$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft File: 28byJW3eXCxGqA6yQy8lcu3FN9Y.mft (raw, json) Hash identifier: GQG7hrgKAqtwr/GRnORNcB616CeVWMlBrtsxhaWYWoY= Subject key identifier: B1:79:30:72:8D:AF:D0:33:86:E1:2F:5F:8A:3D:2E:EB:7A:A5:02:7B Authority key identifier: DB:C6:F2:25:6D:DE:5C:2C:46:A8:0E:B2:43:2F:25:72:ED:C5:37:D6 Certificate issuer: /CN=A914D0E3/serialNumber=DBC6F2256DDE5C2C46A80EB2432F2572EDC537D6 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft Manifest number: 8D Signing time: Sat 19 Jul 2025 06:43:41 +0000 Manifest this update: Sat 19 Jul 2025 06:43:40 +0000 Manifest next update: Sat 26 Jul 2025 06:43:40 +0000 Files and hashes: 1: 28byJW3eXCxGqA6yQy8lcu3FN9Y.crl (hash: mN0n/Nc9X0FNyZXfJECQs86XI5XA0SrzxJvSjE0hoQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.crl rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0E3, serialNumber=DBC6F2256DDE5C2C46A80EB2432F2572EDC537D6 Validity Not Before: Jul 19 06:43:40 2025 GMT Not After : Jul 26 06:43:40 2025 GMT Subject: CN=687b3e9d-baaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:80:c0:0b:fb:ba:3b:bc:95:b7:a3:85:37:25: 04:ac:71:29:9b:1a:26:84:6e:a4:b9:7f:e3:9b:9b: d2:75:62:42:ef:8c:0e:78:67:d5:f1:98:ae:e3:c2: 20:f5:9a:34:66:b9:a7:55:93:44:98:24:83:ea:78: 16:25:2e:78:58:b0:6f:37:2b:f3:46:4f:86:3e:95: 41:50:50:1c:54:52:8a:7f:6a:cd:6a:71:f5:01:e1: b1:ca:2e:15:d3:93:3f:e1:94:05:05:28:4e:22:c9: 7d:c4:d1:9a:a4:e5:aa:f7:97:9b:c3:26:2a:71:be: 62:e2:5e:22:e3:c1:1d:5d:ab:23:7b:4f:24:c0:99: 63:a4:5f:3c:55:53:1d:83:49:05:51:f3:eb:24:83: 54:67:03:46:8e:b9:70:de:80:13:d8:33:73:9e:e1: 01:46:14:cb:56:bb:0e:e5:3e:a0:bc:75:7b:79:d3: 95:13:20:99:cc:8e:82:27:d2:2d:6d:38:b7:a2:bd: 8b:80:f3:11:bb:0f:f7:eb:fe:8a:5f:55:f5:5b:40: e6:89:29:1e:f9:d4:69:c2:3d:f6:82:18:e4:e1:b1: f4:b3:bd:c6:86:2d:1d:11:78:cc:5a:1b:45:d6:cd: db:fe:d9:30:f4:e3:a0:09:cb:89:55:c4:ac:9d:46: 8e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:79:30:72:8D:AF:D0:33:86:E1:2F:5F:8A:3D:2E:EB:7A:A5:02:7B X509v3 Authority Key Identifier: keyid:DB:C6:F2:25:6D:DE:5C:2C:46:A8:0E:B2:43:2F:25:72:ED:C5:37:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:c0:ba:db:75:fb:9c:30:c5:b0:9f:b5:99:b1:f8:f4:65:fc: 58:30:6d:0e:69:80:7d:53:e9:2c:95:95:c0:b2:f3:f7:10:cc: