$ rpki-client -vvf rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft File: 28ptKqUoxLJFVtsH_LVpw2rC_rE.mft (raw, json) Hash identifier: poIq8ZwpBkNDDMgN01IFk7K8MCIBlacTSeXDCBD1WBg= Subject key identifier: 5F:FC:BB:ED:51:61:65:06:9F:F7:66:79:2E:27:53:5C:90:CB:C5:2F Authority key identifier: DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1 Certificate issuer: /CN=A918C477/serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1 Certificate serial: 02CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft Manifest number: 02CA Signing time: Mon 03 Nov 2025 01:19:53 +0000 Manifest this update: Mon 03 Nov 2025 01:19:53 +0000 Manifest next update: Mon 10 Nov 2025 01:19:53 +0000 Files and hashes: 1: 28ptKqUoxLJFVtsH_LVpw2rC_rE.crl (hash: gst0rSDk4nVFlrl9TH5bBY685L8DdcrXwG27tl59wOo=) 2: FB2262620C3111EDBD0F7137C4F9AE02.roa (hash: gKrsb4dZgy0MTcPqjVyZ2IoWxdZknG0vr+R6U+hRwFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 718 (0x2ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C477, serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1 Validity Not Before: Nov 3 01:19:53 2025 GMT Not After : Nov 10 01:19:53 2025 GMT Subject: CN=69080339-779f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cb:bb:d5:4c:e0:b8:62:52:4a:74:92:a9:5b: f7:1b:1d:15:51:37:66:d2:f3:bb:5a:4d:ed:52:2f: 55:33:c1:04:c7:71:ce:e8:fd:01:85:d4:79:03:98: cf:9f:a9:3b:23:7a:7e:6e:0d:32:31:87:c2:fe:36: 10:1c:33:27:41:34:a8:0a:18:d6:b1:1a:e0:26:5c: 10:5f:ac:29:1b:ff:dd:ab:c5:b9:74:f2:db:6e:9c: 37:56:b2:55:5c:76:40:ed:60:39:f2:ab:3a:6d:69: a6:2f:ef:22:36:7c:8e:da:2e:50:c7:e9:71:da:61: 8c:d0:7c:80:ae:b5:51:ed:a0:85:ee:59:14:aa:ac: cf:94:4b:73:ae:37:c7:07:f9:22:58:51:41:c3:ad: 70:39:93:29:56:ca:e8:fd:1f:3a:e3:a6:d0:a9:31: f8:1b:36:a3:50:2c:e2:10:fb:f1:b8:a1:4b:52:1e: 6f:db:4e:9b:af:f5:fc:20:ec:84:95:4b:9e:83:bd: a5:5e:ed:75:35:c4:f6:3a:9e:59:89:dd:93:43:cc: 87:b3:de:ea:93:8e:a8:3f:31:a4:32:e2:ab:26:df: 9b:f1:32:89:3e:54:87:b8:95:43:fc:ab:45:35:01: b6:ff:36:38:6a:b5:66:29:27:1a:a5:16:c7:96:2e: a3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FC:BB:ED:51:61:65:06:9F:F7:66:79:2E:27:53:5C:90:CB:C5:2F X509v3 Authority Key Identifier: keyid:DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:ef:74:a9:7c:55:c8:5b:d3:ae:19:00:c2:69:33:16:3e:c4: bc:fb:3f:5f:41:c9:25:29:9f:61:f7:ec:4b:da:91:71:10:4e: fc:5e:4f:39:66:d4:bd:b1:65:c6:80:c2:10:59:a1:c2:88:df: d3:62:94:a8:f8:48:c2:e1:53:ba:c6:de:49:0d:44:29:21:ec: 95:15:a4:4d:5b:e4:b2:ba:08:ac:85:6e:6a:6c:aa:f0:61:34: a8:96:9d:c0:c8:98:c2:7c:46:cb:e9:21:8a:4b:98:26:82:c8: cf:5c:d0:18:f8:1a:4a:75:22:a0:6f:3a:37:a3:8d:ca:35:62: 05:4f:ad:1f:ab:58:e2:17:52:49:34:64:5c:b6:2d:53:73:dd: b2:9d:38:73:83:43:cd:50:54:41:26:0e:e0:1b:bd:0f:f0:a8: a3:07:db:32:d9:c2:b5:71:37:a9:46:be:f2:a0:d7:f5:82:c9: b7:c6:dd:3b:73:45:aa:c8:b0:49:a2:30:47:e8:19:fc:ab:fa: 95:91:1d:b3:b3:08:e2:ae:90:d7:f3:23:01:03:81:1d:c8:24: f4:f8:30:28:d7:fa:a4:1c:1d:ce:1d:0a:d9:c1:04:9a:96:b4: e0:a3:e4:41:03:e5:a9:cb:48:67:66:2a:ea:46:4d:ab:25:d3: c9:cb:48:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM0NzcxMTAvBgNVBAUTKERCQ0E2RDJBQTUyOEM0QjI0NTU2REIwN0ZDQjU2OUMz NkFDMkZFQjEwHhcNMjUxMTAzMDExOTUzWhcNMjUxMTEwMDExOTUzWjAYMRYwFAYD VQQDEw02OTA4MDMzOS03NzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusu71UzguGJSSnSSqVv3Gx0VUTdm0vO7Wk3tUi9VM8EEx3HO6P0BhdR5A5jP n6k7I3p+bg0yMYfC/jYQHDMnQTSoChjWsRrgJlwQX6wpG//dq8W5dPLbbpw3VrJV XHZA7WA58qs6bWmmL+8iNnyO2i5Qx+lx2mGM0HyArrVR7aCF7lkUqqzPlEtzrjfH B/kiWFFBw61wOZMpVsro/R8646bQqTH4GzajUCziEPvxuKFLUh5v206br/X8IOyE lUueg72lXu11NcT2Op5Zid2TQ8yHs97qk46oPzGkMuKrJt+b8TKJPlSHuJVD/KtF NQG2/zY4arVmKScapRbHli6j3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/8u+1R YWUGn/dmeS4nU1yQy8UvMB8GA1UdIwQYMBaAFNvKbSqlKMSyRVbbB/y1acNqwv6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzQ3Ny9ENTVGMjlGNDBD MkYxMUVEQkMyM0JCMzZDNEY5QUUwMi8yOHB0S3FVb3hMSkZWdHNIX0xWcHcyckNf ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI4cHRLcVVveExKRlZ0c0hfTFZwdzJyQ19yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzQ3Ny9ENTVGMjlGNDBDMkYxMUVEQkMyM0JCMzZDNEY5QUUwMi8yOHB0S3FVb3hM SkZWdHNIX0xWcHcyckNfckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA173SpfFXIW9OuGQDCaTMWPsS8+z9fQcklKZ9h9+xL2pFxEE78Xk85 ZtS9sWXGgMIQWaHCiN/TYpSo+EjC4VO6xt5JDUQpIeyVFaRNW+SyugishW5qbKrw YTSolp3AyJjCfEbL6SGKS5gmgsjPXNAY+BpKdSKgbzo3o43KNWIFT60fq1jiF1JJ NGRcti1Tc92ynThzg0PNUFRBJg7gG70P8KijB9sy2cK1cTepRr7yoNf1gsm3xt07 c0WqyLBJojBH6Bn8q/qVkR2zswjirpDX8yMBA4EdyCT0+DAo1/qkHB3OHQrZwQSa lrTgo+RBA+Wpy0hnZirqRk2rJdPJy0i0 -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:04 2025 by rpki-client