$ rpki-client -vvf rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft File: rdfp-5VrvujwEu3elUJI2bXWWMY.mft (raw, json) Hash identifier: i/Sx2FhpIY1EoB08ym88ohKnh5yL8cwa0Y/++/DIX1w= Subject key identifier: B3:E1:AD:0F:E6:6C:F7:90:7F:5C:B5:C9:4D:CF:66:B2:5B:04:C1:21 Authority key identifier: AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6 Certificate issuer: /CN=A91330D0/serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6 Certificate serial: 07FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft Manifest number: 07F7 Signing time: Thu 08 May 2025 20:49:15 +0000 Manifest this update: Thu 08 May 2025 20:49:15 +0000 Manifest next update: Thu 15 May 2025 20:49:15 +0000 Files and hashes: 1: rdfp-5VrvujwEu3elUJI2bXWWMY.crl (hash: lRV2PgN13yxTRbq7C5rnOLHXj4QRoXmqvTC8ZIlkq4w=) 2: A4711C4A23BA11EFA8BACF1BC4F9AE02.roa (hash: hbGM0H2MCBcXGdiy+u5XBSECyzJz0AJtwU9Q9LxYAHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 20:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2047 (0x7ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91330D0, serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6 Validity Not Before: May 8 20:49:15 2025 GMT Not After : May 15 20:49:15 2025 GMT Subject: CN=681d18cb-726e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d1:4d:ff:99:41:1e:7f:29:a3:eb:0f:c2:e1: 81:87:76:cb:9a:3b:67:4a:65:d6:21:9a:4e:ce:4a: 26:10:56:03:12:6d:bd:9b:ab:14:1c:f4:f7:4d:7e: 92:a3:ff:06:48:a0:c0:b2:90:0a:a7:b6:8c:f0:6d: 87:14:ee:b9:9d:0e:24:9d:84:84:e2:7c:3d:c1:10: 30:80:d1:bc:85:a9:8b:b1:87:1b:f2:59:b9:58:9a: ff:ec:43:ee:a2:ae:0a:83:1e:e9:5d:25:5a:b0:52: 1d:b1:5d:49:e6:4b:df:37:ef:35:ce:c8:e2:e9:20: 55:84:bd:62:41:79:d9:c2:b9:3d:00:b8:38:7a:49: e5:e8:53:f4:54:6e:d8:d4:9b:8d:c3:fd:01:73:3e: b4:ae:57:2c:48:42:88:8a:51:89:d2:a3:91:7b:3e: 4f:26:8a:17:53:58:4c:1b:ea:f9:0a:16:9c:6f:ba: 20:9e:45:aa:aa:bc:b3:67:80:30:dc:4c:c2:62:1d: a5:3c:a1:c8:8f:b3:8a:b4:ec:6c:38:8c:e4:0b:fa: 96:49:1a:55:b3:e3:2a:a3:61:83:52:54:d4:c5:aa: fa:ee:c5:d6:59:71:13:0b:50:b5:39:d4:90:8b:6f: 6c:60:eb:bb:c2:cc:0c:a7:a9:7a:5b:cf:65:aa:0f: 49:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E1:AD:0F:E6:6C:F7:90:7F:5C:B5:C9:4D:CF:66:B2:5B:04:C1:21 X509v3 Authority Key Identifier: keyid:AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:3c:6a:64:40:8d:fb:e1:4c:c9:90:bf:76:31:b1:36:1b:9f: 