$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft File: RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json) Hash identifier: +EFWbZLAn/rtMNwZCigLJMoav6Fa2xz7TGfj/Nu9gvQ= Subject key identifier: 1F:3C:69:AB:B4:BC:1A:76:EB:D1:44:4B:C6:74:ED:84:76:06:80:C7 Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Certificate serial: 0B9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft Manifest number: 0B7D Signing time: Fri 22 Aug 2025 19:13:08 +0000 Manifest this update: Fri 22 Aug 2025 19:13:07 +0000 Manifest next update: Fri 29 Aug 2025 19:13:07 +0000 Files and hashes: 1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: lDawM8x5tJDUExOQ7f5jLKjhrg1O+IXlr6HmYP0YRCM=) 2: BFE21FE09B0511EDB2F0BD4EC4F9AE02.roa (hash: uxCtCSV+O4TDyj5SgoE3dM5DZOqE4xyThfn972D+Swk=) 3: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: ep/NR5+KsXHxM/fL5lTu5X9ahtnO2No4DOGzWzbPKmU=) 4: 3C726724C06211EC93514712C4F9AE02.roa (hash: XklDOLYMfLViKkHUeT6z/7hV3PEW4lkSoZ2mUu3ko0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2970 (0xb9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Validity Not Before: Aug 22 19:13:07 2025 GMT Not After : Aug 29 19:13:07 2025 GMT Subject: CN=68a8c143-d643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:65:d6:f8:c2:95:50:18:2a:f1:45:18:65:f1: a8:ce:11:60:8e:b8:3e:46:f0:85:eb:5c:53:3d:ea: 8a:3f:e5:e1:8b:00:7e:6d:23:5b:e3:99:81:89:b9: 2c:20:c5:2c:02:d8:fe:5a:9f:19:e8:e8:9e:ba:39: c3:55:a4:ec:f6:79:82:7a:5c:a1:cc:08:79:db:3a: 94:cc:84:e8:66:10:08:b9:ea:34:93:4b:ea:49:d9: 86:c8:11:12:e8:ac:6f:13:41:5f:8d:6a:51:5b:53: 97:3e:ca:4c:f8:73:a4:7f:8d:0a:ec:f3:6f:94:12: 1c:95:14:30:95:60:0e:5e:2b:3c:19:92:bc:5e:c5: 43:7a:87:62:45:3e:f5:1c:81:f6:9d:ac:f0:c2:1e: 35:f6:bc:05:11:b4:c4:b7:ab:54:91:de:3b:0c:b6: e8:1e:3e:d7:2b:02:05:7d:e3:67:74:99:93:80:cd: 15:12:f7:a0:44:7f:40:e8:cb:31:7c:ee:22:69:70: 29:b9:e9:ac:bb:11:ad:a6:fc:2d:f9:40:9c:06:b0: ef:6d:e5:f5:2b:b1:15:3f:6e:81:92:4e:52:1b:c6: 6f:29:6b:a9:ae:44:c9:69:44:8c:2c:d7:bc:84:79: c0:3f:15:d8:e3:d2:04:b1:ea:eb:d1:0c:28:7d:0c: f4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3C:69:AB:B4:BC:1A:76:EB:D1:44:4B:C6:74:ED:84:76:06:80:C7 X509v3 Authority Key Identifier: keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:4c:f4:77:a8:f5:e8:3a:ea:77:8e:ba:6e:9b:61:80:62:04: 6d:2d:96:50:a2:03:cc:c2:54:46:50:a4:f1:af:1e:9c:fb:6e: 76:25:96:3d:68:46:06:69:ac:d0:ea:9f:45:96:a7:34:5e:59: 34:2f:27:20:1b:52:62:c1:e6:90:86:94:27:f7:1a:26:c5:8d: d5:65:69:5b:b1:0f:ea:52:be:54:fb:f9:02:00:46:e5:d0:69: 0b:6b:6f:41:d9:46:48:6f:e1:cd:86:4a:9f:5b:06:98:bd:2c: fe:c4:3d:a6:39:0f:ec:a5:16:9e:ce:da:eb:54:bd:26:60:d5: a6:8b:fc:f5:8f:61:98:bd:bb:c4:b3:67:89:96:8f:03:4e:5b: ce:bf:09:a2:ae:df:81:78:21:c4:bb:d2:d5:26:1c:46:02:93: 21:03:06:04:06:93:a6:0e:2b:18:c0:58:e3:49:9d:c8:1a:ff: 40:d9:27:78:cd:e3:5b:ec:26:9b:9a:7a:a6:5c:0c:d7:31:e1: c3:b9:5f:a1:c4:bc:19:ca:97:b4:5e:c5:c0:35:5f:41:b5:2f: 39:39:bb:6f:bc:38:a7:f8:7f:49:0e:d2:b6:a1:39:c1:fc:84: 38:1b:17:b0:29:7f:c2:aa:55:8e:ab:70:9f:90:f4:ef:c5:b8: a9:1e:70:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF NkI3OTQwRDUwHhcNMjUwODIyMTkxMzA3WhcNMjUwODI5MTkxMzA3WjAYMRYwFAYD VQQDEw02OGE4YzE0My1kNjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2XW+MKVUBgq8UUYZfGozhFgjrg+RvCF61xTPeqKP+XhiwB+bSNb45mBibks IMUsAtj+Wp8Z6OieujnDVaTs9nmCelyhzAh52zqUzIToZhAIueo0k0vqSdmGyBES 6KxvE0FfjWpRW1OXPspM+HOkf40K7PNvlBIclRQwlWAOXis8GZK8XsVDeodiRT71 HIH2nazwwh419rwFEbTEt6tUkd47DLboHj7XKwIFfeNndJmTgM0VEvegRH9A6Msx fO4iaXApuemsuxGtpvwt+UCcBrDvbeX1K7EVP26Bkk5SG8ZvKWuprkTJaUSMLNe8 hHnAPxXY49IEserr0QwofQz0QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB88aau0 vBp269FES8Z07YR2BoDHMB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4 NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4QS8wOEM0MzkyNDM4NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9Z cnhFdHgydGZYZm5tdDVRTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsTPR3qPXoOup3jrpum2GAYgRtLZZQogPMwlRGUKTxrx6c+252JZY9 aEYGaazQ6p9Flqc0Xlk0LycgG1JiweaQhpQn9xomxY3VZWlbsQ/qUr5U+/kCAEbl 0GkLa29B2UZIb+HNhkqfWwaYvSz+xD2mOQ/spRaeztrrVL0mYNWmi/z1j2GYvbvE s2eJlo8DTlvOvwmirt+BeCHEu9LVJhxGApMhAwYEBpOmDisYwFjjSZ3IGv9A2Sd4 zeNb7CabmnqmXAzXMeHDuV+hxLwZype0XsXANV9BtS85ObtvvDin+H9JDtK2oTnB /IQ4GxewKX/CqlWOq3CfkPTvxbipHnDy -----END CERTIFICATE-----Generated at Sat Aug 23 18:19:42 2025 by rpki-client