$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft File: VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json) Hash identifier: x0YMEpnzFps5allaMp0hmaTD5tQLtp35JG0pfSsJIDc= Subject key identifier: 3D:59:4F:67:70:65:74:EE:A5:C9:79:F7:57:3E:1F:5F:5D:0C:6F:52 Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Certificate serial: 0431 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft Manifest number: 0419 Signing time: Sat 31 May 2025 00:40:15 +0000 Manifest this update: Sat 31 May 2025 00:40:14 +0000 Manifest next update: Sat 07 Jun 2025 00:40:14 +0000 Files and hashes: 1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: IbfPkNDanDhWTaXGJtClb7DG5NJmsbdMCTmp8eRw6Gc=) 2: 616435103F3E11EE81024074C4F9AE02.roa (hash: BV7IOs58jkocun9KOxJEZWid0CjNqRr4h3oLm+oM9XA=) 3: 168BE8747EEE11ECAB036C59C4F9AE02.roa (hash: ftvhnzXdw5KRVDKn9LZuR/Je36inLhxCbKOybLuc7M4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1073 (0x431) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Validity Not Before: May 31 00:40:14 2025 GMT Not After : Jun 7 00:40:14 2025 GMT Subject: CN=683a4fef-de64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f9:8f:a3:70:3e:ca:ca:2c:f3:9d:66:17:60: 72:ab:ba:03:54:21:21:47:69:00:ab:29:c1:60:bb: 00:6f:b4:d9:20:00:b4:52:f4:26:d0:96:c5:63:dd: ed:b3:8f:64:a1:38:5a:83:9a:52:de:0f:73:ba:94: 00:0e:e3:61:1c:1f:f8:45:37:9f:9c:ce:fc:fe:96: 59:50:7e:8f:38:26:7b:d9:fa:69:f0:cb:6d:eb:f5: ec:8a:a7:fe:78:33:d9:76:d3:f4:0f:0e:07:28:ec: cc:32:ab:85:e1:c3:f9:3b:ff:78:56:c3:b6:5f:ba: a0:74:4f:d0:18:76:70:43:d8:59:1a:2f:e0:a5:9c: cc:d4:ff:fe:d3:2f:3b:8a:21:d6:e7:14:df:71:7d: 51:0e:c0:96:88:89:15:77:bc:4f:ab:2f:db:a1:47: 27:c2:ba:9e:ca:47:7b:1b:6a:0e:03:76:bb:46:27: 1f:fc:ac:b7:03:d1:b9:35:4a:fd:67:d2:83:0f:57: ab:2f:b0:f6:49:83:b7:b1:88:e4:15:5a:66:c0:76: 8d:89:49:8e:39:b6:68:47:b2:76:c3:b8:b0:c9:ef: 5c:33:90:74:a5:31:cf:c8:fb:c1:a1:09:53:1e:55: 37:86:1d:8b:c6:de:45:e8:a5:16:61:c6:43:96:61: 7c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:59:4F:67:70:65:74:EE:A5:C9:79:F7:57:3E:1F:5F:5D:0C:6F:52 X509v3 Authority Key Identifier: keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:d3:d3:48:bb:3e:bd:86:52:c7:f0:95:07:66:dd:a7:80:31: ae:fc:29:67:2f:29:3c:cb:fd:6d:14:32:ab:41:e6:25:5c:d7: fb:0d:bb:c9:26:68:7d:df:e9:f2:14:bc:bc:da:32:dd:66:e3: 36:93:79:cd:92:b2:57:6d:34:74:2e:27:46:6e:1d:8f:d2:82: 38:61:93:b0:7e:a0:b5:fd:bd:30:1b:f8:cb:7d:a5:f5:20:ae: 35:b9:57:c5:ff:d2:a3:b2:b4:9e:89:6b:8c:86:c2:01:ec:90: 6e:14:a5:c0:47:53:9e:30:98:f4:7f:aa:a8:46:81:1d:7d:60: c8:cb:e8:74:c0:87:59:f5:8e:81:6e:8b:d0:6e:c7:36:35:fd: de:01:f7:6f:4e:e6:ad:a9:79:51:0e:16:b6:c2:04:54:2c:34: 70:67:6b:2c:8a:56:68:1a:8e:dd:ad:93:f5:c5:6b:4b:e4:a7: 15:11:8d:3b:da:2c:98:c7:50:31:71:d0:4c:e3:42:cf:69:e7: 54:2e:6d:ec:bf:a4:40:fe:ac:6a:4c:b7:ca:9c:55:6e:a9:e0: bd:06:96:4c:f9:e7:8a:bd:e6:38:bf:cf:85:78:93:97:91:c0: 16:9b:d8:7c:19:94:94:cd:44:b3:16:09:79:e1:89:67:a6:e2: f1:61:75:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBRDQxMTAvBgNVBAUTKDU0MzBBNDE0QUEwNUI2NzMxREMyRDY0QTcwQzYxOUM2 NjkzNDZBMEUwHhcNMjUwNTMxMDA0MDE0WhcNMjUwNjA3MDA0MDE0WjAYMRYwFAYD VQQDEw02ODNhNGZlZi1kZTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPmPo3A+ysos851mF2Byq7oDVCEhR2kAqynBYLsAb7TZIAC0UvQm0JbFY93t s49koThag5pS3g9zupQADuNhHB/4RTefnM78/pZZUH6POCZ72fpp8Mtt6/Xsiqf+ eDPZdtP0Dw4HKOzMMquF4cP5O/94VsO2X7qgdE/QGHZwQ9hZGi/gpZzM1P/+0y87 iiHW5xTfcX1RDsCWiIkVd7xPqy/boUcnwrqeykd7G2oOA3a7Ricf/Ky3A9G5NUr9 Z9KDD1erL7D2SYO3sYjkFVpmwHaNiUmOObZoR7J2w7iwye9cM5B0pTHPyPvBoQlT HlU3hh2Lxt5F6KUWYcZDlmF8rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1ZT2dw ZXTupcl591c+H19dDG9SMB8GA1UdIwQYMBaAFFQwpBSqBbZzHcLWSnDGGcZpNGoO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DNDIzMTgzMDc3 QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRuTWR3dFpLY01ZWnhtazBh ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZEQ2tGS29GdG5NZHd0WktjTVlaeG1rMGFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REFENC9DNDIzMTgzMDc3QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRu TWR3dFpLY01ZWnhtazBhZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz09NIuz69hlLH8JUHZt2ngDGu/ClnLyk8y/1tFDKrQeYlXNf7DbvJ Jmh93+nyFLy82jLdZuM2k3nNkrJXbTR0LidGbh2P0oI4YZOwfqC1/b0wG/jLfaX1 IK41uVfF/9KjsrSeiWuMhsIB7JBuFKXAR1OeMJj0f6qoRoEdfWDIy+h0wIdZ9Y6B bovQbsc2Nf3eAfdvTuatqXlRDha2wgRULDRwZ2ssilZoGo7drZP1xWtL5KcVEY07 2iyYx1AxcdBM40LPaedULm3sv6RA/qxqTLfKnFVuqeC9BpZM+eeKveY4v8+FeJOX kcAWm9h8GZSUzUSzFgl54YlnpuLxYXXI -----END CERTIFICATE-----Generated at Sat May 31 16:32:20 2025 by rpki-client