$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft File: VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json) Hash identifier: NIkWYh1xzbDv4Uv6NdESVz1wh57KlR5ZZwZ8ZhWszWA= Subject key identifier: A5:F8:13:9A:F7:7F:3E:F7:64:F6:27:E4:AD:E2:63:C6:85:6E:24:AB Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Certificate serial: 045F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft Manifest number: 0446 Signing time: Sat 23 Aug 2025 00:34:12 +0000 Manifest this update: Sat 23 Aug 2025 00:34:11 +0000 Manifest next update: Sat 30 Aug 2025 00:34:11 +0000 Files and hashes: 1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: bwGk/ZlkjTYMSEhFVcadqMytUxOicsp4+A8e/X0olrk=) 2: 616435103F3E11EE81024074C4F9AE02.roa (hash: BV7IOs58jkocun9KOxJEZWid0CjNqRr4h3oLm+oM9XA=) 3: 168BE8747EEE11ECAB036C59C4F9AE02.roa (hash: wF1Z2aa2PTEiRRPCp23vYrxyf7/d64gIm78PkkwoFEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1119 (0x45f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Validity Not Before: Aug 23 00:34:11 2025 GMT Not After : Aug 30 00:34:11 2025 GMT Subject: CN=68a90c84-fb0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:15:f1:51:75:9e:2d:62:7f:22:dc:9d:f6:6f: 62:99:73:5d:b1:e8:43:df:ff:2a:5d:1f:f7:79:c2: 89:0a:3a:87:9e:7b:5c:9f:50:c4:a9:e1:84:16:51: f2:9e:f7:2c:11:17:82:26:48:9a:b7:ed:73:9f:2f: fb:32:96:9f:cd:f2:a4:30:3f:50:2b:e8:4e:ba:96: 94:67:4a:d9:48:2a:98:68:f1:a0:67:23:f6:76:c3: 2c:66:34:64:d2:ff:89:1b:1a:85:b5:2e:64:d4:ba: dd:17:e9:1d:17:2f:80:f9:1a:0f:d9:dd:76:28:3f: 7d:d5:23:75:e4:05:84:86:e7:85:7c:e1:0d:e1:d6: f6:12:52:62:15:25:e7:51:d9:33:cd:4b:46:d7:97: bd:37:96:52:c1:85:6c:93:5e:0a:6d:e3:d4:04:8b: 3c:d8:62:ec:74:32:57:0e:d8:76:80:84:9a:d5:2c: 0f:ac:9b:21:a8:64:4c:9b:60:02:fa:8e:2a:99:b1: de:7a:88:28:12:2b:43:fd:9c:af:96:32:7f:62:8f: c6:bb:2b:87:b4:65:8a:e5:72:99:b0:55:91:29:7c: ca:b5:2f:39:15:56:23:d3:0a:cd:ab:2f:11:92:b4: 2c:68:aa:79:69:07:58:ff:1c:75:03:87:06:b6:12: 73:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F8:13:9A:F7:7F:3E:F7:64:F6:27:E4:AD:E2:63:C6:85:6E:24:AB X509v3 Authority Key Identifier: keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:b0:2e:01:04:d0:86:e1:79:db:06:85:f3:21:2f:55:db:58: e2:54:a5:c0:0a:57:48:eb:3c:83:8f:19:c3:35:c0:16:d3:64: 0b:53:9b:e0:c7:7a:b4:c8:ea:39:57:dd:21:9b:3c:0d:ce:1a: 5a:91:fe:da:08:2e:e4:2c:c5:1d:0f:28:59:91:4e:d6:24:69: f9:39:73:89:0e:a1:71:24:ad:33:d2:17:64:65:4e:27:db:01: 35:37:f7:08:8f:9a:e3:35:c0:07:0f:8e:d1:7b:b4:b5:b8:82: 3f:b1:ed:2d:ec:b0:eb:ed:fc:33:6d:bd:c9:d9:07:43:72:af: ab:e5:6e:18:06:2e:ae:4b:5f:0a:61:99:8b:2a:53:41:7a:0b: ae:76:f7:ce:c2:95:fb:7b:74:23:e7:91:64:76:f0:a2:e8:29: 9a:7b:9e:55:9a:29:7b:ab:57:fd:33:4f:18:35:29:fc:14:ca: 1f:f3:42:fe:ea:8c:4f:a2:3f:eb:12:a5:1a:35:9c:ae:d9:e0: f2:0a:99:4c:17:dd:10:c0:8c:77:aa:4d:38:80:16:d6:08:84: 28:05:ba:cb:fc:f0:34:74:da:3e:8f:b5:08:f5:8b:3e:34:5c: 47:08:a9:25:c4:61:bf:e1:42:80:92:4a:7a:40:c9:b7:b4:73: ff:75:23:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBRDQxMTAvBgNVBAUTKDU0MzBBNDE0QUEwNUI2NzMxREMyRDY0QTcwQzYxOUM2 NjkzNDZBMEUwHhcNMjUwODIzMDAzNDExWhcNMjUwODMwMDAzNDExWjAYMRYwFAYD VQQDEw02OGE5MGM4NC1mYjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7BXxUXWeLWJ/Ityd9m9imXNdsehD3/8qXR/3ecKJCjqHnntcn1DEqeGEFlHy nvcsEReCJkiat+1zny/7MpafzfKkMD9QK+hOupaUZ0rZSCqYaPGgZyP2dsMsZjRk 0v+JGxqFtS5k1LrdF+kdFy+A+RoP2d12KD991SN15AWEhueFfOEN4db2ElJiFSXn UdkzzUtG15e9N5ZSwYVsk14KbePUBIs82GLsdDJXDth2gISa1SwPrJshqGRMm2AC +o4qmbHeeogoEitD/ZyvljJ/Yo/GuyuHtGWK5XKZsFWRKXzKtS85FVYj0wrNqy8R krQsaKp5aQdY/xx1A4cGthJzLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKX4E5r3 fz73ZPYn5K3iY8aFbiSrMB8GA1UdIwQYMBaAFFQwpBSqBbZzHcLWSnDGGcZpNGoO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DNDIzMTgzMDc3 QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRuTWR3dFpLY01ZWnhtazBh ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZEQ2tGS29GdG5NZHd0WktjTVlaeG1rMGFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REFENC9DNDIzMTgzMDc3QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRu TWR3dFpLY01ZWnhtazBhZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIsC4BBNCG4XnbBoXzIS9V21jiVKXACldI6zyDjxnDNcAW02QLU5vg x3q0yOo5V90hmzwNzhpakf7aCC7kLMUdDyhZkU7WJGn5OXOJDqFxJK0z0hdkZU4n 2wE1N/cIj5rjNcAHD47Re7S1uII/se0t7LDr7fwzbb3J2QdDcq+r5W4YBi6uS18K YZmLKlNBeguudvfOwpX7e3Qj55FkdvCi6Cmae55Vmil7q1f9M08YNSn8FMof80L+ 6oxPoj/rEqUaNZyu2eDyCplMF90QwIx3qk04gBbWCIQoBbrL/PA0dNo+j7UI9Ys+ NFxHCKklxGG/4UKAkkp6QMm3tHP/dSNZ -----END CERTIFICATE-----Generated at Sat Aug 23 19:55:48 2025 by rpki-client