$ rpki-client -vvf rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft File: rdfp-5VrvujwEu3elUJI2bXWWMY.mft (raw, json) Hash identifier: /dUjHUX5Kea7HYpdoP+9O+a1P5HB/KX0LWQba+1wH8A= Subject key identifier: 3D:EA:A9:88:76:74:B5:EF:07:AB:F5:75:F5:9B:24:E8:3D:9E:7E:D7 Authority key identifier: AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6 Certificate issuer: /CN=A91330D0/serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6 Certificate serial: 082A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft Manifest number: 0822 Signing time: Sat 02 Aug 2025 21:09:57 +0000 Manifest this update: Sat 02 Aug 2025 21:09:57 +0000 Manifest next update: Sat 09 Aug 2025 21:09:57 +0000 Files and hashes: 1: rdfp-5VrvujwEu3elUJI2bXWWMY.crl (hash: L5lDhE81VvxJnqRsmUc/jZbvJbn3VvqZ3ZmsJR0Wjx0=) 2: A4711C4A23BA11EFA8BACF1BC4F9AE02.roa (hash: hbGM0H2MCBcXGdiy+u5XBSECyzJz0AJtwU9Q9LxYAHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 21:09:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2090 (0x82a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91330D0, serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6 Validity Not Before: Aug 2 21:09:57 2025 GMT Not After : Aug 9 21:09:57 2025 GMT Subject: CN=688e7ea5-b2b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3c:73:a2:54:dc:8b:de:e4:4e:76:b0:f5:20: f1:9e:c4:bf:0a:1b:14:96:01:fd:db:00:22:49:7f: 61:f9:31:bf:34:1a:4d:ad:aa:d0:13:a2:0a:8f:bf: fd:e1:5d:88:31:49:ee:5d:ae:5c:70:56:7e:4d:6f: e3:77:45:6d:31:86:ec:12:d0:33:4b:8a:98:c3:c2: 74:b8:4e:1e:63:ae:72:a1:78:6c:37:64:ef:3b:eb: 44:6d:2c:5b:20:dd:07:2d:6f:c9:75:42:7f:32:c9: 83:c5:34:ec:5b:6f:c6:ba:f5:bc:4f:c7:aa:86:d9: b0:6e:ce:30:1b:a7:56:e9:dc:0c:80:ae:2b:c0:10: d6:d4:25:ae:9b:2d:85:ca:35:2a:8e:43:6d:88:70: 89:5b:ae:e0:72:59:4a:86:7a:77:e5:1e:b2:38:83: 08:8f:86:ee:d5:1f:9e:b1:ed:0e:7f:91:7c:c5:ab: 1d:19:e8:96:4f:08:bc:bb:ba:25:3c:84:2e:a7:0f: db:4b:41:d9:06:82:10:4b:e8:cd:2a:ef:69:42:16: 0e:83:2d:f7:45:e2:19:44:88:1d:5b:1b:37:f0:9c: c1:68:c2:cc:c3:76:11:10:fd:75:5b:2d:52:4e:76: e4:fb:75:fd:ac:a2:6c:4e:99:34:8d:6f:a4:01:ce: cb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EA:A9:88:76:74:B5:EF:07:AB:F5:75:F5:9B:24:E8:3D:9E:7E:D7 X509v3 Authority Key Identifier: keyid:AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:66:f1:81:a9:7e:a1:63:d4:7f:a8:12:a1:41:a3:e3:d9:f5: 