$ rpki-client -vvf rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft File: rdfp-5VrvujwEu3elUJI2bXWWMY.mft (raw, json) Hash identifier: 1fRCe5C6561JCG5JaByYOFcbj5vLB7wv1nT5GpfXedg= Subject key identifier: ED:B8:46:1C:9B:3B:A1:B6:14:B0:A9:BA:6E:72:B4:DB:8C:C2:CB:62 Authority key identifier: AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6 Certificate issuer: /CN=A91330D0/serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6 Certificate serial: 07F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft Manifest number: 07F0 Signing time: Thu 24 Apr 2025 20:48:53 +0000 Manifest this update: Thu 24 Apr 2025 20:48:52 +0000 Manifest next update: Thu 01 May 2025 20:48:52 +0000 Files and hashes: 1: rdfp-5VrvujwEu3elUJI2bXWWMY.crl (hash: 5EfEy5tWvd95rez4oc7K4CWLeYpB5Iev3tbACgRaKE4=) 2: A4711C4A23BA11EFA8BACF1BC4F9AE02.roa (hash: hbGM0H2MCBcXGdiy+u5XBSECyzJz0AJtwU9Q9LxYAHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2040 (0x7f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91330D0, serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6 Validity Not Before: Apr 24 20:48:52 2025 GMT Not After : May 1 20:48:52 2025 GMT Subject: CN=680aa3b4-0fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:61:12:7c:92:bc:a2:03:8e:08:22:59:a0:76: c9:91:9e:3f:8c:95:42:25:27:47:a9:58:52:af:38: 1c:dd:bd:ae:12:f4:29:1b:00:43:c0:ec:44:f1:64: 72:27:0e:d3:fd:56:df:49:12:65:00:f6:50:21:bb: 38:72:48:04:39:de:ac:0a:78:96:d9:53:7e:46:08: 56:1a:57:53:63:f3:4c:33:f7:69:27:47:5e:c1:fd: 61:cc:82:c6:d6:d9:73:43:58:47:3a:13:ac:bf:9c: ad:fd:3f:b6:3c:05:d8:de:3d:a3:24:f9:a2:34:77: e7:2e:06:49:b1:71:bf:e2:5d:ad:1c:4c:65:bb:02: 48:dc:48:09:46:7d:84:cb:82:88:9c:32:7b:d4:35: f1:eb:7d:d6:ee:bf:38:68:0a:20:7d:6f:79:69:f6: d5:03:7e:f4:d4:c3:cd:32:a4:20:13:65:03:55:77: 85:d9:1d:c7:c8:08:a8:fa:ae:dd:3b:59:ff:97:05: d3:e1:1e:da:54:96:61:a2:58:ba:05:f6:d9:41:08: 44:ed:08:2e:01:5e:1b:39:fa:6f:d1:ea:0d:a5:a7: 51:75:9e:d1:26:77:c3:c2:1f:ee:23:52:7a:cc:b3: 96:1d:0b:51:6e:b2:41:d3:9e:a3:40:85:ad:7e:76: 15:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B8:46:1C:9B:3B:A1:B6:14:B0:A9:BA:6E:72:B4:DB:8C:C2:CB:62 X509v3 Authority Key Identifier: keyid:AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:8d:c1:60:db:f3:1e:53:52:13:48:d0:45:cd:89:4a:39:4d: 6e:13:d6:64:44:01:77:13:00:72:5e:3e:b7:85:31:c2:71:5a: 15:ef:0e:19:d0:f9:73:c0:38:19:c5:05:40:60:0a:29:c2:e0: 27:53:2d:99:e6:af:70:b8:ed:b2:31:d0:e9:45:12:ee:1c:ee: 44:5b:f9:b1:e9:dc:cd:62:6d:08:d2:0c:7c:1c:02:26:83:19: fd:82:31:1f:a6:3b:16:18:ab:da:f0:30:d8:b9:7c:6a:0c:98: e5:61:72:57:b0:85:1f:d7:e4:9d:71:76:98:cf:37:36:a0:fd: 2e:c3:16:ce:40:eb:2c:5e:38:56:e0:09:ae:96:66:29:d6:77: bc:08:44:72:df:ba:ff:4f:98:93:54:b5:7c:0d:76:64:82:42: f4:73:0c:f4:ed:69:06:aa:07:08:45:ed:4e:ef:c0:3e:5a:97: ef:7a:56:2e:8a:32:52:11:91:59:ba:f6:00:e0:63:6d:9f:5a: 05:ad:3d:d1:cd:e7:8a:8c:71:46:ed:d0:95:a1:83:e2:f6:87: d4:e6:26:73:d8:ba:4f:0a:e4:b3:ba:6a:59:53:32:46:f7:7b: f5:5f:af:a7:a7:ed:4e:1a:7e:77:13:5d:fe:c4:53:02:02:52: 7a:1e:fd:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMwRDAxMTAvBgNVBAUTKEFERDdFOUZCOTU2QkJFRThGMDEyRURERTk1NDI0OEQ5 QjVENjU4QzYwHhcNMjUwNDI0MjA0ODUyWhcNMjUwNTAxMjA0ODUyWjAYMRYwFAYD VQQDEw02ODBhYTNiNC0wZmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3WESfJK8ogOOCCJZoHbJkZ4/jJVCJSdHqVhSrzgc3b2uEvQpGwBDwOxE8WRy Jw7T/VbfSRJlAPZQIbs4ckgEOd6sCniW2VN+RghWGldTY/NMM/dpJ0dewf1hzILG 1tlzQ1hHOhOsv5yt/T+2PAXY3j2jJPmiNHfnLgZJsXG/4l2tHExluwJI3EgJRn2E y4KInDJ71DXx633W7r84aAogfW95afbVA3701MPNMqQgE2UDVXeF2R3HyAio+q7d O1n/lwXT4R7aVJZholi6BfbZQQhE7QguAV4bOfpv0eoNpadRdZ7RJnfDwh/uI1J6 zLOWHQtRbrJB056jQIWtfnYVqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO24Rhyb O6G2FLCpum5ytNuMwstiMB8GA1UdIwQYMBaAFK3X6fuVa77o8BLt3pVCSNm11ljG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzBEMC85ODc5OUM2Q0Uy MDcxMUVBQjhBMENCNjBDNEY5QUUwMi9yZGZwLTVWcnZ1andFdTNlbFVKSTJiWFdX TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkZnAtNVZydnVqd0V1M2VsVUpJMmJYV1dNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzBEMC85ODc5OUM2Q0UyMDcxMUVBQjhBMENCNjBDNEY5QUUwMi9yZGZwLTVWcnZ1 andFdTNlbFVKSTJiWFdXTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhjcFg2/MeU1ITSNBFzYlKOU1uE9ZkRAF3EwByXj63hTHCcVoV7w4Z 0PlzwDgZxQVAYAopwuAnUy2Z5q9wuO2yMdDpRRLuHO5EW/mx6dzNYm0I0gx8HAIm gxn9gjEfpjsWGKva8DDYuXxqDJjlYXJXsIUf1+SdcXaYzzc2oP0uwxbOQOssXjhW 4AmulmYp1ne8CERy37r/T5iTVLV8DXZkgkL0cwz07WkGqgcIRe1O78A+WpfvelYu ijJSEZFZuvYA4GNtn1oFrT3RzeeKjHFG7dCVoYPi9ofU5iZz2LpPCuSzumpZUzJG 93v1X6+np+1OGn53E13+xFMCAlJ6Hv2t -----END CERTIFICATE-----Generated at Sat Apr 26 05:10:51 2025 by rpki-client