$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft File: VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json) Hash identifier: JO6mD8bjdb7utUVk/wHBhBAeVBMAXJceNH6MwMHIukY= Subject key identifier: 26:AD:59:8D:72:5F:5F:58:2A:47:1C:23:31:99:92:E4:D5:09:8F:DD Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Certificate serial: 0457 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft Manifest number: 043E Signing time: Thu 07 Aug 2025 00:54:36 +0000 Manifest this update: Thu 07 Aug 2025 00:54:36 +0000 Manifest next update: Thu 14 Aug 2025 00:54:36 +0000 Files and hashes: 1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: jbV7oqpyq0C/hslPWFBKFucSbYxdCRyvVNFyV0ivrYo=) 2: 616435103F3E11EE81024074C4F9AE02.roa (hash: BV7IOs58jkocun9KOxJEZWid0CjNqRr4h3oLm+oM9XA=) 3: 168BE8747EEE11ECAB036C59C4F9AE02.roa (hash: wF1Z2aa2PTEiRRPCp23vYrxyf7/d64gIm78PkkwoFEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 00:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1111 (0x457) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Validity Not Before: Aug 7 00:54:36 2025 GMT Not After : Aug 14 00:54:36 2025 GMT Subject: CN=6893f94c-1f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c0:97:05:09:d4:26:cb:76:10:a1:eb:c4:fd: 6b:6e:7b:dd:f5:61:c0:48:6a:96:06:3c:b0:49:a2: 8f:dd:a7:d5:36:60:ce:f5:b5:df:6b:34:2e:bf:4c: 6a:b0:b5:08:ba:39:61:e2:76:09:7b:49:df:1d:f3: 7b:e8:78:fa:04:e8:93:8f:34:54:5d:b9:f2:30:d2: 1e:de:c8:23:d9:4f:44:4f:c9:a7:dc:6b:9e:b9:24: ce:2e:90:50:61:a7:54:01:b3:6c:df:4c:ab:1c:9f: e0:bc:d7:25:fb:29:8d:b8:61:1f:71:3c:07:2b:6f: 6b:ed:e9:0d:97:7c:65:1f:08:1b:18:e5:57:61:19: 9b:ae:43:b1:cc:8a:1a:75:cc:92:ea:df:24:0f:34: 5f:f3:b6:88:0c:c1:30:66:b9:5d:fe:6e:b0:8d:85: dd:aa:93:9f:10:97:e6:67:de:7d:be:aa:77:4d:75: 32:65:46:8b:af:2f:26:a6:94:b4:eb:dc:b5:b8:92: c6:a0:be:40:e4:f4:88:ea:d8:d8:3c:85:2e:dd:52: 14:07:6d:b3:82:df:49:ae:c0:f6:ad:40:8b:13:78: 19:7a:89:e8:09:f1:b6:c7:e6:82:76:1d:ec:4f:54: 5e:eb:51:07:78:7d:86:b2:f0:02:d1:07:9a:32:82: e3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AD:59:8D:72:5F:5F:58:2A:47:1C:23:31:99:92:E4:D5:09:8F:DD X509v3 Authority Key Identifier: keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:cb:d4:5c:24:c4:cc:61:30:bb:2a:0a:fe:6d:f1:87:f9:aa: 48:c0:64:3f:ed:9f:5b:34:ef:b1:a8:1d:08:a3:46:b9:e0:e9: 41:60:c8:83:c1:a4:03:dc:ec:df:3d:c1:44:f2:92:eb:3e:6c: fd:6d:8a:0d:ca:0b:7c:3d:9a:d0:3f:24:2b:ad:2d:16:9b:a7: ec:d2:e9:e7:dd:39:b9:34:44:08:07:d4:9b:d5:07:0b:e5:7e: 54:a4:c8:7a:a3:e4:57:50:e9:0e:8d:63:99:a8:58:e0:bf:cb: 8b:3c:1d:46:f2:52:ff:5d:ff:d6:0d:23:05:32:54:ec:8c:8e: 2d:8b:83:1d:7a:2c:89:de:99:c8:6e:34:51:a2:73:c1:fc:e1: b0:ed:67:9f:e5:d0:36:13:1c:e3:a7:2f:54:b2:6d:3e:36:e5: 38:16:86:82:10:4c:8b:8d:95:bd:2a:35:6b:24:08:8e:93:67: b7:7c:d0:7d:53:07:6f:48:1c:5b:3c:2c:df:de:60:4f:fc:ab: 69:e0:ec:b5:1b:3d:c5:5c:9c:ce:86:53:6d:46:ee:36:3a:9b: 7b:d9:0d:94:52:fc:90:6a:7c:43:6c:ff:b7:e2:60:49:d7:29: 3a:d2:36:1b:34:d4:c7:ab:68:8c:d0:1d:9b:11:fe:b5:8b:94: 92:3c:f4:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBRDQxMTAvBgNVBAUTKDU0MzBBNDE0QUEwNUI2NzMxREMyRDY0QTcwQzYxOUM2 NjkzNDZBMEUwHhcNMjUwODA3MDA1NDM2WhcNMjUwODE0MDA1NDM2WjAYMRYwFAYD VQQDEw02ODkzZjk0Yy0xZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsCXBQnUJst2EKHrxP1rbnvd9WHASGqWBjywSaKP3afVNmDO9bXfazQuv0xq sLUIujlh4nYJe0nfHfN76Hj6BOiTjzRUXbnyMNIe3sgj2U9ET8mn3GueuSTOLpBQ YadUAbNs30yrHJ/gvNcl+ymNuGEfcTwHK29r7ekNl3xlHwgbGOVXYRmbrkOxzIoa dcyS6t8kDzRf87aIDMEwZrld/m6wjYXdqpOfEJfmZ959vqp3TXUyZUaLry8mppS0 69y1uJLGoL5A5PSI6tjYPIUu3VIUB22zgt9JrsD2rUCLE3gZeonoCfG2x+aCdh3s T1Re61EHeH2GsvAC0QeaMoLj2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCatWY1y X19YKkccIzGZkuTVCY/dMB8GA1UdIwQYMBaAFFQwpBSqBbZzHcLWSnDGGcZpNGoO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DNDIzMTgzMDc3 QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRuTWR3dFpLY01ZWnhtazBh ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZEQ2tGS29GdG5NZHd0WktjTVlaeG1rMGFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REFENC9DNDIzMTgzMDc3QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRu TWR3dFpLY01ZWnhtazBhZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1y9RcJMTMYTC7Kgr+bfGH+apIwGQ/7Z9bNO+xqB0Io0a54OlBYMiD waQD3OzfPcFE8pLrPmz9bYoNygt8PZrQPyQrrS0Wm6fs0unn3Tm5NEQIB9Sb1QcL 5X5UpMh6o+RXUOkOjWOZqFjgv8uLPB1G8lL/Xf/WDSMFMlTsjI4ti4MdeiyJ3pnI bjRRonPB/OGw7Wef5dA2Exzjpy9Usm0+NuU4FoaCEEyLjZW9KjVrJAiOk2e3fNB9 UwdvSBxbPCzf3mBP/Ktp4Oy1Gz3FXJzOhlNtRu42Opt72Q2UUvyQanxDbP+34mBJ 1yk60jYbNNTHq2iM0B2bEf61i5SSPPS3 -----END CERTIFICATE-----Generated at Thu Aug 7 23:57:00 2025 by rpki-client