49:5c:04:79:37:b4:db:d0:3a:94:58:09:41:b4:a4:69:d6:82: 41:33:2c:cc:d1:0e:7b:ff:99:eb:05:fa:0f:c6:d8:b6:0c:c8: 4b:b1:93:32:16:2e:81:37:13:9a:08:0b:f8:b3:40:04:40:f8: 5b:6e:a9:7d:e0:1d:ac:fc:f8:05:14:ee:80:e3:b9:77:e4:5e: 57:58:33:1c:30:13:3b:7f:a2:07:ce:e2:23:20:d6:9e:fd:b1: 09:8f:85:4c:d5:81:18:84:87:45:57:cd:01:48:56:6f:a4:b3: 3e:2d:43:5d:f4:24:fa:d4:8f:09:85:d5:14:3b:d2:f6:f7:b7: a7:88:c1:2c:4b:9a:36:c5:95:64:43:ea:c8:34:54:db:aa:97: e1:f3:56:2f:d0:b8:c4:3b:7a:3b:d0:46:5e:4f:d4:93:ed:9a: f5:44:26:72:cb:12:8b:36:cc:9d:b2:0a:b1:e6:95:83:cc:a3: 7f:eb:1b:37:2d:de:75:79:8f:28:1c:47:4c:5a:94:1f:b6:5f: 9f:86:d5:cd:e1:c1:90:7b:d4:62:93:fe:72:02:2d:9b:24:a2: d4:a0:07:5d:c3:c8:aa:e1:91:6b:f5:0e:ec:57:26:85:e5:2e: c5:a0:c0:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMwRDAxMTAvBgNVBAUTKEFERDdFOUZCOTU2QkJFRThGMDEyRURERTk1NDI0OEQ5 QjVENjU4QzYwHhcNMjUwODAyMjEwOTU3WhcNMjUwODA5MjEwOTU3WjAYMRYwFAYD VQQDEw02ODhlN2VhNS1iMmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjxzolTci97kTnaw9SDxnsS/ChsUlgH92wAiSX9h+TG/NBpNrarQE6IKj7/9 4V2IMUnuXa5ccFZ+TW/jd0VtMYbsEtAzS4qYw8J0uE4eY65yoXhsN2TvO+tEbSxb IN0HLW/JdUJ/MsmDxTTsW2/GuvW8T8eqhtmwbs4wG6dW6dwMgK4rwBDW1CWumy2F yjUqjkNtiHCJW67gcllKhnp35R6yOIMIj4bu1R+ese0Of5F8xasdGeiWTwi8u7ol PIQupw/bS0HZBoIQS+jNKu9pQhYOgy33ReIZRIgdWxs38JzBaMLMw3YREP11Wy1S Tnbk+3X9rKJsTpk0jW+kAc7LdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3qqYh2 dLXvB6v1dfWbJOg9nn7XMB8GA1UdIwQYMBaAFK3X6fuVa77o8BLt3pVCSNm11ljG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzBEMC85ODc5OUM2Q0Uy MDcxMUVBQjhBMENCNjBDNEY5QUUwMi9yZGZwLTVWcnZ1andFdTNlbFVKSTJiWFdX TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkZnAtNVZydnVqd0V1M2VsVUpJMmJYV1dNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzBEMC85ODc5OUM2Q0UyMDcxMUVBQjhBMENCNjBDNEY5QUUwMi9yZGZwLTVWcnZ1 andFdTNlbFVKSTJiWFdXTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPZvGBqX6hY9R/qBKhQaPj2fVJXAR5N7Tb0DqUWAlBtKRp1oJBMyzM 0Q57/5nrBfoPxti2DMhLsZMyFi6BNxOaCAv4s0AEQPhbbql94B2s/PgFFO6A47l3 5F5XWDMcMBM7f6IHzuIjINae/bEJj4VM1YEYhIdFV80BSFZvpLM+LUNd9CT61I8J hdUUO9L297eniMEsS5o2xZVkQ+rINFTbqpfh81Yv0LjEO3o70EZeT9ST7Zr1RCZy yxKLNsydsgqx5pWDzKN/6xs3Ld51eY8oHEdMWpQftl+fhtXN4cGQe9Rik/5yAi2b JKLUoAddw8iq4ZFr9Q7sVyaF5S7FoMD2 -----END CERTIFICATE-----Generated at Mon Aug 4 16:02:15 2025 by rpki-client