$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft File: RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json) Hash identifier: J4Hzgi+8vOD2XOd30cOCXr7na987GBT967Rz8jVs480= Subject key identifier: 2B:92:0B:63:30:D6:E4:B8:73:83:83:32:92:42:19:E3:72:B5:C6:FF Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Certificate serial: 0B77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft Manifest number: 0B5A Signing time: Sat 14 Jun 2025 18:59:36 +0000 Manifest this update: Sat 14 Jun 2025 18:59:35 +0000 Manifest next update: Sat 21 Jun 2025 18:59:35 +0000 Files and hashes: 1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: 0Afp9Uu7Z/c6y3vpbW4BOah1qr+8pLwMan0XQsmS+lI=) 2: BFE21FE09B0511EDB2F0BD4EC4F9AE02.roa (hash: uxCtCSV+O4TDyj5SgoE3dM5DZOqE4xyThfn972D+Swk=) 3: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: ep/NR5+KsXHxM/fL5lTu5X9ahtnO2No4DOGzWzbPKmU=) 4: 3C726724C06211EC93514712C4F9AE02.roa (hash: XklDOLYMfLViKkHUeT6z/7hV3PEW4lkSoZ2mUu3ko0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2935 (0xb77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Validity Not Before: Jun 14 18:59:35 2025 GMT Not After : Jun 21 18:59:35 2025 GMT Subject: CN=684dc698-b2ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:da:8c:cc:82:d0:70:a2:83:57:5d:62:6c:b9: 22:b7:47:43:88:41:b0:c5:97:8e:32:ed:e5:b8:40: a1:55:2d:16:04:0d:1c:14:e4:7f:bb:70:16:02:fe: c6:53:04:14:cd:a0:98:8c:47:6f:3e:41:78:22:cc: e0:0f:66:b7:24:29:3e:35:28:36:1f:2a:a1:c5:a2: 34:a9:24:07:18:74:bd:e3:07:ea:dc:28:ad:ae:d4: 88:40:09:3c:d0:b3:72:c1:3d:b2:6d:2d:af:b4:95: fc:a7:0f:5e:18:e9:47:f7:6a:93:48:33:0a:61:9f: 4e:7d:96:77:26:b1:57:1c:67:f4:c5:48:d9:a5:d6: 46:89:3f:59:32:ab:6d:ef:9f:8e:54:51:7f:f3:4b: 69:ed:9a:ee:64:87:b4:91:e6:70:bd:10:ec:75:a1: fc:72:ba:24:ef:3b:6d:a0:54:bf:59:ad:55:9c:b1: ac:6f:d9:ba:fa:fb:20:9c:44:0b:2f:0e:b1:a6:13: 05:5f:f8:b6:f5:f6:f5:ac:f1:aa:7a:4e:8d:38:8d: 6f:f7:a1:13:81:3b:05:6b:2d:36:ec:d0:0d:c2:93: 20:da:fb:1e:23:c2:65:8c:a3:15:a8:e1:c0:3a:ab: 5a:da:eb:a1:65:6f:41:ad:f8:8a:92:e4:74:70:74: 14:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:92:0B:63:30:D6:E4:B8:73:83:83:32:92:42:19:E3:72:B5:C6:FF X509v3 Authority Key Identifier: keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a3:1e:05:36:54:f7:3d:b7:e3:04:92:f0:b1:3a:ae:64:e1: 05:2a:a9:4a:92:31:2d:9c:29:35:fd:31:4c:34:91:ae:1f:3f: 43:32:39:57:5d:28:68:59:87:78:0a:24:08:35:79:09:cc:90: d4:e1:ec:b9:ff:26:57:24:fe:e8:d5:35:38:79:2f:64:0c:4e: 2e:8c:4f:16:b8:15:8b:75:9d:08:f9:a0:0a:ec:dd:17:ac:97: 80:73:d0:8f:4a:7e:c0:bb:4a:95:9f:c7:95:bb:56:37:dd:3e: 6e:17:ca:11:d3:7d:c3:d3:da:a5:a3:bc:13:64:6b:9c:cc:e5: f4:37:d6:86:68:d1:96:7b:b5:b6:f3:4e:1b:bd:55:45:c8:f3: 4d:1a:cb:5f:89:1c:55:f5:84:a7:77:ba:33:77:3e:03:6c:a8: a2:19:75:3a:df:f4:2e:83:9a:c8:ec:dc:5e:e8:f0:40:e7:4e: 62:84:c2:52:56:1d:32:65:a7:43:ac:b1:e6:1d:ef:98:ba:39: 0e:66:82:9f:76:fb:74:5e:97:2e:c4:65:4e:58:40:2d:73:84: 74:11:f3:73:8c:55:75:d6:51:df:82:26:87:4e:c7:9f:90:28: 8a:73:9b:7c:5c:ee:81:32:d2:eb:d8:47:b6:dd:9e:e7:6e:79: b9:37:2b:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF NkI3OTQwRDUwHhcNMjUwNjE0MTg1OTM1WhcNMjUwNjIxMTg1OTM1WjAYMRYwFAYD VQQDEw02ODRkYzY5OC1iMmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dqMzILQcKKDV11ibLkit0dDiEGwxZeOMu3luEChVS0WBA0cFOR/u3AWAv7G UwQUzaCYjEdvPkF4IszgD2a3JCk+NSg2HyqhxaI0qSQHGHS94wfq3CitrtSIQAk8 0LNywT2ybS2vtJX8pw9eGOlH92qTSDMKYZ9OfZZ3JrFXHGf0xUjZpdZGiT9ZMqtt 75+OVFF/80tp7ZruZIe0keZwvRDsdaH8crok7zttoFS/Wa1VnLGsb9m6+vsgnEQL Lw6xphMFX/i29fb1rPGqek6NOI1v96ETgTsFay027NANwpMg2vseI8JljKMVqOHA Oqta2uuhZW9BrfiKkuR0cHQUIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuSC2Mw 1uS4c4ODMpJCGeNytcb/MB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4 NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4QS8wOEM0MzkyNDM4NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9Z cnhFdHgydGZYZm5tdDVRTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALox4FNlT3PbfjBJLwsTquZOEFKqlKkjEtnCk1/TFMNJGuHz9DMjlX XShoWYd4CiQINXkJzJDU4ey5/yZXJP7o1TU4eS9kDE4ujE8WuBWLdZ0I+aAK7N0X rJeAc9CPSn7Au0qVn8eVu1Y33T5uF8oR033D09qlo7wTZGuczOX0N9aGaNGWe7W2 804bvVVFyPNNGstfiRxV9YSnd7ozdz4DbKiiGXU63/Qug5rI7Nxe6PBA505ihMJS Vh0yZadDrLHmHe+YujkOZoKfdvt0XpcuxGVOWEAtc4R0EfNzjFV11lHfgiaHTsef kCiKc5t8XO6BMtLr2Ee23Z7nbnm5NyuD -----END CERTIFICATE-----Generated at Sun Jun 15 07:03:11 2025 by rpki-client