fd:7a:60:1a:93:33:00:84:32:f0:09:85:e4:6f:a9:12:08:96: 60:ea:b9:04:35:5d:3e:91:fa:63:12:6d:d7:35:f8:93:79:f9: a2:62:9d:ef:7a:28:c1:63:3f:ef:65:25:d4:42:48:06:73:43: ff:2f:30:a8:f8:4a:2c:9a:07:a7:b0:db:19:9e:ef:a4:46:e7: e6:f5:11:f3:e4:25:a6:63:7d:e0:4b:1f:ef:0c:70:45:56:a1: d4:37:88:85:08:9e:c6:97:b1:a4:2d:ad:d3:f3:81:a9:a0:6e: 6a:60:9e:96:cd:61:3c:a8:7b:5d:69:1c:72:c6:7d:71:d6:31: e4:0d:30:44:08:49:7e:13:0a:f7:68:94:e1:4a:98:5c:bd:32: 65:26:90:d5:da:3c:01:45:62:e4:19:c1:ef:21:ea:d8:7b:ad: 55:97:df:8b:fd:e5:24:e0:cc:0b:cb:1d:bf:2c:37:38:cc:1c: 2d:84:ce:b7:3a:25:d0:81:c4:7f:18:aa:fd:60:b4:10:08:e7: 9d:a6:36:f9:10:e0:60:91:67:42:39:75:28:9f:d0:13:39:5b: ec:5d:62:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQwRTMxMTAvBgNVBAUTKERCQzZGMjI1NkRERTVDMkM0NkE4MEVCMjQzMkYyNTcy RURDNTM3RDYwHhcNMjUwNzE5MDY0MzQwWhcNMjUwNzI2MDY0MzQwWjAYMRYwFAYD VQQDEw02ODdiM2U5ZC1iYWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoDAC/u6O7yVt6OFNyUErHEpmxomhG6kuX/jm5vSdWJC74wOeGfV8Ziu48Ig 9Zo0ZrmnVZNEmCSD6ngWJS54WLBvNyvzRk+GPpVBUFAcVFKKf2rNanH1AeGxyi4V 05M/4ZQFBShOIsl9xNGapOWq95ebwyYqcb5i4l4i48EdXasje08kwJljpF88VVMd g0kFUfPrJINUZwNGjrlw3oAT2DNznuEBRhTLVrsO5T6gvHV7edOVEyCZzI6CJ9It bTi3or2LgPMRuw/36/6KX1X1W0DmiSke+dRpwj32ghjk4bH0s73Ghi0dEXjMWhtF 1s3b/tkw9OOgCcuJVcSsnUaORQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLF5MHKN r9AzhuEvX4o9Lut6pQJ7MB8GA1UdIwQYMBaAFNvG8iVt3lwsRqgOskMvJXLtxTfW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDBFMy9CMzVBQjlGQThD N0UxMUVGOEU5MkU3MUJDNEY5QUUwMi8yOGJ5SlczZVhDeEdxQTZ5UXk4bGN1M0ZO OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI4YnlKVzNlWEN4R3FBNnlReThsY3UzRk45WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDBFMy9CMzVBQjlGQThDN0UxMUVGOEU5MkU3MUJDNEY5QUUwMi8yOGJ5SlczZVhD eEdxQTZ5UXk4bGN1M0ZOOVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWwLrbdfucMMWwn7WZsfj0ZfxYMG0OaYB9U+kslZXAsvP3EMz9emAa kzMAhDLwCYXkb6kSCJZg6rkENV0+kfpjEm3XNfiTefmiYp3veijBYz/vZSXUQkgG c0P/LzCo+EosmgensNsZnu+kRufm9RHz5CWmY33gSx/vDHBFVqHUN4iFCJ7Gl7Gk La3T84GpoG5qYJ6WzWE8qHtdaRxyxn1x1jHkDTBECEl+Ewr3aJThSphcvTJlJpDV 2jwBRWLkGcHvIerYe61Vl9+L/eUk4MwLyx2/LDc4zBwthM63OiXQgcR/GKr9YLQQ COedpjb5EOBgkWdCOXUon9ATOVvsXWKt -----END CERTIFICATE-----Generated at Sun Jul 20 03:23:23 2025 by rpki-client