$ rpki-client -vvf rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft File: 28ptKqUoxLJFVtsH_LVpw2rC_rE.mft (raw, json) Hash identifier: E5q4mclfBDdD3YW7/lxIMjKUJs4riB02WeGkwj0gfG8= Subject key identifier: 14:9C:DB:BA:45:24:74:3C:59:5B:72:DA:4A:5B:1A:A1:81:42:27:B0 Authority key identifier: DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1 Certificate issuer: /CN=A918C477/serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1 Certificate serial: 02CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft Manifest number: 02CB Signing time: Wed 05 Nov 2025 01:27:38 +0000 Manifest this update: Wed 05 Nov 2025 01:27:37 +0000 Manifest next update: Wed 12 Nov 2025 01:27:37 +0000 Files and hashes: 1: 28ptKqUoxLJFVtsH_LVpw2rC_rE.crl (hash: PWTgbiHRRcNlr5SqrXUFESd71oACme/Y9AfZAE2s7fs=) 2: FB2262620C3111EDBD0F7137C4F9AE02.roa (hash: gKrsb4dZgy0MTcPqjVyZ2IoWxdZknG0vr+R6U+hRwFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 719 (0x2cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C477, serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1 Validity Not Before: Nov 5 01:27:37 2025 GMT Not After : Nov 12 01:27:37 2025 GMT Subject: CN=690aa80a-8b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:19:b4:40:ef:da:a8:c6:51:50:6b:de:0b:b7: 52:41:01:17:f8:a4:3d:4a:ad:d3:ce:d9:97:81:ef: 1b:62:54:d5:b9:3b:a4:06:1f:ef:b9:81:25:0e:be: 41:3e:3b:82:59:88:8d:0b:6e:0d:23:35:64:f0:89: d8:83:df:5f:53:44:c9:70:9a:66:cc:d0:71:96:be: 61:23:de:be:52:5f:65:60:38:54:50:7b:03:60:f4: 78:7f:06:2e:b1:69:4d:62:8a:4b:5d:59:7e:61:7d: 22:b0:c2:ca:cc:cf:71:e9:fd:20:de:3e:d5:65:cf: 33:a5:82:47:26:3c:7d:97:0e:d5:9c:94:86:95:7b: 92:d6:68:7c:8a:18:4b:60:fc:cd:d4:c9:ef:c2:ff: e5:bb:9d:14:9f:5a:e0:ae:3f:8e:b6:b1:42:5f:ef: 1b:30:81:d6:7b:10:db:91:8b:f3:66:1f:4c:2f:3a: 82:cf:b7:05:a9:d6:d5:10:0b:12:a0:9e:73:fd:1b: 3e:e2:13:b1:62:0f:21:b4:d0:e1:39:56:5b:d5:69: 78:f5:6c:27:cc:0b:7d:1a:36:27:94:a5:23:7e:3d: ab:bb:0b:3b:5c:07:f2:d4:43:c4:3c:1b:c8:8c:78: 8c:90:05:98:fd:c3:d1:b8:a6:2c:c2:8c:43:1e:72: 80:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9C:DB:BA:45:24:74:3C:59:5B:72:DA:4A:5B:1A:A1:81:42:27:B0 X509v3 Authority Key Identifier: keyid:DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:36:cf:84:c5:fa:3a:da:d8:c0:52:f8:d3:94:5a:6d:0b:e7: 