$ rpki-client -vvf rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft File: 28EoRfH6o1sy_s32oO1NFEKSyMw.mft (raw, json) Hash identifier: AVcet5Jja1qwHqi1GLb7NQ1jSLjmJcqWOQmox9dF+PY= Subject key identifier: DC:56:DD:ED:A4:1C:37:94:9B:29:35:15:11:74:34:39:4C:D7:37:A7 Authority key identifier: DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC Certificate issuer: /CN=A9134790/serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft Manifest number: 0D Signing time: Tue 01 Jul 2025 08:53:43 +0000 Manifest this update: Tue 01 Jul 2025 08:53:42 +0000 Manifest next update: Tue 08 Jul 2025 08:53:42 +0000 Files and hashes: 1: 28EoRfH6o1sy_s32oO1NFEKSyMw.crl (hash: 1uH3GFZOPnE2lvTScL4P0Kee9+RR6+M1BGxut1n7Lbc=) 2: 078FA91C44EA11F09EB11858C4F9AE02.roa (hash: 0gESDeiknT1uDimkCFfPCuziTgWG/TNYoJv8MT/MXRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134790, serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC Validity Not Before: Jul 1 08:53:42 2025 GMT Not After : Jul 8 08:53:42 2025 GMT Subject: CN=6863a217-f537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:25:8e:bd:c1:b3:87:7a:cc:0b:02:e7:79:52: db:bf:67:55:85:b2:22:26:75:4b:e2:a5:d7:f4:36: e2:6c:a4:45:ac:3e:b4:12:51:05:45:40:b1:c9:84: f5:6f:ef:32:bc:ba:e6:b6:bd:1e:ce:bf:d8:71:a8: 78:3f:04:cd:ff:de:5a:ec:cc:91:1c:e8:d4:9e:c5: 5d:68:5f:08:55:14:cd:81:1d:4c:f6:bc:0c:ed:bd: a1:dd:5c:8b:50:e0:75:e6:3f:5f:4d:55:51:9b:5e: a8:c7:29:73:1a:bc:d7:b8:6f:35:a2:8b:7b:da:0f: 97:0e:a9:70:e4:50:ac:8c:00:de:c2:79:fb:90:a6: 51:c3:84:f2:02:99:b7:b9:f1:98:ee:36:8b:5d:89: 42:81:5b:8d:e1:cf:d6:52:34:00:0d:a2:46:f4:b3: e6:e5:0b:71:d3:fc:0d:fb:34:1e:31:58:96:b3:b7: c6:55:03:11:76:51:88:78:6e:27:64:6e:20:91:99: 61:cc:c6:4e:e4:68:66:86:e2:1d:6f:19:ea:5c:2f: e6:dc:96:d4:97:d4:e1:96:47:69:59:26:bc:22:fc: 46:8a:d7:6d:86:78:ae:5f:11:31:c5:e8:3a:91:b1: 65:f9:83:21:19:12:1b:1f:4f:af:56:ce:b0:44:ce: 77:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:56:DD:ED:A4:1C:37:94:9B:29:35:15:11:74:34:39:4C:D7:37:A7 X509v3 Authority Key Identifier: keyid:DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:57:94:82:97:34:b6:32:3a:93:9d:41:64:3b:33:ea:d8:fd: d1:49:56:90:b8:89:69:76:e3:f0:b6:f3:3c:87:3a:6b:89:a9: 58:81:e7:97:4e:b3:17:fe:41:d9:41:5f:e3:00:41:72:68:c8: 45:57:4c:8a:30:cb:a7:4d:61:3f:9e:a0:a4:f2:2f:0c:78:94: 7b:bb:83:32:cf:fc:71:5f:97:17:4e:4f:b6:ab:b3:ee:9f:ae: 9b:78:00:ca:96:72:7d:74:ed:19:ed:fb:84:1c:76:15:1e:72: fe:19:66:f2:d9:74:54:c8:d6:9d:0b:c0:31:b4:7f:97:09:ad: 88:31:71:b5:72:72:c2:46:4b:c0:3e:cf:43:32:68:e0:36:00: 33:d8:3a:df:cd:ca:0b:2d:1c:95:86:30:04:59:37:98:9a:db: dc:08:da:c4:a2:1f:06:8b:a8:6f:e4:9e:36:65:38:11:60:30: 30:8f:53:25:7b:38:45:34:ee:37:56:5d:ef:8f:c3:17:10:7e: ac:98:11:5f:87:72:9d:36:1d:87:60:bc:93:c8:26:2a:e2:37: 26:bf:1d:f8:98:9e:b1:7e:a2:99:73:19:c4:20:25:c4:9c:d0: 1a:eb:38:0b:bb:83:6f:05:1c:86:a7:fc:67:8c:31:c9:09:4a: 42:9f:38:1e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NDc5MDExMC8GA1UEBRMoREJDMTI4NDVGMUZBQTM1QjMyRkVDREY2QTBFRDREMTQ0 MjkyQzhDQzAeFw0yNTA3MDEwODUzNDJaFw0yNTA3MDgwODUzNDJaMBgxFjAUBgNV BAMTDTY4NjNhMjE3LWY1MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNJY69wbOHeswLAud5Utu/Z1WFsiImdUvipdf0NuJspEWsPrQSUQVFQLHJhPVv 7zK8uua2vR7Ov9hxqHg/BM3/3lrszJEc6NSexV1oXwhVFM2BHUz2vAztvaHdXItQ 4HXmP19NVVGbXqjHKXMavNe4bzWii3vaD5cOqXDkUKyMAN7CefuQplHDhPICmbe5 8ZjuNotdiUKBW43hz9ZSNAANokb0s+blC3HT/A37NB4xWJazt8ZVAxF2UYh4bidk biCRmWHMxk7kaGaG4h1vGepcL+bcltSX1OGWR2lZJrwi/EaK122GeK5fETHF6DqR sWX5gyEZEhsfT69WzrBEzncxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3Fbd7aQc N5SbKTUVEXQ0OUzXN6cwHwYDVR0jBBgwFoAU28EoRfH6o1sy/s32oO1NFEKSyMww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0NzkwLzUxMzNGRUFDNDRF OTExRjA5MUE5NkU1M0M0RjlBRTAyLzI4RW9SZkg2bzFzeV9zMzJvTzFORkVLU3lN dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMjhFb1JmSDZvMXN5X3MzMm9PMU5GRUtTeU13LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 NzkwLzUxMzNGRUFDNDRFOTExRjA5MUE5NkU1M0M0RjlBRTAyLzI4RW9SZkg2bzFz eV9zMzJvTzFORkVLU3lNdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKpXlIKXNLYyOpOdQWQ7M+rY/dFJVpC4iWl24/C28zyHOmuJqViB55dO sxf+QdlBX+MAQXJoyEVXTIowy6dNYT+eoKTyLwx4lHu7gzLP/HFflxdOT7ars+6f rpt4AMqWcn107Rnt+4QcdhUecv4ZZvLZdFTI1p0LwDG0f5cJrYgxcbVycsJGS8A+ z0MyaOA2ADPYOt/NygstHJWGMARZN5ia29wI2sSiHwaLqG/knjZlOBFgMDCPUyV7 OEU07jdWXe+PwxcQfqyYEV+Hcp02HYdgvJPIJiriNya/HfiYnrF+oplzGcQgJcSc 0BrrOAu7g28FHIan/GeMMckJSkKfOB4= -----END CERTIFICATE-----Generated at Tue Jul 1 19:38:57 2025 by rpki-client