$ rpki-client -vvf rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft File: rdfp-5VrvujwEu3elUJI2bXWWMY.mft (raw, json) Hash identifier: BbjEoZfPOGI+9PJ09c6ax2zMz9NmlwHg43/s1029UNs= Subject key identifier: B4:8B:26:34:7E:0D:58:4F:49:E2:9C:83:49:6F:BE:72:CD:C7:35:53 Authority key identifier: AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6 Certificate issuer: /CN=A91330D0/serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6 Certificate serial: 0854 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft Manifest number: 084A Signing time: Sat 18 Oct 2025 21:55:12 +0000 Manifest this update: Sat 18 Oct 2025 21:55:12 +0000 Manifest next update: Sat 25 Oct 2025 21:55:12 +0000 Files and hashes: 1: rdfp-5VrvujwEu3elUJI2bXWWMY.crl (hash: sJCOD5/LERbhKn4loJ67Dh5x0D6NFPB6/57zyG5C/mI=) 2: A4711C4A23BA11EFA8BACF1BC4F9AE02.roa (hash: sI83SKQ1KIXzAI6k70Vt5zWHUlxvGed2ohcbiQweEnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2132 (0x854) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91330D0, serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6 Validity Not Before: Oct 18 21:55:12 2025 GMT Not After : Oct 25 21:55:12 2025 GMT Subject: CN=68f40cc0-5cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:61:87:05:45:e3:8b:05:ce:5e:20:cc:2e:eb: 0c:ab:24:da:d6:5c:5d:c6:97:39:fe:13:2e:9e:b6: 22:ba:d4:cc:05:1c:85:32:f8:43:6a:55:ce:aa:3a: 13:16:b9:82:54:43:59:3c:dc:e4:51:c4:15:c4:a0: 60:72:ec:6f:c5:bd:b9:41:98:7f:f0:cf:4a:d5:7d: 68:63:50:fd:b8:2d:a0:f0:4f:60:9c:e8:0b:da:a9: 15:a8:54:32:2c:38:66:c0:97:5a:f4:ac:08:cf:c1: f2:f0:8a:db:94:06:c7:f9:4f:89:1f:0f:bb:4a:2e: 0e:fb:ca:17:65:b6:36:d7:63:2d:a7:18:64:56:88: 79:d6:e7:8d:a3:a9:13:84:aa:80:87:3f:38:37:9f: c1:ce:f6:e5:8d:cb:01:fe:1b:62:cd:2f:60:69:76: 6d:0e:63:ba:4a:fa:ef:f7:26:a8:eb:6a:08:28:71: 30:c7:f5:bd:aa:71:33:8d:56:ad:78:8a:9c:99:84: 3f:fa:71:bf:1e:15:ea:e4:c1:52:ad:64:be:cb:38: df:c7:42:b5:49:f6:c6:0f:bb:fd:03:dc:e9:08:7a: 62:ff:80:56:6a:a9:34:89:f0:9b:17:ec:07:d7:83: 96:90:6d:f0:1a:b4:ef:0c:cc:e3:d6:47:d5:83:28: 39:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8B:26:34:7E:0D:58:4F:49:E2:9C:83:49:6F:BE:72:CD:C7:35:53 X509v3 Authority Key Identifier: keyid:AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:e8:65:fe:7e:c3:fe:ff:e6:d9:1e:14:52:39:8a:e2:c8:0f: 