78:a2:13:4a:87:60:c0:bb:d0:28:89:9e:9d:cf:77:9a:eb:b0: 73:18:2f:75:d6:54:ba:58:45:0c:16:f7:8e:22:00:1e:1c:60: 90:e2:47:79:82:4f:f5:57:2a:9d:05:53:13:de:44:6a:e3:3f: 21:16:ef:19:1e:1b:cc:70:94:2b:9a:f6:33:2b:be:0b:46:9e: f1:6c:5a:82:04:5d:33:56:5c:bd:91:51:49:92:04:f3:01:e3: 63:2a:ee:aa:f2:6e:bf:94:a3:14:e5:24:61:74:ca:40:f8:fd: ba:ab:e1:fd:ec:94:9a:5d:38:00:9b:92:d5:fa:5d:a9:28:f8: eb:e8:a9:2a:9c:2b:8c:0a:3a:cc:14:59:86:06:fe:61:de:77: 20:44:be:3d:ff:81:99:4c:7b:b9:11:57:59:47:49:79:75:44: 23:b6:4a:48:d8:ec:11:3d:79:f5:ff:36:c9:74:7a:ca:f8:89: ec:1f:a4:fe:34:77:5e:32:c3:cb:3d:c3:61:8e:76:de:74:50: a1:3a:e4:b4:7a:75:fc:1d:2b:5d:f4:71:43:0e:0d:1c:df:2b: 00:7e:37:f4:be:09:af:46:97:fe:20:60:5f:b7:7b:d4:4c:e1: 08:b7:9b:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM0NzcxMTAvBgNVBAUTKERCQ0E2RDJBQTUyOEM0QjI0NTU2REIwN0ZDQjU2OUMz NkFDMkZFQjEwHhcNMjUxMTA1MDEyNzM3WhcNMjUxMTEyMDEyNzM3WjAYMRYwFAYD VQQDEw02OTBhYTgwYS04YjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxm0QO/aqMZRUGveC7dSQQEX+KQ9Sq3TztmXge8bYlTVuTukBh/vuYElDr5B PjuCWYiNC24NIzVk8InYg99fU0TJcJpmzNBxlr5hI96+Ul9lYDhUUHsDYPR4fwYu sWlNYopLXVl+YX0isMLKzM9x6f0g3j7VZc8zpYJHJjx9lw7VnJSGlXuS1mh8ihhL YPzN1Mnvwv/lu50Un1rgrj+OtrFCX+8bMIHWexDbkYvzZh9MLzqCz7cFqdbVEAsS oJ5z/Rs+4hOxYg8htNDhOVZb1Wl49WwnzAt9GjYnlKUjfj2ruws7XAfy1EPEPBvI jHiMkAWY/cPRuKYswoxDHnKAVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSc27pF JHQ8WVty2kpbGqGBQiewMB8GA1UdIwQYMBaAFNvKbSqlKMSyRVbbB/y1acNqwv6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzQ3Ny9ENTVGMjlGNDBD MkYxMUVEQkMyM0JCMzZDNEY5QUUwMi8yOHB0S3FVb3hMSkZWdHNIX0xWcHcyckNf ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI4cHRLcVVveExKRlZ0c0hfTFZwdzJyQ19yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzQ3Ny9ENTVGMjlGNDBDMkYxMUVEQkMyM0JCMzZDNEY5QUUwMi8yOHB0S3FVb3hM SkZWdHNIX0xWcHcyckNfckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNNs+Exfo62tjAUvjTlFptC+d4ohNKh2DAu9AoiZ6dz3ea67BzGC91 1lS6WEUMFveOIgAeHGCQ4kd5gk/1VyqdBVMT3kRq4z8hFu8ZHhvMcJQrmvYzK74L Rp7xbFqCBF0zVly9kVFJkgTzAeNjKu6q8m6/lKMU5SRhdMpA+P26q+H97JSaXTgA m5LV+l2pKPjr6KkqnCuMCjrMFFmGBv5h3ncgRL49/4GZTHu5EVdZR0l5dUQjtkpI 2OwRPXn1/zbJdHrK+InsH6T+NHdeMsPLPcNhjnbedFChOuS0enX8HStd9HFDDg0c 3ysAfjf0vgmvRpf+IGBft3vUTOEIt5sh -----END CERTIFICATE-----Generated at Wed Nov 5 13:26:49 2025 by rpki-client