$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft File: RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json) Hash identifier: Z5WZwrDKEtBpmXatutet7EW9az21AxNy/XZnfDZbuyE= Subject key identifier: D3:DC:4E:C8:94:5A:51:AF:47:BB:0A:1F:32:51:C7:90:13:E5:B9:F6 Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Certificate serial: 0B88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft Manifest number: 0B6B Signing time: Fri 18 Jul 2025 19:18:21 +0000 Manifest this update: Fri 18 Jul 2025 19:18:20 +0000 Manifest next update: Fri 25 Jul 2025 19:18:20 +0000 Files and hashes: 1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: QMt9QPgf+H7e8nZsxOjbkRqDa76qa4OY5fYHeToShRo=) 2: BFE21FE09B0511EDB2F0BD4EC4F9AE02.roa (hash: uxCtCSV+O4TDyj5SgoE3dM5DZOqE4xyThfn972D+Swk=) 3: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: ep/NR5+KsXHxM/fL5lTu5X9ahtnO2No4DOGzWzbPKmU=) 4: 3C726724C06211EC93514712C4F9AE02.roa (hash: XklDOLYMfLViKkHUeT6z/7hV3PEW4lkSoZ2mUu3ko0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2952 (0xb88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Validity Not Before: Jul 18 19:18:20 2025 GMT Not After : Jul 25 19:18:20 2025 GMT Subject: CN=687a9dfd-e954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d7:17:05:f4:d2:ff:44:32:a8:0f:79:e0:8d: 1f:65:34:72:ff:31:15:ee:68:b3:ce:62:0f:6f:8f: 5d:68:36:e8:1a:0b:ea:33:37:ef:a7:07:f4:05:1a: 4c:52:3f:25:0f:9e:ec:84:51:b8:da:64:69:a6:bb: 33:eb:ec:12:3e:e2:b9:0e:30:14:30:8e:05:10:0e: b2:c9:d9:9f:97:5f:45:6c:06:49:1e:f1:12:82:63: 2f:47:bb:65:03:33:d1:4d:73:05:e9:30:71:1f:bc: 84:4f:58:bb:6b:fa:af:44:4e:e1:b1:cc:a1:fc:36: fa:08:11:50:bb:01:73:0f:a8:fb:0d:5a:45:f4:e1: 72:f7:73:d7:d2:13:17:b3:81:04:e5:7c:cf:6f:50: 06:89:39:68:22:ab:4e:e9:22:44:97:68:c4:fc:b0: 42:ee:ec:b7:dc:f9:06:a2:d5:e3:c1:5a:ed:b3:20: d4:49:cb:8b:c4:30:23:2d:a6:81:dc:45:71:95:17: 75:d5:c0:3c:21:fb:66:3a:f5:7d:43:02:93:42:a6: f9:30:c1:5d:7b:2f:26:e7:82:28:13:ff:97:40:98: c0:4d:2f:e0:fe:03:c6:77:3c:42:7a:d3:4d:b0:e1: ed:81:fa:53:36:93:50:55:77:b7:b6:ae:26:16:19: 23:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DC:4E:C8:94:5A:51:AF:47:BB:0A:1F:32:51:C7:90:13:E5:B9:F6 X509v3 Authority Key Identifier: keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ee:68:ca:74:e6:f4:08:e5:d1:3c:1c:2a:1c:16:a9:ee:8d: 27:f4:7d:6e:17:78:97:75:02:e5:8c:b2:fb:4c:68:8b:b8:a9: 5b:77:35:1c:bf:49:e4:d2:e8:8c:6f:54:92:1d:06:2b:aa:67: e7:da:ea:0a:5a:70:0c:5d:5a:31:1c:ac:87:71:99:78:91:79: 55:ac:a0:5e:17:3e:d9:1f:5f:34:a1:89:66:75:14:fa:16:35: 4a:42:f3:6a:a2:37:3f:d8:66:ae:fc:0f:bd:42:69:b8:9c:c3: 8f:de:a8:fd:08:fb:21:45:21:eb:04:cf:ff:2c:da:f8:a4:44: 68:02:d8:c7:a3:4c:f8:3b:5f:8a:27:43:ab:7a:27:be:4c:7f: 07:8c:1f:47:9e:18:16:0b:40:49:4d:68:a8:f7:7a:25:24:a2: 95:8e:f2:7a:00:4c:6e:78:df:07:bf:36:39:5a:ec:c8:d4:3d: fd:5b:2d:d2:fd:28:83:ed:96:cb:2e:d2:98:60:65:32:70:ce: bb:8f:ec:ce:d2:bf:41:3c:34:7c:3a:cb:ee:3e:f6:95:37:e8: 5c:f3:6d:72:60:92:14:ef:a8:4f:f9:3a:2a:b9:cc:cc:e2:29: f1:f2:c0:87:91:e3:00:30:33:8a:bb:bd:9d:d3:88:76:89:e6: da:fe:0b:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF NkI3OTQwRDUwHhcNMjUwNzE4MTkxODIwWhcNMjUwNzI1MTkxODIwWjAYMRYwFAYD VQQDEw02ODdhOWRmZC1lOTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdcXBfTS/0QyqA954I0fZTRy/zEV7mizzmIPb49daDboGgvqMzfvpwf0BRpM Uj8lD57shFG42mRpprsz6+wSPuK5DjAUMI4FEA6yydmfl19FbAZJHvESgmMvR7tl AzPRTXMF6TBxH7yET1i7a/qvRE7hscyh/Db6CBFQuwFzD6j7DVpF9OFy93PX0hMX s4EE5XzPb1AGiTloIqtO6SJEl2jE/LBC7uy33PkGotXjwVrtsyDUScuLxDAjLaaB 3EVxlRd11cA8IftmOvV9QwKTQqb5MMFdey8m54IoE/+XQJjATS/g/gPGdzxCetNN sOHtgfpTNpNQVXe3tq4mFhkjPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPcTsiU WlGvR7sKHzJRx5AT5bn2MB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4 NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4QS8wOEM0MzkyNDM4NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9Z cnhFdHgydGZYZm5tdDVRTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/7mjKdOb0COXRPBwqHBap7o0n9H1uF3iXdQLljLL7TGiLuKlbdzUc v0nk0uiMb1SSHQYrqmfn2uoKWnAMXVoxHKyHcZl4kXlVrKBeFz7ZH180oYlmdRT6 FjVKQvNqojc/2Gau/A+9Qmm4nMOP3qj9CPshRSHrBM//LNr4pERoAtjHo0z4O1+K J0Oreie+TH8HjB9HnhgWC0BJTWio93olJKKVjvJ6AExueN8HvzY5WuzI1D39Wy3S /SiD7ZbLLtKYYGUycM67j+zO0r9BPDR8OsvuPvaVN+hc821yYJIU76hP+ToquczM 4inx8sCHkeMAMDOKu72d04h2ieba/guY -----END CERTIFICATE-----Generated at Sun Jul 20 10:34:27 2025 by rpki-client