$ rpki-client -vvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft File: RS-rvfCd335V_Q-dvd1CePRPuIE.mft (raw, json) Hash identifier: XgvdfEZFic2kGTh3Wj+O1XGyL8oqYxOKvDvjERqoDAI= Subject key identifier: AA:65:45:1D:39:22:4D:AA:E6:43:A7:17:56:3A:C9:23:C0:3E:2C:4F Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81 Certificate issuer: /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881 Certificate serial: 05A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft Manifest number: 0583 Signing time: Wed 10 Sep 2025 23:32:59 +0000 Manifest this update: Wed 10 Sep 2025 23:32:59 +0000 Manifest next update: Wed 17 Sep 2025 23:32:59 +0000 Files and hashes: 1: RS-rvfCd335V_Q-dvd1CePRPuIE.crl (hash: ywH1Gf7uLvD6e2ldAQc0N6STxgZtw0ZavIiSbf2Uxtg=) 2: C41221884B6011F092B79129C4F9AE02.roa (hash: 3roNmt7K5VqQHXl17ohr26LZwHHKacsURqWDoDXNWa4=) 3: C54C42C04D7611EEA69CE262C4F9AE02.roa (hash: 3vGbgZeBX2ux3qD/sA/eOOnJkTBw50rlrCAjdQKlgEE=) 4: C611EE6CBCF711EEA90A1F1DC4F9AE02.roa (hash: i9dMAMF25KUvras5KvDG1QM1xBWeYt+C+ALZFoy+wTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 23:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1440 (0x5a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E5DC, serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881 Validity Not Before: Sep 10 23:32:59 2025 GMT Not After : Sep 17 23:32:59 2025 GMT Subject: CN=68c20aab-5b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:dc:d9:67:d4:20:0e:91:9f:2a:11:30:30:67: 06:f1:7e:4b:34:31:aa:80:b6:81:09:b0:5c:4a:8d: 97:6a:72:46:74:84:80:4b:87:23:b4:2d:b8:6b:82: c7:1c:91:4c:71:62:4d:4a:a7:1b:7b:32:cd:7a:08: ea:16:a1:31:36:a3:4a:3e:1c:42:56:b0:6c:2c:f9: 7a:91:28:45:e3:f9:04:af:43:f3:c0:7b:6f:46:00: b2:d3:87:b5:4d:cf:d1:34:53:1e:f8:ba:3e:f5:bd: ab:5b:34:5f:00:ac:9f:d7:e4:95:4f:67:41:ff:2c: fb:e4:d3:40:55:42:1c:87:17:a7:2b:9a:98:57:9f: 79:66:a6:1b:1a:0c:a1:cd:b8:51:35:4e:17:be:46: c9:0a:8a:20:67:3c:eb:a4:18:a6:23:0e:a4:ae:3e: 69:f1:d3:1f:38:25:f0:41:55:24:79:14:1f:91:60: f6:39:01:6f:2f:22:3c:7c:76:3b:21:b6:fd:ac:48: 85:1e:c1:7a:61:b7:eb:d7:89:80:03:d9:0d:fe:8d: ca:2f:98:29:d8:74:6c:97:7e:24:f0:d6:18:f8:87: ef:52:19:2f:50:a2:8f:c1:f1:b0:93:6d:fe:94:35: 45:d2:83:30:75:bb:95:d9:dd:56:ac:7e:5a:3b:7a: 8d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:65:45:1D:39:22:4D:AA:E6:43:A7:17:56:3A:C9:23:C0:3E:2C:4F X509v3 Authority Key Identifier: keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:c5:6d:d7:8d:09:e8:b0:c8:59:8c:ae:9a:71:62:25:90:1c: d5:cb:ac:6c:61:49:66:ca:13:0f:d5:3e:cc:5d:48:92:fd:b0: 5b:f1:5d:46:1c:cd:dd:31:c5:ad:df:3a:97:b0:77:00:3f:f0: 29:b9:f2:57:6a:30:70:f7:f8:22:77:42:79:06:c8:92:41:a5: 86:32:2d:b7:a6:e3:0a:e7:0b:d6:a7:66:c7:03:25:82:2c:84: 35:95:41:44:e8:20:83:86:3c:81:cd:a8:04:cb:74:58:1e:ec: b9:42:db:98:da:3c:7a:b1:aa:69:41:d9:35:c1:97:bd:03:92: b6:49:1f:77:e0:d3:db:4d:06:98:86:8f:d6:de:7d:84:4e:11: 7a:14:3b:d0:07:2f:4f:db:a3:b0:44:24:66:53:bd:a8:c6:73: bb:00:69:fb:c6:1f:c3:36:ff:a0:c6:46:7a:41:42:7c:1e:6a: 42:27:7e:f6:19:49:84:7c:04:0a:52:1a:26:b6:e6:84:38:9f: 9c:cf:2d:d1:90:d6:54:c9:94:97:b5:6d:27:91:0c:8b:56:23: 72:b2:e8:ea:df:39:dd:02:99:52:a2:3c:a8:7c:69:aa:7b:2c: a1:ac:f4:54:93:0d:4f:e8:ff:5d:df:71:e3:6a:45:48:50:f8: aa:d7:c8:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U1REMxMTAvBgNVBAUTKDQ1MkZBQkJERjA5RERGN0U1NUZEMEY5REJEREQ0Mjc4 RjQ0RkI4ODEwHhcNMjUwOTEwMjMzMjU5WhcNMjUwOTE3MjMzMjU5WjAYMRYwFAYD VQQDEw02OGMyMGFhYi01YjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6NzZZ9QgDpGfKhEwMGcG8X5LNDGqgLaBCbBcSo2XanJGdISAS4cjtC24a4LH HJFMcWJNSqcbezLNegjqFqExNqNKPhxCVrBsLPl6kShF4/kEr0PzwHtvRgCy04e1 Tc/RNFMe+Lo+9b2rWzRfAKyf1+SVT2dB/yz75NNAVUIchxenK5qYV595ZqYbGgyh zbhRNU4XvkbJCoogZzzrpBimIw6krj5p8dMfOCXwQVUkeRQfkWD2OQFvLyI8fHY7 Ibb9rEiFHsF6Ybfr14mAA9kN/o3KL5gp2HRsl34k8NYY+IfvUhkvUKKPwfGwk23+ lDVF0oMwdbuV2d1WrH5aO3qNLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKplRR05 Ik2q5kOnF1Y6ySPAPixPMB8GA1UdIwQYMBaAFEUvq73wnd9+Vf0Pnb3dQnj0T7iB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTVEQy9CQkUyQjUwMkY4 RUIxMUVCQkVGNUFBMzdDNEY5QUUwMi9SUy1ydmZDZDMzNVZfUS1kdmQxQ2VQUlB1 SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JTLXJ2ZkNkMzM1Vl9RLWR2ZDFDZVBSUHVJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTVEQy9CQkUyQjUwMkY4RUIxMUVCQkVGNUFBMzdDNEY5QUUwMi9SUy1ydmZDZDMz NVZfUS1kdmQxQ2VQUlB1SUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhxW3XjQnosMhZjK6acWIlkBzVy6xsYUlmyhMP1T7MXUiS/bBb8V1G HM3dMcWt3zqXsHcAP/ApufJXajBw9/gid0J5BsiSQaWGMi23puMK5wvWp2bHAyWC LIQ1lUFE6CCDhjyBzagEy3RYHuy5QtuY2jx6sappQdk1wZe9A5K2SR934NPbTQaY ho/W3n2EThF6FDvQBy9P26OwRCRmU72oxnO7AGn7xh/DNv+gxkZ6QUJ8HmpCJ372 GUmEfAQKUhomtuaEOJ+czy3RkNZUyZSXtW0nkQyLViNysujq3zndAplSojyofGmq eyyhrPRUkw1P6P9d33HjakVIUPiq18hj -----END CERTIFICATE-----Generated at Thu Sep 11 16:20:30 2025 by rpki-client