55:e8:4a:57:6e:6f:8f:12:d5:fd:1d:1c:61:21:ad:18:a0:d4: fe:06:00:c4:fc:ef:e8:94:cf:a9:80:07:c2:8b:93:f0:99:9d: 93:af:85:fa:b3:da:aa:d1:d8:32:37:48:bd:1c:5b:1f:72:40: 2d:41:d0:45:4d:69:08:9e:91:db:5b:26:43:00:24:5e:0c:a7: 8e:00:45:f4:ee:48:a9:7f:35:02:31:7e:79:f3:8a:72:63:5f: 9e:a5:47:6e:31:76:6a:eb:6c:e3:91:ca:02:0b:c5:a6:7b:8e: 1d:7e:05:9b:f3:2f:7e:73:c3:0f:2a:cf:3a:de:d5:02:d1:e7: c1:d2:b1:fa:fd:be:e0:ff:ab:08:dc:da:c4:9a:7a:68:c7:19: a3:86:22:ec:72:6c:b3:ce:55:c6:18:b1:d9:ce:8a:05:a8:95: 42:d7:f8:5e:30:29:f7:11:ef:00:93:ff:20:b0:77:8a:3d:a9: 32:7b:40:ef:fd:40:c4:19:91:d8:91:c8:77:9e:50:16:f5:45: 64:63:b2:01:c5:9d:12:90:41:8b:96:ed:1d:c9:c3:7c:62:1e: f2:65:8b:8b:5e:af:12:4d:b5:19:82:8d:69:46:49:52:5a:e1: 38:fb:86:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMwRDAxMTAvBgNVBAUTKEFERDdFOUZCOTU2QkJFRThGMDEyRURERTk1NDI0OEQ5 QjVENjU4QzYwHhcNMjUxMDE4MjE1NTEyWhcNMjUxMDI1MjE1NTEyWjAYMRYwFAYD VQQDEw02OGY0MGNjMC01Y2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5mGHBUXjiwXOXiDMLusMqyTa1lxdxpc5/hMunrYiutTMBRyFMvhDalXOqjoT FrmCVENZPNzkUcQVxKBgcuxvxb25QZh/8M9K1X1oY1D9uC2g8E9gnOgL2qkVqFQy LDhmwJda9KwIz8Hy8IrblAbH+U+JHw+7Si4O+8oXZbY212MtpxhkVoh51ueNo6kT hKqAhz84N5/BzvbljcsB/htizS9gaXZtDmO6Svrv9yao62oIKHEwx/W9qnEzjVat eIqcmYQ/+nG/HhXq5MFSrWS+yzjfx0K1SfbGD7v9A9zpCHpi/4BWaqk0ifCbF+wH 14OWkG3wGrTvDMzj1kfVgyg5VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSLJjR+ DVhPSeKcg0lvvnLNxzVTMB8GA1UdIwQYMBaAFK3X6fuVa77o8BLt3pVCSNm11ljG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzBEMC85ODc5OUM2Q0Uy MDcxMUVBQjhBMENCNjBDNEY5QUUwMi9yZGZwLTVWcnZ1andFdTNlbFVKSTJiWFdX TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkZnAtNVZydnVqd0V1M2VsVUpJMmJYV1dNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzBEMC85ODc5OUM2Q0UyMDcxMUVBQjhBMENCNjBDNEY5QUUwMi9yZGZwLTVWcnZ1 andFdTNlbFVKSTJiWFdXTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj6GX+fsP+/+bZHhRSOYriyA9V6EpXbm+PEtX9HRxhIa0YoNT+BgDE /O/olM+pgAfCi5PwmZ2Tr4X6s9qq0dgyN0i9HFsfckAtQdBFTWkInpHbWyZDACRe DKeOAEX07kipfzUCMX5584pyY1+epUduMXZq62zjkcoCC8Wme44dfgWb8y9+c8MP Ks863tUC0efB0rH6/b7g/6sI3NrEmnpoxxmjhiLscmyzzlXGGLHZzooFqJVC1/he MCn3Ee8Ak/8gsHeKPakye0Dv/UDEGZHYkch3nlAW9UVkY7IBxZ0SkEGLlu0dycN8 Yh7yZYuLXq8STbUZgo1pRklSWuE4+4Z3 -----END CERTIFICATE-----Generated at Mon Oct 20 09:38:45 2025 by rpki-client