5b:1f:0f:34:00:18:be:69:52:93:d1:3c:1f:3c:74:c7:52:95: 67:ae:3e:a7:af:07:9e:9d:82:79:ad:99:71:7b:a6:66:fe:89: 85:cc:c7:bd:68:cf:24:52:f4:fc:75:68:4c:bd:d8:c7:94:51: ec:0b:c7:12:df:1d:b9:ad:24:ca:31:86:76:32:12:65:c8:6a: c8:3d:3a:92:3f:47:0d:fa:0e:dd:f2:0d:59:c4:c1:7a:9d:91: 78:5e:9a:24:d3:bf:2b:81:b3:13:15:60:19:4f:65:59:a9:a7: fc:d7:98:b9:3d:07:0a:a2:4b:dc:b1:60:7a:48:e5:6c:26:be: 89:17:4d:81:e6:be:51:e9:b9:46:96:46:7a:4f:dc:91:49:4e: a2:f1:99:7b:cb:55:f5:ed:30:95:79:2f:00:d9:92:23:b5:fe: 7f:88:59:73:26:1f:11:10:08:db:4b:10:2f:a8:cc:6e:13:dc: 9e:c4:85:4b:74:7e:ef:00:fe:a0:1a:8e:64:a0:e1:36:be:b3: 72:96:94:e6:09:35:88:e6:e6:f7:30:3f:08:40:1d:f8:81:e2: 6c:0f:e4:9a:d6:a1:0e:b9:bc:27:47:6f:01:1c:df:3e:e2:33: 73:bd:d8:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMwRDAxMTAvBgNVBAUTKEFERDdFOUZCOTU2QkJFRThGMDEyRURERTk1NDI0OEQ5 QjVENjU4QzYwHhcNMjUwNTA4MjA0OTE1WhcNMjUwNTE1MjA0OTE1WjAYMRYwFAYD VQQDEw02ODFkMThjYi03MjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztFN/5lBHn8po+sPwuGBh3bLmjtnSmXWIZpOzkomEFYDEm29m6sUHPT3TX6S o/8GSKDAspAKp7aM8G2HFO65nQ4knYSE4nw9wRAwgNG8hamLsYcb8lm5WJr/7EPu oq4Kgx7pXSVasFIdsV1J5kvfN+81zsji6SBVhL1iQXnZwrk9ALg4eknl6FP0VG7Y 1JuNw/0Bcz60rlcsSEKIilGJ0qORez5PJooXU1hMG+r5Chacb7ognkWqqryzZ4Aw 3EzCYh2lPKHIj7OKtOxsOIzkC/qWSRpVs+Mqo2GDUlTUxar67sXWWXETC1C1OdSQ i29sYOu7wswMp6l6W89lqg9JfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPhrQ/m bPeQf1y1yU3PZrJbBMEhMB8GA1UdIwQYMBaAFK3X6fuVa77o8BLt3pVCSNm11ljG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzBEMC85ODc5OUM2Q0Uy MDcxMUVBQjhBMENCNjBDNEY5QUUwMi9yZGZwLTVWcnZ1andFdTNlbFVKSTJiWFdX TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkZnAtNVZydnVqd0V1M2VsVUpJMmJYV1dNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzBEMC85ODc5OUM2Q0UyMDcxMUVBQjhBMENCNjBDNEY5QUUwMi9yZGZwLTVWcnZ1 andFdTNlbFVKSTJiWFdXTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcPGpkQI374UzJkL92MbE2G59bHw80ABi+aVKT0TwfPHTHUpVnrj6n rweenYJ5rZlxe6Zm/omFzMe9aM8kUvT8dWhMvdjHlFHsC8cS3x25rSTKMYZ2MhJl yGrIPTqSP0cN+g7d8g1ZxMF6nZF4Xpok078rgbMTFWAZT2VZqaf815i5PQcKokvc sWB6SOVsJr6JF02B5r5R6blGlkZ6T9yRSU6i8Zl7y1X17TCVeS8A2ZIjtf5/iFlz Jh8REAjbSxAvqMxuE9yexIVLdH7vAP6gGo5koOE2vrNylpTmCTWI5ub3MD8IQB34 geJsD+Sa1qEOubwnR28BHN8+4jNzvdiM -----END CERTIFICATE-----Generated at Fri May 9 02:07:51 2025 by rpki-client