$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft File: VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json) Hash identifier: stE3Y2gfTjqUMFwYdnGBvNDbDyPNUT59JQYRNGQY/a8= Subject key identifier: 1F:7A:76:D0:AF:47:47:06:B5:8E:DC:75:96:4F:B2:98:12:22:5B:19 Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Certificate serial: 0438 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft Manifest number: 0420 Signing time: Fri 13 Jun 2025 00:01:09 +0000 Manifest this update: Fri 13 Jun 2025 00:01:09 +0000 Manifest next update: Fri 20 Jun 2025 00:01:09 +0000 Files and hashes: 1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: qaE/EcbOAxwo/0UZKMTiRoOUJnD9+SBXwmf4NTI4yWk=) 2: 616435103F3E11EE81024074C4F9AE02.roa (hash: BV7IOs58jkocun9KOxJEZWid0CjNqRr4h3oLm+oM9XA=) 3: 168BE8747EEE11ECAB036C59C4F9AE02.roa (hash: ftvhnzXdw5KRVDKn9LZuR/Je36inLhxCbKOybLuc7M4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Validity Not Before: Jun 13 00:01:09 2025 GMT Not After : Jun 20 00:01:09 2025 GMT Subject: CN=684b6a45-556e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2d:5f:5a:5c:df:67:6a:5b:8f:01:0f:85:da: c4:77:d1:1f:36:50:fd:ac:65:88:1d:50:f6:8a:10: 21:47:9a:f5:8c:57:5e:df:24:0d:68:8c:d6:a3:c7: f5:18:69:49:88:c8:d1:75:ec:bb:20:cf:71:85:67: 17:45:40:8a:47:b2:bd:7a:f0:5a:4c:ab:c2:fe:28: 89:88:c2:3c:50:7a:6f:85:c9:ee:6c:f4:b9:e1:e3: eb:92:93:ec:3e:31:98:e8:06:3f:29:d7:91:0a:86: a0:e1:eb:b3:66:f6:b6:49:c0:55:cf:0d:e6:bc:2a: 75:3d:c8:06:86:a5:33:04:44:4b:9e:30:f5:bb:97: 86:2e:75:c9:7b:a1:02:57:12:ab:b5:fb:df:ef:52: c1:d1:a4:41:cf:be:31:4c:73:c2:bb:3b:4a:e6:d9: 58:9c:4b:e3:75:e6:01:3f:bd:5f:10:16:d0:8e:f6: b6:a9:da:7a:c5:5a:48:01:fd:01:c9:93:89:33:7f: 3d:de:b4:14:66:64:f6:37:fc:7a:2d:49:5f:cf:d6: 1c:f1:d6:b8:51:38:4e:90:ce:36:8c:0c:b9:24:e4: f3:b6:8f:e1:e4:c0:d4:a1:d6:ce:2e:94:48:1f:77: 73:0d:a9:58:10:14:c4:85:95:2f:f1:87:3a:e7:a3: 34:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7A:76:D0:AF:47:47:06:B5:8E:DC:75:96:4F:B2:98:12:22:5B:19 X509v3 Authority Key Identifier: keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:d7:da:9d:12:a0:78:42:82:aa:5a:a7:39:67:da:a3:5a:08: cd:a5:ee:82:a7:7e:a0:2b:c0:db:2a:b1:6e:cd:53:34:ca:75: b3:5a:04:73:c3:72:63:bd:31:1c:e6:61:3e:c1:81:34:a4:1b: 97:0e:ef:ca:1f:4f:4b:d6:ea:3a:34:42:8e:eb:2d:16:b4:e0: b1:51:0a:69:eb:57:52:76:ee:14:a8:4a:a6:74:2d:d1:0d:7d: 26:53:25:85:87:ee:86:b9:e0:f0:c0:15:b8:e0:65:f9:94:f1: ee:38:4f:f5:3f:4c:2d:82:1d:29:10:ea:e7:33:b1:9a:84:59: ca:25:93:82:27:2c:48:ec:0c:45:21:b7:84:35:14:a6:0d:c1: 7e:08:6f:0e:47:b2:19:ff:76:91:02:83:d3:58:75:0b:d2:28: 07:5a:a5:b1:b4:98:06:19:a6:96:d4:06:d7:d5:7c:c1:c3:13: 72:ad:d9:c1:46:d9:63:ed:31:58:32:80:c1:ac:eb:f9:32:6a: 00:8f:38:f2:28:1d:e3:56:fb:27:18:ca:9e:3b:45:7c:2b:72: 4f:14:44:ee:0b:71:aa:48:31:58:12:47:e7:74:3b:1f:ea:a0: 20:04:8d:83:a2:a6:52:cf:2b:2a:61:ee:10:f6:13:80:cf:7b: e4:ed:25:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBRDQxMTAvBgNVBAUTKDU0MzBBNDE0QUEwNUI2NzMxREMyRDY0QTcwQzYxOUM2 NjkzNDZBMEUwHhcNMjUwNjEzMDAwMTA5WhcNMjUwNjIwMDAwMTA5WjAYMRYwFAYD VQQDEw02ODRiNmE0NS01NTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyS1fWlzfZ2pbjwEPhdrEd9EfNlD9rGWIHVD2ihAhR5r1jFde3yQNaIzWo8f1 GGlJiMjRdey7IM9xhWcXRUCKR7K9evBaTKvC/iiJiMI8UHpvhcnubPS54ePrkpPs PjGY6AY/KdeRCoag4euzZva2ScBVzw3mvCp1PcgGhqUzBERLnjD1u5eGLnXJe6EC VxKrtfvf71LB0aRBz74xTHPCuztK5tlYnEvjdeYBP71fEBbQjva2qdp6xVpIAf0B yZOJM3893rQUZmT2N/x6LUlfz9Yc8da4UThOkM42jAy5JOTzto/h5MDUodbOLpRI H3dzDalYEBTEhZUv8Yc656M0oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB96dtCv R0cGtY7cdZZPspgSIlsZMB8GA1UdIwQYMBaAFFQwpBSqBbZzHcLWSnDGGcZpNGoO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DNDIzMTgzMDc3 QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRuTWR3dFpLY01ZWnhtazBh ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZEQ2tGS29GdG5NZHd0WktjTVlaeG1rMGFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REFENC9DNDIzMTgzMDc3QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRu TWR3dFpLY01ZWnhtazBhZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC419qdEqB4QoKqWqc5Z9qjWgjNpe6Cp36gK8DbKrFuzVM0ynWzWgRz w3JjvTEc5mE+wYE0pBuXDu/KH09L1uo6NEKO6y0WtOCxUQpp61dSdu4UqEqmdC3R DX0mUyWFh+6GueDwwBW44GX5lPHuOE/1P0wtgh0pEOrnM7GahFnKJZOCJyxI7AxF IbeENRSmDcF+CG8OR7IZ/3aRAoPTWHUL0igHWqWxtJgGGaaW1AbX1XzBwxNyrdnB Rtlj7TFYMoDBrOv5MmoAjzjyKB3jVvsnGMqeO0V8K3JPFETuC3GqSDFYEkfndDsf 6qAgBI2DoqZSzysqYe4Q9hOAz3vk7SVA -----END CERTIFICATE-----Generated at Sat Jun 14 18:47:36 2025 by rpki-client