL6yD3Qgs+syb5whDybifFJ 8pxqJwhh6Gb7nzpOKF12N/X8ucEkoQhWsZuvMXnIrMJnWrhO00bHdhH5bs1zY2SD PtnZZ41VEMd6hAYGnkH+psnq+2PIGCFFBx8Az886VP3RXLHeUrL8QXhdUZ8ex3y1 Y21yjUa+Qyie75uzefRa9yKYyybJ4SmUA32g8nUnPLvqWZGnWSUhL1hXbfkaKFoX eF8SU3uHxC1VvS6P2uask0ZC7x/SOw2IU/n+qPzdLpu7ikl2CdvvG4tx5HMYsV/i s6zgfop699AzU9qBn5QIxJiR+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBWnJV8 L8vDdj7v/CokDamFkv+KMB8GA1UdIwQYMBaAFNvKbSqlKMSyRVbbB/y1acNqwv6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzQ3Ny9ENTVGMjlGNDBD MkYxMUVEQkMyM0JCMzZDNEY5QUUwMi8yOHB0S3FVb3hMSkZWdHNIX0xWcHcyckNf ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI4cHRLcVVveExKRlZ0c0hfTFZwdzJyQ19yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzQ3Ny9ENTVGMjlGNDBDMkYxMUVEQkMyM0JCMzZDNEY5QUUwMi8yOHB0S3FVb3hM SkZWdHNIX0xWcHcyckNfckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN01BglzQ+VsKf0TB//kd/OyJrDC2lKMcOPApNckadxhKkZVFwA7jk 2xqjTu3zAbELKI+yVwl1AZ7dq3i8CoUaQO5mmEJtYBF0VOHjsMAFdim8rQJ/nR2J gx6tdGYOofa0EAToHfJu8Ygdc5CqHgXt0eib4As3AvSY1fDO8phrgQWYld4zQit3 fnEskvrPmtOHXVeYqdGt9tqCFraKpWYSTSU3aHXu6UEi5HdagDebVBmykdLFrlxK aL0IHp7RDfG9aUb0zq5Wn2sSKQ0qtf9Jwjv13fOOSLhOGUyKMxUTr5OBKNEqXK/l Jk6homS+z+NAK5nufiEjrdvJnBvBReOU -----END CERTIFICATE-----Generated at Sun Jun 15 08:27:39 2025 by rpki-client