$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft File: RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json) Hash identifier: eRZMLrgaNVJzmwb7mqLhTh7Gc4YNOpwb8kzk49NYWA4= Subject key identifier: 2C:86:55:37:61:B1:2D:58:F4:9A:54:6C:8C:16:B2:60:0A:B8:30:AD Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Certificate serial: 0B66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft Manifest number: 0B49 Signing time: Sat 10 May 2025 18:57:04 +0000 Manifest this update: Sat 10 May 2025 18:57:02 +0000 Manifest next update: Sat 17 May 2025 18:57:02 +0000 Files and hashes: 1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: jWylUdt73XYy4YhTCdh9Bmz40SVG13priAvbGrEtC4s=) 2: BFE21FE09B0511EDB2F0BD4EC4F9AE02.roa (hash: uxCtCSV+O4TDyj5SgoE3dM5DZOqE4xyThfn972D+Swk=) 3: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: ep/NR5+KsXHxM/fL5lTu5X9ahtnO2No4DOGzWzbPKmU=) 4: 3C726724C06211EC93514712C4F9AE02.roa (hash: XklDOLYMfLViKkHUeT6z/7hV3PEW4lkSoZ2mUu3ko0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2918 (0xb66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Validity Not Before: May 10 18:57:02 2025 GMT Not After : May 17 18:57:02 2025 GMT Subject: CN=681fa17f-b125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:38:fa:39:cc:17:f3:da:0d:c9:b3:68:ba:ca: 1c:a5:d6:54:2c:6f:7e:3f:59:aa:db:b0:48:e2:b4: 58:39:e6:2a:dc:d3:d0:5c:33:e3:3c:31:b3:0e:1e: 0c:ba:7d:d9:c3:f9:f1:27:c0:ce:c4:12:06:c3:ec: 8e:03:8c:14:2f:30:a0:08:c6:6f:2f:56:7b:f6:94: 66:20:78:f3:08:9d:a9:ec:22:fd:db:c8:c2:92:15: cc:35:df:24:6f:68:da:d8:4b:8e:93:0b:51:0c:f4: e1:6d:9a:83:dc:3c:25:5c:8a:2a:90:e7:d4:0c:8f: f4:35:ff:67:38:8d:04:f7:3d:64:96:e5:de:8e:89: b4:ca:c1:26:1a:91:d0:c4:67:59:1f:1f:77:97:c5: a9:b2:d3:59:7b:30:bf:b7:73:8c:52:84:53:d7:d1: 90:56:9f:00:48:26:b3:90:da:8e:7f:ff:3a:c1:50: a7:9e:7c:98:ce:1d:7a:ef:95:b6:f6:01:4b:6a:cd: b9:67:ad:c9:b8:b4:00:99:6f:67:d3:7e:38:04:e7: 36:40:92:bf:bd:1c:4b:86:af:98:a3:1e:2c:dd:26: b5:8b:bb:cc:1e:69:62:22:ab:76:23:eb:9c:e5:a8: 0f:52:91:56:f6:c7:6d:4e:0f:52:f0:29:c1:f4:f3: 15:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:86:55:37:61:B1:2D:58:F4:9A:54:6C:8C:16:B2:60:0A:B8:30:AD X509v3 Authority Key Identifier: keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:db:bc:68:4d:52:0b:32:c2:53:e4:8b:3d:6b:e7:ca:ca:f3: 3e:d9:81:ab:8a:ff:86:b5:1d:ee:82:6c:50:b7:8e:9a:12:a6: 0d:8c:6f:0a:2b:0c:ca:16:a9:40:45:73:3a:1d:c4:45:7a:89: 29:ca:46:0b:f2:f4:92:4c:7e:7d:08:63:ee:75:e5:6b:44:b6: 95:bd:7d:e5:da:91:f0:b7:f8:26:c8:62:b0:7e:c8:84:a2:4e: 59:3b:12:75:e1:7a:8c:75:de:16:6c:02:95:e9:fb:bd:4f:05: 16:95:a5:86:b1:dc:05:ea:20:fd:98:59:67:b1:e3:f6:0e:5e: 0b:20:02:5e:97:1f:48:d0:17:e1:fe:74:31:8d:e3:ed:5d:aa: 89:66:fa:02:b4:43:50:e8:f4:49:67:a9:bc:ee:92:b0:03:2d: 74:fe:a6:93:73:5f:20:d4:f4:9e:5d:e9:3b:74:88:bc:51:41: 61:01:96:8f:cd:28:8c:d0:12:26:3d:69:0f:eb:6e:61:09:f8: 0a:ec:9d:a5:31:85:7a:bc:31:03:15:1d:80:ea:84:db:9d:18: 8d:b4:f8:75:cd:38:f6:0b:fd:1f:05:43:1d:ec:d9:51:9b:55: f8:b4:b7:70:45:71:98:4f:f2:3f:f6:5d:51:32:0d:c7:86:8d: ce:c4:39:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF NkI3OTQwRDUwHhcNMjUwNTEwMTg1NzAyWhcNMjUwNTE3MTg1NzAyWjAYMRYwFAYD VQQDEw02ODFmYTE3Zi1iMTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Tj6OcwX89oNybNousocpdZULG9+P1mq27BI4rRYOeYq3NPQXDPjPDGzDh4M un3Zw/nxJ8DOxBIGw+yOA4wULzCgCMZvL1Z79pRmIHjzCJ2p7CL928jCkhXMNd8k b2ja2EuOkwtRDPThbZqD3DwlXIoqkOfUDI/0Nf9nOI0E9z1kluXejom0ysEmGpHQ xGdZHx93l8WpstNZezC/t3OMUoRT19GQVp8ASCazkNqOf/86wVCnnnyYzh1675W2 9gFLas25Z63JuLQAmW9n0344BOc2QJK/vRxLhq+Yox4s3Sa1i7vMHmliIqt2I+uc 5agPUpFW9sdtTg9S8CnB9PMVwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyGVTdh sS1Y9JpUbIwWsmAKuDCtMB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4 NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4QS8wOEM0MzkyNDM4NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9Z cnhFdHgydGZYZm5tdDVRTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo27xoTVILMsJT5Is9a+fKyvM+2YGriv+GtR3ugmxQt46aEqYNjG8K KwzKFqlARXM6HcRFeokpykYL8vSSTH59CGPudeVrRLaVvX3l2pHwt/gmyGKwfsiE ok5ZOxJ14XqMdd4WbAKV6fu9TwUWlaWGsdwF6iD9mFlnseP2Dl4LIAJelx9I0Bfh /nQxjePtXaqJZvoCtENQ6PRJZ6m87pKwAy10/qaTc18g1PSeXek7dIi8UUFhAZaP zSiM0BImPWkP625hCfgK7J2lMYV6vDEDFR2A6oTbnRiNtPh1zTj2C/0fBUMd7NlR m1X4tLdwRXGYT/I/9l1RMg3Hho3OxDlH -----END CERTIFICATE-----Generated at Sun May 11 14:57:45 2025 by rpki-client