$ rpki-client -vvf rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft File: rdfp-5VrvujwEu3elUJI2bXWWMY.mft (raw, json) Hash identifier: L+QP9j/Y3uM/SI4hAnEiEomJB9BOawF1JlbSXLLTcRY= Subject key identifier: F8:52:AC:1F:EC:78:92:48:58:F3:78:53:2D:2B:27:D7:4B:BF:C9:01 Authority key identifier: AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6 Certificate issuer: /CN=A91330D0/serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6 Certificate serial: 0818 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft Manifest number: 0810 Signing time: Sat 28 Jun 2025 20:33:17 +0000 Manifest this update: Sat 28 Jun 2025 20:33:17 +0000 Manifest next update: Sat 05 Jul 2025 20:33:17 +0000 Files and hashes: 1: rdfp-5VrvujwEu3elUJI2bXWWMY.crl (hash: MrWI6pUmXYxZOGmD278lxqyMbAdF2ktBz1ItqzsFevI=) 2: A4711C4A23BA11EFA8BACF1BC4F9AE02.roa (hash: hbGM0H2MCBcXGdiy+u5XBSECyzJz0AJtwU9Q9LxYAHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 20:33:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2072 (0x818) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91330D0, serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6 Validity Not Before: Jun 28 20:33:17 2025 GMT Not After : Jul 5 20:33:17 2025 GMT Subject: CN=6860518d-1c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cd:41:ae:3f:28:10:00:6c:90:dc:43:0c:2d: 07:f2:9f:e2:b7:03:b0:eb:f9:7c:52:ef:39:00:be: a3:31:26:39:5d:cc:ef:58:13:33:4a:79:da:ea:db: 07:9b:2d:89:85:3b:2d:73:78:04:68:dc:f1:8d:1b: cb:78:10:95:25:fa:70:6a:69:50:80:39:90:6f:fa: d3:67:ff:51:8b:a0:87:6b:da:3a:20:1d:09:f2:5d: ff:00:57:55:d1:07:f3:25:68:a2:17:39:a5:70:03: 6f:72:9a:b3:9d:23:92:81:9b:d4:fc:7f:81:71:29: bf:2c:06:bf:86:bc:30:64:7a:df:58:92:e9:58:1d: 17:f2:9b:40:54:05:44:97:e8:8e:bc:f4:5b:11:dd: b0:d0:a5:42:03:6a:7f:4b:4d:86:e1:93:fa:cc:22: aa:b7:67:48:72:03:e2:2b:be:c2:a2:6d:7a:d4:39: 10:12:45:f4:aa:75:de:cc:1f:c3:93:dd:13:07:56: 30:ae:d1:11:99:d8:25:b2:cb:0c:39:a4:a1:f7:a0: 5a:ce:cb:03:4d:98:89:1b:ab:69:7a:bc:8c:e5:5a: 00:21:94:7e:ea:c5:68:13:b1:e0:2c:b9:d1:cb:01: bd:52:f4:b2:fb:b6:cd:ba:cf:6f:28:c1:71:e7:3a: c0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:52:AC:1F:EC:78:92:48:58:F3:78:53:2D:2B:27:D7:4B:BF:C9:01 X509v3 Authority Key Identifier: keyid:AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:54:06:61:89:bb:51:0f:48:6c:21:b0:f6:f8:e3:6f:e1:bf: f7:b6:1d:56:d0:19:4c:b7:d8:0d:59:66:10:6b:8c:1d:3d:c3: e6:e0:38:9a:a4:61:11:c0:4a:4e:c7:49:be:02:d1:87:64:15: 9e:cf:cb:8e:d1:ef:f9:2e:b0:ca:da:e0:c8:e2:d7:d1:0a:de: 07:78:a7:f0:69:e7:c8:ab:28:91:81:10:fc:7f:7c:f4:f7:e3: e6:91:5c:3e:63:b2:6a:e2:46:9a:ba:45:4e:66:9c:2e:91:39: a8:70:6d:a4:49:58:a2:07:f0:3c:2e:65:d0:9d:80:f2:f0:e0: 32:2a:f4:ea:57:52:0e:40:be:df:e6:dc:de:1e:ee:c8:19:d5: 8c:ef:fb:8c:af:94:92:de:a1:cb:27:a5:9e:2e:79:98:be:70: a4:0f:a2:59:fe:19:ce:22:77:f6:61:ff:b7:4c:52:f8:68:e4: 64:ac:dd:d6:04:4c:1c:05:63:c2:9b:24:20:85:a9:65:5f:29: a2:6a:c7:fa:46:ab:01:7f:15:59:0c:dd:74:f5:a6:e5:dd:99: 72:21:b0:92:a4:ea:0b:f4:b6:d9:34:f3:36:fb:2d:d9:7b:fa: 86:0f:72:cd:48:0a:e3:96:3b:62:0a:37:c8:47:fb:0d:4e:29: f5:ff:5e:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMwRDAxMTAvBgNVBAUTKEFERDdFOUZCOTU2QkJFRThGMDEyRURERTk1NDI0OEQ5 QjVENjU4QzYwHhcNMjUwNjI4MjAzMzE3WhcNMjUwNzA1MjAzMzE3WjAYMRYwFAYD VQQDEw02ODYwNTE4ZC0xYzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy81Brj8oEABskNxDDC0H8p/itwOw6/l8Uu85AL6jMSY5XczvWBMzSnna6tsH my2JhTstc3gEaNzxjRvLeBCVJfpwamlQgDmQb/rTZ/9Ri6CHa9o6IB0J8l3/AFdV 0QfzJWiiFzmlcANvcpqznSOSgZvU/H+BcSm/LAa/hrwwZHrfWJLpWB0X8ptAVAVE l+iOvPRbEd2w0KVCA2p/S02G4ZP6zCKqt2dIcgPiK77Com161DkQEkX0qnXezB/D k90TB1YwrtERmdglsssMOaSh96BazssDTZiJG6tperyM5VoAIZR+6sVoE7HgLLnR ywG9UvSy+7bNus9vKMFx5zrAdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhSrB/s eJJIWPN4Uy0rJ9dLv8kBMB8GA1UdIwQYMBaAFK3X6fuVa77o8BLt3pVCSNm11ljG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzBEMC85ODc5OUM2Q0Uy MDcxMUVBQjhBMENCNjBDNEY5QUUwMi9yZGZwLTVWcnZ1andFdTNlbFVKSTJiWFdX TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkZnAtNVZydnVqd0V1M2VsVUpJMmJYV1dNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzBEMC85ODc5OUM2Q0UyMDcxMUVBQjhBMENCNjBDNEY5QUUwMi9yZGZwLTVWcnZ1 andFdTNlbFVKSTJiWFdXTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfVAZhibtRD0hsIbD2+ONv4b/3th1W0BlMt9gNWWYQa4wdPcPm4Dia pGERwEpOx0m+AtGHZBWez8uO0e/5LrDK2uDI4tfRCt4HeKfwaefIqyiRgRD8f3z0 9+PmkVw+Y7Jq4kaaukVOZpwukTmocG2kSViiB/A8LmXQnYDy8OAyKvTqV1IOQL7f 5tzeHu7IGdWM7/uMr5SS3qHLJ6WeLnmYvnCkD6JZ/hnOInf2Yf+3TFL4aORkrN3W BEwcBWPCmyQghallXymiasf6RqsBfxVZDN109abl3ZlyIbCSpOoL9LbZNPM2+y3Z e/qGD3LNSArjljtiCjfIR/sNTin1/16s -----END CERTIFICATE-----Generated at Sun Jun 29 13:56:29 2025 by rpki-client