$ rpki-client -vvf rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft File: z28S295L6RNFgVj1x3hccSkIVVw.mft (raw, json) Hash identifier: g05RE9fNKfNe2L3+L4ZFA2jtQsSN+81QRixpyT1ppDo= Subject key identifier: 00:4B:FE:62:DC:2B:61:BE:0F:2A:DD:FF:DC:94:39:6C:52:27:BC:9A Authority key identifier: CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C Certificate issuer: /CN=A91725C8/serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft Manifest number: 05 Signing time: Sat 05 Jul 2025 08:31:06 +0000 Manifest this update: Sat 05 Jul 2025 08:31:05 +0000 Manifest next update: Sat 12 Jul 2025 08:31:05 +0000 Files and hashes: 1: z28S295L6RNFgVj1x3hccSkIVVw.crl (hash: 177miTJVpk3197B4izOB/sgjPsPkDb7NxLf5XUo6y44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Jul 2025 08:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91725C8, serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C Validity Not Before: Jul 5 08:31:05 2025 GMT Not After : Jul 12 08:31:05 2025 GMT Subject: CN=6868e2ca-380e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f7:37:0a:58:11:c5:b1:fb:5a:e5:85:d1:17: b3:87:64:b3:c4:19:0f:f8:71:57:37:5a:13:bb:6a: 5d:78:ca:39:c9:b7:93:8f:21:3e:4a:b3:e5:e8:ea: eb:68:92:53:ed:38:c5:44:b8:90:76:f1:e7:67:e5: 1a:22:b8:ad:21:9a:0e:ef:b3:f5:85:80:95:0f:7a: b1:e3:86:91:20:ff:f4:6d:44:e6:9e:6f:61:49:26: 1c:68:0d:cb:5f:df:1d:c0:b5:46:46:b2:69:50:c3: a4:b9:fd:29:1b:ec:e9:f5:4a:a0:2a:52:b8:0d:54: 6e:c9:cb:e1:22:be:e6:a5:99:c9:1e:5d:d6:56:04: 9f:cf:45:1b:7b:17:cf:e3:c2:87:d6:29:e3:af:42: 3c:5d:e0:ef:4d:54:17:a4:e3:d7:5a:15:9c:49:97: 20:0c:54:b1:76:a4:3a:3d:b7:15:54:44:6e:07:f9: 3d:4f:30:bf:b4:6f:39:38:68:a6:98:99:be:77:91: be:f7:f4:4c:96:f9:5f:f4:6f:ea:13:ef:e9:d7:bb: 91:d2:85:ce:ae:48:11:36:22:90:47:53:21:06:bb: 10:e6:2f:46:f1:24:39:10:d3:7d:34:76:b5:4e:6a: 06:af:a4:80:71:f2:8d:2b:c2:ba:be:ad:24:17:a9: 99:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4B:FE:62:DC:2B:61:BE:0F:2A:DD:FF:DC:94:39:6C:52:27:BC:9A X509v3 Authority Key Identifier: keyid:CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:78:64:ca:8b:0f:1a:a2:9f:6e:61:0a:05:c4:80:5c:e0:e9: 77:55:dc:e5:50:5b:fd:65:70:15:af:89:bd:a0:f8:75:3d:77: f5:6d:c9:0d:bf:6c:49:cc:22:29:f8:8f:1a:09:91:58:56:20: cb:41:bd:ee:5f:6a:aa:81:87:25:f2:aa:51:68:26:81:bd:97: 40:b2:01:f2:3c:dd:f9:0c:48:f4:b6:0c:25:4b:4f:30:13:ac: 69:96:51:45:f8:32:62:a8:1a:e6:58:22:be:9b:18:fd:9e:08: cf:6d:ab:da:2d:75:56:a3:b2:d3:52:2f:4f:52:78:27:3c:65: 4d:96:58:38:90:42:7f:70:f4:0c:13:8b:70:cc:2e:15:ec:61: fd:be:38:45:bb:a6:f6:20:ee:0c:00:26:85:3d:88:f2:d8:de: 14:7f:98:8e:fa:d0:2d:bd:fb:fd:76:cb:c1:b0:46:2a:26:cc: c5:d8:58:32:8e:be:e2:d6:a5:d3:7a:7b:94:b8:6b:99:55:cb: 29:36:59:68:af:dd:46:a2:87:41:50:57:55:2a:e9:62:34:1f: a8:7e:5b:75:39:b1:05:df:6b:7b:5f:72:6b:b7:ca:7b:1c:6e: dc:0d:d4:bf:68:93:8d:54:00:c7:eb:1f:e2:20:e6:3b:39:a1: c2:66:62:31 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MjVDODExMC8GA1UEBRMoQ0Y2RjEyREJERTRCRTkxMzQ1ODE1OEY1Qzc3ODVDNzEy OTA4NTU1QzAeFw0yNTA3MDUwODMxMDVaFw0yNTA3MTIwODMxMDVaMBgxFjAUBgNV BAMTDTY4NjhlMmNhLTM4MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCX9zcKWBHFsfta5YXRF7OHZLPEGQ/4cVc3WhO7al14yjnJt5OPIT5Ks+Xo6uto klPtOMVEuJB28edn5RoiuK0hmg7vs/WFgJUPerHjhpEg//RtROaeb2FJJhxoDctf 3x3AtUZGsmlQw6S5/Skb7On1SqAqUrgNVG7Jy+EivualmckeXdZWBJ/PRRt7F8/j wofWKeOvQjxd4O9NVBek49daFZxJlyAMVLF2pDo9txVURG4H+T1PML+0bzk4aKaY mb53kb739EyW+V/0b+oT7+nXu5HShc6uSBE2IpBHUyEGuxDmL0bxJDkQ0300drVO agavpIBx8o0rwrq+rSQXqZl7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAEv+Ytwr Yb4PKt3/3JQ5bFInvJowHwYDVR0jBBgwFoAUz28S295L6RNFgVj1x3hccSkIVVww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyNUM4LzNCQ0QxQkVBNTU5 NTExRjBBOTM1RDIyRkM0RjlBRTAyL3oyOFMyOTVMNlJORmdWajF4M2hjY1NrSVZW dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvejI4UzI5NUw2Uk5GZ1ZqMXgzaGNjU2tJVlZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy NUM4LzNCQ0QxQkVBNTU5NTExRjBBOTM1RDIyRkM0RjlBRTAyL3oyOFMyOTVMNlJO RmdWajF4M2hjY1NrSVZWdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALF4ZMqLDxqin25hCgXEgFzg6XdV3OVQW/1lcBWvib2g+HU9d/VtyQ2/ bEnMIin4jxoJkVhWIMtBve5faqqBhyXyqlFoJoG9l0CyAfI83fkMSPS2DCVLTzAT rGmWUUX4MmKoGuZYIr6bGP2eCM9tq9otdVajstNSL09SeCc8ZU2WWDiQQn9w9AwT i3DMLhXsYf2+OEW7pvYg7gwAJoU9iPLY3hR/mI760C29+/12y8GwRiomzMXYWDKO vuLWpdN6e5S4a5lVyyk2WWiv3Uaih0FQV1Uq6WI0H6h+W3U5sQXfa3tfcmu3ynsc btwN1L9ok41UAMfrH+Ig5js5ocJmYjE= -----END CERTIFICATE-----Generated at Mon Jul 7 09:27:13 2025 by rpki-client