$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft File: VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json) Hash identifier: 3jTZVst+ztGS8EaqAhaAcllfhI6Q9YR6+YiU3CDgEUA= Subject key identifier: 8E:7C:AA:43:C8:0E:41:FA:84:DD:84:4F:01:B1:94:6C:30:CA:3D:C6 Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Certificate serial: 044D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft Manifest number: 0434 Signing time: Sat 19 Jul 2025 00:47:42 +0000 Manifest this update: Sat 19 Jul 2025 00:47:41 +0000 Manifest next update: Sat 26 Jul 2025 00:47:41 +0000 Files and hashes: 1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: amvZD4aIk90Ld0+QY3SLADORBcuhSNW5KoY/NzzUqaA=) 2: 616435103F3E11EE81024074C4F9AE02.roa (hash: BV7IOs58jkocun9KOxJEZWid0CjNqRr4h3oLm+oM9XA=) 3: 168BE8747EEE11ECAB036C59C4F9AE02.roa (hash: wF1Z2aa2PTEiRRPCp23vYrxyf7/d64gIm78PkkwoFEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1101 (0x44d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Validity Not Before: Jul 19 00:47:41 2025 GMT Not After : Jul 26 00:47:41 2025 GMT Subject: CN=687aeb2d-af77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:42:fe:c4:7b:0d:4f:43:11:de:49:ad:dc:28: 31:2e:40:6f:3e:88:d5:73:f1:9c:35:dd:a8:fa:83: 34:a5:67:60:ae:85:e8:9b:2a:23:38:2f:a3:a4:db: 21:a6:3e:55:3c:c3:71:b8:c5:b2:33:d7:cc:9e:92: d1:27:e3:8e:33:52:de:c5:63:f3:fd:71:42:4e:49: 4f:39:ea:f9:20:2a:36:ec:9d:c0:50:99:26:38:a0: 7e:74:09:33:b3:b5:09:d5:62:03:33:0a:bf:64:aa: cc:a1:ed:e1:a1:ba:51:91:cf:eb:5f:c7:3d:43:fb: d4:16:a5:be:43:ce:f8:67:88:f6:73:da:c3:36:1f: 56:94:2f:b3:c5:77:d2:8a:ed:df:08:1f:05:fd:1c: f3:7e:49:17:08:2b:c1:49:05:98:00:bd:ad:fa:72: a0:a0:c8:b3:71:e1:96:03:75:c7:c2:26:a5:b7:27: 8a:da:cc:10:5e:1e:a0:2d:58:e8:70:46:28:b1:b7: 82:b7:95:f3:c9:99:cf:fd:77:98:23:a4:a0:2a:39: 26:71:99:fc:0e:f1:02:84:56:45:80:a4:dd:e0:de: c1:fd:be:7f:2f:8e:8f:e3:39:6b:0e:f7:56:45:fa: 5b:88:9d:f7:27:7f:4f:72:4b:2e:0a:33:a9:51:9f: 66:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7C:AA:43:C8:0E:41:FA:84:DD:84:4F:01:B1:94:6C:30:CA:3D:C6 X509v3 Authority Key Identifier: keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:09:f3:83:09:11:c5:ea:fc:ea:21:8c:0a:1f:5f:ae:ab:7d: 8f:18:bd:f9:ce:31:0b:2d:b6:8f:28:6e:ff:7a:a9:32:b5:3f: 34:3d:2e:bd:58:bc:fa:13:ed:eb:55:99:e4:26:74:8a:c6:93: ea:5e:d8:4e:fb:ea:ef:9f:45:1a:e0:61:a3:db:14:1d:28:ed: 5f:82:cb:e8:8e:19:55:cd:b1:fc:9f:99:2e:09:2f:a3:89:a6: cf:72:4f:14:03:8e:91:ef:2a:ff:19:83:df:bd:e0:d8:e5:f0: 38:73:09:61:90:96:95:1c:51:da:7f:88:fe:7c:9d:56:ca:d0: 2f:a8:b4:26:1e:4c:e4:76:3b:1d:dc:c9:60:0c:fd:99:25:49: 2e:c0:63:6b:b7:21:fd:d9:6f:b7:0a:0c:8a:d2:00:e9:58:fc: 44:a2:23:d3:cc:81:89:b1:72:5f:fe:ca:fc:29:6f:8c:ac:8a: e6:02:ab:7b:8d:03:ae:67:0c:ea:5e:4d:33:bf:2c:fd:51:3c: 86:cd:ee:f4:a9:ee:b1:b9:e1:34:88:ff:26:e6:77:de:9e:fc: 40:88:a1:1f:e2:b5:b4:05:95:99:1b:70:14:e9:94:ca:a4:2d: c9:c4:91:ff:77:64:0e:6f:f0:b2:3f:e4:fe:39:f6:96:0c:b4: ba:fd:31:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBRDQxMTAvBgNVBAUTKDU0MzBBNDE0QUEwNUI2NzMxREMyRDY0QTcwQzYxOUM2 NjkzNDZBMEUwHhcNMjUwNzE5MDA0NzQxWhcNMjUwNzI2MDA0NzQxWjAYMRYwFAYD VQQDEw02ODdhZWIyZC1hZjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0L+xHsNT0MR3kmt3CgxLkBvPojVc/GcNd2o+oM0pWdgroXomyojOC+jpNsh pj5VPMNxuMWyM9fMnpLRJ+OOM1LexWPz/XFCTklPOer5ICo27J3AUJkmOKB+dAkz s7UJ1WIDMwq/ZKrMoe3hobpRkc/rX8c9Q/vUFqW+Q874Z4j2c9rDNh9WlC+zxXfS iu3fCB8F/RzzfkkXCCvBSQWYAL2t+nKgoMizceGWA3XHwialtyeK2swQXh6gLVjo cEYosbeCt5XzyZnP/XeYI6SgKjkmcZn8DvEChFZFgKTd4N7B/b5/L46P4zlrDvdW RfpbiJ33J39PcksuCjOpUZ9mFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI58qkPI DkH6hN2ETwGxlGwwyj3GMB8GA1UdIwQYMBaAFFQwpBSqBbZzHcLWSnDGGcZpNGoO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DNDIzMTgzMDc3 QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRuTWR3dFpLY01ZWnhtazBh ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZEQ2tGS29GdG5NZHd0WktjTVlaeG1rMGFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REFENC9DNDIzMTgzMDc3QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRu TWR3dFpLY01ZWnhtazBhZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYCfODCRHF6vzqIYwKH1+uq32PGL35zjELLbaPKG7/eqkytT80PS69 WLz6E+3rVZnkJnSKxpPqXthO++rvn0Ua4GGj2xQdKO1fgsvojhlVzbH8n5kuCS+j iabPck8UA46R7yr/GYPfveDY5fA4cwlhkJaVHFHaf4j+fJ1WytAvqLQmHkzkdjsd 3MlgDP2ZJUkuwGNrtyH92W+3CgyK0gDpWPxEoiPTzIGJsXJf/sr8KW+MrIrmAqt7 jQOuZwzqXk0zvyz9UTyGze70qe6xueE0iP8m5nfenvxAiKEf4rW0BZWZG3AU6ZTK pC3JxJH/d2QOb/CyP+T+OfaWDLS6/TFn -----END CERTIFICATE-----Generated at Sun Jul 20 18:08:16 2025 by rpki-client